Security update for tomcat (important)

ID OPENSUSE-SU-2020:1063-1
Type suse
Reporter Suse
Modified 2020-07-26T16:24:01


An update that fixes one vulnerability is now available.


This update for tomcat fixes the following issues:

Tomcat was updated to 9.0.36 See changelog at

  • CVE-2020-11996: Fixed an issue which by sending a specially crafted sequence of HTTP/2 requests could have triggered high CPU usage for several seconds making potentially the server unresponsive (bsc#1173389).

This update was imported from the SUSE:SLE-15-SP2:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

  • openSUSE Leap 15.2:

    zypper in -t patch openSUSE-2020-1063=1