SUSE-SU-2023:3232-1
Security update for tomcat
No scoreFix available
This update for tomcat fixes the following issues:
- Remove the log4j dependency as it is not used by the tomcat package (bsc#1196137)
Security hardening, related to Spring Framework vulnerabilities:
- Deprecate getResources() and always return null (bsc#1198136).
What each source reports
OSVNo score
Security update for tomcat
This update for tomcat fixes the following issues:
- Remove the log4j dependency as it is not used by the tomcat package (bsc#1196137)
Security hardening, related to Spring Framework vulnerabilities:
- Deprecate getResources() and always return null (bsc#1198136).
- Record
SUSE-SU-2023:3232-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
javapackages-toolsSUSE:HPE Helion OpenStack 8 | before 5.3.1-14.7.3 | 5.3.1-14.7.3 |
javapackages-toolsSUSE:Linux Enterprise Server for SAP Applications 12 SP3 | before 5.3.1-14.7.3 | 5.3.1-14.7.3 |
tomcatSUSE:Linux Enterprise Server for SAP Applications 12 SP3 | before 8.0.53-29.54.1 | 8.0.53-29.54.1 |
javapackages-toolsSUSE:OpenStack Cloud 8 | before 5.3.1-14.7.3 | 5.3.1-14.7.3 |
javapackages-toolsSUSE:OpenStack Cloud 9 | before 5.3.1-14.7.3 | 5.3.1-14.7.3 |
javapackages-toolsSUSE:OpenStack Cloud Crowbar 8 | before 5.3.1-14.7.3 | 5.3.1-14.7.3 |
javapackages-toolsSUSE:OpenStack Cloud Crowbar 9 | before 5.3.1-14.7.3 | 5.3.1-14.7.3 |
javapackages-toolsSUSE:Linux Enterprise Server for SAP Applications 12 SP4 | before 5.3.1-14.7.3 | 5.3.1-14.7.3 |
javapackages-toolsSUSE:Linux Enterprise Software Development Kit 12 SP5 | before 5.3.1-14.7.3 | 5.3.1-14.7.3 |
javapackages-toolsSUSE:Linux Enterprise Server 12 SP2-BCL | before 5.3.1-14.7.3 | 5.3.1-14.7.3 |
Show 5 moreShow less
| Package | Affected | Fixed |
|---|---|---|
tomcatSUSE:Linux Enterprise Server 12 SP2-BCL | before 8.0.53-29.54.1 | 8.0.53-29.54.1 |
javapackages-toolsSUSE:Linux Enterprise Server 12 SP4-ESPOS | before 5.3.1-14.7.3 | 5.3.1-14.7.3 |
javapackages-toolsSUSE:Linux Enterprise Server 12 SP4-LTSS | before 5.3.1-14.7.3 | 5.3.1-14.7.3 |
javapackages-toolsSUSE:Linux Enterprise Server 12 SP5 | before 5.3.1-14.7.3 | 5.3.1-14.7.3 |
javapackages-toolsSUSE:Linux Enterprise Server for SAP Applications 12 SP5 | before 5.3.1-14.7.3 | 5.3.1-14.7.3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
SUSE-SU-2023:3232-1 is a vulnerability with no CVSS score yet in tomcat, published August 8, 2023. No source lists public exploit code. Fixed in javapackages-tools 5.3.1-14.7.3.