- To: thredds@xxxxxxxxxxxxxxxx
- Subject: [thredds] Tomcat Security CVE notices
- From: Jennifer Oxelson Ganter <oxelson@xxxxxxxx>
- Date: Tue, 14 Jul 2020 07:30:18 -0600
Greetings all, Two new Common Vulnerabilities & Exposures (CVE) notices were issued today for tomcat: CVE-2020-13935 Apache Tomcat WebSocket Denial of Service CVE-2020-13934 Apache Tomcat HTTP/2 Denial of Service If you are using the Tomcat servlet container, please upgrade to the latest version if you have not already done so. Cheers, Jennifer