Oval Definition:	oval:org.opensuse.security:def:100681
Revision Date: 2021-11-16 Version: 1 Title: (Moderate) Description: This update for tomcat fixes the following issues: - CVE-2021-30640: Escape parameters in JNDI Realm queries (bsc#1188279). - CVE-2021-33037: Process T-E header from both HTTP 1.0 and HTTP 1.1. clients (bsc#1188278). - CVE-2021-41079: Fixed a denial of service caused by an unexpected TLS packet (bsc#1190558). Family: unix Class: patch Status: Reference(s): 1188278 1188279 1190558 CVE-2014-4877 CVE-2015-7665 CVE-2016-4971 CVE-2017-13089 CVE-2017-13090 CVE-2017-6508 CVE-2018-0494 CVE-2018-20483 CVE-2019-5953 CVE-2021-30640 CVE-2021-33037 CVE-2021-41079 Platform(s): Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE SUSE Linux Enterprise Desktop 15 SP2 SUSE Linux Enterprise High Performance Computing 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Server 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Storage 7 SUSE Manager Proxy 4.1 SUSE Manager Server 4.1 Product(s): Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed AND wget-1.20.3-3.9.2 is installed Definition Synopsis Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE is installed AND Package Information tomcat-9.0.36-13.1 is installed OR tomcat-el-3_0-api-9.0.36-13.1 is installed OR tomcat-jsp-2_3-api-9.0.36-13.1 is installed OR tomcat-lib-9.0.36-13.1 is installed OR tomcat-servlet-4_0-api-9.0.36-13.1 is installed
BACK