[CLSA-2024:1735119580] Fix CVE(s): CVE-2023-41080
Type:
security
Severity:
Moderate
Release date:
2024-12-25 09:39:46 UTC
Description:
* SECURITY UPDATE: Untrusted Site Redirection Vulnerability in FORM authentication feature - debian/patches/CVE-2023-41080.patch: Avoid protocol relative redirects in FORM authentication - CVE-2023-41080
Updated packages:
  • libtomcat8-embed-java_8.5.39-1ubuntu1~18.04.3+tuxcare.els9_all.deb
    sha:b32f67af37f46d232e78fded6ceddb3a9322f8d5
  • libtomcat8-java_8.5.39-1ubuntu1~18.04.3+tuxcare.els9_all.deb
    sha:1a22156ac0f2d4fbcce8443afe4a029ff916ac18
  • tomcat8_8.5.39-1ubuntu1~18.04.3+tuxcare.els9_all.deb
    sha:32afbd785d475965d5223cc191119219e1f255b0
  • tomcat8-admin_8.5.39-1ubuntu1~18.04.3+tuxcare.els9_all.deb
    sha:0ac8720e2f26c1bb84f0ac28ef014deb6bef4d1e
  • tomcat8-common_8.5.39-1ubuntu1~18.04.3+tuxcare.els9_all.deb
    sha:5043ef1d9dcafa061029ac60c7239652945b8a04
  • tomcat8-docs_8.5.39-1ubuntu1~18.04.3+tuxcare.els9_all.deb
    sha:5a0a3336594c52a12b9b6f131aff653ba200b7e7
  • tomcat8-examples_8.5.39-1ubuntu1~18.04.3+tuxcare.els9_all.deb
    sha:8e9afbdfa351521844f2760cd48d928dc1f305ec
  • tomcat8-user_8.5.39-1ubuntu1~18.04.3+tuxcare.els9_all.deb
    sha:78671f9abd779a1846b55186cc78f05f414bfb58
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.