gpp_maybe
Security update for tomcat
SUSE-SLE-SERVER-12-SP1-2017-2038
This update for tomcat fixes the following issues: Security issues fixed: - CVE-2017-5664: A problem in handling error pages was fixed, to avoid potential file overwrites during error page handling. (bsc#1042910). - CVE-2017-7674: A CORS Filter issue could lead to client and server side cache poisoning (bsc#1053352) - CVE-2017-12617: A remote code execution possibility via JSP Upload was fixed (bsc#1059554) Non security issues fixed: - Fix tomcat-digest classpath error (bsc#977410) - Read setenv.sh when starting Tomcat with catalina.sh (bsc#1002639) - Fix packaged /etc/alternatives symlinks for api libs that caused rpm -V to report link mismatch (bsc#1019016)
-
Release DateDec 13 2017
-
ReferencesBugzilla: 1019016, 1002639, 977410, 1042910, 1053352, 1059554
CVEs: CVE-2017-7674, CVE-2017-12617, CVE-2017-5664 -
Typesecurity
-
Severityimportant
cloud_download Downloads
SUSE Linux Enterprise Server LTSS 12.1 s390x
-
Packagestomcat
Apache Servlet/JSP/EL Engine, RI for Servlet 3.1/JSP 2.3/EL 3.0 APItomcat-admin-webapps8.0.43-10.24.1 lock rpm lock src
The host-manager and manager web applications for Apache Tomcattomcat-docs-webapp8.0.43-10.24.1 lock rpm
The docs web application for Apache Tomcattomcat-el-3_0-api8.0.43-10.24.1 lock rpm
Expression Language v3.0 APItomcat-javadoc8.0.43-10.24.1 lock rpm
Javadoc generated documentation for Apache Tomcattomcat-jsp-2_3-api8.0.43-10.24.1 lock rpm
Apache Tomcat JSP API implementation classestomcat-lib8.0.43-10.24.1 lock rpm
Libraries needed to run the Tomcat Web containertomcat-servlet-3_1-api8.0.43-10.24.1 lock rpm
Apache Tomcat Servlet API implementation classestomcat-webapps8.0.43-10.24.1 lock rpm
ROOT and examples web applications for Apache Tomcat8.0.43-10.24.1 lock rpm
SUSE Linux Enterprise Server LTSS 12.1 x86_64
-
Packagestomcat
Apache Servlet/JSP/EL Engine, RI for Servlet 3.1/JSP 2.3/EL 3.0 APItomcat-admin-webapps8.0.43-10.24.1 lock rpm lock src
The host-manager and manager web applications for Apache Tomcattomcat-docs-webapp8.0.43-10.24.1 lock rpm
The docs web application for Apache Tomcattomcat-el-3_0-api8.0.43-10.24.1 lock rpm
Expression Language v3.0 APItomcat-javadoc8.0.43-10.24.1 lock rpm
Javadoc generated documentation for Apache Tomcattomcat-jsp-2_3-api8.0.43-10.24.1 lock rpm
Apache Tomcat JSP API implementation classestomcat-lib8.0.43-10.24.1 lock rpm
Libraries needed to run the Tomcat Web containertomcat-servlet-3_1-api8.0.43-10.24.1 lock rpm
Apache Tomcat Servlet API implementation classestomcat-webapps8.0.43-10.24.1 lock rpm
ROOT and examples web applications for Apache Tomcat8.0.43-10.24.1 lock rpm