p PatchFirst

SUSE-SU-2025:0394-1

SUSE-SU-2025:0394-1 · Security update for tomcat

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for tomcat fixes the following issues: - CVE-2024-50379: Fixed remote code execution (RCE) due to TOCTOU issue in JSP compilation (bsc#1234663). - CVE-2024-54677: Fixed denial-of-service (DoS) attack in examples web application (bsc#1234664).

Fix available

Published
Updated

Stack: system

Affected products and versions

  • tomcat SUSE:Linux Enterprise Server 12 SP5-LTSS

    Affected ranges
    • ECOSYSTEM: < 9.0.36-3.136.1

    Update to 9.0.36-3.136.1

  • tomcat SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5

    Affected ranges
    • ECOSYSTEM: < 9.0.36-3.136.1

    Update to 9.0.36-3.136.1

Original sources

Check your server →