gpp_maybe Security update for tomcat11

SUSE-SLE-Module-Web-Scripting-15-SP7-2025-4086

This update for tomcat11 fixes the following issues: Update to Tomcat 11.0.13 - CVE-2025-55752: Fixed directory traversal via rewrite with possible RCE if PUT is enabled (bsc#1252753) - CVE-2025-55754: Fixed improper neutralization of escape, meta, or control sequences vulnerability (bsc#1252905) - CVE-2025-61795: Fixed denial of service due to temporary copies during the processing of multipart upload (bsc#1252756)

• Release Date
  Nov 12 2025
• References
  Bugzilla: 1252753, 1252905, 1252756
  CVEs: CVE-2025-55752, CVE-2025-61795, CVE-2025-55754
• Type
  security
• Severity
  important

cloud_download Downloads

Web and Scripting Module 15.7 aarch64

• Packages
  tomcat11
  Apache Servlet/JSP/EL Engine, RI for Servlet 6.1/JSP 4.0/EL 6.0 API

  11.0.13-150600.13.12.1 lock rpm lock src

  tomcat11-admin-webapps
  The host manager and manager web applications for Apache Tomcat

  11.0.13-150600.13.12.1 lock rpm

  tomcat11-el-6_0-api
  Expression Language v6.0 API

  11.0.13-150600.13.12.1 lock rpm

  tomcat11-jsp-4_0-api
  Apache Tomcat JSP API implementation classes

  11.0.13-150600.13.12.1 lock rpm

  tomcat11-lib
  Libraries needed to run the Tomcat Web container

  11.0.13-150600.13.12.1 lock rpm

  tomcat11-servlet-6_1-api
  Apache Tomcat Servlet API implementation classes

  11.0.13-150600.13.12.1 lock rpm

  tomcat11-webapps
  ROOT and examples web applications for Apache Tomcat

  11.0.13-150600.13.12.1 lock rpm

Web and Scripting Module 15.7 ppc64le

• Packages
  tomcat11
  Apache Servlet/JSP/EL Engine, RI for Servlet 6.1/JSP 4.0/EL 6.0 API

  11.0.13-150600.13.12.1 lock rpm lock src

  tomcat11-admin-webapps
  The host manager and manager web applications for Apache Tomcat

  11.0.13-150600.13.12.1 lock rpm

  tomcat11-el-6_0-api
  Expression Language v6.0 API

  11.0.13-150600.13.12.1 lock rpm

  tomcat11-jsp-4_0-api
  Apache Tomcat JSP API implementation classes

  11.0.13-150600.13.12.1 lock rpm

  tomcat11-lib
  Libraries needed to run the Tomcat Web container

  11.0.13-150600.13.12.1 lock rpm

  tomcat11-servlet-6_1-api
  Apache Tomcat Servlet API implementation classes

  11.0.13-150600.13.12.1 lock rpm

  tomcat11-webapps
  ROOT and examples web applications for Apache Tomcat

  11.0.13-150600.13.12.1 lock rpm

Web and Scripting Module 15.7 s390x

• Packages
  tomcat11
  Apache Servlet/JSP/EL Engine, RI for Servlet 6.1/JSP 4.0/EL 6.0 API

  11.0.13-150600.13.12.1 lock rpm lock src

  tomcat11-admin-webapps
  The host manager and manager web applications for Apache Tomcat

  11.0.13-150600.13.12.1 lock rpm

  tomcat11-el-6_0-api
  Expression Language v6.0 API

  11.0.13-150600.13.12.1 lock rpm

  tomcat11-jsp-4_0-api
  Apache Tomcat JSP API implementation classes

  11.0.13-150600.13.12.1 lock rpm

  tomcat11-lib
  Libraries needed to run the Tomcat Web container

  11.0.13-150600.13.12.1 lock rpm

  tomcat11-servlet-6_1-api
  Apache Tomcat Servlet API implementation classes

  11.0.13-150600.13.12.1 lock rpm

  tomcat11-webapps
  ROOT and examples web applications for Apache Tomcat

  11.0.13-150600.13.12.1 lock rpm

Web and Scripting Module 15.7 x86_64

• Packages
  tomcat11
  Apache Servlet/JSP/EL Engine, RI for Servlet 6.1/JSP 4.0/EL 6.0 API

  11.0.13-150600.13.12.1 lock rpm lock src

  tomcat11-admin-webapps
  The host manager and manager web applications for Apache Tomcat

  11.0.13-150600.13.12.1 lock rpm

  tomcat11-el-6_0-api
  Expression Language v6.0 API

  11.0.13-150600.13.12.1 lock rpm

  tomcat11-jsp-4_0-api
  Apache Tomcat JSP API implementation classes

  11.0.13-150600.13.12.1 lock rpm

  tomcat11-lib
  Libraries needed to run the Tomcat Web container

  11.0.13-150600.13.12.1 lock rpm

  tomcat11-servlet-6_1-api
  Apache Tomcat Servlet API implementation classes

  11.0.13-150600.13.12.1 lock rpm

  tomcat11-webapps
  ROOT and examples web applications for Apache Tomcat

  11.0.13-150600.13.12.1 lock rpm