Vulnerability Bulletins

DSA-4596 tomcat8 - security update

   
Affected software Debian
 
Several issues were discovered in the Tomcat servlet and JSP engine, whichcould result in session fixation attacks, information disclosure, cross-sitescripting, denial of service via resource exhaustion and insecureredirects.

More info:

https://www.debian.org/security/2019/dsa-4596