Index index by Group index by Distribution index by Vendor index by creation date index by Name Mirrors Help Search

tomcat-10.1.49-5.el10_2.alma.1 RPM for noarch

From AlmaLinux 10.2 AppStream for aarch64

Name: tomcat Distribution: AlmaLinux
Version: 10.1.49 Vendor: AlmaLinux
Release: 5.el10_2.alma.1 Build date: Fri Oct 30 15:48:38 2026
Group: Unspecified Build host: s390x-builder02.almalinux.org
Size: 333063 Source RPM: tomcat-10.1.49-5.el10_2.alma.1.src.rpm
Packager: AlmaLinux Packaging Team <packager@almalinux.org>
Url: http://tomcat.apache.org/
Summary: Apache Servlet/JSP Engine, RI for Servlet 6.0/JSP 3.1 API
 
Tomcat is the servlet container that is used in the official Reference
Implementation for the Java Servlet and JavaServer Pages technologies.
The Java Servlet and JavaServer Pages specifications are developed by
Sun under the Java Community Process.

Tomcat is developed in an open and participatory environment and
released under the Apache Software License version 2.0. Tomcat is intended
to be a collaboration of the best-of-breed developers from around the world.

Provides

Requires

License

Apache-2.0

Changelog

* Fri Oct 30 2026 Eduard Abdullin <eabdullin@almalinux.org> - 1:10.1.49-5.alma.1
  - Exclude i686 architecture from build
* Fri Oct 02 2026 Pietro Meloni <pmeloni@redhat.com> - 1:10.1.49-5
  - Resolves: RHEL-264918
    tomcat: Stalled TLS handshake when the server's first flight is too large
  - Resolves: RHEL-255786
    tomcat: Security constraint bypass due to improper access control (CVE-2026-65182)
  - Resolves: RHEL-271888
    tomcat: Authentication bypass via limited replay attack in DIGEST authenticator (CVE-2026-65905)
  - Resolves: RHEL-271766
    tomcat: Access control bypass due to off-by-one error in RewriteValve [N] flag processing (CVE-2026-65927)
  - Resolves: RHEL-271791
    tomcat: Unauthorized resource access via FORM authentication bypass (CVE-2026-68525)
  - Resolves: RHEL-271741
    tomcat: Improper Authentication due to principal lookup failure (CVE-2026-68569)
  - Resolves: RHEL-271720
    tomcat: Denial of Service via HTTP/2 allocation leak (CVE-2026-68763)
* Mon Jul 06 2026 Pietro Meloni <pmeloni@redhat.com> - 1:10.1.49-4
  - Resolves: RHEL-192817 tomcat: HTTP/2 request headers not validated (CVE-2026-41293)
  - Resolves: RHEL-192648 tomcat: Improper Input Validation vulnerability due to incomplete fix (CVE-2026-32990)
  - Resolves: RHEL-238208 tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication (CVE-2026-42498)
  - Resolves: RHEL-238224 tomcat: Improper Handling of Case Sensitivity in LockOutRealm (CVE-2026-43513)
  - Resolves: RHEL-238259 tomcat: Improper Authorization allows security bypass (CVE-2026-43515)
  - Resolves: RHEL-238284 tomcat: Authentication bypass via digest authentication (CVE-2026-43512)
* Mon Jul 06 2026 Pietro Meloni <pmeloni@redhat.com> - 1:10.1.49-3
  - Related: RHEL-168577 Remove unnecessary patch
* Thu Jun 04 2026 Pietro Meloni <pmeloni@redhat.com> - 1:10.1.49-2
  - Resolves: RHEL-168577 Remove tomcat clustering JAR from RPM builds
    Resolves: CVE-2026-29146
    tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor
    Resolves: CVE-2026-34486
    tomcat: Apache Tomcat: Missing Encryption of Sensitive Data due to EncryptInterceptor bypass
* Wed Apr 22 2026 Pietro Meloni <pmeloni@redhat.com> - 1:10.1.36-3.el10_1.1
  - Resolves: RHEL-150719
    Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734)
* Mon Feb 16 2026 Coty Sutherland <csutherl@redhat.com> - 1:10.1.49-1
  - Resolves: RHEL-150099 Rebase tomcat package to enable PQC features
* Fri Jan 23 2026 Pietro Meloni <pmeloni@redhat.com> - 1:10.1.36-4
  - Resolves: RHEL-124493
    tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)
  - Resolves: RHEL-132560
    tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)
  - Resolves: RHEL-132526
    tomcat: Denial of service (CVE-2025-61795)
* Mon Dec 15 2025 Eduard Abdullin <eabdullin@almalinux.org> - 1:10.1.36-4
  - Exclude i686 architecture from build
* Thu Aug 14 2025 Adam Krajcik <akrajcik@redhat.com> - 1:10.1.36-3
  - Resolves: RHEL-102184
    tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989)
  - Resolves: RHEL-108906
    tomcat: Denial of service (CVE-2025-52520)
* Wed Aug 13 2025 Adam Krajcik <akrajcik@redhat.com> - 1:10.1.36-2
  - Resolves: RHEL-108900
    tomcat: Apache  FileUpload DOS via part headers (CVE-2025-48976)
  - Resolves: RHEL-108902
    tomcat: Dos in multipart upload (CVE-2025-48988)
  - Resolves: RHEL-108904
    tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125)
  - Resolves: RHEL-108908
    tomcat: Denial of service (CVE-2025-53506)
* Mon Apr 14 2025 Adam Krajcik <akrajcik@redhat.com> - 1:10.1.36-1
  - Rebase tomcat to 10.1.36
  - Resolves: RHEL-82925
    tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813)
  - Resolves: RHEL-87272
    tomcat: DoS in examples web application (CVE-2024-54677)
  - Resolves: RHEL-87273
    tomcat: Authentication bypass when using Jakarta Authentication API (CVE-2024-52316)
  - Resolves: RHEL-85343 - NoClassDefFoundError when using migration tool
* Tue Feb 11 2025 Adam Krajcik <akrajcik@redhat.com> - 1:10.1.8-2
  - Resolves: RHEL-78899 Add missing Obsoletes
* Wed Feb 05 2025 Adam Krajcik <akrajcik@redhat.com> - 1:10.1.8-1
  - Resolves: RHEL-51222 Upgrade tomcat to 10.1.8

Files

/etc/logrotate.d/tomcat.disabled
/etc/sysconfig/tomcat
/etc/tomcat
/etc/tomcat/Catalina
/etc/tomcat/Catalina/localhost
/etc/tomcat/catalina.policy
/etc/tomcat/catalina.properties
/etc/tomcat/conf.d
/etc/tomcat/conf.d/README
/etc/tomcat/conf.d/module-start-up-parameters.conf
/etc/tomcat/context.xml
/etc/tomcat/jaspic-providers.xml
/etc/tomcat/jaspic-providers.xsd
/etc/tomcat/logging.properties
/etc/tomcat/server.xml
/etc/tomcat/tomcat-users.xml
/etc/tomcat/tomcat-users.xsd
/etc/tomcat/tomcat.conf
/etc/tomcat/web.xml
/usr/bin/tomcat-digest
/usr/bin/tomcat-tool-wrapper
/usr/lib/systemd/system/tomcat.service
/usr/lib/systemd/system/tomcat@.service
/usr/libexec/tomcat
/usr/libexec/tomcat/functions
/usr/libexec/tomcat/preamble
/usr/libexec/tomcat/server
/usr/sbin/tomcat
/usr/share/doc/tomcat
/usr/share/doc/tomcat/LICENSE
/usr/share/doc/tomcat/NOTICE
/usr/share/doc/tomcat/RELEASE-NOTES
/usr/share/tomcat
/usr/share/tomcat/bin/bootstrap.jar
/usr/share/tomcat/bin/catalina-tasks.xml
/usr/share/tomcat/conf
/usr/share/tomcat/lib
/usr/share/tomcat/logs
/usr/share/tomcat/temp
/usr/share/tomcat/webapps
/usr/share/tomcat/webapps-javaee
/usr/share/tomcat/work
/var/cache/tomcat
/var/cache/tomcat/temp
/var/cache/tomcat/work
/var/lib/tomcat
/var/lib/tomcat/webapps
/var/lib/tomcat/webapps-javaee
/var/lib/tomcats
/var/log/tomcat

Generated by rpm2html 1.8.1

Fabrice Bellet, Wed Nov 11 00:44:00 2026