Security update for tomcat SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:1294-1 Final 1 1 2022-04-21T13:59:35Z current 2022-04-21T13:59:35Z 2022-04-21T13:59:35Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for tomcat This update for tomcat fixes the following issues: - Remove the log4j dependency as it is not used by the tomcat package (bsc#1196137) Security hardening, related to Spring Framework vulnerabilities: - Deprecate getResources() and always return null (bsc#1198136). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). HPE-Helion-OpenStack-8-2022-1294,Image SLES12-SP4-SAP-Azure-BYOS-2022-1294,Image SLES12-SP4-SAP-Azure-LI-BYOS-Production-2022-1294,Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production-2022-1294,Image SLES12-SP5-Azure-SAP-BYOS-2022-1294,Image SLES12-SP5-Azure-SAP-On-Demand-2022-1294,Image SLES12-SP5-EC2-SAP-BYOS-2022-1294,Image SLES12-SP5-EC2-SAP-On-Demand-2022-1294,Image SLES12-SP5-GCE-SAP-BYOS-2022-1294,Image SLES12-SP5-GCE-SAP-On-Demand-2022-1294,Image SLES12-SP5-SAP-Azure-LI-BYOS-Production-2022-1294,Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production-2022-1294,SUSE-2022-1294,SUSE-OpenStack-Cloud-8-2022-1294,SUSE-OpenStack-Cloud-9-2022-1294,SUSE-OpenStack-Cloud-Crowbar-8-2022-1294,SUSE-OpenStack-Cloud-Crowbar-9-2022-1294,SUSE-SLE-SAP-12-SP3-2022-1294,SUSE-SLE-SAP-12-SP4-2022-1294,SUSE-SLE-SDK-12-SP5-2022-1294,SUSE-SLE-SERVER-12-SP2-BCL-2022-1294,SUSE-SLE-SERVER-12-SP3-2022-1294,SUSE-SLE-SERVER-12-SP3-BCL-2022-1294,SUSE-SLE-SERVER-12-SP4-LTSS-2022-1294,SUSE-SLE-SERVER-12-SP5-2022-1294 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20221294-1/ Link for SUSE-SU-2022:1294-1 https://lists.suse.com/pipermail/sle-security-updates/2022-April/010789.html E-Mail link for SUSE-SU-2022:1294-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1196137 SUSE Bug 1196137 https://bugzilla.suse.com/1198136 SUSE Bug 1198136 Image SLES12-SP4-SAP-Azure-BYOS Image SLES12-SP4-SAP-Azure-LI-BYOS-Production Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-Azure-SAP-On-Demand Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-EC2-SAP-On-Demand Image SLES12-SP5-GCE-SAP-BYOS Image SLES12-SP5-GCE-SAP-On-Demand Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-LTSS javapackages-filesystem-5.3.1-14.7.3 javapackages-tools-5.3.1-14.7.3 javapackages-gradle-5.3.1-14.7.2 javapackages-ivy-5.3.1-14.7.2 javapackages-local-5.3.1-14.7.2 python3-javapackages-5.3.1-14.7.2 tomcat-8.0.53-29.54.1 tomcat-admin-webapps-8.0.53-29.54.1 tomcat-docs-webapp-8.0.53-29.54.1 tomcat-el-3_0-api-8.0.53-29.54.1 tomcat-embed-8.0.53-29.54.1 tomcat-javadoc-8.0.53-29.54.1 tomcat-jsp-2_3-api-8.0.53-29.54.1 tomcat-jsvc-8.0.53-29.54.1 tomcat-lib-8.0.53-29.54.1 tomcat-servlet-3_1-api-8.0.53-29.54.1 tomcat-webapps-8.0.53-29.54.1 javapackages-filesystem-5.3.1-14.7.3 as a component of Image SLES12-SP4-SAP-Azure-BYOS javapackages-tools-5.3.1-14.7.3 as a component of Image SLES12-SP4-SAP-Azure-BYOS javapackages-filesystem-5.3.1-14.7.3 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production javapackages-tools-5.3.1-14.7.3 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production javapackages-filesystem-5.3.1-14.7.3 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production javapackages-tools-5.3.1-14.7.3 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production javapackages-filesystem-5.3.1-14.7.3 as a component of Image SLES12-SP5-Azure-SAP-BYOS javapackages-tools-5.3.1-14.7.3 as a component of Image SLES12-SP5-Azure-SAP-BYOS javapackages-filesystem-5.3.1-14.7.3 as a component of Image SLES12-SP5-Azure-SAP-On-Demand javapackages-tools-5.3.1-14.7.3 as a component of Image SLES12-SP5-Azure-SAP-On-Demand javapackages-filesystem-5.3.1-14.7.3 as a component of Image SLES12-SP5-EC2-SAP-BYOS javapackages-tools-5.3.1-14.7.3 as a component of Image SLES12-SP5-EC2-SAP-BYOS javapackages-filesystem-5.3.1-14.7.3 as a component of Image SLES12-SP5-EC2-SAP-On-Demand javapackages-tools-5.3.1-14.7.3 as a component of Image SLES12-SP5-EC2-SAP-On-Demand javapackages-filesystem-5.3.1-14.7.3 as a component of Image SLES12-SP5-GCE-SAP-BYOS javapackages-tools-5.3.1-14.7.3 as a component of Image SLES12-SP5-GCE-SAP-BYOS javapackages-filesystem-5.3.1-14.7.3 as a component of Image SLES12-SP5-GCE-SAP-On-Demand javapackages-tools-5.3.1-14.7.3 as a component of Image SLES12-SP5-GCE-SAP-On-Demand javapackages-filesystem-5.3.1-14.7.3 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production javapackages-tools-5.3.1-14.7.3 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production javapackages-filesystem-5.3.1-14.7.3 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production javapackages-tools-5.3.1-14.7.3 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production javapackages-filesystem-5.3.1-14.7.3 as a component of SUSE Linux Enterprise Server 12 SP3-BCL tomcat-8.0.53-29.54.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL tomcat-admin-webapps-8.0.53-29.54.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL tomcat-docs-webapp-8.0.53-29.54.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL tomcat-el-3_0-api-8.0.53-29.54.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL tomcat-javadoc-8.0.53-29.54.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL tomcat-jsp-2_3-api-8.0.53-29.54.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL tomcat-lib-8.0.53-29.54.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL tomcat-servlet-3_1-api-8.0.53-29.54.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL tomcat-webapps-8.0.53-29.54.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL javapackages-filesystem-5.3.1-14.7.3 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS tomcat-8.0.53-29.54.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS tomcat-admin-webapps-8.0.53-29.54.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS tomcat-docs-webapp-8.0.53-29.54.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS tomcat-el-3_0-api-8.0.53-29.54.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS tomcat-javadoc-8.0.53-29.54.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS tomcat-jsp-2_3-api-8.0.53-29.54.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS tomcat-lib-8.0.53-29.54.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS tomcat-servlet-3_1-api-8.0.53-29.54.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS tomcat-webapps-8.0.53-29.54.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS