gpp_maybe Security update for tomcat

SUSE-SLE-Module-Web-Scripting-15-SP7-2025-2280

This update for tomcat fixes the following issues: - CVE-2025-46701: Fixed refactor CGI servlet to access resources via WebResources (bsc#1243815). - CVE-2025-48988: Fixed limits the total number of parts in a multi-part request and limits the size of the headers provided with each part (bsc#1244656). - CVE-2025-49125: Fixed expand checks for webAppMount (bsc#1244649). Other bugfixes: - Made permissions more secure (bsc#1242722)

• Release Date
  Jul 10 2025
• References
  Bugzilla: 1242722, 1243815, 1244656, 1244649
  CVEs: CVE-2025-46701, CVE-2025-48988, CVE-2025-49125
• Type
  security
• Severity
  important

cloud_download Downloads

Web and Scripting Module 15.7 ppc64le

• Packages
  tomcat
  Apache Servlet/JSP/EL Engine, RI for Servlet 4.0/JSP 2.3/EL 3.0 API

  9.0.106-150200.86.1 lock rpm lock src

  tomcat-admin-webapps
  The host manager and manager web applications for Apache Tomcat

  9.0.106-150200.86.1 lock rpm

  tomcat-el-3_0-api
  Expression Language v3.0 API

  9.0.106-150200.86.1 lock rpm

  tomcat-jsp-2_3-api
  Apache Tomcat JSP API implementation classes

  9.0.106-150200.86.1 lock rpm

  tomcat-lib
  Libraries needed to run the Tomcat Web container

  9.0.106-150200.86.1 lock rpm

  tomcat-servlet-4_0-api
  Apache Tomcat Servlet API implementation classes

  9.0.106-150200.86.1 lock rpm

  tomcat-webapps
  ROOT and examples web applications for Apache Tomcat

  9.0.106-150200.86.1 lock rpm

Web and Scripting Module 15.7 x86_64

• Packages
  tomcat
  Apache Servlet/JSP/EL Engine, RI for Servlet 4.0/JSP 2.3/EL 3.0 API

  9.0.106-150200.86.1 lock rpm lock src

  tomcat-admin-webapps
  The host manager and manager web applications for Apache Tomcat

  9.0.106-150200.86.1 lock rpm

  tomcat-el-3_0-api
  Expression Language v3.0 API

  9.0.106-150200.86.1 lock rpm

  tomcat-jsp-2_3-api
  Apache Tomcat JSP API implementation classes

  9.0.106-150200.86.1 lock rpm

  tomcat-lib
  Libraries needed to run the Tomcat Web container

  9.0.106-150200.86.1 lock rpm

  tomcat-servlet-4_0-api
  Apache Tomcat Servlet API implementation classes

  9.0.106-150200.86.1 lock rpm

  tomcat-webapps
  ROOT and examples web applications for Apache Tomcat

  9.0.106-150200.86.1 lock rpm

Web and Scripting Module 15.7 aarch64

• Packages
  tomcat
  Apache Servlet/JSP/EL Engine, RI for Servlet 4.0/JSP 2.3/EL 3.0 API

  9.0.106-150200.86.1 lock rpm lock src

  tomcat-admin-webapps
  The host manager and manager web applications for Apache Tomcat

  9.0.106-150200.86.1 lock rpm

  tomcat-el-3_0-api
  Expression Language v3.0 API

  9.0.106-150200.86.1 lock rpm

  tomcat-jsp-2_3-api
  Apache Tomcat JSP API implementation classes

  9.0.106-150200.86.1 lock rpm

  tomcat-lib
  Libraries needed to run the Tomcat Web container

  9.0.106-150200.86.1 lock rpm

  tomcat-servlet-4_0-api
  Apache Tomcat Servlet API implementation classes

  9.0.106-150200.86.1 lock rpm

  tomcat-webapps
  ROOT and examples web applications for Apache Tomcat

  9.0.106-150200.86.1 lock rpm

Web and Scripting Module 15.7 s390x

• Packages
  tomcat
  Apache Servlet/JSP/EL Engine, RI for Servlet 4.0/JSP 2.3/EL 3.0 API

  9.0.106-150200.86.1 lock rpm lock src

  tomcat-admin-webapps
  The host manager and manager web applications for Apache Tomcat

  9.0.106-150200.86.1 lock rpm

  tomcat-el-3_0-api
  Expression Language v3.0 API

  9.0.106-150200.86.1 lock rpm

  tomcat-jsp-2_3-api
  Apache Tomcat JSP API implementation classes

  9.0.106-150200.86.1 lock rpm

  tomcat-lib
  Libraries needed to run the Tomcat Web container

  9.0.106-150200.86.1 lock rpm

  tomcat-servlet-4_0-api
  Apache Tomcat Servlet API implementation classes

  9.0.106-150200.86.1 lock rpm

  tomcat-webapps
  ROOT and examples web applications for Apache Tomcat

  9.0.106-150200.86.1 lock rpm