-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 03 Feb 2026 12:58:13 +0100
Source: tomcat11
Binary: libtomcat11-embed-java libtomcat11-java tomcat11 tomcat11-admin tomcat11-common tomcat11-docs tomcat11-examples tomcat11-user
Architecture: all
Version: 11.0.15-1~deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) <buildd_amd64-x86-conova-02@buildd.debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Description:
 libtomcat11-embed-java - Apache Tomcat 11 - Servlet and JSP engine -- embed libraries
 libtomcat11-java - Apache Tomcat 11 - Servlet and JSP engine -- core libraries
 tomcat11   - Apache Tomcat 11 - Servlet and JSP engine
 tomcat11-admin - Apache Tomcat 11 - Servlet and JSP engine -- admin web applicatio
 tomcat11-common - Apache Tomcat 11 - Servlet and JSP engine -- common files
 tomcat11-docs - Apache Tomcat 11 - Servlet and JSP engine -- documentation
 tomcat11-examples - Apache Tomcat 11 - Servlet and JSP engine -- example web applicat
 tomcat11-user - Apache Tomcat 11 - Servlet and JSP engine -- tools to create user
Changes:
 tomcat11 (11.0.15-1~deb13u1) trixie-security; urgency=medium
 .
   * Backport 11.0.15. to trixie.
   * Fix CVE-2025-46701, CVE-2025-48976, CVE-2025-48988, CVE-2025-48989,
     CVE-2025-49125, CVE-2025-52520, CVE-2025-53506, CVE-2025-55668,
     CVE-2025-55752, CVE-2025-55754 and CVE-2025-61795.
     Several security vulnerabilities have been found in Tomcat 11, a Java web
     server and servlet engine. This update improves the handling of
     HTTP/2 connections and corrects various flaws which can lead to
     uncontrolled resource consumption and a denial of service.
Checksums-Sha1:
 fd3af08b68c6926ccb5b43678572b6a8c0c0d730 4428540 libtomcat11-embed-java_11.0.15-1~deb13u1_all.deb
 600bc901bfa2578d764fda9315a5455d597efc15 6340752 libtomcat11-java_11.0.15-1~deb13u1_all.deb
 f7823ed4d9ef4fd167a7084876538b19b5b7af71 75292 tomcat11-admin_11.0.15-1~deb13u1_all.deb
 ea62a4c29fb1b6c7fe6cfc566321e599d0f02abf 61756 tomcat11-common_11.0.15-1~deb13u1_all.deb
 8bf79eb616352f316f9190dee8a0508f7f818553 1416984 tomcat11-docs_11.0.15-1~deb13u1_all.deb
 5b8832cf90f76c83769fb7fa91a855e365800d64 391232 tomcat11-examples_11.0.15-1~deb13u1_all.deb
 957691733a3bd89970f4f0e9da537464a427dd51 35392 tomcat11-user_11.0.15-1~deb13u1_all.deb
 230a33801c50e0b14375480c2dc77e1fc794005f 16724 tomcat11_11.0.15-1~deb13u1_all-buildd.buildinfo
 86ba41e066b22146114d1cd12a45419751faa567 38424 tomcat11_11.0.15-1~deb13u1_all.deb
Checksums-Sha256:
 c281d8d11c58413c877d130798ba9c883d58d40a927b7aaa340f95ae0540e075 4428540 libtomcat11-embed-java_11.0.15-1~deb13u1_all.deb
 5bc356870b78fdb61332d4c64fbd982c0340084ab7b389409b2209b59bc2e78d 6340752 libtomcat11-java_11.0.15-1~deb13u1_all.deb
 f35beb7a553cd862e8bef233e3acb8b9bf58caa86c87af078179e2c182728e62 75292 tomcat11-admin_11.0.15-1~deb13u1_all.deb
 6779a328dd3ebaf69d89c52e971d238c49416d500421a83d8d5491234c88d01e 61756 tomcat11-common_11.0.15-1~deb13u1_all.deb
 c5044c789b236403c4b2dc9576a9c2ecc1732d7ac07cc83238594f2b1970d080 1416984 tomcat11-docs_11.0.15-1~deb13u1_all.deb
 0d322f37965e5d8872e472fc31310c3d0c68e9cf84a16e46c9c8c8439398ee6b 391232 tomcat11-examples_11.0.15-1~deb13u1_all.deb
 cf2c89ed2ac4d41ada72cfef9be2b366d531fb68b461bb9a96311dada6978243 35392 tomcat11-user_11.0.15-1~deb13u1_all.deb
 8570ec226e80037e61c90c80e224baf0e8ded482eab1126179965dda69a3ed8a 16724 tomcat11_11.0.15-1~deb13u1_all-buildd.buildinfo
 39936f0fc151c3092b8320b0e575d9d4469e774df81ff915f0c41a9fe2757198 38424 tomcat11_11.0.15-1~deb13u1_all.deb
Files:
 2acab78bb9e8944dcb2f455a5832dd37 4428540 java optional libtomcat11-embed-java_11.0.15-1~deb13u1_all.deb
 5c9ef8373aa8619fd333ac76b489b740 6340752 java optional libtomcat11-java_11.0.15-1~deb13u1_all.deb
 df19b5a4e4892fd5a84c5e5d7ef85088 75292 java optional tomcat11-admin_11.0.15-1~deb13u1_all.deb
 b5693ae87b47706788b7b4d919228c46 61756 java optional tomcat11-common_11.0.15-1~deb13u1_all.deb
 16c7cb969d8a7ad38685d2c2f7af85c2 1416984 doc optional tomcat11-docs_11.0.15-1~deb13u1_all.deb
 93fd5af213ec91273c39290505ffb86c 391232 java optional tomcat11-examples_11.0.15-1~deb13u1_all.deb
 02c951a7225c1e16c30fbda30934db53 35392 java optional tomcat11-user_11.0.15-1~deb13u1_all.deb
 a08dfc65bbbbdf4c545b5a276d9d87c3 16724 java optional tomcat11_11.0.15-1~deb13u1_all-buildd.buildinfo
 f9dac761a6ffee60ce4ee3120372488c 38424 java optional tomcat11_11.0.15-1~deb13u1_all.deb

-----BEGIN PGP SIGNATURE-----
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=CvyI
-----END PGP SIGNATURE-----