rpms/tomcat
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Fix CVE-2025-48989 and CVE-2025-52520

Browse Source 
Resolves: RHEL-102184 - tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames
Resolves: RHEL-108906 - tomcat: Denial of service
This commit is contained in:
Adam Krajcik 2025-08-14 14:22:32 +02:00
parent 20cf6bbd1b
commit 4c6f5230c7
2 changed files with 9 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
sources
View File

@ -1 +1 @@
SHA512 (tomcat-10.1.36.redhat-00008-src.zip) = cdfcacf770c4c2f265b33fb88299ea98994fc79d1eb0eb20c7b2b166937179c8690bb4706208311e57c15e08b96809b97b6ca5d99b2182741b106edb46e81bec
SHA512 (tomcat-10.1.36.redhat-00009-src.zip) = d1a9f6ef73d5ce3df746decd6033bbdc7e81a0a37e01c530e8658cb9dbf8742ca1ddb7916534a0e07572b514f8bfe557314aae61aa577c09a356ac399d653974

10
tomcat.spec
View File

@ -32,7 +32,7 @@
%global major_version 10
%global minor_version 1
%global micro_version 36
%global packdname %{name}-%{major_version}.%{minor_version}.%{micro_version}.redhat-00008-src
%global packdname %{name}-%{major_version}.%{minor_version}.%{micro_version}.redhat-00009-src
%global servletspec 6.0
%global elspec 5.0
%global tcuid 53
@ -54,7 +54,7 @@
Name: tomcat
Epoch: 1
Version: %{major_version}.%{minor_version}.%{micro_version}
Release: 2%{?dist}
Release: 3%{?dist}
Summary: Apache Servlet/JSP Engine, RI for Servlet %{servletspec}/JSP %{jspspec} API
License: Apache-2.0
@ -543,6 +543,12 @@ exit 0
%{appdir}/ROOT
%changelog
* Thu Aug 14 2025 Adam Krajcik <akrajcik@redhat.com> - 1:10.1.36-3
- Resolves: RHEL-102184
tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989)
- Resolves: RHEL-108906
tomcat: Denial of service (CVE-2025-52520)
* Wed Aug 13 2025 Adam Krajcik <akrajcik@redhat.com> - 1:10.1.36-2
- Resolves: RHEL-108900
tomcat: Apache FileUpload DOS via part headers (CVE-2025-48976)