{"id":"CLSA-2023-1687469807","summary":"Fix CVE(s): CVE-2021-41079, CVE-2021-25122","details":"\n   * SECURITY UPDATE: Apache Tomcat h2c request mix-up\n     - debian/patches/CVE-2021-25122.patch: Simplify the code and fix an\n       edge case for BZ 64830\n     - CVE-2021-25122\n   * SECURITY UPDATE: Denial of Service for NIO+OpenSSL or NIO2+OpenSSL TLS\n       configurations\n     - debian/patches/CVE-2021-41079.patch: Improve robustness\n     - CVE-2021-41079","modified":"2026-06-04T10:03:44.960238671Z","published":"2023-06-22T21:36:52Z","upstream":["CVE-2021-25122","CVE-2021-41079"],"references":[{"type":"ADVISORY","url":"https://errata.cloudlinux.com/ubuntu18_04-els/CLSA-2023-1687469807"}],"affected":[{"package":{"name":"libtomcat8-embed-java","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libtomcat8-embed-java?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.5.39-1ubuntu1~18.04.3+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2023-1687469807.json"}},{"package":{"name":"libtomcat8-java","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libtomcat8-java?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.5.39-1ubuntu1~18.04.3+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2023-1687469807.json"}},{"package":{"name":"tomcat8","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/tomcat8?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.5.39-1ubuntu1~18.04.3+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2023-1687469807.json"}},{"package":{"name":"tomcat8-admin","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/tomcat8-admin?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.5.39-1ubuntu1~18.04.3+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2023-1687469807.json"}},{"package":{"name":"tomcat8-common","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/tomcat8-common?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.5.39-1ubuntu1~18.04.3+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2023-1687469807.json"}},{"package":{"name":"tomcat8-docs","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/tomcat8-docs?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.5.39-1ubuntu1~18.04.3+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2023-1687469807.json"}},{"package":{"name":"tomcat8-examples","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/tomcat8-examples?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.5.39-1ubuntu1~18.04.3+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2023-1687469807.json"}},{"package":{"name":"tomcat8-user","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/tomcat8-user?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.5.39-1ubuntu1~18.04.3+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2023-1687469807.json"}}],"schema_version":"1.7.5"}