gpp_maybe
Security update for tomcat
SUSE-SLE-Module-Web-Scripting-15-SP6-2025-3024
This update for tomcat fixes the following issues: Updated to 9.0.108: - CVE-2025-52520: Fixed integer overflow can lead to DoS for some unlikely configurations of multipart upload (bsc#1246388) - CVE-2025-53506: Fixed uncontrolled resource HTTP/2 client consumption vulnerability (bsc#1246318) - CVE-2025-52434: Fixed race condition on connection close when using the APR/Native connector leading to a JVM crash (bsc#1246389) - CVE-2025-48989: Fixed "MadeYouReset" DoS in HTTP/2 due to client triggered stream reset (bsc#1243895) Other: - Correct a regression in the fix for CVE-2025-49125 that prevented access to PreResources and PostResources when mounted below the web application root with a path that was terminated with a file separator.
-
Release DateAug 29 2025
-
ReferencesBugzilla: 1246389, 1246318, 1246388, 1243895
CVEs: CVE-2025-48989, CVE-2025-49125, CVE-2025-52434, CVE-2025-52520, CVE-2025-53506 -
Typesecurity
-
Severityimportant
cloud_download Downloads
Web and Scripting Module 15.6 s390x
-
Packagestomcat
Apache Servlet/JSP/EL Engine, RI for Servlet 4.0/JSP 2.3/EL 3.0 APItomcat-admin-webapps9.0.108-150200.91.1 lock rpm lock src
The host manager and manager web applications for Apache Tomcattomcat-el-3_0-api9.0.108-150200.91.1 lock rpm
Expression Language v3.0 APItomcat-jsp-2_3-api9.0.108-150200.91.1 lock rpm
Apache Tomcat JSP API implementation classestomcat-lib9.0.108-150200.91.1 lock rpm
Libraries needed to run the Tomcat Web containertomcat-servlet-4_0-api9.0.108-150200.91.1 lock rpm
Apache Tomcat Servlet API implementation classestomcat-webapps9.0.108-150200.91.1 lock rpm
ROOT and examples web applications for Apache Tomcat9.0.108-150200.91.1 lock rpm
Web and Scripting Module 15.6 aarch64
-
Packagestomcat
Apache Servlet/JSP/EL Engine, RI for Servlet 4.0/JSP 2.3/EL 3.0 APItomcat-admin-webapps9.0.108-150200.91.1 lock rpm lock src
The host manager and manager web applications for Apache Tomcattomcat-el-3_0-api9.0.108-150200.91.1 lock rpm
Expression Language v3.0 APItomcat-jsp-2_3-api9.0.108-150200.91.1 lock rpm
Apache Tomcat JSP API implementation classestomcat-lib9.0.108-150200.91.1 lock rpm
Libraries needed to run the Tomcat Web containertomcat-servlet-4_0-api9.0.108-150200.91.1 lock rpm
Apache Tomcat Servlet API implementation classestomcat-webapps9.0.108-150200.91.1 lock rpm
ROOT and examples web applications for Apache Tomcat9.0.108-150200.91.1 lock rpm
Web and Scripting Module 15.6 ppc64le
-
Packagestomcat
Apache Servlet/JSP/EL Engine, RI for Servlet 4.0/JSP 2.3/EL 3.0 APItomcat-admin-webapps9.0.108-150200.91.1 lock rpm lock src
The host manager and manager web applications for Apache Tomcattomcat-el-3_0-api9.0.108-150200.91.1 lock rpm
Expression Language v3.0 APItomcat-jsp-2_3-api9.0.108-150200.91.1 lock rpm
Apache Tomcat JSP API implementation classestomcat-lib9.0.108-150200.91.1 lock rpm
Libraries needed to run the Tomcat Web containertomcat-servlet-4_0-api9.0.108-150200.91.1 lock rpm
Apache Tomcat Servlet API implementation classestomcat-webapps9.0.108-150200.91.1 lock rpm
ROOT and examples web applications for Apache Tomcat9.0.108-150200.91.1 lock rpm
Web and Scripting Module 15.6 x86_64
-
Packagestomcat
Apache Servlet/JSP/EL Engine, RI for Servlet 4.0/JSP 2.3/EL 3.0 APItomcat-admin-webapps9.0.108-150200.91.1 lock rpm lock src
The host manager and manager web applications for Apache Tomcattomcat-el-3_0-api9.0.108-150200.91.1 lock rpm
Expression Language v3.0 APItomcat-jsp-2_3-api9.0.108-150200.91.1 lock rpm
Apache Tomcat JSP API implementation classestomcat-lib9.0.108-150200.91.1 lock rpm
Libraries needed to run the Tomcat Web containertomcat-servlet-4_0-api9.0.108-150200.91.1 lock rpm
Apache Tomcat Servlet API implementation classestomcat-webapps9.0.108-150200.91.1 lock rpm
ROOT and examples web applications for Apache Tomcat9.0.108-150200.91.1 lock rpm