Oval Definition:oval:org.opensuse.security:def:100352
Revision Date:2021-11-16Version:1
Title: (Moderate)
Description:

This update for tomcat fixes the following issues:

- CVE-2021-30640: Escape parameters in JNDI Realm queries (bsc#1188279). - CVE-2021-33037: Process T-E header from both HTTP 1.0 and HTTP 1.1. clients (bsc#1188278). - CVE-2021-41079: Fixed a denial of service caused by an unexpected TLS packet (bsc#1190558).
Family:unixClass:patch
Status:Reference(s):1145181
1146856
1180738
1188278
1188279
1188610
1190558
CVE-2021-30640
CVE-2021-32749
CVE-2021-33037
CVE-2021-41079
openSUSE-SU-2021:1274-1
Platform(s):Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM
SUSE Linux Enterprise High Performance Computing 15 SP1
SUSE Linux Enterprise Server 15 SP1
SUSE Linux Enterprise Server for SAP Applications 15 SP1
SUSE Linux Enterprise Storage 6
SUSE Manager Proxy 4.0
SUSE Manager Server 4.0
SUSE Package Hub for SUSE Linux Enterprise 15 SP1
Product(s):
Definition Synopsis
  • SUSE Package Hub for SUSE Linux Enterprise 15 SP1 is installed
  • AND Package Information
  • fail2ban-0.11.2-bp153.2.3.1 is installed
  • OR monitoring-plugins-fail2ban-0.11.2-bp153.2.3.1 is installed
  • Definition Synopsis
  • Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM is installed
  • AND Package Information
  • tomcat-9.0.36-13.1 is installed
  • OR tomcat-el-3_0-api-9.0.36-13.1 is installed
  • OR tomcat-jsp-2_3-api-9.0.36-13.1 is installed
  • OR tomcat-lib-9.0.36-13.1 is installed
  • OR tomcat-servlet-4_0-api-9.0.36-13.1 is installed
  • BACK