SUSE-SU-2020:1788-1

HIGH7.0

Security update for tomcat

Published Jun 26, 2020

Modified 5 years ago

Fix available

Details

Description of the patch:

This update for tomcat fixes the following issues:

CVE-2020-8022: Fixed a local root exploit due to improper permissions (bsc#1172405)

Affected Packages

tomcat

SUSE Linux Enterprise Server 12 SP4SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

9.0.35-3.39.1

tomcat-admin-webapps

SUSE Linux Enterprise Server 12 SP4SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

9.0.35-3.39.1

tomcat-docs-webapp

SUSE Linux Enterprise Server 12 SP4SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

9.0.35-3.39.1

tomcat-el-3_0-api

SUSE Linux Enterprise Server 12 SP4SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

9.0.35-3.39.1

tomcat-javadoc

SUSE Linux Enterprise Server 12 SP4SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

9.0.35-3.39.1

tomcat-jsp-2_3-api

SUSE Linux Enterprise Server 12 SP4SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

9.0.35-3.39.1

tomcat-lib

SUSE Linux Enterprise Server 12 SP4SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

9.0.35-3.39.1

tomcat-servlet-4_0-api

SUSE Linux Enterprise Server 12 SP4SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

9.0.35-3.39.1

tomcat-webapps

SUSE Linux Enterprise Server 12 SP4SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

9.0.35-3.39.1

References

ADVISORY

https://bugzilla.suse.com/1172405

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2020-June/007046.html

ADVISORY

https://www.suse.com/security/cve/CVE-2020-8022/

WEB

https://www.suse.com/support/security/rating/

ADVISORY