| Revision Date: | 2020-12-01 | Version: | 1 |
| Title: | Security update for tomcat (Important) |
| Description: |
This update for tomcat to version 9.0.31 fixes the following issues:
Security issues fixed:
- CVE-2019-17569: Fixed a regression in the handling of Transfer-Encoding headers that would have allowed HTTP Request Smuggling (bsc#1164825). - CVE-2020-1935: Fixed an HTTP Request Smuggling issue (bsc#1164860). - CVE-2020-1938: Fixed a file contents disclosure vulnerability (bsc#1164692).
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | 1164692
1164825
1164860
1166751
CVE-2019-17569
CVE-2020-0556
CVE-2020-1935
CVE-2020-1938
SUSE-SU-2020:0631-1
SUSE-SU-2020:0918-1
|
| Platform(s): | SUSE Linux Enterprise Module for Web Scripting 15 SP1
SUSE Linux Enterprise Workstation Extension 15 SP1
| Product(s): | |
| Definition Synopsis |
| SUSE Linux Enterprise Module for Web Scripting 15 SP1 is installed AND Package Information
tomcat-9.0.31-4.22 is installed
OR tomcat-admin-webapps-9.0.31-4.22 is installed
OR tomcat-el-3_0-api-9.0.31-4.22 is installed
OR tomcat-jsp-2_3-api-9.0.31-4.22 is installed
OR tomcat-lib-9.0.31-4.22 is installed
OR tomcat-servlet-4_0-api-9.0.31-4.22 is installed
OR tomcat-webapps-9.0.31-4.22 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Workstation Extension 15 SP1 is installed
AND Package Information
bluez-5.48-5.25 is installed
OR bluez-cups-5.48-5.25 is installed
|