Oval Definition:oval:org.opensuse.security:def:109924
Revision Date:2019-07-25Version:1
Title:Security update for tomcat (Moderate)
Description:

This update for tomcat to version 9.0.21 fixes the following issues:

Security issues fixed:

- CVE-2019-0199: Fixed a denial of service in the HTTP/2 implementation related to streams with excessive numbers of SETTINGS frames (bsc#1131055). - CVE-2019-0221: Fixed a cross site scripting vulnerability with the SSI printenv command (bsc#1136085).

Non-security issues fixed:

- Increase maximum number of threads and open files for tomcat (bsc#1111966).

This update was imported from the SUSE:SLE-15-SP1:Update update project.
Family:unixClass:patch
Status:Reference(s):1111966
1131055
1136085
CVE-2019-0199
CVE-2019-0221
openSUSE-SU-2019:1808-1
Platform(s):openSUSE Leap 15.1
Product(s):
Definition Synopsis
  • openSUSE Leap 15.1 is installed
  • AND Package Information
  • tomcat-9.0.21-lp151.3.3.1 is installed
  • OR tomcat-admin-webapps-9.0.21-lp151.3.3.1 is installed
  • OR tomcat-docs-webapp-9.0.21-lp151.3.3.1 is installed
  • OR tomcat-el-3_0-api-9.0.21-lp151.3.3.1 is installed
  • OR tomcat-embed-9.0.21-lp151.3.3.1 is installed
  • OR tomcat-javadoc-9.0.21-lp151.3.3.1 is installed
  • OR tomcat-jsp-2_3-api-9.0.21-lp151.3.3.1 is installed
  • OR tomcat-jsvc-9.0.21-lp151.3.3.1 is installed
  • OR tomcat-lib-9.0.21-lp151.3.3.1 is installed
  • OR tomcat-servlet-4_0-api-9.0.21-lp151.3.3.1 is installed
  • OR tomcat-webapps-9.0.21-lp151.3.3.1 is installed
    • BACK