p PatchFirst

SUSE-SU-2025:02214-1

SUSE-SU-2025:02214-1 · Security update for tomcat

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for tomcat fixes the following issues: - CVE-2025-46701: Refactored CGI servlet to access resources via WebResources (bsc#1243815). - CVE-2025-48988: Limited the total number of parts in a multi-part request and limits the size of the headers provided with each part (bsc#1244656). - CVE-2025-49125: Expand checks for webAppMount (bsc#1244649).

Fix available

Published
Updated

Stack: system

Affected products and versions

  • tomcat SUSE:Linux Enterprise Server 12 SP5-LTSS

    Affected ranges
    • ECOSYSTEM: < 9.0.36-3.145.1

    Update to 9.0.36-3.145.1

  • tomcat SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5

    Affected ranges
    • ECOSYSTEM: < 9.0.36-3.145.1

    Update to 9.0.36-3.145.1

Original sources

Check your server →