tomcat 보안 업데이트
업데이트 : 2017.04.12
이름 : tomcat-10:8.5.13-1.an3
벤더 : AnNyung Packaging Team
Tomcat is the servlet container that is used in the official Reference
Implementation for the Java Servlet and JavaServer Pages technologies.
The Java Servlet and JavaServer Pages specifications are developed by
Sun under the Java Community Process.
Tomcat is developed in an open and participatory environment and
released under the Apache Software License version 2.0. Tomcat is intended
to be a collaboration of the best-of-breed developers from around the world.
- update 8.5.13 (test packaging, don't build binary package)
see also http://apache.mirror.cdnetworks.com/tomcat/tomcat-8/v8.5.13/RELEASE-NOTES
- security issues
. CVE-2017-5651 Important: Information Disclosure
. CVE-2017-5650 Important: Denial of Service
. CVE-2017-5647 Important: Information Disclosure