Lucene search

K
suseSuseOPENSUSE-SU-2020:1063-1
HistoryJul 26, 2020 - 12:00 a.m.

Security update for tomcat (important)

2020-07-2600:00:00
lists.opensuse.org
32
tomcat
security update
cve-2020-11996

EPSS

0.002

Percentile

55.7%

An update that fixes one vulnerability is now available.

Description:

This update for tomcat fixes the following issues:

Tomcat was updated to 9.0.36 See changelog at

  • CVE-2020-11996: Fixed an issue which by sending a specially crafted
    sequence of HTTP/2 requests could have triggered high CPU usage for
    several seconds making potentially the server unresponsive (bsc#1173389).

This update was imported from the SUSE:SLE-15-SP2:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

  • openSUSE Leap 15.2:

    zypper in -t patch openSUSE-2020-1063=1

OSVersionArchitecturePackageVersionFilename
openSUSE Leap15.2noarch< - openSUSE Leap 15.2 (noarch):- openSUSE Leap 15.2 (noarch):.noarch.rpm