< back to search

gpp_maybe Security update for tomcat
SUSE-SLE-Module-Web-Scripting-15-SP5-2024-472

This update for tomcat fixes the following issues: Updated to Tomcat 9.0.85: - CVE-2023-45648: Improve trailer header parsing (bsc#1216118). - CVE-2023-42794: FileUpload: remove tmp files to avoid DoS on Windows (bsc#1216120). - CVE-2023-42795: Improve handling of failures during recycle() methods (bsc#1216119). - CVE-2023-46589: Fixed HTTP request smuggling due to incorrect headers parsing (bsc#1217649) - CVE-2024-22029: Fixed escalation to root from tomcat user via %post script. (bsc#1219208) The following non-security issues were fixed: - Fixed the file permissions for server.xml (bsc#1217768, bsc#1217402). Find the full release notes at: https://tomcat.apache.org/tomcat-9.0-doc/changelog.html

cloud_download Downloads

Web and Scripting Module 15.5 aarch64
  • Packages
    tomcat
    Apache Servlet/JSP/EL Engine, RI for Servlet 4.0/JSP 2.3/EL 3.0 API
    9.0.85-150200.57.1 lock rpm lock src
    tomcat-admin-webapps
    The host manager and manager web applications for Apache Tomcat
    9.0.85-150200.57.1 lock rpm
    tomcat-el-3_0-api
    Expression Language v3.0 API
    9.0.85-150200.57.1 lock rpm
    tomcat-jsp-2_3-api
    Apache Tomcat JSP API implementation classes
    9.0.85-150200.57.1 lock rpm
    tomcat-lib
    Libraries needed to run the Tomcat Web container
    9.0.85-150200.57.1 lock rpm
    tomcat-servlet-4_0-api
    Apache Tomcat Servlet API implementation classes
    9.0.85-150200.57.1 lock rpm
    tomcat-webapps
    ROOT and examples web applications for Apache Tomcat
    9.0.85-150200.57.1 lock rpm
Web and Scripting Module 15.5 x86_64
  • Packages
    tomcat
    Apache Servlet/JSP/EL Engine, RI for Servlet 4.0/JSP 2.3/EL 3.0 API
    9.0.85-150200.57.1 lock rpm lock src
    tomcat-admin-webapps
    The host manager and manager web applications for Apache Tomcat
    9.0.85-150200.57.1 lock rpm
    tomcat-el-3_0-api
    Expression Language v3.0 API
    9.0.85-150200.57.1 lock rpm
    tomcat-jsp-2_3-api
    Apache Tomcat JSP API implementation classes
    9.0.85-150200.57.1 lock rpm
    tomcat-lib
    Libraries needed to run the Tomcat Web container
    9.0.85-150200.57.1 lock rpm
    tomcat-servlet-4_0-api
    Apache Tomcat Servlet API implementation classes
    9.0.85-150200.57.1 lock rpm
    tomcat-webapps
    ROOT and examples web applications for Apache Tomcat
    9.0.85-150200.57.1 lock rpm
Web and Scripting Module 15.5 s390x
  • Packages
    tomcat
    Apache Servlet/JSP/EL Engine, RI for Servlet 4.0/JSP 2.3/EL 3.0 API
    9.0.85-150200.57.1 lock rpm lock src
    tomcat-admin-webapps
    The host manager and manager web applications for Apache Tomcat
    9.0.85-150200.57.1 lock rpm
    tomcat-el-3_0-api
    Expression Language v3.0 API
    9.0.85-150200.57.1 lock rpm
    tomcat-jsp-2_3-api
    Apache Tomcat JSP API implementation classes
    9.0.85-150200.57.1 lock rpm
    tomcat-lib
    Libraries needed to run the Tomcat Web container
    9.0.85-150200.57.1 lock rpm
    tomcat-servlet-4_0-api
    Apache Tomcat Servlet API implementation classes
    9.0.85-150200.57.1 lock rpm
    tomcat-webapps
    ROOT and examples web applications for Apache Tomcat
    9.0.85-150200.57.1 lock rpm
Web and Scripting Module 15.5 ppc64le
  • Packages
    tomcat
    Apache Servlet/JSP/EL Engine, RI for Servlet 4.0/JSP 2.3/EL 3.0 API
    9.0.85-150200.57.1 lock rpm lock src
    tomcat-admin-webapps
    The host manager and manager web applications for Apache Tomcat
    9.0.85-150200.57.1 lock rpm
    tomcat-el-3_0-api
    Expression Language v3.0 API
    9.0.85-150200.57.1 lock rpm
    tomcat-jsp-2_3-api
    Apache Tomcat JSP API implementation classes
    9.0.85-150200.57.1 lock rpm
    tomcat-lib
    Libraries needed to run the Tomcat Web container
    9.0.85-150200.57.1 lock rpm
    tomcat-servlet-4_0-api
    Apache Tomcat Servlet API implementation classes
    9.0.85-150200.57.1 lock rpm
    tomcat-webapps
    ROOT and examples web applications for Apache Tomcat
    9.0.85-150200.57.1 lock rpm