[ol10_appstream] tomcat-el-5.0-api-1:10.1.36-3.el10_1.1.noarch

Name:	tomcat-el-5.0-api
Epoch:	1
Version:	10.1.36
Release:	3.el10_1.1
Architecture:	noarch
Group:	Unspecified
Size:	240983
License:	Apache-2.0
RPM:	tomcat-el-5.0-api-10.1.36-3.el10_1.1.noarch.rpm
Source RPM:	tomcat-10.1.36-3.el10_1.1.src.rpm
Build Date:	Wed Dec 10 2025
Build Host:	build-ol10-x86_64.oracle.com
Vendor:	Oracle America
URL:	http://tomcat.apache.org/
Summary:	Apache Tomcat Expression Language v5.0 API Implementation Classes
Description:	Apache Tomcat EL API Implementation Classes.

Changelog (Show File list) (Show related packages)

Thu Nov 27 2025 Adam Krajcik <akrajcik@redhat.com> - 1:10.1.36-3.el10_1.1

- Resolves: RHEL-124494
  tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)
- Resolves: RHEL-91729
  tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)
- Resolves: RHEL-132527
  tomcat: Denial of service (CVE-2025-61795)

Thu Aug 14 2025 Adam Krajcik <akrajcik@redhat.com> - 1:10.1.36-3

- Resolves: RHEL-102184
  tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989)
- Resolves: RHEL-108906
  tomcat: Denial of service (CVE-2025-52520)

Wed Aug 13 2025 Adam Krajcik <akrajcik@redhat.com> - 1:10.1.36-2

- Resolves: RHEL-108900
  tomcat: Apache  FileUpload DOS via part headers (CVE-2025-48976)
- Resolves: RHEL-108902
  tomcat: Dos in multipart upload (CVE-2025-48988)
- Resolves: RHEL-108904
  tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125)
- Resolves: RHEL-108908
  tomcat: Denial of service (CVE-2025-53506)

Mon Apr 14 2025 Adam Krajcik <akrajcik@redhat.com> - 1:10.1.36-1

- Rebase tomcat to 10.1.36
- Resolves: RHEL-82925
  tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813)
- Resolves: RHEL-87272
  tomcat: DoS in examples web application (CVE-2024-54677)
- Resolves: RHEL-87273
  tomcat: Authentication bypass when using Jakarta Authentication API (CVE-2024-52316)
- Resolves: RHEL-85343 - NoClassDefFoundError when using migration tool

Tue Feb 11 2025 Adam Krajcik <akrajcik@redhat.com> - 1:10.1.8-2
```
- Resolves: RHEL-78899 Add missing Obsoletes
```
Wed Feb 05 2025 Adam Krajcik <akrajcik@redhat.com> - 1:10.1.8-1
```
- Resolves: RHEL-51222 Upgrade tomcat to 10.1.8
```

Tue Oct 29 2024 Troy Dawson <tdawson@redhat.com> - 1:9.0.87-3

- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

Mon Aug 12 2024 Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-2

- Resolves: RHEL-50166 - Rebase tomcat to version 9.0.87
- Resolves: RHEL-12274 - Use src.zip file as a Source0 instead of tar.gz
- Resolves: RHEL-51277 - Prune changelog to remove non-relevant history
- Resolves: RHEL-52906 - tomcat: Switch to using Java 21 as the default JDK
- Resolves: RHEL-55194 - Fix changelog version
- Resolves: RHEL-46156
  tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750)

Mon Jun 24 2024 Troy Dawson <tdawson@redhat.com> - 1:9.0.83-3
```
- Bump release for June 2024 mass rebuild
```
Sat Jan 27 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1:9.0.83-2
```
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
```