Debian Security Update DSA-4952 tomcat9 - security update

[LinuxBot]

Two vulnerabilities were discovered in the Tomcat servlet and JSP engine, which could result in HTTP request smuggling, bypass of logout restrictions or authentications using variations of a valid user name.

Continue reading...