SUSE-SU-2020:1788-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2020:1788-1

UNKNOWN

Security update for tomcat

Published Jun 26, 2020

Modified 5 years ago

Fix available

Details

This update for tomcat fixes the following issues:

CVE-2020-8022: Fixed a local root exploit due to improper permissions (bsc#1172405)

Affected Packages

tomcat

SUSE Linux Enterprise Server 12 SP4SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

9.0.35-3.39.1

tomcat-admin-webapps

SUSE Linux Enterprise Server 12 SP4SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

9.0.35-3.39.1

tomcat-docs-webapp

SUSE Linux Enterprise Server 12 SP4SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

9.0.35-3.39.1

tomcat-el-3_0-api

SUSE Linux Enterprise Server 12 SP4SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

9.0.35-3.39.1

tomcat-javadoc

SUSE Linux Enterprise Server 12 SP4SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

9.0.35-3.39.1

tomcat-jsp-2_3-api

SUSE Linux Enterprise Server 12 SP4SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

9.0.35-3.39.1

tomcat-lib

SUSE Linux Enterprise Server 12 SP4SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

9.0.35-3.39.1

tomcat-servlet-4_0-api

SUSE Linux Enterprise Server 12 SP4SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

9.0.35-3.39.1

tomcat-webapps

SUSE Linux Enterprise Server 12 SP4SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

9.0.35-3.39.1

References

https://bugzilla.suse.com/1172405

https://www.suse.com/security/cve/CVE-2020-8022

https://www.suse.com/support/update/announcement/2020/suse-su-20201788-1/

Upstream

Related

Ecosystems

SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5

Timeline

PublishedJun 26, 2020

ModifiedJun 26, 2020