shield Security update for tomcat

SUSE-SLE-Module-Web-Scripting-15-SP3-2021-3672

This update for tomcat fixes the following issues: - CVE-2021-30640: Escape parameters in JNDI Realm queries (bsc#1188279). - CVE-2021-33037: Process T-E header from both HTTP 1.0 and HTTP 1.1. clients (bsc#1188278). - CVE-2021-41079: Fixed a denial of service caused by an unexpected TLS packet (bsc#1190558).

• Release Date
  Nov 16 2021
• References
  Bugzilla: 1188279, 1188278, 1190558
  CVEs: CVE-2021-41079, CVE-2021-30640, CVE-2021-33037
• Type
  security
• Severity
  moderate

cloud_download Downloads

Web and Scripting Module 15.3 x86_64

• Packages
  tomcat
  Apache Servlet/JSP/EL Engine, RI for Servlet 4.0/JSP 2.3/EL 3.0 API

  9.0.36-13.1 lock rpm lock src

  tomcat-admin-webapps
  The host manager and manager web applications for Apache Tomcat

  9.0.36-13.1 lock rpm

  tomcat-el-3_0-api
  Expression Language v3.0 API

  9.0.36-13.1 lock rpm

  tomcat-jsp-2_3-api
  Apache Tomcat JSP API implementation classes

  9.0.36-13.1 lock rpm

  tomcat-lib
  Libraries needed to run the Tomcat Web container

  9.0.36-13.1 lock rpm

  tomcat-servlet-4_0-api
  Apache Tomcat Servlet API implementation classes

  9.0.36-13.1 lock rpm

  tomcat-webapps
  ROOT and examples web applications for Apache Tomcat

  9.0.36-13.1 lock rpm

Web and Scripting Module 15.3 ppc64le

• Packages
  tomcat
  Apache Servlet/JSP/EL Engine, RI for Servlet 4.0/JSP 2.3/EL 3.0 API

  9.0.36-13.1 lock rpm lock src

  tomcat-admin-webapps
  The host manager and manager web applications for Apache Tomcat

  9.0.36-13.1 lock rpm

  tomcat-el-3_0-api
  Expression Language v3.0 API

  9.0.36-13.1 lock rpm

  tomcat-jsp-2_3-api
  Apache Tomcat JSP API implementation classes

  9.0.36-13.1 lock rpm

  tomcat-lib
  Libraries needed to run the Tomcat Web container

  9.0.36-13.1 lock rpm

  tomcat-servlet-4_0-api
  Apache Tomcat Servlet API implementation classes

  9.0.36-13.1 lock rpm

  tomcat-webapps
  ROOT and examples web applications for Apache Tomcat

  9.0.36-13.1 lock rpm

Web and Scripting Module 15.3 aarch64

• Packages
  tomcat
  Apache Servlet/JSP/EL Engine, RI for Servlet 4.0/JSP 2.3/EL 3.0 API

  9.0.36-13.1 lock rpm lock src

  tomcat-admin-webapps
  The host manager and manager web applications for Apache Tomcat

  9.0.36-13.1 lock rpm

  tomcat-el-3_0-api
  Expression Language v3.0 API

  9.0.36-13.1 lock rpm

  tomcat-jsp-2_3-api
  Apache Tomcat JSP API implementation classes

  9.0.36-13.1 lock rpm

  tomcat-lib
  Libraries needed to run the Tomcat Web container

  9.0.36-13.1 lock rpm

  tomcat-servlet-4_0-api
  Apache Tomcat Servlet API implementation classes

  9.0.36-13.1 lock rpm

  tomcat-webapps
  ROOT and examples web applications for Apache Tomcat

  9.0.36-13.1 lock rpm

Web and Scripting Module 15.3 s390x

• Packages
  tomcat
  Apache Servlet/JSP/EL Engine, RI for Servlet 4.0/JSP 2.3/EL 3.0 API

  9.0.36-13.1 lock rpm lock src

  tomcat-admin-webapps
  The host manager and manager web applications for Apache Tomcat

  9.0.36-13.1 lock rpm

  tomcat-el-3_0-api
  Expression Language v3.0 API

  9.0.36-13.1 lock rpm

  tomcat-jsp-2_3-api
  Apache Tomcat JSP API implementation classes

  9.0.36-13.1 lock rpm

  tomcat-lib
  Libraries needed to run the Tomcat Web container

  9.0.36-13.1 lock rpm

  tomcat-servlet-4_0-api
  Apache Tomcat Servlet API implementation classes

  9.0.36-13.1 lock rpm

  tomcat-webapps
  ROOT and examples web applications for Apache Tomcat

  9.0.36-13.1 lock rpm