SUSE-SU-2025:02745-1
SUSE-SU-2025:02745-1 · Security update for tomcat
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for tomcat fixes the following issues: - CVE-2025-52520: Fixed integer overflow can lead to DoS for some unlikely configurations of multipart upload (bsc#1246388) - CVE-2025-53506: Fixed uncontrolled resource HTTP/2 client consumption vulnerability (bsc#1246318)
Fix available
- Published
- Updated
Stack: system
Affected products and versions
tomcat SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
- Affected ranges
- ECOSYSTEM: < 9.0.36-3.148.1
Update to 9.0.36-3.148.1