Oval Definition:oval:org.opensuse.security:def:91822
Revision Date:2020-03-10Version:1
Title:Security update for tomcat (Important)
Description:

This update for tomcat to version 9.0.31 fixes the following issues:

Security issues fixed:

- CVE-2019-17569: Fixed a regression in the handling of Transfer-Encoding headers that would have allowed HTTP Request Smuggling (bsc#1164825). - CVE-2020-1935: Fixed an HTTP Request Smuggling issue (bsc#1164860). - CVE-2020-1938: Fixed a file contents disclosure vulnerability (bsc#1164692).
Family:unixClass:patch
Status:Reference(s):1164692
1164825
1164860
CVE-2019-17569
CVE-2020-1935
CVE-2020-1938
SUSE-SU-2020:0631-1
Platform(s):SUSE Linux Enterprise High Performance Computing 15 SP1
SUSE Linux Enterprise Module for Web Scripting 15 SP1
SUSE Linux Enterprise Server 15 SP1
SUSE Linux Enterprise Server for SAP Applications 15 SP1
SUSE Linux Enterprise Storage 6
SUSE Manager Proxy 4.0
SUSE Manager Server 4.0
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Module for Web Scripting 15 SP1 is installed
  • AND Package Information
  • tomcat-9.0.31-4.22.1 is installed
  • OR tomcat-admin-webapps-9.0.31-4.22.1 is installed
  • OR tomcat-el-3_0-api-9.0.31-4.22.1 is installed
  • OR tomcat-jsp-2_3-api-9.0.31-4.22.1 is installed
  • OR tomcat-lib-9.0.31-4.22.1 is installed
  • OR tomcat-servlet-4_0-api-9.0.31-4.22.1 is installed
  • OR tomcat-webapps-9.0.31-4.22.1 is installed
    • BACK