| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: tomcat-jsp-3.1-api | Distribution: AlmaLinux |
| Version: 10.1.49 | Vendor: AlmaLinux |
| Release: 5.el10_2.alma.1 | Build date: Fri Oct 30 15:48:38 2026 |
| Group: Unspecified | Build host: s390x-builder02.almalinux.org |
| Size: 157018 | Source RPM: tomcat-10.1.49-5.el10_2.alma.1.src.rpm |
| Packager: AlmaLinux Packaging Team <packager@almalinux.org> | |
| Url: http://tomcat.apache.org/ | |
| Summary: Apache Tomcat JavaServer Pages v3.1 API Implementation Classes | |
Apache Tomcat JSP API Implementation Classes.
Apache-2.0
* Fri Oct 30 2026 Eduard Abdullin <eabdullin@almalinux.org> - 1:10.1.49-5.alma.1
- Exclude i686 architecture from build
* Fri Oct 02 2026 Pietro Meloni <pmeloni@redhat.com> - 1:10.1.49-5
- Resolves: RHEL-264918
tomcat: Stalled TLS handshake when the server's first flight is too large
- Resolves: RHEL-255786
tomcat: Security constraint bypass due to improper access control (CVE-2026-65182)
- Resolves: RHEL-271888
tomcat: Authentication bypass via limited replay attack in DIGEST authenticator (CVE-2026-65905)
- Resolves: RHEL-271766
tomcat: Access control bypass due to off-by-one error in RewriteValve [N] flag processing (CVE-2026-65927)
- Resolves: RHEL-271791
tomcat: Unauthorized resource access via FORM authentication bypass (CVE-2026-68525)
- Resolves: RHEL-271741
tomcat: Improper Authentication due to principal lookup failure (CVE-2026-68569)
- Resolves: RHEL-271720
tomcat: Denial of Service via HTTP/2 allocation leak (CVE-2026-68763)
* Mon Jul 06 2026 Pietro Meloni <pmeloni@redhat.com> - 1:10.1.49-4
- Resolves: RHEL-192817 tomcat: HTTP/2 request headers not validated (CVE-2026-41293)
- Resolves: RHEL-192648 tomcat: Improper Input Validation vulnerability due to incomplete fix (CVE-2026-32990)
- Resolves: RHEL-238208 tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication (CVE-2026-42498)
- Resolves: RHEL-238224 tomcat: Improper Handling of Case Sensitivity in LockOutRealm (CVE-2026-43513)
- Resolves: RHEL-238259 tomcat: Improper Authorization allows security bypass (CVE-2026-43515)
- Resolves: RHEL-238284 tomcat: Authentication bypass via digest authentication (CVE-2026-43512)
* Mon Jul 06 2026 Pietro Meloni <pmeloni@redhat.com> - 1:10.1.49-3
- Related: RHEL-168577 Remove unnecessary patch
* Thu Jun 04 2026 Pietro Meloni <pmeloni@redhat.com> - 1:10.1.49-2
- Resolves: RHEL-168577 Remove tomcat clustering JAR from RPM builds
Resolves: CVE-2026-29146
tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor
Resolves: CVE-2026-34486
tomcat: Apache Tomcat: Missing Encryption of Sensitive Data due to EncryptInterceptor bypass
* Wed Apr 22 2026 Pietro Meloni <pmeloni@redhat.com> - 1:10.1.36-3.el10_1.1
- Resolves: RHEL-150719
Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734)
* Mon Feb 16 2026 Coty Sutherland <csutherl@redhat.com> - 1:10.1.49-1
- Resolves: RHEL-150099 Rebase tomcat package to enable PQC features
* Fri Jan 23 2026 Pietro Meloni <pmeloni@redhat.com> - 1:10.1.36-4
- Resolves: RHEL-124493
tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)
- Resolves: RHEL-132560
tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)
- Resolves: RHEL-132526
tomcat: Denial of service (CVE-2025-61795)
* Mon Dec 15 2025 Eduard Abdullin <eabdullin@almalinux.org> - 1:10.1.36-4
- Exclude i686 architecture from build
* Thu Aug 14 2025 Adam Krajcik <akrajcik@redhat.com> - 1:10.1.36-3
- Resolves: RHEL-102184
tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989)
- Resolves: RHEL-108906
tomcat: Denial of service (CVE-2025-52520)
* Wed Aug 13 2025 Adam Krajcik <akrajcik@redhat.com> - 1:10.1.36-2
- Resolves: RHEL-108900
tomcat: Apache FileUpload DOS via part headers (CVE-2025-48976)
- Resolves: RHEL-108902
tomcat: Dos in multipart upload (CVE-2025-48988)
- Resolves: RHEL-108904
tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125)
- Resolves: RHEL-108908
tomcat: Denial of service (CVE-2025-53506)
* Mon Apr 14 2025 Adam Krajcik <akrajcik@redhat.com> - 1:10.1.36-1
- Rebase tomcat to 10.1.36
- Resolves: RHEL-82925
tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813)
- Resolves: RHEL-87272
tomcat: DoS in examples web application (CVE-2024-54677)
- Resolves: RHEL-87273
tomcat: Authentication bypass when using Jakarta Authentication API (CVE-2024-52316)
- Resolves: RHEL-85343 - NoClassDefFoundError when using migration tool
* Tue Feb 11 2025 Adam Krajcik <akrajcik@redhat.com> - 1:10.1.8-2
- Resolves: RHEL-78899 Add missing Obsoletes
* Wed Feb 05 2025 Adam Krajcik <akrajcik@redhat.com> - 1:10.1.8-1
- Resolves: RHEL-51222 Upgrade tomcat to 10.1.8
/usr/share/java/tomcat /usr/share/java/tomcat-jsp-3.1-api.jar /usr/share/java/tomcat-jsp-api.jar /usr/share/java/tomcat/tomcat-jsp-3.1-api.jar /usr/share/java/tomcat/tomcat-jsp-api.jar /usr/share/maven-metadata/tomcat-tomcat-jsp-api.xml /usr/share/maven-poms/tomcat /usr/share/maven-poms/tomcat/tomcat-jsp-api.pom
Generated by rpm2html 1.8.1
Fabrice Bellet, Wed Nov 11 00:40:34 2026