UbuntuUpdates.org

Package "tomcat10-docs"

Name: tomcat10-docs

Description:

Apache Tomcat 10 - Servlet and JSP engine -- documentation
Latest version: 10.1.35-1ubuntu0.1
Release: plucky (25.04)
Level: updates
Repository: universe
Head package: tomcat10
Homepage: http://tomcat.apache.org

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "tomcat10-docs"

All arch deb package
APT INSTALL

Other versions of "tomcat10-docs" in Plucky

Repository Area Version
base universe 10.1.35-1
security universe 10.1.35-1ubuntu0.1

Changelog

Version: 10.1.35-1ubuntu0.1 2025-08-20 07:07:08 UTC

  tomcat10 (10.1.35-1ubuntu0.1) plucky-security; urgency=medium

  * SECURITY UPDATE: Security Constraint Bypass
    - debian/patches/CVE-2025-46701-pre1.patch: Refactor before
      applying security patch
    - debian/patches/CVE-2025-46701.patch: Refactor CGI servlet to
      access resources via WebResources
    - debian/patches/CVE-2025-31651.patch: Better handling of URLs with
      literal ';' and '?'
    - CVE-2025-46701
    - CVE-2025-31651

 -- Bruce Cable <email address hidden> Fri, 20 Jun 2025 14:15:00 +1000
CVE-2025-46701 Improper Handling of Case Sensitivity vulnerability in Apache Tomcat's GCI servlet allows security constraint bypass of security constraints that app
CVE-2025-31651 Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. For a subset of unlikely rewrite rule configurations, i


About   -   Send Feedback to @ubuntu_updates