Lucene search

K
suseSuseOPENSUSE-SU-2022:0818-1
HistoryMar 14, 2022 - 12:00 a.m.

Security update for tomcat (important)

2022-03-1400:00:00
lists.opensuse.org
36
tomcat
security update
vulnerability
patch
opensuse leap

EPSS

0

Percentile

9.7%

An update that solves one vulnerability and has one errata
is now available.

Description:

This update for tomcat fixes the following issues:

Security issues fixed:

  • CVE-2022-23181: Make calculation of session storage location more robust
    (bsc#1195255)
  • Remove log4j (bsc#1196137)

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

  • openSUSE Leap 15.4:

    zypper in -t patch openSUSE-SLE-15.4-2022-818=1

  • openSUSE Leap 15.3:

    zypper in -t patch openSUSE-SLE-15.3-2022-818=1

OSVersionArchitecturePackageVersionFilename
openSUSE Leap15.4noarch< - openSUSE Leap 15.4 (noarch):- openSUSE Leap 15.4 (noarch):.noarch.rpm
openSUSE Leap15.3noarch< - openSUSE Leap 15.3 (noarch):- openSUSE Leap 15.3 (noarch):.noarch.rpm