Oval Definition:	oval:org.opensuse.security:def:5988
Revision Date: 2021-03-30 Version: 1 Title: Security update for tomcat (Important) Description: This update for tomcat fixes the following issues: - CVE-2021-25122: Apache Tomcat h2c request mix-up (bsc#1182912) - CVE-2021-25329: Complete fix for CVE-2020-9484 (bsc#1182909) Family: unix Class: patch Status: Reference(s): 1182909 1182912 1183572 1183574 CVE-2002-2443 CVE-2009-0758 CVE-2009-0844 CVE-2009-0845 CVE-2009-0846 CVE-2009-0847 CVE-2009-3295 CVE-2009-4212 CVE-2010-0283 CVE-2010-0407 CVE-2010-0628 CVE-2010-1172 CVE-2010-1320 CVE-2010-1321 CVE-2010-1322 CVE-2010-1323 CVE-2010-1324 CVE-2010-2244 CVE-2010-4020 CVE-2010-4021 CVE-2010-4022 CVE-2010-4531 CVE-2011-0281 CVE-2011-0282 CVE-2011-0284 CVE-2011-0285 CVE-2011-1002 CVE-2011-1527 CVE-2011-1528 CVE-2011-1529 CVE-2011-1530 CVE-2012-1012 CVE-2012-1013 CVE-2012-1016 CVE-2012-3355 CVE-2013-0292 CVE-2013-1415 CVE-2013-1417 CVE-2013-1418 CVE-2013-1982 CVE-2013-2002 CVE-2013-2005 CVE-2013-7447 CVE-2014-0250 CVE-2014-0791 CVE-2014-3230 CVE-2014-4341 CVE-2014-4342 CVE-2014-4343 CVE-2014-4344 CVE-2014-4345 CVE-2014-5351 CVE-2014-5352 CVE-2014-5353 CVE-2014-5354 CVE-2014-5355 CVE-2014-8169 CVE-2014-9087 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423 CVE-2015-2694 CVE-2015-2695 CVE-2015-2696 CVE-2015-2697 CVE-2015-2698 CVE-2015-8370 CVE-2015-8629 CVE-2015-8630 CVE-2015-8631 CVE-2016-10109 CVE-2016-1602 CVE-2016-3119 CVE-2016-3120 CVE-2016-4574 CVE-2016-4579 CVE-2016-7969 CVE-2016-7972 CVE-2017-2834 CVE-2017-2835 CVE-2017-2836 CVE-2017-2837 CVE-2017-2838 CVE-2017-2839 CVE-2020-27840 CVE-2021-20277 CVE-2021-25122 CVE-2021-25329 SUSE-SU-2021:0988-1 Platform(s): openSUSE 13.1 openSUSE 13.1 NonFree openSUSE 13.2 openSUSE 13.2 NonFree SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 SUSE Linux Enterprise Build System Kit 12 SUSE Linux Enterprise Build System Kit 12 SP1 SUSE Linux Enterprise Build System Kit 12 SP2 SUSE Linux Enterprise Build System Kit 12 SP3 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise for SAP 12 SUSE Linux Enterprise for SAP 12 SP1 SUSE Linux Enterprise High Availability 12 SP1 SUSE Linux Enterprise High Availability 12 SP2 SUSE Linux Enterprise High Availability 12 SP3 SUSE Linux Enterprise High Availability 12 SP4 SUSE Linux Enterprise High Availability 12 SP5 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Live Patching 12 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 SUSE Linux Enterprise Real Time Extension 12 SP1 SUSE Linux Enterprise Real Time Extension 12 SP2 SUSE Linux Enterprise Real Time Extension 12 SP3 SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP4 Product(s): Definition Synopsis SUSE Linux Enterprise Build System Kit 12 is installed AND Package Information cups-1.7.5-5 is installed OR cups-ddk-1.7.5-5 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP1 is installed AND kernel-zfcpdump-3.12.59-60.45 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP2 is installed AND kernel-zfcpdump-4.4.74-92.32 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP3 is installed AND Package Information libpoppler-cpp0-0.43.0-16.5 is installed OR poppler-0.43.0-16.5 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information MozillaFirefox-38.5.0esr-54 is installed OR MozillaFirefox-translations-38.5.0esr-54 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information avahi-0.6.31-20 is installed OR avahi-lang-0.6.31-20 is installed OR libavahi-client3-0.6.31-20 is installed OR libavahi-client3-32bit-0.6.31-20 is installed OR libavahi-common3-0.6.31-20 is installed OR libavahi-common3-32bit-0.6.31-20 is installed OR libavahi-core7-0.6.31-20 is installed OR libdns_sd-0.6.31-20 is installed OR libdns_sd-32bit-0.6.31-20 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information krb5-1.12.5-39 is installed OR krb5-32bit-1.12.5-39 is installed OR krb5-client-1.12.5-39 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND autofs-5.0.9-28.3 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 is installed AND Package Information compat-libldap-2_3-0-2.3.37-16.1 is installed OR openldap2-2.4.39-16.1 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 SP1 is installed AND unrar-5.0.14-3.1 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP1 is installed AND hawk2-1.0.1+git.1456406635.49e230d-12 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP2 is installed AND Package Information cluster-md-kmp-default-4.4.21-84 is installed OR cluster-network-kmp-default-4.4.21-84 is installed OR dlm-kmp-default-4.4.21-84 is installed OR gfs2-kmp-default-4.4.21-84 is installed OR kernel-default-4.4.21-84 is installed OR ocfs2-kmp-default-4.4.21-84 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP3 is installed AND Package Information ctdb-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR ldirectord-4.0.1+git.1495055229.643177f1-2.4 is installed OR monitoring-plugins-metadata-4.0.1+git.1495055229.643177f1-2.4 is installed OR resource-agents-4.0.1+git.1495055229.643177f1-2.4 is installed OR samba-4.6.7+git.38.90b2cdb4f22-3.7 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP4 is installed AND Package Information corosync-2.3.6-9.13 is installed OR libcorosync4-2.3.6-9.13 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP5 is installed AND conntrack-tools-1.4.2-5 is installed Definition Synopsis SUSE Linux Enterprise High Performance Computing 12 SP5 is installed AND Package Information ImageMagick-config-6-SUSE-6.8.8.1-71.126 is installed OR ImageMagick-config-6-upstream-6.8.8.1-71.126 is installed OR libMagickCore-6_Q16-1-6.8.8.1-71.126 is installed OR libMagickWand-6_Q16-1-6.8.8.1-71.126 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 is installed AND Package Information kgraft-patch-3_12_44-52_10-default-1-2 is installed OR kgraft-patch-3_12_44-52_10-xen-1-2 is installed OR kgraft-patch-SLE12_Update_6-1-2 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 12 SP1 is installed AND Package Information kernel-compute-3.12.67-60.27.1 is installed OR kernel-compute-base-3.12.67-60.27.1 is installed OR kernel-compute-devel-3.12.67-60.27.1 is installed OR kernel-compute_debug-3.12.67-60.27.1 is installed OR kernel-compute_debug-devel-3.12.67-60.27.1 is installed OR kernel-devel-rt-3.12.67-60.27.1 is installed OR kernel-rt-3.12.67-60.27.1 is installed OR kernel-rt-base-3.12.67-60.27.1 is installed OR kernel-rt-devel-3.12.67-60.27.1 is installed OR kernel-rt_debug-3.12.67-60.27.1 is installed OR kernel-rt_debug-devel-3.12.67-60.27.1 is installed OR kernel-source-rt-3.12.67-60.27.1 is installed OR kernel-syms-rt-3.12.67-60.27.1 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 12 SP2 is installed AND Package Information cluster-md-kmp-rt-4.4.95-21.1 is installed OR cluster-network-kmp-rt-4.4.95-21.1 is installed OR dlm-kmp-rt-4.4.95-21.1 is installed OR gfs2-kmp-rt-4.4.95-21.1 is installed OR kernel-devel-rt-4.4.95-21.1 is installed OR kernel-rt-4.4.95-21.1 is installed OR kernel-rt-base-4.4.95-21.1 is installed OR kernel-rt-devel-4.4.95-21.1 is installed OR kernel-rt_debug-4.4.95-21.1 is installed OR kernel-rt_debug-devel-4.4.95-21.1 is installed OR kernel-source-rt-4.4.95-21.1 is installed OR kernel-syms-rt-4.4.95-21.1 is installed OR ocfs2-kmp-rt-4.4.95-21.1 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 12 SP3 is installed AND Package Information cluster-md-kmp-rt-4.4.120-3.8.1 is installed OR dlm-kmp-rt-4.4.120-3.8.1 is installed OR gfs2-kmp-rt-4.4.120-3.8.1 is installed OR kernel-devel-rt-4.4.120-3.8.1 is installed OR kernel-rt-4.4.120-3.8.1 is installed OR kernel-rt-base-4.4.120-3.8.1 is installed OR kernel-rt-devel-4.4.120-3.8.1 is installed OR kernel-rt_debug-4.4.120-3.8.1 is installed OR kernel-rt_debug-devel-4.4.120-3.8.1 is installed OR kernel-source-rt-4.4.120-3.8.1 is installed OR kernel-syms-rt-4.4.120-3.8.1 is installed OR ocfs2-kmp-rt-4.4.120-3.8.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP1 is installed AND apache2-mod_perl-2.0.4-40.19 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2 is installed AND libgdiplus0-2.6.7-0.5.76 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2-LTSS is installed AND Package Information java-1_6_0-ibm-1.6.0_sr16.20-49.1 is installed OR java-1_6_0-ibm-alsa-1.6.0_sr16.20-49.1 is installed OR java-1_6_0-ibm-devel-1.6.0_sr16.20-49.1 is installed OR java-1_6_0-ibm-fonts-1.6.0_sr16.20-49.1 is installed OR java-1_6_0-ibm-jdbc-1.6.0_sr16.20-49.1 is installed OR java-1_6_0-ibm-plugin-1.6.0_sr16.20-49.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP3 is installed AND apache2-mod_security2-2.7.1-0.2.18.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP3 is installed AND apache2-mod_security2-2.7.1-0.2.18.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3 is installed AND Package Information PackageKit-0.3.14-2.28.46 is installed OR PackageKit-lang-0.3.14-2.28.46 is installed OR hal-0.5.12-23.68.1 is installed OR hal-32bit-0.5.12-23.68.1 is installed OR hal-doc-0.5.12-23.68.1 is installed OR hal-x86-0.5.12-23.68.1 is installed OR libpackagekit-glib10-0.3.14-2.28.46 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND clamav-0.98.7-0.3.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND git-core-1.8.5.2-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information alsa-1.0.27.2-11 is installed OR alsa-docs-1.0.27.2-11 is installed OR libasound2-1.0.27.2-11 is installed OR libasound2-32bit-1.0.27.2-11 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information MozillaFirefox-52.2.0esr-108.3 is installed OR MozillaFirefox-branding-SLE-52-31.1 is installed OR MozillaFirefox-devel-52.2.0esr-108.3 is installed OR MozillaFirefox-translations-52.2.0esr-108.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information accountsservice-0.6.42-14 is installed OR accountsservice-lang-0.6.42-14 is installed OR libaccountsservice0-0.6.42-14 is installed OR typelib-1_0-AccountsService-1_0-0.6.42-14 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information audiofile-0.3.6-10 is installed OR libaudiofile1-0.3.6-10 is installed OR libaudiofile1-32bit-0.3.6-10 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP5 is installed AND tomcat-9.0.36-3.64.1 is installed OR tomcat-admin-webapps-9.0.36-3.64.1 is installed OR tomcat-docs-webapp-9.0.36-3.64.1 is installed OR tomcat-el-3_0-api-9.0.36-3.64.1 is installed OR tomcat-javadoc-9.0.36-3.64.1 is installed OR tomcat-jsp-2_3-api-9.0.36-3.64.1 is installed OR tomcat-lib-9.0.36-3.64.1 is installed OR tomcat-servlet-4_0-api-9.0.36-3.64.1 is installed OR tomcat-webapps-9.0.36-3.64.1 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed AND tomcat-9.0.36-3.64.1 is installed OR tomcat-admin-webapps-9.0.36-3.64.1 is installed OR tomcat-docs-webapp-9.0.36-3.64.1 is installed OR tomcat-el-3_0-api-9.0.36-3.64.1 is installed OR tomcat-javadoc-9.0.36-3.64.1 is installed OR tomcat-jsp-2_3-api-9.0.36-3.64.1 is installed OR tomcat-lib-9.0.36-3.64.1 is installed OR tomcat-servlet-4_0-api-9.0.36-3.64.1 is installed OR tomcat-webapps-9.0.36-3.64.1 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND Package Information augeas-1.2.0-10 is installed OR augeas-lenses-1.2.0-10 is installed OR libaugeas0-1.2.0-10 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed AND Package Information kgraft-patch-4_4_74-92_35-default-11-2 is installed OR kgraft-patch-SLE12-SP2_Update_12-11-2 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND rubygem-i18n-0_6-0.6.0-0.8.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND Package Information GraphicsMagick-1.2.5-4.33.1 is installed OR libGraphicsMagick2-1.2.5-4.33.1 is installed OR perl-GraphicsMagick-1.2.5-4.33.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND Package Information avahi-compat-howl-devel-0.6.31-20 is installed OR avahi-compat-mDNSResponder-devel-0.6.31-20 is installed OR libavahi-devel-0.6.31-20 is installed OR libhowl0-0.6.31-20 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND Package Information FastCGI-2.4.0-167 is installed OR perl-FastCGI-2.4.0-167 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information bash-devel-4.3-78 is installed OR readline-devel-6.3-78 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND dia-0.97.3-15 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND Package Information flash-player-11.2.202.569-120.1 is installed OR flash-player-gnome-11.2.202.569-120.1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND Package Information gimp-2.8.10-7.8 is installed OR gimp-lang-2.8.10-7.8 is installed OR gimp-plugins-python-2.8.10-7.8 is installed OR libgimp-2_0-0-2.8.10-7.8 is installed OR libgimpui-2_0-0-2.8.10-7.8 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND Package Information gstreamer-0_10-plugins-bad-0.10.23-20 is installed OR gstreamer-0_10-plugins-bad-lang-0.10.23-20 is installed OR libgstbasecamerabinsrc-0_10-23-0.10.23-20 is installed OR libgstbasecamerabinsrc-0_10-23-32bit-0.10.23-20 is installed OR libgstbasevideo-0_10-23-0.10.23-20 is installed OR libgstbasevideo-0_10-23-32bit-0.10.23-20 is installed OR libgstcodecparsers-0_10-23-0.10.23-20 is installed OR libgstphotography-0_10-23-0.10.23-20 is installed OR libgstphotography-0_10-23-32bit-0.10.23-20 is installed OR libgstsignalprocessor-0_10-23-0.10.23-20 is installed OR libgstsignalprocessor-0_10-23-32bit-0.10.23-20 is installed OR libgstvdp-0_10-23-0.10.23-20 is installed OR libgstvdp-0_10-23-32bit-0.10.23-20 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND argyllcms-1.6.3-3 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND Package Information freerdp-2.0.0~git.1463131968.4e66df7-12.3 is installed OR libfreerdp2-2.0.0~git.1463131968.4e66df7-12.3 is installed
BACK