Early Access — Mondoo Vulnerability Intelligence is currently in preview.

SUSE-SU-2024:3510-1

UNKNOWN

Security update for tomcat

Published Oct 2, 2024

Modified 1 years ago

Fix available

Details

This update for tomcat fixes the following issues:

CVE-2024-38286: OutOfMemory exception triggered through abuse of the TLS handshake process. (bsc#1230986)

Affected Packages

SUSE:Linux Enterprise Server 12 SP5tomcat

Fixed in:

9.0.36-3.130.1

SUSE:Linux Enterprise Server 12 SP5tomcat-admin-webapps

Fixed in:

9.0.36-3.130.1

SUSE:Linux Enterprise Server 12 SP5tomcat-docs-webapp

Fixed in:

9.0.36-3.130.1

SUSE:Linux Enterprise Server 12 SP5tomcat-el-3_0-api

Fixed in:

9.0.36-3.130.1

SUSE:Linux Enterprise Server 12 SP5tomcat-javadoc

Fixed in:

9.0.36-3.130.1

SUSE:Linux Enterprise Server 12 SP5tomcat-jsp-2_3-api

Fixed in:

9.0.36-3.130.1

SUSE:Linux Enterprise Server 12 SP5tomcat-lib

Fixed in:

9.0.36-3.130.1

SUSE:Linux Enterprise Server 12 SP5tomcat-servlet-4_0-api

Fixed in:

9.0.36-3.130.1

SUSE:Linux Enterprise Server 12 SP5tomcat-webapps

Fixed in:

9.0.36-3.130.1

SUSE:Linux Enterprise Server for SAP Applications 12 SP5tomcat

Fixed in:

9.0.36-3.130.1

SUSE:Linux Enterprise Server for SAP Applications 12 SP5tomcat-admin-webapps

Fixed in:

9.0.36-3.130.1

SUSE:Linux Enterprise Server for SAP Applications 12 SP5tomcat-docs-webapp

Fixed in:

9.0.36-3.130.1

SUSE:Linux Enterprise Server for SAP Applications 12 SP5tomcat-el-3_0-api

Fixed in:

9.0.36-3.130.1

SUSE:Linux Enterprise Server for SAP Applications 12 SP5tomcat-javadoc

Fixed in:

9.0.36-3.130.1

SUSE:Linux Enterprise Server for SAP Applications 12 SP5tomcat-jsp-2_3-api

Fixed in:

9.0.36-3.130.1

SUSE:Linux Enterprise Server for SAP Applications 12 SP5tomcat-lib

Fixed in:

9.0.36-3.130.1

SUSE:Linux Enterprise Server for SAP Applications 12 SP5tomcat-servlet-4_0-api

Fixed in:

9.0.36-3.130.1

SUSE:Linux Enterprise Server for SAP Applications 12 SP5tomcat-webapps

Fixed in:

9.0.36-3.130.1

Timeline

PublishedOct 2, 2024

ModifiedOct 2, 2024

SUSE-SU-2024:3510-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2024:3510-1

Details

Affected Packages

References

Upstream

Related

Ecosystems

Timeline