shield Security update for tomcat

SUSE-SLE-SERVER-12-SP3-2018-543

This update for tomcat fixes the following issues: Security issues fixed: - CVE-2018-1305: Fixed late application of security constraints that can lead to resource exposure for unauthorised users (bsc#1082481). - CVE-2018-1304: Fixed incorrect handling of empty string URL in security constraints that can lead to unitended exposure of resources (bsc#1082480). - CVE-2017-15706: Fixed incorrect documentation of CGI Servlet search algorithm that may lead to misconfiguration (bsc#1078677).

• Release Date
  Mar 26 2018
• References
  Bugzilla: 1082480, 1082481, 1078677
  CVEs: CVE-2017-15706, CVE-2018-1305, CVE-2018-1304
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 12.3 x86_64

• Packages
  tomcat
  Apache Servlet/JSP/EL Engine, RI for Servlet 3.1/JSP 2.3/EL 3.0 API

  8.0.50-29.8.2 lock rpm lock src

  tomcat-admin-webapps
  The host-manager and manager web applications for Apache Tomcat

  8.0.50-29.8.2 lock rpm

  tomcat-docs-webapp
  The docs web application for Apache Tomcat

  8.0.50-29.8.2 lock rpm

  tomcat-el-3_0-api
  Expression Language v3.0 API

  8.0.50-29.8.2 lock rpm

  tomcat-javadoc
  Javadoc generated documentation for Apache Tomcat

  8.0.50-29.8.2 lock rpm

  tomcat-jsp-2_3-api
  Apache Tomcat JSP API implementation classes

  8.0.50-29.8.2 lock rpm

  tomcat-lib
  Libraries needed to run the Tomcat Web container

  8.0.50-29.8.2 lock rpm

  tomcat-servlet-3_1-api
  Apache Tomcat Servlet API implementation classes

  8.0.50-29.8.2 lock rpm

  tomcat-webapps
  ROOT and examples web applications for Apache Tomcat

  8.0.50-29.8.2 lock rpm

SUSE Linux Enterprise Server for SAP Applications 12.3 ppc64le

• Packages
  tomcat
  Apache Servlet/JSP/EL Engine, RI for Servlet 3.1/JSP 2.3/EL 3.0 API

  8.0.50-29.8.2 lock rpm lock src

  tomcat-admin-webapps
  The host-manager and manager web applications for Apache Tomcat

  8.0.50-29.8.2 lock rpm

  tomcat-docs-webapp
  The docs web application for Apache Tomcat

  8.0.50-29.8.2 lock rpm

  tomcat-el-3_0-api
  Expression Language v3.0 API

  8.0.50-29.8.2 lock rpm

  tomcat-javadoc
  Javadoc generated documentation for Apache Tomcat

  8.0.50-29.8.2 lock rpm

  tomcat-jsp-2_3-api
  Apache Tomcat JSP API implementation classes

  8.0.50-29.8.2 lock rpm

  tomcat-lib
  Libraries needed to run the Tomcat Web container

  8.0.50-29.8.2 lock rpm

  tomcat-servlet-3_1-api
  Apache Tomcat Servlet API implementation classes

  8.0.50-29.8.2 lock rpm

  tomcat-webapps
  ROOT and examples web applications for Apache Tomcat

  8.0.50-29.8.2 lock rpm

SUSE Linux Enterprise Server 12.3 s390x

• Packages
  tomcat
  Apache Servlet/JSP/EL Engine, RI for Servlet 3.1/JSP 2.3/EL 3.0 API

  8.0.50-29.8.2 lock rpm lock src

  tomcat-admin-webapps
  The host-manager and manager web applications for Apache Tomcat

  8.0.50-29.8.2 lock rpm

  tomcat-docs-webapp
  The docs web application for Apache Tomcat

  8.0.50-29.8.2 lock rpm

  tomcat-el-3_0-api
  Expression Language v3.0 API

  8.0.50-29.8.2 lock rpm

  tomcat-javadoc
  Javadoc generated documentation for Apache Tomcat

  8.0.50-29.8.2 lock rpm

  tomcat-jsp-2_3-api
  Apache Tomcat JSP API implementation classes

  8.0.50-29.8.2 lock rpm

  tomcat-lib
  Libraries needed to run the Tomcat Web container

  8.0.50-29.8.2 lock rpm

  tomcat-servlet-3_1-api
  Apache Tomcat Servlet API implementation classes

  8.0.50-29.8.2 lock rpm

  tomcat-webapps
  ROOT and examples web applications for Apache Tomcat

  8.0.50-29.8.2 lock rpm

SUSE Linux Enterprise Server 12.3 aarch64

• Packages
  tomcat
  Apache Servlet/JSP/EL Engine, RI for Servlet 3.1/JSP 2.3/EL 3.0 API

  8.0.50-29.8.2 lock rpm lock src

  tomcat-admin-webapps
  The host-manager and manager web applications for Apache Tomcat

  8.0.50-29.8.2 lock rpm

  tomcat-docs-webapp
  The docs web application for Apache Tomcat

  8.0.50-29.8.2 lock rpm

  tomcat-el-3_0-api
  Expression Language v3.0 API

  8.0.50-29.8.2 lock rpm

  tomcat-javadoc
  Javadoc generated documentation for Apache Tomcat

  8.0.50-29.8.2 lock rpm

  tomcat-jsp-2_3-api
  Apache Tomcat JSP API implementation classes

  8.0.50-29.8.2 lock rpm

  tomcat-lib
  Libraries needed to run the Tomcat Web container

  8.0.50-29.8.2 lock rpm

  tomcat-servlet-3_1-api
  Apache Tomcat Servlet API implementation classes

  8.0.50-29.8.2 lock rpm

  tomcat-webapps
  ROOT and examples web applications for Apache Tomcat

  8.0.50-29.8.2 lock rpm