gpp_maybe Security update for tomcat

SUSE-SLE-SDK-12-SP5-2022-784

This update for tomcat fixes the following issues: Security issues fixed: - CVE-2022-23181: Fixed time of check, time of use vulnerability that allowed local privilege escalation. (bsc#1195255) - Remove log4j dependency, which is currently directly in use (bsc#1196137) - Make the package RPM conflict even more specific to conflict with java-openjdk-headless >= 9 (bsc#1196091)

• Release Date
  Mar 9 2022
• References
  Bugzilla: 1195255, 1196137, 1196091
  CVEs: CVE-2022-23181
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.5 aarch64

• Packages
  javapackages-filesystem
  Java packages filesystem layout

  5.3.1-14.5.1 lock rpm

  javapackages-tools
  Macros and scripts for Java packaging support

  5.3.1-14.5.1 lock src

SUSE Linux Enterprise Software Development Kit 12.5 ppc64le

• Packages
  javapackages-filesystem
  Java packages filesystem layout

  5.3.1-14.5.1 lock rpm

  javapackages-tools
  Macros and scripts for Java packaging support

  5.3.1-14.5.1 lock src

SUSE Linux Enterprise Software Development Kit 12.5 s390x

• Packages
  javapackages-filesystem
  Java packages filesystem layout

  5.3.1-14.5.1 lock rpm

  javapackages-tools
  Macros and scripts for Java packaging support

  5.3.1-14.5.1 lock src

SUSE Linux Enterprise Software Development Kit 12.5 x86_64

• Packages
  javapackages-filesystem
  Java packages filesystem layout

  5.3.1-14.5.1 lock rpm

  javapackages-tools
  Macros and scripts for Java packaging support

  5.3.1-14.5.1 lock src