tomcat11-docs-webapp-11.0.10-150600.13.9.1 < > , hp9|# _d2ʧ抪
Vgf99;تsC4E/\l靊%+JP/2 %jns5N@>`3mf0Ä+&A|
s&kQhY*djpD(:Zޣ ^U9β*Z[(Sn"aL =(VN)S~sF1?7Y7o3Q&7O֥bE\qH
p > @ x ? h d - Z ' A G N <
4R
5 7 ; ?8 ?` BH B B CM C C C ( C 8 C 9 C : D > l F l G l H o I rt X s0 Y s8 \ sX ] v@ ^ p b c d
e f l u , v z " d C tomcat11-docs-webapp 11.0.10 150600.13.9.1 The "docs" web application for Apache Tomcat The documentation of web application for Apache Tomcat. hh01-ch2d >dSUSE Linux Enterprise 15 SUSE LLC Apache-2.0 https://www.suse.com/ Productivity/Networking/Web/Servers https://tomcat.apache.org linux noarch chown -R tomcat:tomcat /usr/share/tomcat/tomcat-webapps/docs/META-INF
runuser -u tomcat -g tomcat -- xsltproc --output /usr/share/tomcat/tomcat-webapps/docs/META-INF/context.xml /etc/tomcat/allowLinking.xslt /usr/share/tomcat/tomcat-webapps/docs/META-INF/context.xml
if [ ! -e /usr/share/tomcat/webapps/docs ]; then
ln -sf /usr/share/tomcat/tomcat-webapps/docs /usr/share/tomcat/webapps/docs
fi ^ F > D s @l 5 % 8L @l H O > C P \ $ G _ 1
| O }
q 7d I
^ ^ 2 , C I ׁ RL ' ! f W^ SD 39 7B 7` :j RI $J 0 8 ( j = @ +s # /0 "
~ T 0 $ = = Z VJ KT P z 3 7 /L m
P R ` Y U Rd XL S X R s + 8 =s j ~ 4 { ^ ' + * ܹ 0 E M T \ BO T r D P ' . QL dA큤A큤AA큤A큤A큤A큤A큤A큤AA큤AA큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤 hhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhh 253e67e4b27ddb1cdc62c0651053770bb3678c224d5924ba7410931bf6b3d413 892a73d529e15027dbc81682cc3e6d1ebc47489b986cf92ec40c65467a14ab3a 7ecadfcce654ed1632873fc0e8d8aa3e8aacf5e5a8dc74ce0256162f843a7efd 32455c8406772ef75622bbae2b79873846c00c0896dad89ab45040056c8b7899 18ae0f6852f87a9f6a9720b19ed633a67d38caf7dfaea2fcd0ff2f1c7efc7576 b492e7654470266176eaf4cbe44c8a2987ead361e5f7972071569d875d76bbc0 67ee9f3cbc91130e2042f21d0bf4418fc8a20bd5f5d1d3684e1ba62ae179a573 baf57c399fde98300d7692fea50e6c3f0b9716cd091ea4757b7e0b64089510dd 7a9b42ed15e1b611a173d5844c7ccd18fb63362acfe41862e7652f814d19170b ff7fdb1c70875875216ee3a18630a52140eab628d9cce7bcd7f69f56b5e4d094 6d270b0d332f5dc7eeaab083d475e491794d3f2f3a8fe5208f109b35603a8be5 e3d358222ee462b3d7533dea6173a5188a9fee2b50a3f1821661d6cf6b3704f0 afc37cd76b866b6943a3e291ed98bfcba12b741781e51649d38289a86dc9ec3d 2c889442706574005bbdf9137fe8c65fc43404338f8ce17e0612ccd6e6653c86 623c30582a3f4cd061e841ebebb5477f627c9bbf8313eb7030053535e0ddb2da ff7fdb1c70875875216ee3a18630a52140eab628d9cce7bcd7f69f56b5e4d094 77f84b68ac01984d8566203b324eae905f1883f5dcffd6d8c7a6342a76547458 d4825ba7885174a0632cf2a30c124a3900cea0f044a3e1b42550658cefee7ce4 437cbd99c13c20b5710dfcea000d38bbd3a5cae2301a2a61a12d9a9d38bd72ac 69560c9c39571f258620c284232d7f938367966daabe7221f1538f20a4937a0e 7b8134b028f5b8c206e18075b05790d27cc29c431bb9575033b37319751036f8 dc5d18af5aebf5ad183db10b5d17d0caabb65a1b5371af6d4c2e1160c16649d6 d9fdacbd36cf39f746e789faee0d09e629b6051395bae804fc88d309fdc8d50d e11fedd02f942412220bce236257da04a632837c67f1200a3e066d59f1f6bd87 7edd546f075d87ab796964227362423d74d177edd7761ee27d6c55e4ed247d0f c8e3250b4070b0e4eea992f5e7b91d181f1cf4c0eab167a1d855a579bd16f8f8 99749fa0305d6ed10eda12dc23dded7c01d3489b4495beef149fd8f083fbeba0 54962854be486429de1a1c53ff8dd574b5bb4c052d03eaf26eb17d391c23c67c b0edf3dc27d20118926a5a1fcb9e04817169195780851a0762516960b5d1dd46 ec007a843223aa63a2483e40091ae507318da426b5a30e5111150c816f3decb9 3f385dbbc96805470d94119ebbea7e8211561210cb552dee9911325a24ac5654 def4bfd6e7e24278bebe53f9e8978cd355cb37ca690af954bcd62b1a916efe83 3d3bc07b6a5da6388b53cec382bcc4b835db6c96b3b125e507b250a0c8b631d0 2c910f874154b2e77a62f53aab58d4426e034d9a77916f2a22d5dde493d8c46a cf7d01218753f067f6756fd434befccbae666efd65e5d758c215e72d57767393 d6cda73e3ec9ac742e82509e56a48a93f5c2d49fcce6c7f4d02e5ee92f5a3afc 907d48c381e0c5094487ebb0a19518779e053eff43e769d1740b7ad41100e097 b61de1623b0c7f756846e57a0961df18515cffba0b097a6ef2e684eae4f918c2 a8b2caf28b6c341e358d185baf3c962bcde101524b1d88e06812b1b1d796ff99 f1baacc0d7c4295b44b3a61d418b7a53f588a02523c41d3c001568172bbab186 e76038dbfa316896f98e786a42c4cd13b6b9e999f5269750725566fc08bc4ced 04eb276fc6d892504d24158dabc05deaf3c00fcea20d6146894b00f48fe48def 1cb500c4581c5e8288d4226e9eebbc9969f8dd5949724b069a4288e5fb381e67 9580734c9326fe2b4f882def757a464560b1c1c6f6917c10bc1c78171acee0a0 aad8d01e257417a129b06b7cdd700d5a57b67fae96b4acc61a3b4a720b4683e3 49247aa32331ebf65688e7a5ee48a069f9a6fbb7c214c1eb2cb773048cb98b6c b2f74cf3df1073d291a19b45a6884e92ffc52b4acb04d553a37a995e2de37f98 c8821a1f767b0a6f7295c75f716c7f2a6b9992455195d556b83f93816805d49b b98386d928d47a84751ba90af3eacb9e8950f10404584db56bb5c137e27f85b5 97d04670dca1875d30c89c999c1fd1886065d9ab91ca16acdf6cd8c27a6ae966 40e0488663e1bc0d1bdbbbad6ea94e834e29570e9c2326b8b5c50c6fc5f71bb8 3b58b60b3603d11aa4a8f3e7cf75213a6f67275e0c3dbb37233eb9eb06efe98e b35d050314fd2cd6ccfdda598975bebb16c4027e84cd4ce98d8428ded3ac7800 3326827502f1472bba403c91203e3545fd3c03015419b981c80f7dd247f2660f 49ae1e39c8fe85cd3f1fddd11f48d7057fd389ce6e4e16610f1078758a3a5c7a 5443cc4245232edd940a940406328040124d58ecb09d838a0c1fa91c71eb9707 556db52067b431b4f14e16fa3c528fdfa94879c4ac488e805a24f7065230db10 e042a3de612f3f145c88ee3f2a24b041a4f23815c840ee54c3ccfd2c44528d60 d61e181581d633abcca94e9d72a4430184d6b61565ef5fd85c0e6850d8a3171c 4049ca31ef22be07159a814aa3f685f178aefa86564268dde98546c5b7b6edfc 32159c6779c183bd90439f2facb5aa4bec8129d44a69fd7db248a9025f9f44be 009c6f853b3dfa30cc8e17f106752ff08935ac44ccd0d677c29e3c13f0fba6f1 19f5c294b88fbdc8123f0977526742b1637d00f06697243611e09495d0b529e4 514d509d5c7852913e1fd53dc357f5e08cf3dfa54ab45c398e7a7805ecc40a0a 0216b4045b2bea181493710b9a35aed5d060e69a5e6b0c4ebca97ee6390edb2f 032564e72893b596d4b1d4686f7ccb083b1426833daff774864ec4456f52abdb 8d84dae65b606a1285395ad1e7c0cf142dc054a68a902ae554cc18d35d18ab4d 01448d0a27f56b983c75b182ed30704ca13309a469a228220e753696c508d946 22ff30f759a7fca22bc9bf12ad9b3f7ee5edde7cdc0483cb3733d38f5f1879a1 ab1d3487ffba0f3e7e8113b858a06600bb320a42017f2373e5d91cdefd291249 65b046864047a4e98d8846b22a3aba26b7b771ca0e5858514c47510b437bccf0 53c35db0646d4c1a01dd3c1e9631f93af84facc367c5dd4604127ead66a82ad6 6d71108b4e1348e4432174ccfcf53a002beb37cf0153e7ff156c9d829880305a 31f0e375fc4b599793eba038e4b21b46804ad4fcc28e58e0c21283b5872a9f55 d3fe2f3ba53de5b38e144db835bc50cc4fb6017f5e574975eb3d4ee26658605b a7368bc17adb78e9412ffa21a0815ed8fc6ac8d38198b15508f02d3c2dc7a63f 5c4700a174466a452c1da02cce1f1a7323810b401c3bfaef42c6e7120ea16919 2bc64f53f8763ff917b7ce0dc6568dc80bf97122cc58418b88e2f52178d3e4ac f585a9daedef67f76ade39e00048b8eb77dfc8df2bd826de923e0cd4632a61a9 95d026b61cbac11957238619c7efacb7df65e31af738193ea7273313a3c65034 26f277ff0bca78a0632cff2656d4add9ea06ac25616d1a0b2b604d0079b91acf 80bb804ce3ee66e16086362183efa732bdfe57048f1d46bc37dfb424a51a1e77 d8ad54b44306b84700143d313fab333968cbd551fb890adbe80064277c8e64d8 fc3eafbfa9b7d2b66de56f4d3a5bbf2fe60a186359044b9dee185c2bcd7e1b4e c26ac490b47ce13368e4dd9244a855145b6d4a4235355e01dd226c5606a56d36 b516f14fd37a26773a4559daab1c1845c478c199a3490dd07f874471548aa570 057e7206cff25661b5f8549091cba6f0e2b1665b77f81676a910897232754a1c 44fb7d6c7d62bdc2c16361dc5cbf9410a5afb7ec3bc103fd84aee915fda73dfd a39d05d29bc91842307712c1abe4f9176f268d91ef9e91ce4f923883c7b1a7ef b4c54957e65e188d6b01db315aa66ce65f2f5c0033be483efa93377ae2b3aa84 775f78256fb8cfeeb22128b2994dd148e310a014b1612bc1bbae2081962aef24 a3b55d777b71fd9405db353454e4fb8ef6ea16c1db65688cb71cb8a6578bfe53 6a772406f5bbbc9967c2e5c90926b7f5f7d6de6a107f88168ba95f13d6c2e6ee e3e961bede510c27d39bbbfe070e8acdab042d79159b1fb2c4cbff956c0f11fb 4346891449b10def329ed98880a9e53551ee7a2af54c50e9b8bac022874fa25e 5f6b41afe3e88924472c250e8d55e54a009ba4773f9bf8f389ed606f84f2ac26 bf6e27e701646bbb57a1b1b35e2c82b633cc0c47875415403687e31a434862e5 1c3318437373df3ca7bcfed8a674e5b7724accc0c214e6faec16cfb722137655 45d8e30e6b172010c4a5dabab1c12dcd039e4731467a34e069715b539e5ee59d efa8d114acd67ae00a1c793582b111ace07ba06bcd78f86fccbd32f5d0315c63 005e3de14e18d9626a618c87fae52919ec434f856a7b3fd4887ba612b2d98019 0887cfb3f4461b441b584c8fc83769f6d28251e64dd397f819265acd98aef0d3 0916587a99099aa17a7a04d63e3a11d90591bdfb1534e1e5653d4e56506a0af8 327216ab12b6495f6c059c2de3d08e8e5092b41a49f604a426953e43555be347 7ea11c6f570037c543e15797dbb3457dde4775f4d159f994334128a51cb6a14f 7287f6b9466d7316c38d01bb7bea0d8f5bcb295a5afe19a089da97f341c17c99 d52112c36fa422d381aec5ffb57c31912b60ca0e47b56634beaae1a4eb8c826f 1329a1d49820814f018ba95a5b2ae5c8e349d57c6663aa87559d4b6c86b1b6a0 cac0dba2ac0d6abdb2d037f07499a84df7f9a949e5e76a4d89dd3913b96e3ec6 91568f1581537f57b4e62863524bd1511017e7f252f23ac6c125160c39b14a2a 0410d16b47d3901eee99d0090e19fdb28ab78e3fff49f571c5ece6cca5eaa4ca 9bff421ce09b2021f4e4bc64a8264732de30b162cb05943d9b2e92bf27138de0 83e056ba73609403a3ef0ac82395a4fccae251ecef1878c569a3a5ee2f4e94f2 b56e19054224482be0aa7b444ab8324ed0b0c25e3abacbd87be29732356c9bb8 90556675373ea9ed1d0e9b5678426d69296b6801c906ca378bb426aa3d6acdc3 ba392abf7aa1d006749331fa8e97ac2202596a819dd382b46d051a28dca74875 a851d97fcc71c78ca279754fabc2289a600aabecec4d9e4387cab9c7400aa2d0 868a21c493df0e5da1622b319e915303b1aa2b72f3cb836057eed5699f522693 cd0e6f9fbe497b6a0346fde3934cbcbd7c557a334c27bb34e69c7ed430ed4a45 88c27f2a933b428f5a13403157e395a9d869d176c8dd256a5f28a042e4f863b4 2117f27a13e776a0e6ee6d54739b08b35741f43f5776bf51a193810b51d60285 dc5d18af5aebf5ad183db10b5d17d0caabb65a1b5371af6d4c2e1160c16649d6 5d4dbfc82ee715a653291fb987dd565b6fc567ffee828d9e4c5f181c75eca0be 63b93e248018e9520b508c50c9f61fb190bb7ed7c057598111baf79d07c3ad14 afe0dcfca292a0fae8bce08a48c14d3e59c9d82c6052ab6d48a22ecc6c48f277 8cc3ec71fbb83cd8dc30098cdac9d920f9118a1e4ce16e00a787653ff3d5ab98 f1838b3a75bb47ada9d0df5aae4eedf88ed574ffac06e457f4e6837a535c0a17 a54caeb2c36ef351b2408c6ff10163b1cfe0aa7134a085a20f2a6944e4eca663 a7069a821f79f4cb9befb35812bfbcd68e0d3aa97de74c4c2212663a99072620 a38097ad23663428d8a2426b59d8435fb002ed28bd9a8337591c2a0e18f68cea d4b16c8bb4cff55e1d91a52c1f780c944efc9bafd0f4709cbb992f9fed2e1b6f 7b8907fc3a2edc7fc29ae1dbd3b769d8abe81faa0776e45a0f62340b0a36625e 67ee8b6b4881bedd3ae5ca20c38a8bd521c8e5587fd351933a07ef1df57c43e2 b58ed837e5a15d88fbf23b2b9a3c6cb6c13a96b44e5d7bb3c5fd526daad18118 4f711fc87b722c5051cf7fe7d12f66afe13f4f677f66a8dffc5da2f03f363176 ddf4d49a0a580e58f394ce85ff32ccb09673420faa0fea8048b7b892ad5e751b 7d278039f6fa88d7bd6f276fdcd2a2be2ba880049956b36f4b37528b391b031a 5ddbd3c1ac87bcf2df87bc93c0dd903a2467ced795dcd5c0d746f5c133a8123e 8663e815d0c0f5e1279cd7e121f8b1e7a58cdd65f164fa620961192c3dac0478 e87b93c24d3c5058b03df79c5d755bc287287c472dd44f7d9b864a016e44b9d3 95d3513bd990dd997ec38ecc6cb7b29c132de6d08af63d3edefae41a6b5b34d9 b67330fe2bb07ea47ada1c1102ceff7d8dd6592823fcd71a29115d1b975db0bd 6c91c88a83ff63288526d738dae2daf8e836f847011ba878230d10324217bef9 8d2183f5e55681f7e32f4a0a5b36499e95bd84b9ff80f3ad5f60b303e3f3789d 8a82174be859babcbd6e06c219bad59f2a98086b7cdc8c015f94f59dc00c7a40 a55c75db20347475ad8bf74689585249eeb6864c793abfb8b610cb97435164f1 0ef8823b5ef0b8afcbe0536ec16e3da8075738e1ea8a9a6c6332e837a4c4729a 27ba1350ce641afeb25a4bd8acaa1be1700cd990ca7416676b27a6b2517650b4 313c75fd23b70516872f52b738d3b7e9ff89883cad35102342acd825c864c09b 791a015db78748b848a913ccb8f1a340424377971ad813207325bad2c62ed718 8943cd2d0f2f2c6cfea560eb012559d7d2494880776fa158b8f7573275b91068 572e0aab809665aba486fc5206b407be48ef12f156d7bf4278b49433d05bdee9 b3afd269634b314232d5f52784d6545267943733e67d5b744147c03e2d8060ea a37f2190b5c3de3953bd7d9753dbb83b0ce6f8704b1a2f84d858acc7341aac42 fb6d36cc9c81d359327740c20efb7f3b03708d7a87b56a8cb6cda5f9e189ba4d 89921c42a722483e1a543ffc8daf42a480ef21f8fcb3b2af91b2f9eac3d6df70 0ccd7cd12faf4993db1243a3a92262d94d9069851237edbac8274724592b7f84 a7b7c11299cbd4c33c5566105eebf9b3930dfa980d92ca5fb03e2b250503976f 88f0e7deb126a90b39a76414e7bd0efd1e3d024b1a854de4dadf72005b93c734 18df4cc0e26c2383ca7bebbd1d2a9e3e81d532f0c6c26f2591e4f2d261c7f576 root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root tomcat11-11.0.10-150600.13.9.1.src.rpm tomcat-implementation-docs-webapp tomcat11-docs-webapp
/bin/sh libxslt-tools rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PartialHardlinkSets) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) tomcat11 util-linux 3.0.4-1 4.6.0-1 4.0.4-1 4.0-1 5.2-1 11.0.10-150600.13.9.1 tomcat-implementation-docs-webapp 4.14.3 hP@hChZ@hH @h @hhmmichele.bussolotto@suse.com michele.bussolotto@suse.com michele.bussolotto@suse.com michele.bussolotto@suse.com fstrba@suse.com fstrba@suse.com ricardo.mestre@suse.com - Update to Tomcat 11.0.10
* Fixed CVEs:
+ CVE-2025-48989: Update the HTTP/2 overhead documentation (bsc#1243895)
* Catalina
+ Fix: Fix bloom filter population for archive indexing when using a
packed WAR containing one or more JAR files. (markt)
* Coyote
+ Fix: 69748: Add missing call to set keep-alive timeout when using
HTTP/1.1 following an async request, which was present for AJP.
(remm/markt)
+ Fix: 69762: Fix possible overflow during HPACK decoding of integers.
Note that the maximum permitted value of an HPACK decoded integer is
Integer.MAX_VALUE. (markt)
+ Fix: Update the HTTP/2 overhead documentation - particularly the code
comments - to reflect the deprecation of the PRIORITY frame and
clarify that a stream reset always triggers an overhead increase.
(markt)
* Cluster
+ Update: Add enableStatistics configuration attribute for the
DeltaManager, defaulting to true. (remm)
* WebSocket
+ Fix: Align the WebSocket extension handling for WebSocket client
connections with WebSocket server connections. The WebSocket client
now only includes an extension requested by an endpoint in the
opening handshake if the WebSocket client supports that extension.
(markt)
* Web applications
+ Fix: Manager and Host Manager. Provide the Manager and Host Manager
web applications with a dedicated favicon file rather than using the
one from the ROOT web application which might not be present or may
represent something entirely different. Pull requests #876 and #878
by Simon Arame.
* Other
+ Update: Update Checkstyle to 10.26.1. (markt)
+ Add: Improvements to French translations. (remm)
+ Add: Improvements to Japanese translations by tak7iji. (markt) - Update to Tomcat 11.0.9
- adapt tomcat-jdt.patch
* Fixed CVEs:
+ CVE-2025-52520: Align size tracking for multipart requests with
FileUpload's use of long. (bsc#1246388)
+ CVE-2025-53506: Apply the initial HTTP/2 connection limits earlier.
(bsc#1246318)
* Catalina
+ Fix: Ensure application configured welcome files override the defaults
when configuring an embedded web application programmatically. (markt)
+ Update: Optimize Request#getCharsetHolder to avoid repeated parsing when
charset is null. Patch provided by morning-gu. (schultz)
+ Fix: Allow the default servlet to set the content length when the content
length is known, no content has been written and a Writer is being used.
(markt)
+ Fix: 69717: Correct a regression in the fix for CVE-2025-49125 that
prevented access to PreResources and PostResources when mounted below the
web application root with a path that was terminated with a file
separator. (remm/markt)
+ Fix: 69731: Fix an issue that meant that the value of maxParameterCount
applied was smaller than intended for multipart uploads with non-file
parts when the parts were processed before query string parameters.
(markt)
+ Fix: Align size tracking for multipart requests with FileUpload's use of
long. (schultz)
* Coyote
+ Fix: 69710: Increase the default for maxPartCount from 10 to 50. Update
the documentation to provide more details on the memory requirements to
support multi-part uploads while avoiding a denial of service risk.
(markt)
+ Fix: 69713: Correctly handle an HTTP/2 data frame that includes padding
when the headers include a content-length. (remm/markt)
+ Fix: Correctly collect statistics for HTTP/2 requests and avoid counting
one request multiple times. Based on pull request #868 by qingdaoheze.
(markt)
+ Fix: Fix JMX value for keepAliveCount on the endpoint. Also add the value
of useVirtualThreads in JMX. (remm)
+ Fix: 69728: Remove incorrect warning when HTTP/2 is used with optional
certificate verification and improve the warnings when a web application
tries to use CLIENT-CERT with either HTTP/2 or a JSSE implementation of
TLS 1.3. (markt)
+ Fix: When setting the initial HTTP/2 connection limit, apply those limits
earlier. (markt)
* Jasper
+ Code: Remove IMPL_OBJ_START from EL grammar for IDENTIFIER. (markt)
+ Code: Remove the INSTANCEOF and FUNCTIONSUFFIX definitions from the EL
grammar as both are unused. (markt)
* Web applications
+ Add: Documentation. Provide more explicit guidance regarding the security
considerations for enabling write access to the web application via
WebDAV, HTTP PUT requests or similar. (markt)
+ Add: Documentation. Add a section on reverse proxies to the security
considerations page. (markt)
* Other
+ Update: Update to the Eclipse JDT compiler 4.36. (markt)
+ Update: Update UnboundID to 7.0.3. (markt)
+ Update: Update Checkstyle to 10.25.1. (markt)
+ Update: Improvements to French translations. (remm)
+ Update: Improvements to Japanese translations provided by tak7iji. (markt) - Update to Tomcat 11.0.8
* Fixed CVEs:
+ CVE-2025-46701: refactor CGI servlet to access resources via
WebResources (bsc#1243815)
+ CVE-2025-48988: limits the total number of parts in a
multi-part request and limits the size of
the headers provided with each part (bsc#1244656)
+ CVE-2025-49125: Expand checks for webAppMount (bsc#1244649)
* Catalina
+ Add: Support for the java:module namespace which mirrors the
java:comp namespace.
+ Fix: 69690: Calling HttpServletRequest.getParameter() and related
methods for a request with content type multipart/form-data when
the mapped servlet does not have a @MultipartConfig or equivalent
should not trigger an exception. Note that calling getPart() or
getParts() is these circumstances will trigger an exception.
+ Add: Support parsing of multiple path parameters separated by ; in a
single URL segment. Based on pull request #860 by Chenjp.
+ Fix: 69699: Encode redirect URL used by the rewrite valve with the
session id if appropriate, and handle cross context with different
session configuration when using rewrite.
+ Add: #863: Support for comments at the end of lines in text rewrite
map files to align behaviour with Apache httpd. Pull request
provided by Chenjp.
+ Fix: 69706: Saved request serialization issue in FORM introduced
when allowing infinite session timeouts.
+ Fix: Expand the path checks for Pre-Resources and Post-Resources
mounted at a path within the web application.
+ Fix: Process possible path parameters rewrite production in the
rewrite valve.
+ Fix: 69588: Enable allowLinking to be set on PreResources,
JarResources and PostResources. If not set explicitly, the setting
will be inherited from the Resources.
+ Add: 69633: Support for Filters using context root mappings.
+ Fix: 69643: Optimize directory listing for large amount of files.
Patch submitted by Loic de l'Eprevier.
+ Fix: #843: Off by one validation logic for partial PUT ranges and
associated test case. Submitted by Chenjp.
+ Refactor: GCI servlet to access resources via the WebResource API.
+ Fix: 69662: Report name in exception message when a naming lookup
failure occurs. Based on code submitted by Donald Smith.
+ Fix: Ensure that the FORM authentication attribute
authenticationSessionTimeout works correctly when sessions have an
infinite timeout when authentication starts.
+ Add: Provide a content type based on file extension when web
application resources are accessed via a URL.
* Coyote
+ Refactor: #861: TaskQueue to use the new interface RetryableQueue
which enables better integration of custom Executors which provide
their own BlockingQueue implementation. Pull request provided by
Paulo Almeida.
+ Add: Finer grained control of multi-part request processing via two
new attributes on the Connector element. maxPartCount limits the
total number of parts in a multi-part request and maxPartHeaderSize
limits the size of the headers provided with each part. Add support
for these new attributes to the ParameterLimitValve.
* Jasper
+ Fix: 69696: Mark the JSP wrapper for reload after a failed
compilation.
+ Fix: 69635: Add support to jakarta.el.ImportHandler for resolving
inner classes.
+ Add: #842: Support for optimized execution of c:set and c:remove
tags, when activated via JSP servlet param
useNonstandardTagOptimizations.
+ Fix: An edge case compilation bug for JSP and tag files on case
insensitive file systems that was exposed by the test case for
69635.
* Web applications
+ Fix: 69694: Improve error reporting of deployment tasks done using
the manager webapp when a copy operation fails.
+ Add: 68876: Documentation. Update the UML diagrams for server
start-up, request processing and authentication using PlantUML and
include the source files for each diagram.
* Other
+ Add: Thread name to webappClassLoader.stackTraceRequestThread
message. Patch provided by Felix Zhang.
+ Update: Tomcat Native to 2.0.9.
+ Update: The internal fork of Apache Commons FileUpload to 1.6.0-RC1
(2025-06-05).
+ Update: EasyMock to 5.6.0.
+ Update: Checkstyle to 10.25.0.
+ Fix: Use the full path when the installer for Windows sets calls
icacls.exe to set file permissions.
+ Update: Improvements to Japanese translations provided by tak7iji.
+ Update: Jacoco to 0.8.13.
+ Code: Explicitly set the locale to be used for Javadoc. For
official releases, this locale will be English (US) to support
reproducible builds.
+ Update: Byte Buddy to 1.17.5.
+ Update: Checkstyle to 10.23.1.
+ Update: File extension to media type mappings to align with the
current list used by the Apache Web Server (httpd).
+ Update: Improvements to French translations.
+ Update: Improvements to Japanese translations provided by tak7iji. - Hardening permissions (bsc#1242722) - Do not require standalone versions of apis that tomcat itself
carries
- Do not version dependencies - Make conflicts and provides more generic - Initial packaging of tomcat11 11.0.6 /bin/sh h01-ch2d 1756204563
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h i j k l m n o p q r s t u v w x y z { | } ~ $ 11.0.10 11.0.10-150600.13.9.1
docs BUILDING.txt META-INF context.xml RELEASE-NOTES.txt RUNNING.txt WEB-INF jsp 403.jsp web.xml aio.html annotationapi index.html api index.html appdev build.xml.txt deployment.html index.html installation.html introduction.html processes.html sample build.xml docs README.txt index.html src mypackage Hello.java web WEB-INF web.xml hello.jsp images tomcat.gif index.html source.html web.xml.txt apr.html architecture index.html overview.html requestProcess requestProcess.html 11_nio.plantuml 11_nio.png 21_http11.plantuml 21_http11.png 31_synchronous.plantuml 31_synchronous.png 41_basic.plantuml 41_basic.png startup startup.html 1_overview.plantuml 1_overview.png 2_catalina_init.plantuml 2_catalina_init.png 3_catalina_start_1.plantuml 3_catalina_start_1.png 4_catalina_start_2.plantuml 4_catalina_start_2.png 5_catalina_start_3.plantuml 5_catalina_start_3.png 6_catalina_host_config.plantuml 6_catalina_host_config.png 7_catalina_context_config.plantuml 7_catalina_context_config.png balancer-howto.html building.html cdi.html cgi-howto.html changelog.html class-loader-howto.html cluster-howto.html comments.html config ajp.html automatic-deployment.html cluster-channel.html cluster-deployer.html cluster-interceptor.html cluster-listener.html cluster-manager.html cluster-membership.html cluster-receiver.html cluster-sender.html cluster-valve.html cluster.html context.html cookie-processor.html credentialhandler.html engine.html executor.html filter.html globalresources.html host.html http.html http2.html index.html jar-scan-filter.html jar-scanner.html jaspic.html listeners.html loader.html manager.html realm.html resources.html runtime-attributes.html server.html service.html sessionidgenerator.html systemprops.html valve.html connectors.html default-servlet.html deployer-howto.html developers.html elapi index.html graal.html host-manager-howto.html html-host-manager-howto.html html-manager-howto.html images add.gif asf-logo.svg code.gif cors-flowchart.png design.gif docs-stylesheet.css docs.gif fix.gif fonts OpenSans400.woff OpenSans400italic.woff OpenSans600.woff OpenSans600italic.woff OpenSans700.woff OpenSans700italic.woff fonts.css tomcat.gif tomcat.png update.gif void.gif index.html introduction.html jasper-howto.html jaspicapi index.html jdbc-pool.html jndi-datasource-examples-howto.html jndi-resources-howto.html jspapi index.html logging.html manager-howto.html maven-jars.html mbeans-descriptors-howto.html mbeans-descriptors.dtd monitoring.html proxy-howto.html realm-howto.html rewrite.html security-howto.html servletapi index.html setup.html ssi-howto.html ssl-howto.html tribes developers.html faq.html interceptors.html introduction.html membership.html setup.html status.html transport.html virtual-hosting-howto.html web-socket-howto.html websocketapi index.html windows-auth-howto.html windows-service-howto.html /usr/share/tomcat/tomcat-webapps/ /usr/share/tomcat/tomcat-webapps/docs/ /usr/share/tomcat/tomcat-webapps/docs/META-INF/ /usr/share/tomcat/tomcat-webapps/docs/WEB-INF/ /usr/share/tomcat/tomcat-webapps/docs/WEB-INF/jsp/ /usr/share/tomcat/tomcat-webapps/docs/annotationapi/ /usr/share/tomcat/tomcat-webapps/docs/api/ /usr/share/tomcat/tomcat-webapps/docs/appdev/ /usr/share/tomcat/tomcat-webapps/docs/appdev/sample/ /usr/share/tomcat/tomcat-webapps/docs/appdev/sample/docs/ /usr/share/tomcat/tomcat-webapps/docs/appdev/sample/src/ /usr/share/tomcat/tomcat-webapps/docs/appdev/sample/src/mypackage/ /usr/share/tomcat/tomcat-webapps/docs/appdev/sample/web/ /usr/share/tomcat/tomcat-webapps/docs/appdev/sample/web/WEB-INF/ /usr/share/tomcat/tomcat-webapps/docs/appdev/sample/web/images/ /usr/share/tomcat/tomcat-webapps/docs/architecture/ /usr/share/tomcat/tomcat-webapps/docs/architecture/requestProcess/ /usr/share/tomcat/tomcat-webapps/docs/architecture/startup/ /usr/share/tomcat/tomcat-webapps/docs/config/ /usr/share/tomcat/tomcat-webapps/docs/elapi/ /usr/share/tomcat/tomcat-webapps/docs/images/ /usr/share/tomcat/tomcat-webapps/docs/images/fonts/ /usr/share/tomcat/tomcat-webapps/docs/jaspicapi/ /usr/share/tomcat/tomcat-webapps/docs/jspapi/ /usr/share/tomcat/tomcat-webapps/docs/servletapi/ /usr/share/tomcat/tomcat-webapps/docs/tribes/ /usr/share/tomcat/tomcat-webapps/docs/websocketapi/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:40364/SUSE_SLE-15-SP6_Update/416f190d6a2ae9a5ac18cd8763a39da0-tomcat11.SUSE_SLE-15-SP6_Update drpm xz 5 noarch-suse-linux
directory ASCII text XML 1.0 document, ASCII text HTML document, ASCII text HTML document, ASCII text, with very long lines exported SGML document, ASCII text Perl5 module source, ASCII text GIF image data, version 89a, 146 x 92 PNG image data, 1682 x 1495, 8-bit/color RGB, non-interlaced PNG image data, 546 x 401, 8-bit/color RGB, non-interlaced PNG image data, 2974 x 2013, 8-bit/color RGB, non-interlaced PNG image data, 1948 x 1360, 8-bit/color RGB, non-interlaced PNG image data, 574 x 1324, 8-bit/color RGB, non-interlaced PNG image data, 1585 x 1915, 8-bit/color RGB, non-interlaced PNG image data, 1667 x 2547, 8-bit/color RGB, non-interlaced PNG image data, 1476 x 2047, 8-bit/color RGB, non-interlaced PNG image data, 2312 x 3480, 8-bit/color RGB, non-interlaced PNG image data, 807 x 1177, 8-bit/color RGB, non-interlaced PNG image data, 786 x 1567, 8-bit/color RGB, non-interlaced HTML document, UTF-8 Unicode text, with very long lines GIF image data, version 89a, 20 x 20 SVG Scalable Vector Graphics image PNG image data, 976 x 756, 8-bit/color RGB, non-interlaced Web Open Font Format, TrueType, length 21956, version 1.1 Web Open Font Format, TrueType, length 21092, version 1.1 Web Open Font Format, TrueType, length 22604, version 1.1 Web Open Font Format, TrueType, length 21252, version 1.1 Web Open Font Format, TrueType, length 22748, version 1.1 Web Open Font Format, TrueType, length 21184, version 1.1 PNG image data, 146 x 92, 8-bit/color RGBA, non-interlaced GIF image data, version 89a, 1 x 1 $&<2 3V utf-8 5570c6f670ac84c6b879123cdb12b3b684de11b40183f79b78e7dca664d43c62 ? 7zXZ
! t/1] "k%x3u Y]\ !xvdST'W-]cgEc iڎ $-6FrB3,%Ͼ( W' "i;JӭfeD C_,<}* WifK%pMt} bL ev9QyM4aJ.!dU?~ W[af$, 2 N C
ʫ+~~&R娤}Ce]:tR=.cr"Tg HT 4nvUeOiâtc{kM}܉WB 70s.+gOR
f{\wUyxm0AےX#dhq5\xZ߆Ym(Ru˔J[_fBi-\- T%Ixfq9NVCiWcPꑕ ]lA94g&pȄw ?7 + 5Rwv¤b xrճRD
8 XIgL> S|>4}IFLT3ka\Gw=]ш s5p=8;/d⿵Ȉvhgk ޜjX[~?5
9B/*-&X,H=2=0 ggRgorL{r.6Z`D0W֟a>KK8^?Ȫ"xeU0,qz`? gj$Dkhx?6 /WF%֬+N4p:
qc'\q&5pCQԻ_BlA-x|-}vw?s{inIeݝ&v0Twkm5x! &Ksm
cE@H@^3:b> YlO5
#5L = `J(wIH_ |
ʠ,1> (jqlhW49skq C3He7
5
*'jż9
jSYdYns9e)фfkwÔE"懬9eT+K 'd/;ޓѣ%P7W{4Tbgjۊޫ/B)\j hڛE/JH7t 5\ٻƄF(ެt; seKg]¾ GhS.v6E%jn XΕ/ Rųǥ22ex]ux5`K3D+yn :lS뺛C (WalG&"A _y{ LtЪ<1g glbBZYzpl2E5㥟 tW}ttv_$^DbF&_CJF4d@`F "}M @U$i+ڧ$WS7"69!i]X.r*/FU5:iQ3
Cლ4;ZDM!D]r5sU `2x/1Nq/Փը-CyE$',S,Y m[#6H_ fY&H E}P=$? Ω)̃ 0xJ
aT7q5S] :i0u8 ?r?eֿٜwE_=ĺ ZCKGr,?Q 2ʳjQk9Үۻ"U#"+g'& k7ubT,D9{~VݠA#-XsBz={wHH 2)q=jY6J-K N1OdV¨Fd5ӯY1A>[}%_ h i
0Pĩ|{ou u"UN[e b} \'M.¬`(hJ(FduA:LsB?FSdT'=X-Y
m_
NExaGE0U5I > vꤶV a-i yI*,DX|¾kFSwJY* K 4׀ X+ IJ4B֑ȷH9lH &7D<@㾰.r4`86}x]XFĺY= u%uN Y V ;Ή_S^:䢴IC ~8a]: `|5,iyَe$ IRFƳ!caZ%pitFK1,6OE7J4O"#P.bJJոWGI:v q8C+ܽye p.JŴ<7QF373ܶ2x"T|i
h 8lDޚ ,j;ǧ hq)c|m ݻ@/cҚT^0: oIxAͯ9b>AtV\ OA9ѐDqxP` ;2.P ]j;rWqq!6kcL Jv`y<_mtfkC FI+ Dc
`!ˡ::л> z?*roϤbep
mGFw".Q6srq)A?gގ#_Be:Daz/c7])DcRr4sz OJ?z7Si@z0FT|jtH
/zsaX+Ά ]\7pO, ihe =2VNWɂ& O ڧ76*x n:bR `:g@hAJ54bX1$=%1:X1%ڸYBwr!A {
:UKM@wc-iO/)[vn;ώuϽ p̖67a\l +aq Q&XG;LJ0Ov:EC|5KG1Ҡ* /KkF&/cr3Gᖈ& -qOrA!*Ee>Mz8Jk/9WF sf ?H O $ ep R]b׆ s\g+K)3 >0OOokx6KA^'H ,3`VH#N uLuJOr J`a~:e>Mfy "c Ԅ(
YZ