viviotech / lucee-installer

BitRock Installer XML config and files for the Lucee installers
http://lucee.viviotech.net/
9 stars 2 forks source link

Update bundled Tomcat CVE-2020-1938: Ghostcat #101

Closed zspitzer closed 4 years ago

zspitzer commented 4 years ago

https://dev.lucee.org/t/tomcat-cve-2020-1938-ghostcat-ajp/6650

https://github.com/viviotech/lucee-installer/issues/100

Note: Apache 2.4 doesn't support this version of Tomcat yet. a backport from 2.5 has been requested https://bz.apache.org/bugzilla/show_bug.cgi?id=53098#c19

utdream commented 4 years ago

Updated in Lucee 5.3.4.077 pl1