-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 03 Feb 2026 14:18:04 +0100 Source: tomcat10 Binary: libtomcat10-embed-java libtomcat10-java tomcat10 tomcat10-admin tomcat10-common tomcat10-docs tomcat10-examples tomcat10-user Architecture: all Version: 10.1.52-1~deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: all Build Daemon (x86-grnet-02) Changed-By: Markus Koschany Description: libtomcat10-embed-java - Apache Tomcat 10 - Servlet and JSP engine -- embed libraries libtomcat10-java - Apache Tomcat 10 - Servlet and JSP engine -- core libraries tomcat10 - Apache Tomcat 10 - Servlet and JSP engine tomcat10-admin - Apache Tomcat 10 - Servlet and JSP engine -- admin web applicatio tomcat10-common - Apache Tomcat 10 - Servlet and JSP engine -- common files tomcat10-docs - Apache Tomcat 10 - Servlet and JSP engine -- documentation tomcat10-examples - Apache Tomcat 10 - Servlet and JSP engine -- example web applicat tomcat10-user - Apache Tomcat 10 - Servlet and JSP engine -- tools to create user Changes: tomcat10 (10.1.52-1~deb12u1) bookworm-security; urgency=medium . * Backport 10.1.52. to bookworm. * Fix CVE-2025-46701, CVE-2025-48976, CVE-2025-48988, CVE-2025-48989, CVE-2025-49125, CVE-2025-52520, CVE-2025-53506, CVE-2025-55668, CVE-2025-55752, CVE-2025-55754, CVE-2025-61795, CVE-2025-31650 and CVE-2025-31651. Several security vulnerabilities have been found in Tomcat 10, a Java web server and servlet engine. This update improves the handling of HTTP/2 connections and corrects various flaws which can lead to uncontrolled resource consumption and a denial of service. Checksums-Sha1: 5bf894803539bfcaff26236c03cd08d521445379 4514348 libtomcat10-embed-java_10.1.52-1~deb12u1_all.deb 9b2b8d8622bb708804d07748720ab41d236b274a 6450736 libtomcat10-java_10.1.52-1~deb12u1_all.deb ff24ecf2dca02aa6be516bede32a92838813f9e3 76432 tomcat10-admin_10.1.52-1~deb12u1_all.deb 1d596cadb98a62ee8f22dd2117457458f2081381 67520 tomcat10-common_10.1.52-1~deb12u1_all.deb 2de50e7803ee71c11debd583a898f80f24b9be64 1441440 tomcat10-docs_10.1.52-1~deb12u1_all.deb 0908c4c7410d100b6aae8830e2927794886f2823 393176 tomcat10-examples_10.1.52-1~deb12u1_all.deb ddb9ce2df2e4bc27b895d5a4199d97207bac6eb4 39084 tomcat10-user_10.1.52-1~deb12u1_all.deb a6af7e55f6eab92f06df352e2893505b0b54cc83 16543 tomcat10_10.1.52-1~deb12u1_all-buildd.buildinfo db471a5cdcbdb63754239fabe41495c213aba468 42812 tomcat10_10.1.52-1~deb12u1_all.deb Checksums-Sha256: 71df1a161e74aeb62741bc76720f17fdc21689fe1ca553c3b900f1fd52a87e60 4514348 libtomcat10-embed-java_10.1.52-1~deb12u1_all.deb c48a30403035013691a6d98679da4fd4a3178d5adbc689ab3e000c17b6397293 6450736 libtomcat10-java_10.1.52-1~deb12u1_all.deb 0f8d2f2e9900d67bd7c5c62cd9ba5e44448651e00ffcc1e35d2f10fa81264789 76432 tomcat10-admin_10.1.52-1~deb12u1_all.deb db3f31c1b5adf30d0a10e99e2e03b876735e7617e891a90ce8b288bb48a24a32 67520 tomcat10-common_10.1.52-1~deb12u1_all.deb 1910b3ce16cbdd1114d4b00c60efe175d4f84aefbabcd4346a5977461fc5faa4 1441440 tomcat10-docs_10.1.52-1~deb12u1_all.deb c0cb1faf2a3edf4ca75583abc3047e33c6fd0eb611b32cb53f423f2e5a0dea80 393176 tomcat10-examples_10.1.52-1~deb12u1_all.deb 1445e7172ca8d79b4e48564a24a60bad37fe51ea27f2913fd68464b5f3e47d2c 39084 tomcat10-user_10.1.52-1~deb12u1_all.deb ddac1bb88e1cb877058335b3f9bf193db16bcb643366caa37f7a65b20d02f872 16543 tomcat10_10.1.52-1~deb12u1_all-buildd.buildinfo 524a66b2c52b8f513b5201077db44ec8fb67fa00af11828adbb43e39d7895940 42812 tomcat10_10.1.52-1~deb12u1_all.deb Files: 67e4ac418bdd2e9fe555fbdfaa8370d5 4514348 java optional libtomcat10-embed-java_10.1.52-1~deb12u1_all.deb 4d067a0bb60ed329a8a1691d0b606a4b 6450736 java optional libtomcat10-java_10.1.52-1~deb12u1_all.deb 5221bd5cc40e5bd412ea17589032b964 76432 java optional tomcat10-admin_10.1.52-1~deb12u1_all.deb fb5657baeba678ad9b7982af4fc87bf8 67520 java optional tomcat10-common_10.1.52-1~deb12u1_all.deb 04c11a9b713c47e125e66eed0b06ac7c 1441440 doc optional tomcat10-docs_10.1.52-1~deb12u1_all.deb b8be6999f3282958579eb3f3fb62880e 393176 java optional tomcat10-examples_10.1.52-1~deb12u1_all.deb c42c868ec52c45de8c9d996ee47de0bf 39084 java optional tomcat10-user_10.1.52-1~deb12u1_all.deb e4b7679de6b7226f0ec774d196bf52c0 16543 java optional tomcat10_10.1.52-1~deb12u1_all-buildd.buildinfo a9afaaade57e6d4221cad3e400cebd03 42812 java optional tomcat10_10.1.52-1~deb12u1_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEj4Fym5GgeZdPqKhrJm69HxMTN+oFAmmDCsAACgkQJm69HxMT N+qZpw/9F6fT5Nei34uN7MksT8I+W2jdHUXwEsmzuzwD+RMZB2qnupSb91ZFZ2Pb Un+CLvQk0VEACvS6e4UCrGtaAJzXQ9HiwtT/tKXJcgzlcE/0SnIU+ml8JkHVqktq Yh59kcA59Jl3PyjRIyb13b1yALQ9UGnIg/NoaEIewgoJ40ZFpT8dMO7rxEIermM7 lQXtUcmgVeggiLbjBgnNWgHN2uZHiBamh0Fp6n+j2D1m/9A49on/oe6jWMkTPIcm ft1CLAdCkxD0JrcC+TZ9kr0+uAIl9Y/Yz/Jz61+AqawrMcsC79oRLsNf29g5ohpo PznEYuOiT7QMv5CaG+65rxVjBjGI87vr3JF1AXfy0hUhkAsozgO0yA9jhgEXBzTc 4JJqEe7ev3xSfmTFhTuUPTBMTiWrL4J6Tqw+CTSEzLpivomhMiS59SIrn506uZgf B80DmjKigKqdK/7xj2k/6v8OcxlXEcNceXTFZXJ1/h0Sk3wi0R0AH28ExcA2BYHN ymt3chOh+vZIi4+LRKMXCcH/ktvaWrjRp+fvKz6vZWHaWIH0zZBNX1FoI6riUuzQ VKlfYqkAznHz8rat+gBSR7lYHnR85shaxxlFD726nV53tK9vPKwzceiaGhpZpjbD TIYM8Z6hyCu5K22q0kxprVjDOrAFh9hmrA8zcczXLVNmlNl1DIc= =G/VY -----END PGP SIGNATURE-----