Описание
ELSA-2025-23050: tomcat security update (IMPORTANT)
[1:10.1.36-3.1]
- Resolves: RHEL-124494 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)
- Resolves: RHEL-91729 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)
- Resolves: RHEL-132527 tomcat: Denial of service (CVE-2025-61795)
Обновленные пакеты
Oracle Linux 10
Oracle Linux aarch64
tomcat
10.1.36-3.el10_1.1
tomcat-admin-webapps
10.1.36-3.el10_1.1
tomcat-docs-webapp
10.1.36-3.el10_1.1
tomcat-el-5.0-api
10.1.36-3.el10_1.1
tomcat-jsp-3.1-api
10.1.36-3.el10_1.1
tomcat-lib
10.1.36-3.el10_1.1
tomcat-servlet-6.0-api
10.1.36-3.el10_1.1
tomcat-webapps
10.1.36-3.el10_1.1
Oracle Linux x86_64
tomcat
10.1.36-3.el10_1.1
tomcat-admin-webapps
10.1.36-3.el10_1.1
tomcat-docs-webapp
10.1.36-3.el10_1.1
tomcat-el-5.0-api
10.1.36-3.el10_1.1
tomcat-jsp-3.1-api
10.1.36-3.el10_1.1
tomcat-lib
10.1.36-3.el10_1.1
tomcat-servlet-6.0-api
10.1.36-3.el10_1.1
tomcat-webapps
10.1.36-3.el10_1.1
