gpp_maybe Security update for tomcat

SUSE-SLE-Module-Web-Scripting-15-SP1-2020-631

This update for tomcat to version 9.0.31 fixes the following issues: Security issues fixed: - CVE-2019-17569: Fixed a regression in the handling of Transfer-Encoding headers that would have allowed HTTP Request Smuggling (bsc#1164825). - CVE-2020-1935: Fixed an HTTP Request Smuggling issue (bsc#1164860). - CVE-2020-1938: Fixed a file contents disclosure vulnerability (bsc#1164692).

• Release Date
  Mar 10 2020
• References
  Bugzilla: 1164825, 1164860, 1164692
  CVEs: CVE-2020-1938, CVE-2020-1935, CVE-2019-17569
• Type
  security
• Severity
  important

cloud_download Downloads

Web and Scripting Module 15.1 x86_64

• Packages
  tomcat
  Apache Servlet/JSP/EL Engine, RI for Servlet 4.0/JSP 2.3/EL 3.0 API

  9.0.31-4.22.1 lock rpm lock src

  tomcat-admin-webapps
  The host manager and manager web applications for Apache Tomcat

  9.0.31-4.22.1 lock rpm

  tomcat-el-3_0-api
  Expression Language v3.0 API

  9.0.31-4.22.1 lock rpm

  tomcat-jsp-2_3-api
  Apache Tomcat JSP API implementation classes

  9.0.31-4.22.1 lock rpm

  tomcat-lib
  Libraries needed to run the Tomcat Web container

  9.0.31-4.22.1 lock rpm

  tomcat-servlet-4_0-api
  Apache Tomcat Servlet API implementation classes

  9.0.31-4.22.1 lock rpm

  tomcat-webapps
  ROOT and examples web applications for Apache Tomcat

  9.0.31-4.22.1 lock rpm

Web and Scripting Module 15.1 aarch64

• Packages
  tomcat
  Apache Servlet/JSP/EL Engine, RI for Servlet 4.0/JSP 2.3/EL 3.0 API

  9.0.31-4.22.1 lock rpm lock src

  tomcat-admin-webapps
  The host manager and manager web applications for Apache Tomcat

  9.0.31-4.22.1 lock rpm

  tomcat-el-3_0-api
  Expression Language v3.0 API

  9.0.31-4.22.1 lock rpm

  tomcat-jsp-2_3-api
  Apache Tomcat JSP API implementation classes

  9.0.31-4.22.1 lock rpm

  tomcat-lib
  Libraries needed to run the Tomcat Web container

  9.0.31-4.22.1 lock rpm

  tomcat-servlet-4_0-api
  Apache Tomcat Servlet API implementation classes

  9.0.31-4.22.1 lock rpm

  tomcat-webapps
  ROOT and examples web applications for Apache Tomcat

  9.0.31-4.22.1 lock rpm

Web and Scripting Module 15.1 ppc64le

• Packages
  tomcat
  Apache Servlet/JSP/EL Engine, RI for Servlet 4.0/JSP 2.3/EL 3.0 API

  9.0.31-4.22.1 lock rpm lock src

  tomcat-admin-webapps
  The host manager and manager web applications for Apache Tomcat

  9.0.31-4.22.1 lock rpm

  tomcat-el-3_0-api
  Expression Language v3.0 API

  9.0.31-4.22.1 lock rpm

  tomcat-jsp-2_3-api
  Apache Tomcat JSP API implementation classes

  9.0.31-4.22.1 lock rpm

  tomcat-lib
  Libraries needed to run the Tomcat Web container

  9.0.31-4.22.1 lock rpm

  tomcat-servlet-4_0-api
  Apache Tomcat Servlet API implementation classes

  9.0.31-4.22.1 lock rpm

  tomcat-webapps
  ROOT and examples web applications for Apache Tomcat

  9.0.31-4.22.1 lock rpm

Web and Scripting Module 15.1 s390x

• Packages
  tomcat
  Apache Servlet/JSP/EL Engine, RI for Servlet 4.0/JSP 2.3/EL 3.0 API

  9.0.31-4.22.1 lock rpm lock src

  tomcat-admin-webapps
  The host manager and manager web applications for Apache Tomcat

  9.0.31-4.22.1 lock rpm

  tomcat-el-3_0-api
  Expression Language v3.0 API

  9.0.31-4.22.1 lock rpm

  tomcat-jsp-2_3-api
  Apache Tomcat JSP API implementation classes

  9.0.31-4.22.1 lock rpm

  tomcat-lib
  Libraries needed to run the Tomcat Web container

  9.0.31-4.22.1 lock rpm

  tomcat-servlet-4_0-api
  Apache Tomcat Servlet API implementation classes

  9.0.31-4.22.1 lock rpm

  tomcat-webapps
  ROOT and examples web applications for Apache Tomcat

  9.0.31-4.22.1 lock rpm