Debian Security Update DSA-4680 tomcat9 - security update

[LinuxBot]

Several vulnerabilities were discovered in the Tomcat servlet and JSP engine, which could result in HTTP request smuggling, code execution in the AJP connector (disabled by default in Debian) or a man-in-the-middle attack against the JMX interface.

Continue reading...