Early Access — Mondoo Vulnerability Intelligence is currently in preview.

SUSE-SU-2025:4184-1

UNKNOWN

Security update for tomcat

Published Nov 24, 2025

Modified 1 months ago

Fix available

Details

This update for tomcat fixes the following issues:

CVE-2025-55752: Fixed directory traversal via rewrite with possible RCE if PUT is enabled (bsc#1252753)
CVE-2025-55754: Fixed improper neutralization of escape, meta, or control sequences vulnerability (bsc#1252905)
CVE-2025-61795: Fixed denial of service due to temporary copies during the processing of multipart upload (bsc#1252756)

Affected Packages

SUSE:Linux Enterprise Server 12 SP5-LTSStomcat

Fixed in:

9.0.36-3.153.2

SUSE:Linux Enterprise Server 12 SP5-LTSStomcat-admin-webapps

Fixed in:

9.0.36-3.153.2

SUSE:Linux Enterprise Server 12 SP5-LTSStomcat-docs-webapp

Fixed in:

9.0.36-3.153.2

SUSE:Linux Enterprise Server 12 SP5-LTSStomcat-el-3_0-api

Fixed in:

9.0.36-3.153.2

SUSE:Linux Enterprise Server 12 SP5-LTSStomcat-javadoc

Fixed in:

9.0.36-3.153.2

SUSE:Linux Enterprise Server 12 SP5-LTSStomcat-jsp-2_3-api

Fixed in:

9.0.36-3.153.2

SUSE:Linux Enterprise Server 12 SP5-LTSStomcat-lib

Fixed in:

9.0.36-3.153.2

SUSE:Linux Enterprise Server 12 SP5-LTSStomcat-servlet-4_0-api

Fixed in:

9.0.36-3.153.2

SUSE:Linux Enterprise Server 12 SP5-LTSStomcat-webapps

Fixed in:

9.0.36-3.153.2

SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5tomcat

Fixed in:

9.0.36-3.153.2

SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5tomcat-admin-webapps

Fixed in:

9.0.36-3.153.2

SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5tomcat-docs-webapp

Fixed in:

9.0.36-3.153.2

SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5tomcat-el-3_0-api

Fixed in:

9.0.36-3.153.2

SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5tomcat-javadoc

Fixed in:

9.0.36-3.153.2

SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5tomcat-jsp-2_3-api

Fixed in:

9.0.36-3.153.2

SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5tomcat-lib

Fixed in:

9.0.36-3.153.2

SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5tomcat-servlet-4_0-api

Fixed in:

9.0.36-3.153.2

SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5tomcat-webapps

Fixed in:

9.0.36-3.153.2

Timeline

PublishedNov 24, 2025

ModifiedNov 24, 2025

SUSE-SU-2025:4184-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2025:4184-1

Details

Affected Packages

References

Upstream

Related

Ecosystems

Timeline