Lucene search
SuseOPENSUSE-SU-2021:1490-1HistoryNov 19, 2021 - 12:00 a.m.
Security update for tomcat (moderate)
2021-11-1900:00:00
lists.opensuse.org
13
EPSS
0.123
Percentile
95.4%
An update that fixes three vulnerabilities is now available.
Description:
This update for tomcat fixes the following issues:
- CVE-2021-30640: Escape parameters in JNDI Realm queries (bsc#1188279).
- CVE-2021-33037: Process T-E header from both HTTP 1.0 and HTTP 1.1.
clients (bsc#1188278). - CVE-2021-41079: Fixed a denial of service caused by an unexpected TLS
packet (bsc#1190558).
This update was imported from the SUSE:SLE-15-SP2:Update update project.
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.
Alternatively you can run the command listed for your product:
-
openSUSE Leap 15.2:
zypper in -t patch openSUSE-2021-1490=1
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| openSUSE Leap | 15.2 | noarch | < - openSUSE Leap 15.2 (noarch): | - openSUSE Leap 15.2 (noarch):.noarch.rpm |
Related
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2021:3669-1)
2021-11-17 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:3672-1)
2021-11-17 00:00:00
openSUSE: Security Advisory for tomcat (openSUSE-SU-2021:1490-1)
2021-11-23 00:00:00
nessus
nessus
SUSE SLES15 Security Update : tomcat (SUSE-SU-2021:3669-1)
2021-11-17 00:00:00
SUSE SLES15 Security Update : tomcat (SUSE-SU-2021:3670-1)
2021-11-17 00:00:00
openSUSE 15 Security Update : tomcat (openSUSE-SU-2021:1490-1)
2021-11-20 00:00:00
suse
suse
Security update for tomcat (moderate)
2021-11-16 00:00:00
mageia
mageia
Updated tomcat packages fix security vulnerability
2021-10-23 13:05:28
osv
osv
tomcat9 - security update
2021-08-09 00:00:00
tomcat8 - security update
2021-08-05 00:00:00
tomcat9 vulnerabilities
2022-03-31 18:51:57
debian
debian
[SECURITY] [DLA 2733-1] tomcat8 security update
2021-08-05 21:40:35
[SECURITY] [DSA 4984-1] tomcat9 security update
2021-10-14 20:33:21
[SECURITY] [DSA 4952-1] tomcat9 security update
2021-08-09 21:06:14
ubuntu
ubuntu
Tomcat vulnerabilities
2022-03-31 00:00:00
freebsd
freebsd
tomcat -- HTTP request smuggling in multiple versions
2021-05-07 00:00:00
tomcat -- JNDI Realm Authentication Weakness in multiple versions
2021-04-08 00:00:00
cve
cve
cvelist
cvelist
CVE-2021-33037 Incorrect Transfer-Encoding handling with HTTP/1.0
2021-07-12 14:55:15
CVE-2021-41079 Apache Tomcat DoS with unexpected TLS packet
2021-09-16 14:40:25
CVE-2021-30640 Auth weakness in JNDIRealm
2021-07-12 14:55:13
kaspersky
kaspersky
KLA12325 SB vulnerability in Apache Tomcat
2021-04-26 00:00:00
KLA12291 DoS vulnerability in Apache Tomcat
2021-03-10 00:00:00
KLA12217 SB vulnerability in Apache Tomcat
2021-05-12 00:00:00
redhatcve
redhatcve
ibm
ibm
Security Bulletin: Open Source Apache Tomcat vulnerabilities affect IBM Tivoli Application Dependency Discovery Manager (CVE-2021-30640)
2021-08-24 10:04:38
Security Bulletin: IBM Rational Build Forge is affected by Apache Tomcat version used in it. (CVE-2021-30640)
2022-07-07 16:39:00
Security Bulletin: IBM UrbanCode Build is affected by CVE-2021-41079
2022-02-09 16:25:24
tomcat
tomcat
Fixed in Apache Tomcat 9.0.46
2021-05-12 00:00:00
Fixed in Apache Tomcat 10.0.4
2021-03-10 00:00:00
Fixed in Apache Tomcat 10.0.6
2021-05-12 00:00:00
ubuntucve
ubuntucve
f5
f5
K35033051 : Tomcat vulnerability CVE-2021-30640
2021-07-28 00:00:00
K30502720 : Apache Tomcat vulnerability CVE-2021-41079
2021-09-22 00:00:00
K32469285 : Apache Tomcat vulnerability CVE-2021-33037
2021-08-06 00:00:00
debiancve
debiancve
nvd
nvd
redhat
redhat
(RHSA-2021:3743) Important: Red Hat JBoss Web Server 5.5.1 Security Update
2021-10-06 14:12:59
(RHSA-2022:1179) Important: Red Hat support for Spring Boot 2.5.10 update
2022-04-12 19:02:50
(RHSA-2021:3741) Important: Red Hat JBoss Web Server 5.5.1 Security Update
2021-10-06 13:17:43
photon
photon
github
github
Infinite loop in Tomcat due to parsing error
2021-09-20 20:45:44
Authentication Bypass by Alternate Name in Apache Tomcat
2021-08-13 15:21:24
HTTP Request Smuggling in Apache Tomcat
2021-08-13 15:21:14
amazon
amazon
Important: tomcat8
2021-10-26 23:35:00
Low: tomcat7
2021-09-02 22:54:00
Medium: tomcat8
2021-09-02 22:54:00
veracode
veracode
Denial Of Service (DoS)
2021-09-21 11:11:22
Access Restriction Bypass
2021-07-13 03:39:12
Request Smuggling
2021-07-30 03:29:00
prion
prion
Denial of service
2021-09-16 15:15:00
Cross site request forgery (csrf)
2021-07-12 15:15:00
Design/Logic Flaw
2021-07-12 15:15:00
atlassian
atlassian
Request smuggling via a vulnerable version of Apache Tomcat - CVE-2021-33037
2022-01-06 02:02:04
Upgrade the bundled version of Apache Tomcat to 8.5.68 or later
2021-07-14 11:35:20
seebug
seebug
Apache Tomcat HTTP请求走私(CVE-2021-33037)
2021-07-27 00:00:00
qualysblog
qualysblog
Apache Tomcat HTTP Request Smuggling Vulnerability (CVE-2021-33037)
2021-10-27 12:07:58
gentoo
gentoo
Apache Tomcat: Multiple Vulnerabilities
2022-08-21 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2258
2023-10-21 16:49:43
oracle
oracle
Oracle Critical Patch Update Advisory - July 2021
2021-07-20 00:00:00
Oracle Critical Patch Update Advisory - October 2021
2021-10-19 00:00:00