Oval Definition:	oval:org.opensuse.security:def:6010
Revision Date: 2022-04-14 Version: 1 Title: Security update for tomcat (Important) Description: This update for tomcat fixes the following issues: Security hardening, related to Spring Framework vulnerabilities: - Deprecate getResources() and always return null (bsc#1198136). Family: unix Class: patch Status: Reference(s): 1184122 1198136 CVE-2007-6746 CVE-2010-1172 CVE-2011-1006 CVE-2011-1022 CVE-2011-3146 CVE-2012-4425 CVE-2012-4510 CVE-2013-0292 CVE-2013-1881 CVE-2013-2002 CVE-2013-2005 CVE-2013-2131 CVE-2013-6487 CVE-2014-3775 CVE-2014-4910 CVE-2015-2590 CVE-2015-2597 CVE-2015-2601 CVE-2015-2613 CVE-2015-2619 CVE-2015-2621 CVE-2015-2625 CVE-2015-2627 CVE-2015-2628 CVE-2015-2632 CVE-2015-2637 CVE-2015-2638 CVE-2015-2659 CVE-2015-2664 CVE-2015-2808 CVE-2015-4000 CVE-2015-4729 CVE-2015-4731 CVE-2015-4732 CVE-2015-4733 CVE-2015-4734 CVE-2015-4736 CVE-2015-4748 CVE-2015-4749 CVE-2015-4760 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-2015-4868 CVE-2015-4872 CVE-2015-4881 CVE-2015-4882 CVE-2015-4883 CVE-2015-4893 CVE-2015-4901 CVE-2015-4902 CVE-2015-4903 CVE-2015-4906 CVE-2015-4908 CVE-2015-4911 CVE-2015-4916 CVE-2015-7575 CVE-2015-8126 CVE-2015-8370 CVE-2015-8803 CVE-2015-8804 CVE-2015-8805 CVE-2016-0402 CVE-2016-0448 CVE-2016-0466 CVE-2016-0475 CVE-2016-0483 CVE-2016-0494 CVE-2016-0636 CVE-2016-0686 CVE-2016-0687 CVE-2016-0695 CVE-2016-10165 CVE-2016-2183 CVE-2016-2851 CVE-2016-3425 CVE-2016-3426 CVE-2016-3427 CVE-2016-3458 CVE-2016-3485 CVE-2016-3498 CVE-2016-3500 CVE-2016-3503 CVE-2016-3508 CVE-2016-3511 CVE-2016-3550 CVE-2016-3552 CVE-2016-3587 CVE-2016-3598 CVE-2016-3606 CVE-2016-3610 CVE-2016-5542 CVE-2016-5546 CVE-2016-5547 CVE-2016-5548 CVE-2016-5549 CVE-2016-5552 CVE-2016-5554 CVE-2016-5556 CVE-2016-5568 CVE-2016-5573 CVE-2016-5582 CVE-2016-5597 CVE-2016-6489 CVE-2016-9840 CVE-2016-9841 CVE-2016-9842 CVE-2016-9843 CVE-2017-10053 CVE-2017-10067 CVE-2017-10074 CVE-2017-10078 CVE-2017-10081 CVE-2017-10086 CVE-2017-10087 CVE-2017-10089 CVE-2017-10090 CVE-2017-10096 CVE-2017-10101 CVE-2017-10102 CVE-2017-10105 CVE-2017-10107 CVE-2017-10108 CVE-2017-10109 CVE-2017-10110 CVE-2017-10111 CVE-2017-10114 CVE-2017-10115 CVE-2017-10116 CVE-2017-10118 CVE-2017-10125 CVE-2017-10135 CVE-2017-10176 CVE-2017-10193 CVE-2017-10198 CVE-2017-10243 CVE-2017-10274 CVE-2017-10281 CVE-2017-10285 CVE-2017-10295 CVE-2017-10345 CVE-2017-10346 CVE-2017-10347 CVE-2017-10348 CVE-2017-10349 CVE-2017-10350 CVE-2017-10355 CVE-2017-10356 CVE-2017-10357 CVE-2017-10388 CVE-2017-3231 CVE-2017-3241 CVE-2017-3252 CVE-2017-3253 CVE-2017-3260 CVE-2017-3261 CVE-2017-3272 CVE-2017-3289 CVE-2017-3509 CVE-2017-3511 CVE-2017-3512 CVE-2017-3514 CVE-2017-3526 CVE-2017-3533 CVE-2017-3539 CVE-2017-3544 CVE-2018-16435 CVE-2018-2579 CVE-2018-2582 CVE-2018-2588 CVE-2018-2599 CVE-2018-2602 CVE-2018-2603 CVE-2018-2618 CVE-2018-2629 CVE-2018-2633 CVE-2018-2634 CVE-2018-2637 CVE-2018-2641 CVE-2018-2663 CVE-2018-2677 CVE-2018-2678 CVE-2018-2790 CVE-2018-2794 CVE-2018-2795 CVE-2018-2796 CVE-2018-2797 CVE-2018-2798 CVE-2018-2799 CVE-2018-2800 CVE-2018-2814 CVE-2018-2815 CVE-2018-2938 CVE-2018-2940 CVE-2018-2952 CVE-2018-2973 CVE-2018-3639 SUSE-SU-2022:1217-1 Platform(s): openSUSE 13.1 openSUSE 13.1 NonFree openSUSE 13.2 SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 SUSE Linux Enterprise Build System Kit 12 SUSE Linux Enterprise Build System Kit 12 SP1 SUSE Linux Enterprise Build System Kit 12 SP2 SUSE Linux Enterprise Build System Kit 12 SP3 SUSE Linux Enterprise Build System Kit 12 SP4 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise for SAP 12 SUSE Linux Enterprise for SAP 12 SP1 SUSE Linux Enterprise High Availability 12 SUSE Linux Enterprise High Availability 12 SP1 SUSE Linux Enterprise High Availability 12 SP2 SUSE Linux Enterprise High Availability 12 SP3 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Live Patching 12 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP3 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Real Time Extension 12 SP2 SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Server for VMWare 11 SP2 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP4 SUSE OpenStack Cloud 6 Product(s): Definition Synopsis SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 is installed AND Package Information dnsmasq-2.71-6.3.1 is installed OR dnsmasq-utils-2.71-6.3.1 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 is installed AND kernel-zfcpdump-3.12.38-44 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP1 is installed AND Package Information krb5-mini-1.12.1-36 is installed OR krb5-mini-devel-1.12.1-36 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP2 is installed AND Package Information ghostscript-mini-9.15-17 is installed OR ghostscript-mini-devel-9.15-17 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP3 is installed AND kernel-zfcpdump-4.4.82-6.3 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP4 is installed AND Package Information ghostscript-mini-9.26-23.16 is installed OR ghostscript-mini-devel-9.26-23.16 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information gnutls-3.2.15-4 is installed OR libgnutls28-3.2.15-4 is installed OR libgnutls28-32bit-3.2.15-4 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information dbus-1-glib-0.100.2-3 is installed OR dbus-1-glib-32bit-0.100.2-3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information libXt6-1.1.4-3 is installed OR libXt6-32bit-1.1.4-3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information cups-pk-helper-0.2.5-5 is installed OR cups-pk-helper-lang-0.2.5-5 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 is installed AND Package Information kgraft-patch-3_12_48-52_27-default-5-2.2 is installed OR kgraft-patch-3_12_48-52_27-xen-5-2.2 is installed OR kgraft-patch-SLE12_Update_8-5-2.2 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 SP1 is installed AND Package Information compat-openssl098-0.9.8j-97.1 is installed OR libopenssl0_9_8-0.9.8j-97.1 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 is installed AND Package Information ctdb-4.2.4-18.30 is installed OR samba-4.2.4-18.30 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP1 is installed AND Package Information libpcreposix0-8.39-5 is installed OR pcre-8.39-5 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP2 is installed AND Package Information hawk-1.0.0+git.1448981395.15fb8b9-4.3 is installed OR hawk-templates-1.0.0+git.1448981395.15fb8b9-4.3 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP3 is installed AND Package Information cluster-md-kmp-default-4.4.73-5 is installed OR dlm-kmp-default-4.4.73-5 is installed OR gfs2-kmp-default-4.4.73-5 is installed OR ocfs2-kmp-default-4.4.73-5 is installed Definition Synopsis SUSE Linux Enterprise High Performance Computing 12 SP5 is installed AND Package Information ImageMagick-config-6-SUSE-6.8.8.1-71.126 is installed OR ImageMagick-config-6-upstream-6.8.8.1-71.126 is installed OR libMagickCore-6_Q16-1-6.8.8.1-71.126 is installed OR libMagickWand-6_Q16-1-6.8.8.1-71.126 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 is installed AND Package Information kgraft-patch-3_12_39-47-default-2-10 is installed OR kgraft-patch-3_12_39-47-xen-2-10 is installed OR kgraft-patch-SLE12_Update_4-2-10 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 12 is installed AND python-pycrypto-2.6.1-1 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 12 SP2 is installed AND Package Information cluster-md-kmp-rt-4.4.74-7.10.1 is installed OR cluster-network-kmp-rt-4.4.74-7.10.1 is installed OR dlm-kmp-rt-4.4.74-7.10.1 is installed OR gfs2-kmp-rt-4.4.74-7.10.1 is installed OR kernel-devel-rt-4.4.74-7.10.1 is installed OR kernel-rt-4.4.74-7.10.1 is installed OR kernel-rt-base-4.4.74-7.10.1 is installed OR kernel-rt-devel-4.4.74-7.10.1 is installed OR kernel-rt_debug-4.4.74-7.10.1 is installed OR kernel-rt_debug-devel-4.4.74-7.10.1 is installed OR kernel-source-rt-4.4.74-7.10.1 is installed OR kernel-syms-rt-4.4.74-7.10.1 is installed OR ocfs2-kmp-rt-4.4.74-7.10.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP1 is installed AND Package Information OpenEXR-1.6.1-83.17.1 is installed OR OpenEXR-32bit-1.6.1-83.17.1 is installed OR OpenEXR-x86-1.6.1-83.17.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP2 is installed AND libQtWebKit4-4.6.3-5.20.23.1 is installed OR libQtWebKit4-32bit-4.6.3-5.20.23.1 is installed OR libQtWebKit4-x86-4.6.3-5.20.23.1 is installed OR libqt4-4.6.3-5.20.23.1 is installed OR libqt4-32bit-4.6.3-5.20.23.1 is installed OR libqt4-qt3support-4.6.3-5.20.23.1 is installed OR libqt4-qt3support-32bit-4.6.3-5.20.23.1 is installed OR libqt4-qt3support-x86-4.6.3-5.20.23.1 is installed OR libqt4-sql-4.6.3-5.20.23.1 is installed OR libqt4-sql-32bit-4.6.3-5.20.23.1 is installed OR libqt4-sql-mysql-4.6.3-5.20.23.1 is installed OR libqt4-sql-sqlite-4.6.3-5.20.23.1 is installed OR libqt4-sql-x86-4.6.3-5.20.23.1 is installed OR libqt4-x11-4.6.3-5.20.23.1 is installed OR libqt4-x11-32bit-4.6.3-5.20.23.1 is installed OR libqt4-x11-x86-4.6.3-5.20.23.1 is installed OR libqt4-x86-4.6.3-5.20.23.1 is installed OR qt4-x11-tools-4.6.3-5.20.23.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP2 is installed AND libQtWebKit4-4.6.3-5.20.23.1 is installed OR libQtWebKit4-32bit-4.6.3-5.20.23.1 is installed OR libQtWebKit4-x86-4.6.3-5.20.23.1 is installed OR libqt4-4.6.3-5.20.23.1 is installed OR libqt4-32bit-4.6.3-5.20.23.1 is installed OR libqt4-qt3support-4.6.3-5.20.23.1 is installed OR libqt4-qt3support-32bit-4.6.3-5.20.23.1 is installed OR libqt4-qt3support-x86-4.6.3-5.20.23.1 is installed OR libqt4-sql-4.6.3-5.20.23.1 is installed OR libqt4-sql-32bit-4.6.3-5.20.23.1 is installed OR libqt4-sql-mysql-4.6.3-5.20.23.1 is installed OR libqt4-sql-sqlite-4.6.3-5.20.23.1 is installed OR libqt4-sql-x86-4.6.3-5.20.23.1 is installed OR libqt4-x11-4.6.3-5.20.23.1 is installed OR libqt4-x11-32bit-4.6.3-5.20.23.1 is installed OR libqt4-x11-x86-4.6.3-5.20.23.1 is installed OR libqt4-x86-4.6.3-5.20.23.1 is installed OR qt4-x11-tools-4.6.3-5.20.23.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2 is installed AND Package Information libsoup-2_4-1-2.32.2-4.7.1 is installed OR libsoup-2_4-1-32bit-2.32.2-4.7.1 is installed OR libsoup-2_4-1-x86-2.32.2-4.7.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP3 is installed AND curl-7.19.7-1.46.1 is installed OR libcurl4-7.19.7-1.46.1 is installed OR libcurl4-32bit-7.19.7-1.46.1 is installed OR libcurl4-x86-7.19.7-1.46.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP3 is installed AND curl-7.19.7-1.46.1 is installed OR libcurl4-7.19.7-1.46.1 is installed OR libcurl4-32bit-7.19.7-1.46.1 is installed OR libcurl4-x86-7.19.7-1.46.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3 is installed AND apache2-mod_jk-1.2.26-1.30.110 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND acpid-1.0.6-91.25.20 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND Package Information krb5-1.12.1-6 is installed OR krb5-32bit-1.12.1-6 is installed OR krb5-client-1.12.1-6 is installed OR krb5-doc-1.12.1-6 is installed OR krb5-plugin-kdb-ldap-1.12.1-6 is installed OR krb5-plugin-preauth-otp-1.12.1-6 is installed OR krb5-plugin-preauth-pkinit-1.12.1-6 is installed OR krb5-server-1.12.1-6 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information coreutils-8.22-9 is installed OR coreutils-lang-8.22-9 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information bind-9.9.9P1-62.1 is installed OR bind-chrootenv-9.9.9P1-62.1 is installed OR bind-devel-9.9.9P1-62.1 is installed OR bind-doc-9.9.9P1-62.1 is installed OR bind-libs-9.9.9P1-62.1 is installed OR bind-libs-32bit-9.9.9P1-62.1 is installed OR bind-utils-9.9.9P1-62.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information bind-9.9.9P1-46 is installed OR bind-chrootenv-9.9.9P1-46 is installed OR bind-doc-9.9.9P1-46 is installed OR bind-libs-9.9.9P1-46 is installed OR bind-libs-32bit-9.9.9P1-46 is installed OR bind-utils-9.9.9P1-46 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND apache-commons-httpclient-3.1-4 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP5 is installed AND tomcat-9.0.36-3.87.1 is installed OR tomcat-admin-webapps-9.0.36-3.87.1 is installed OR tomcat-docs-webapp-9.0.36-3.87.1 is installed OR tomcat-el-3_0-api-9.0.36-3.87.1 is installed OR tomcat-javadoc-9.0.36-3.87.1 is installed OR tomcat-jsp-2_3-api-9.0.36-3.87.1 is installed OR tomcat-lib-9.0.36-3.87.1 is installed OR tomcat-servlet-4_0-api-9.0.36-3.87.1 is installed OR tomcat-webapps-9.0.36-3.87.1 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed AND tomcat-9.0.36-3.87.1 is installed OR tomcat-admin-webapps-9.0.36-3.87.1 is installed OR tomcat-docs-webapp-9.0.36-3.87.1 is installed OR tomcat-el-3_0-api-9.0.36-3.87.1 is installed OR tomcat-javadoc-9.0.36-3.87.1 is installed OR tomcat-jsp-2_3-api-9.0.36-3.87.1 is installed OR tomcat-lib-9.0.36-3.87.1 is installed OR tomcat-servlet-4_0-api-9.0.36-3.87.1 is installed OR tomcat-webapps-9.0.36-3.87.1 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND Package Information cups-pk-helper-0.2.5-3 is installed OR cups-pk-helper-lang-0.2.5-3 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed AND Package Information java-1_7_1-ibm-1.7.1_sr4.30-38.26 is installed OR java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26 is installed OR java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26 is installed OR java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26 is installed OR java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP2 is installed AND Package Information Mesa-devel-7.11.2-0.9.1 is installed OR Mesa-devel-32bit-7.11.2-0.9.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND xen-devel-4.2.2_06-0.7.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND Package Information Mesa-devel-9.0.3-0.28.29.2 is installed OR Mesa-devel-32bit-9.0.3-0.28.29.2 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND augeas-devel-1.2.0-1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND MozillaFirefox-devel-38.4.0esr-51 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information DirectFB-devel-1.7.1-6 is installed OR lib++dfb-devel-1.7.1-6 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND MozillaFirefox-devel-52.2.0esr-108 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND Package Information kernel-default-3.12.59-60.41.2 is installed OR kernel-default-extra-3.12.59-60.41.2 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND Package Information libqt4-sql-mysql-32bit-4.8.6-7 is installed OR libqt4-sql-postgresql-4.8.6-7 is installed OR libqt4-sql-postgresql-32bit-4.8.6-7 is installed OR libqt4-sql-sqlite-32bit-4.8.6-7 is installed OR libqt4-sql-unixODBC-4.8.6-7 is installed OR libqt4-sql-unixODBC-32bit-4.8.6-7 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND Package Information freerdp-2.0.0~git.1463131968.4e66df7-11 is installed OR libfreerdp2-2.0.0~git.1463131968.4e66df7-11 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND argyllcms-1.6.3-3 is installed
BACK