SUSE-SU-2022:1304-1
Security update for tomcat
No scoreFix available
This update for tomcat fixes the following issues:
Security hardening, related to Spring Framework vulnerabilities:
- Deprecate getResources() and always return null (bsc#1198136).
What each source reports
OSVNo score
Security update for tomcat
This update for tomcat fixes the following issues:
Security hardening, related to Spring Framework vulnerabilities:
- Deprecate getResources() and always return null (bsc#1198136).
- Record
SUSE-SU-2022:1304-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
tomcatSUSE:Linux Enterprise Module for Web and Scripting 15 SP3 | before 9.0.36-150200.22.1 | 9.0.36-150200.22.1 |
tomcatSUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS | before 9.0.36-150200.22.1 | 9.0.36-150200.22.1 |
tomcatSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS | before 9.0.36-150200.22.1 | 9.0.36-150200.22.1 |
tomcatSUSE:Linux Enterprise Server 15 SP2-BCL | before 9.0.36-150200.22.1 | 9.0.36-150200.22.1 |
tomcatSUSE:Linux Enterprise Server 15 SP2-LTSS | before 9.0.36-150200.22.1 | 9.0.36-150200.22.1 |
tomcatSUSE:Linux Enterprise Server for SAP Applications 15 SP2 | before 9.0.36-150200.22.1 | 9.0.36-150200.22.1 |
tomcatSUSE:Manager Proxy 4.1 | before 9.0.36-150200.22.1 | 9.0.36-150200.22.1 |
tomcatSUSE:Manager Retail Branch Server 4.1 | before 9.0.36-150200.22.1 | 9.0.36-150200.22.1 |
tomcatSUSE:Manager Server 4.1 | before 9.0.36-150200.22.1 | 9.0.36-150200.22.1 |
tomcatSUSE:Enterprise Storage 7 | before 9.0.36-150200.22.1 | 9.0.36-150200.22.1 |
tomcatopenSUSE:Leap 15.3 | before 9.0.36-150200.22.1 | 9.0.36-150200.22.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
SUSE-SU-2022:1304-1 is a vulnerability with no CVSS score yet in tomcat, published April 22, 2022. No source lists public exploit code. Fixed in tomcat 9.0.36-150200.22.1.