Oval Definition:oval:org.opensuse.security:def:106451
Revision Date:2021-11-16Version:1
Title:Security update for tomcat (Important)
Description:

This update for tomcat fixes the following issues:

- CVE-2021-30640: Escape parameters in JNDI Realm queries (bsc#1188279). - CVE-2021-33037: Process T-E header from both HTTP 1.0 and HTTP 1.1. clients (bsc#1188278). - CVE-2021-41079: Fixed a denial of service caused by an unexpected TLS packet (bsc#1190558).
Family:unixClass:patch
Status:Reference(s):1188278
1188279
1190558
CVE-2007-1558
CVE-2018-14349
CVE-2018-14350
CVE-2018-14351
CVE-2018-14352
CVE-2018-14353
CVE-2018-14354
CVE-2018-14355
CVE-2018-14356
CVE-2018-14357
CVE-2018-14358
CVE-2018-14359
CVE-2018-14360
CVE-2018-14361
CVE-2018-14362
CVE-2018-14363
CVE-2020-14093
CVE-2020-14954
CVE-2020-28896
CVE-2021-30640
CVE-2021-3181
CVE-2021-32055
CVE-2021-33037
CVE-2021-41079
SUSE-SU-2021:3669-1
Platform(s):openSUSE Tumbleweed
SUSE Linux Enterprise Server for SAP Applications 15 SP1
Product(s):
Definition Synopsis
  • openSUSE Tumbleweed is installed
  • AND Package Information
  • mutt-2.0.7-2.2 is installed
  • OR mutt-doc-2.0.7-2.2 is installed
  • OR mutt-lang-2.0.7-2.2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed
  • AND Package Information
  • tomcat-9.0.36-4.63.1 is installed
  • OR tomcat-admin-webapps-9.0.36-4.63.1 is installed
  • OR tomcat-el-3_0-api-9.0.36-4.63.1 is installed
  • OR tomcat-jsp-2_3-api-9.0.36-4.63.1 is installed
  • OR tomcat-lib-9.0.36-4.63.1 is installed
  • OR tomcat-servlet-4_0-api-9.0.36-4.63.1 is installed
  • OR tomcat-webapps-9.0.36-4.63.1 is installed
  • BACK