6 matches found
SUSE-SU-2023:3232-1 Security update for tomcat
This update for tomcat fixes the following issues: - Remove the log4j dependency as it is not used by the tomcat package bsc1196137 Security hardening, related to Spring Framework vulnerabilities: - Deprecate getResources and always return null bsc1198136...
PT-2023-36244 · Apache · Apache Tomcat
Name of the Vulnerable Software and Affected Versions: tomcat affected versions not specified Description: The issue is related to security hardening, specifically addressing Spring Framework vulnerabilities. This involves removing the log4j dependency, which is not used by the tomcat package, an...
SUSE-SU-2022:1294-1 Security update for tomcat
This update for tomcat fixes the following issues: - Remove the log4j dependency as it is not used by the tomcat package bsc1196137 Security hardening, related to Spring Framework vulnerabilities: - Deprecate getResources and always return null bsc1198136...
SUSE-SU-2022:0818-1 Security update for tomcat
This update for tomcat fixes the following issues: Security issues fixed: - CVE-2022-23181: Make calculation of session storage location more robust bsc1195255 - Remove log4j bsc1196137...
OPENSUSE-SU-2022:0818-1 Security update for tomcat
This update for tomcat fixes the following issues: Security issues fixed: - CVE-2022-23181: Make calculation of session storage location more robust bsc1195255 - Remove log4j bsc1196137...
HPESBGN04225 rev.1 - HPE Trueview Inventory Software Series, Apache Log4j 2 Remote Arbitrary Code Execution, Remote Code Execution, and Remote Denial of Service
Potential Security Impact: Remote: Arbitrary Code Execution, Code Execution, Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Trueview Inventory Software Series - Prior to 8.6.22.1 and 8.7.3 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | ---...