import OL tomcat9-9.0.87-5.el10_0.3

.gitignore

@@ -1 +1 @@
-tomcat-9.0.87.redhat-00010-src.zip
+SOURCES/tomcat-9.0.87.redhat-00012-src.zip

.tomcat9.metadata

@@ -0,0 +1 @@
+8b767b774d19e223f1fa9f4bb07e0db94234978a SOURCES/tomcat-9.0.87.redhat-00012-src.zip

SPECS/tomcat9.spec

@@ -32,7 +32,7 @@
 %global major_version 9
 %global minor_version 0
 %global micro_version 87
-%global packdname tomcat-%{major_version}.%{minor_version}.%{micro_version}.redhat-00010-src
+%global packdname tomcat-%{major_version}.%{minor_version}.%{micro_version}.redhat-00012-src
 %global servletspec 4.0
 %global elspec 3.0
 %global tcuid 53
@@ -53,7 +53,7 @@
 Name:          tomcat9
 Epoch:         1
 Version:       %{major_version}.%{minor_version}.%{micro_version}
-Release:       5%{?dist}.1
+Release:       5%{?dist}.3
 Summary:       Apache Servlet/JSP Engine, RI for Servlet %{servletspec}/JSP %{jspspec} API
 
 License:       Apache-2.0
@@ -622,6 +622,22 @@ fi
 %{appdir}/ROOT
 
 %changelog
+* Thu Aug 21 2025 Craig Guiller <craig.guiller@oracle.com> - 1:9.0.87-5.3
+- Resolves:
+  tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989)
+- Resolves:
+  tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976)
+- Resolves:
+  tomcat: Dos in multipart upload (CVE-2025-48988)
+- Resolves:
+  tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125)
+- Resolves:
+  tomcat: Denial of service (CVE-2025-52434)
+- Resolves:
+  tomcat: Denial of service (CVE-2025-52520)
+- Resolves:
+  tomcat: Denial of service (CVE-2025-53506)
+
 * Wed Jul 16 2025 Pooja Senthil Kumar <pooja.senthil.kumar@oracle.com> - 1:9.0.87-5.1
 - Resolves: RHEL-91765
   tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650)

sources

@@ -1 +0,0 @@
-SHA512 (tomcat-9.0.87.redhat-00010-src.zip) = fd65e91c2fd11d48396692e0e88fbba8c2025ec35cbefb29b9b192c516af958ad357a1232e21abd262187d14add45b1441c34d3fa76ac40ba0866febbbfb341d