shield Security update for tomcat
SUSE-SLE-Module-Web-Scripting-15-2018-2823


This update for tomcat to 9.0.12 fixes the following issues: See the full changelog at: http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.12_(markt) Security issues fixed: - CVE-2018-11784: When the default servlet in Apache Tomcat returned a redirect to a directory (e.g. redirecting to '/foo/' when the user requested '/foo') a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice. (bsc#1110850)

  • Release Date
    Dec 3 2018
  • References
    Bugzilla: 1110850
    CVEs: CVE-2018-11784
  • Type
    security
  • Severity
    moderate

cloud_download Downloads

Web and Scripting Module 15 aarch64
  • Packages
    tomcat
    Apache Servlet/JSP/EL Engine, RI for Servlet 4.0/JSP 2.3/EL 3.0 API
    9.0.12-3.8.3 lock rpm lock src
    tomcat-admin-webapps
    The host-manager and manager web applications for Apache Tomcat
    9.0.12-3.8.3 lock rpm
    tomcat-el-3_0-api
    Expression Language v3.0 API
    9.0.12-3.8.3 lock rpm
    tomcat-jsp-2_3-api
    Apache Tomcat JSP API implementation classes
    9.0.12-3.8.3 lock rpm
    tomcat-lib
    Libraries needed to run the Tomcat Web container
    9.0.12-3.8.3 lock rpm
    tomcat-servlet-4_0-api
    Apache Tomcat Servlet API implementation classes
    9.0.12-3.8.3 lock rpm
    tomcat-webapps
    ROOT and examples web applications for Apache Tomcat
    9.0.12-3.8.3 lock rpm
Web and Scripting Module 15 ppc64le
  • Packages
    tomcat
    Apache Servlet/JSP/EL Engine, RI for Servlet 4.0/JSP 2.3/EL 3.0 API
    9.0.12-3.8.3 lock rpm lock src
    tomcat-admin-webapps
    The host-manager and manager web applications for Apache Tomcat
    9.0.12-3.8.3 lock rpm
    tomcat-el-3_0-api
    Expression Language v3.0 API
    9.0.12-3.8.3 lock rpm
    tomcat-jsp-2_3-api
    Apache Tomcat JSP API implementation classes
    9.0.12-3.8.3 lock rpm
    tomcat-lib
    Libraries needed to run the Tomcat Web container
    9.0.12-3.8.3 lock rpm
    tomcat-servlet-4_0-api
    Apache Tomcat Servlet API implementation classes
    9.0.12-3.8.3 lock rpm
    tomcat-webapps
    ROOT and examples web applications for Apache Tomcat
    9.0.12-3.8.3 lock rpm
Web and Scripting Module 15 s390x
  • Packages
    tomcat
    Apache Servlet/JSP/EL Engine, RI for Servlet 4.0/JSP 2.3/EL 3.0 API
    9.0.12-3.8.3 lock rpm lock src
    tomcat-admin-webapps
    The host-manager and manager web applications for Apache Tomcat
    9.0.12-3.8.3 lock rpm
    tomcat-el-3_0-api
    Expression Language v3.0 API
    9.0.12-3.8.3 lock rpm
    tomcat-jsp-2_3-api
    Apache Tomcat JSP API implementation classes
    9.0.12-3.8.3 lock rpm
    tomcat-lib
    Libraries needed to run the Tomcat Web container
    9.0.12-3.8.3 lock rpm
    tomcat-servlet-4_0-api
    Apache Tomcat Servlet API implementation classes
    9.0.12-3.8.3 lock rpm
    tomcat-webapps
    ROOT and examples web applications for Apache Tomcat
    9.0.12-3.8.3 lock rpm
Web and Scripting Module 15 x86_64
  • Packages
    tomcat
    Apache Servlet/JSP/EL Engine, RI for Servlet 4.0/JSP 2.3/EL 3.0 API
    9.0.12-3.8.3 lock rpm lock src
    tomcat-admin-webapps
    The host-manager and manager web applications for Apache Tomcat
    9.0.12-3.8.3 lock rpm
    tomcat-el-3_0-api
    Expression Language v3.0 API
    9.0.12-3.8.3 lock rpm
    tomcat-jsp-2_3-api
    Apache Tomcat JSP API implementation classes
    9.0.12-3.8.3 lock rpm
    tomcat-lib
    Libraries needed to run the Tomcat Web container
    9.0.12-3.8.3 lock rpm
    tomcat-servlet-4_0-api
    Apache Tomcat Servlet API implementation classes
    9.0.12-3.8.3 lock rpm
    tomcat-webapps
    ROOT and examples web applications for Apache Tomcat
    9.0.12-3.8.3 lock rpm