shield Security update for tomcat

SUSE-SLE-Module-Web-Scripting-15-2019-1693

This update for tomcat to version 9.0.20 fixes the following issues: Security issues fixed: - CVE-2019-0199: Fixed a denial of service in the HTTP/2 implementation related to streams with excessive numbers of SETTINGS frames (bsc#1131055). - CVE-2019-0221: Fixed a cross site scripting vulnerability with the SSI printenv command (bsc#1136085). Non-security issues fixed: - Increase maximum number of threads and open files for tomcat (bsc#1111966).

• Release Date
  Jun 25 2019
• References
  Bugzilla: 1111966, 1131055, 1136085
  CVEs: CVE-2019-0199, CVE-2019-0221
• Type
  security
• Severity
  moderate

cloud_download Downloads

Web and Scripting Module 15 s390x

• Packages
  tomcat
  Apache Servlet/JSP/EL Engine, RI for Servlet 4.0/JSP 2.3/EL 3.0 API

  9.0.20-3.24.2 lock rpm lock src

  tomcat-admin-webapps
  The host-manager and manager web applications for Apache Tomcat

  9.0.20-3.24.2 lock rpm

  tomcat-el-3_0-api
  Expression Language v3.0 API

  9.0.20-3.24.2 lock rpm

  tomcat-jsp-2_3-api
  Apache Tomcat JSP API implementation classes

  9.0.20-3.24.2 lock rpm

  tomcat-lib
  Libraries needed to run the Tomcat Web container

  9.0.20-3.24.2 lock rpm

  tomcat-servlet-4_0-api
  Apache Tomcat Servlet API implementation classes

  9.0.20-3.24.2 lock rpm

  tomcat-webapps
  ROOT and examples web applications for Apache Tomcat

  9.0.20-3.24.2 lock rpm

Web and Scripting Module 15 x86_64

• Packages
  tomcat
  Apache Servlet/JSP/EL Engine, RI for Servlet 4.0/JSP 2.3/EL 3.0 API

  9.0.20-3.24.2 lock rpm lock src

  tomcat-admin-webapps
  The host-manager and manager web applications for Apache Tomcat

  9.0.20-3.24.2 lock rpm

  tomcat-el-3_0-api
  Expression Language v3.0 API

  9.0.20-3.24.2 lock rpm

  tomcat-jsp-2_3-api
  Apache Tomcat JSP API implementation classes

  9.0.20-3.24.2 lock rpm

  tomcat-lib
  Libraries needed to run the Tomcat Web container

  9.0.20-3.24.2 lock rpm

  tomcat-servlet-4_0-api
  Apache Tomcat Servlet API implementation classes

  9.0.20-3.24.2 lock rpm

  tomcat-webapps
  ROOT and examples web applications for Apache Tomcat

  9.0.20-3.24.2 lock rpm

Web and Scripting Module 15 aarch64

• Packages
  tomcat
  Apache Servlet/JSP/EL Engine, RI for Servlet 4.0/JSP 2.3/EL 3.0 API

  9.0.20-3.24.2 lock rpm lock src

  tomcat-admin-webapps
  The host-manager and manager web applications for Apache Tomcat

  9.0.20-3.24.2 lock rpm

  tomcat-el-3_0-api
  Expression Language v3.0 API

  9.0.20-3.24.2 lock rpm

  tomcat-jsp-2_3-api
  Apache Tomcat JSP API implementation classes

  9.0.20-3.24.2 lock rpm

  tomcat-lib
  Libraries needed to run the Tomcat Web container

  9.0.20-3.24.2 lock rpm

  tomcat-servlet-4_0-api
  Apache Tomcat Servlet API implementation classes

  9.0.20-3.24.2 lock rpm

  tomcat-webapps
  ROOT and examples web applications for Apache Tomcat

  9.0.20-3.24.2 lock rpm

Web and Scripting Module 15 ppc64le

• Packages
  tomcat
  Apache Servlet/JSP/EL Engine, RI for Servlet 4.0/JSP 2.3/EL 3.0 API

  9.0.20-3.24.2 lock rpm lock src

  tomcat-admin-webapps
  The host-manager and manager web applications for Apache Tomcat

  9.0.20-3.24.2 lock rpm

  tomcat-el-3_0-api
  Expression Language v3.0 API

  9.0.20-3.24.2 lock rpm

  tomcat-jsp-2_3-api
  Apache Tomcat JSP API implementation classes

  9.0.20-3.24.2 lock rpm

  tomcat-lib
  Libraries needed to run the Tomcat Web container

  9.0.20-3.24.2 lock rpm

  tomcat-servlet-4_0-api
  Apache Tomcat Servlet API implementation classes

  9.0.20-3.24.2 lock rpm

  tomcat-webapps
  ROOT and examples web applications for Apache Tomcat

  9.0.20-3.24.2 lock rpm