You are viewing a plain text version of this content. The canonical link for it is here.

Posted to users@tomcat.apache.org by George Angeletos <g....@gmail.com> on 2019/03/26 11:47:07 UTC

CVE-2019-0199 Apache Tomcat HTTP/2 DoS

Hello,

Is an upgrade required for those who are not using the HTTP/2 protocol?

Many thanks
George Angeletos

Re: CVE-2019-0199 Apache Tomcat HTTP/2 DoS

Posted by Mark Thomas <ma...@apache.org>.

On 26/03/2019 11:47, George Angeletos wrote:
> Hello,
> 
> Is an upgrade required for those who are not using the HTTP/2 protocol?

No. CVE-2019-0199 only affects servers where HTTP/2 is enabled.

Mark

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org