Oval Definition:oval:org.opensuse.security:def:69952
Revision Date:2021-11-16Version:1
Title:Security update for tomcat (Important)
Description:

This update for tomcat fixes the following issues:

- CVE-2021-30640: Escape parameters in JNDI Realm queries (bsc#1188279). - CVE-2021-33037: Process T-E header from both HTTP 1.0 and HTTP 1.1. clients (bsc#1188278). - CVE-2021-41079: Fixed a denial of service caused by an unexpected TLS packet (bsc#1190558).
Family:unixClass:patch
Status:Reference(s):1188278
1188279
1190558
CVE-2016-7545
CVE-2017-5838
CVE-2017-5847
CVE-2017-5848
CVE-2018-1063
CVE-2021-30640
CVE-2021-33037
CVE-2021-41079
SUSE-SU-2021:3669-1
Platform(s):SUSE Linux Enterprise Module for Basesystem 15 SP2
SUSE Linux Enterprise Module for Desktop Applications 15 SP2
SUSE Linux Enterprise Server 15 SP1-LTSS
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed
  • AND Package Information
  • policycoreutils-3.0-1 is installed
  • OR policycoreutils-lang-3.0-1 is installed
  • OR policycoreutils-newrole-3.0-1 is installed
  • OR python3-policycoreutils-3.0-1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Desktop Applications 15 SP2 is installed
  • AND Package Information
  • gstreamer-plugins-bad-1.16.2-2 is installed
  • OR gstreamer-plugins-bad-chromaprint-1.16.2-2 is installed
  • OR gstreamer-plugins-bad-devel-1.16.2-2 is installed
  • OR gstreamer-plugins-bad-lang-1.16.2-2 is installed
  • OR libgstadaptivedemux-1_0-0-1.16.2-2 is installed
  • OR libgstbadaudio-1_0-0-1.16.2-2 is installed
  • OR libgstbasecamerabinsrc-1_0-0-1.16.2-2 is installed
  • OR libgstcodecparsers-1_0-0-1.16.2-2 is installed
  • OR libgstinsertbin-1_0-0-1.16.2-2 is installed
  • OR libgstisoff-1_0-0-1.16.2-2 is installed
  • OR libgstmpegts-1_0-0-1.16.2-2 is installed
  • OR libgstplayer-1_0-0-1.16.2-2 is installed
  • OR libgstsctp-1_0-0-1.16.2-2 is installed
  • OR libgsturidownloader-1_0-0-1.16.2-2 is installed
  • OR libgstwayland-1_0-0-1.16.2-2 is installed
  • OR libgstwebrtc-1_0-0-1.16.2-2 is installed
  • OR typelib-1_0-GstInsertBin-1_0-1.16.2-2 is installed
  • OR typelib-1_0-GstMpegts-1_0-1.16.2-2 is installed
  • OR typelib-1_0-GstPlayer-1_0-1.16.2-2 is installed
  • OR typelib-1_0-GstWebRTC-1_0-1.16.2-2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 15 SP1-LTSS is installed
  • AND Package Information
  • tomcat-9.0.36-4.63.1 is installed
  • OR tomcat-admin-webapps-9.0.36-4.63.1 is installed
  • OR tomcat-el-3_0-api-9.0.36-4.63.1 is installed
  • OR tomcat-jsp-2_3-api-9.0.36-4.63.1 is installed
  • OR tomcat-lib-9.0.36-4.63.1 is installed
  • OR tomcat-servlet-4_0-api-9.0.36-4.63.1 is installed
  • OR tomcat-webapps-9.0.36-4.63.1 is installed
  • BACK