This update for tomcat fixes the following issues:
CVE-2021-25122: Apache Tomcat h2c request mix-up (bsc#1182912) CVE-2021-25329: Complete fix for CVE-2020-9484 (bsc#1182909)
This update was imported from the SUSE:SLE-15-SP2:Update update project.
{ "binaries": [ { "tomcat-lib": "9.0.36-lp152.2.22.1", "tomcat-jsvc": "9.0.36-lp152.2.22.1", "tomcat-webapps": "9.0.36-lp152.2.22.1", "tomcat-embed": "9.0.36-lp152.2.22.1", "tomcat-docs-webapp": "9.0.36-lp152.2.22.1", "tomcat-servlet-4_0-api": "9.0.36-lp152.2.22.1", "tomcat": "9.0.36-lp152.2.22.1", "tomcat-el-3_0-api": "9.0.36-lp152.2.22.1", "tomcat-admin-webapps": "9.0.36-lp152.2.22.1", "tomcat-javadoc": "9.0.36-lp152.2.22.1", "tomcat-jsp-2_3-api": "9.0.36-lp152.2.22.1" } ] }