gpp_maybe Security update for tomcat11

SUSE-SLE-Module-Web-Scripting-15-SP6-2025-2979

This update for tomcat11 fixes the following issues: Updated to Tomcat 11.0.9 - CVE-2025-52520: Fixed integer overflow can lead to DoS for some unlikely configurations of multipart upload (bsc#1246388) - CVE-2025-53506: Fixed uncontrolled resource HTTP/2 client consumption vulnerability (bsc#1246318) Other: - Correct a regression in the fix for CVE-2025-49125 that prevented access to PreResources and PostResources when mounted below the web application root with a path that was terminated with a file separator.

• Release Date
  Aug 25 2025
• References
  Bugzilla: 1246388, 1246318
  CVEs: CVE-2025-52520, CVE-2025-53506, CVE-2025-49125
• Type
  security
• Severity
  important

cloud_download Downloads

Web and Scripting Module 15.6 x86_64

• Packages
  tomcat11
  Apache Servlet/JSP/EL Engine, RI for Servlet 6.1/JSP 4.0/EL 6.0 API

  11.0.9-150600.13.6.1 lock rpm lock src

  tomcat11-admin-webapps
  The host manager and manager web applications for Apache Tomcat

  11.0.9-150600.13.6.1 lock rpm

  tomcat11-el-6_0-api
  Expression Language v6.0 API

  11.0.9-150600.13.6.1 lock rpm

  tomcat11-jsp-4_0-api
  Apache Tomcat JSP API implementation classes

  11.0.9-150600.13.6.1 lock rpm

  tomcat11-lib
  Libraries needed to run the Tomcat Web container

  11.0.9-150600.13.6.1 lock rpm

  tomcat11-servlet-6_1-api
  Apache Tomcat Servlet API implementation classes

  11.0.9-150600.13.6.1 lock rpm

  tomcat11-webapps
  ROOT and examples web applications for Apache Tomcat

  11.0.9-150600.13.6.1 lock rpm

Web and Scripting Module 15.6 aarch64

• Packages
  tomcat11
  Apache Servlet/JSP/EL Engine, RI for Servlet 6.1/JSP 4.0/EL 6.0 API

  11.0.9-150600.13.6.1 lock rpm lock src

  tomcat11-admin-webapps
  The host manager and manager web applications for Apache Tomcat

  11.0.9-150600.13.6.1 lock rpm

  tomcat11-el-6_0-api
  Expression Language v6.0 API

  11.0.9-150600.13.6.1 lock rpm

  tomcat11-jsp-4_0-api
  Apache Tomcat JSP API implementation classes

  11.0.9-150600.13.6.1 lock rpm

  tomcat11-lib
  Libraries needed to run the Tomcat Web container

  11.0.9-150600.13.6.1 lock rpm

  tomcat11-servlet-6_1-api
  Apache Tomcat Servlet API implementation classes

  11.0.9-150600.13.6.1 lock rpm

  tomcat11-webapps
  ROOT and examples web applications for Apache Tomcat

  11.0.9-150600.13.6.1 lock rpm

Web and Scripting Module 15.6 ppc64le

• Packages
  tomcat11
  Apache Servlet/JSP/EL Engine, RI for Servlet 6.1/JSP 4.0/EL 6.0 API

  11.0.9-150600.13.6.1 lock rpm lock src

  tomcat11-admin-webapps
  The host manager and manager web applications for Apache Tomcat

  11.0.9-150600.13.6.1 lock rpm

  tomcat11-el-6_0-api
  Expression Language v6.0 API

  11.0.9-150600.13.6.1 lock rpm

  tomcat11-jsp-4_0-api
  Apache Tomcat JSP API implementation classes

  11.0.9-150600.13.6.1 lock rpm

  tomcat11-lib
  Libraries needed to run the Tomcat Web container

  11.0.9-150600.13.6.1 lock rpm

  tomcat11-servlet-6_1-api
  Apache Tomcat Servlet API implementation classes

  11.0.9-150600.13.6.1 lock rpm

  tomcat11-webapps
  ROOT and examples web applications for Apache Tomcat

  11.0.9-150600.13.6.1 lock rpm

Web and Scripting Module 15.6 s390x

• Packages
  tomcat11
  Apache Servlet/JSP/EL Engine, RI for Servlet 6.1/JSP 4.0/EL 6.0 API

  11.0.9-150600.13.6.1 lock rpm lock src

  tomcat11-admin-webapps
  The host manager and manager web applications for Apache Tomcat

  11.0.9-150600.13.6.1 lock rpm

  tomcat11-el-6_0-api
  Expression Language v6.0 API

  11.0.9-150600.13.6.1 lock rpm

  tomcat11-jsp-4_0-api
  Apache Tomcat JSP API implementation classes

  11.0.9-150600.13.6.1 lock rpm

  tomcat11-lib
  Libraries needed to run the Tomcat Web container

  11.0.9-150600.13.6.1 lock rpm

  tomcat11-servlet-6_1-api
  Apache Tomcat Servlet API implementation classes

  11.0.9-150600.13.6.1 lock rpm

  tomcat11-webapps
  ROOT and examples web applications for Apache Tomcat

  11.0.9-150600.13.6.1 lock rpm