https://bugzilla.redhat.com/show_bug.cgi?id=2450432
Bug ID: 2450432
Summary: tomcat-10.1.53 is available
Product: Fedora
Version: rawhide
Status: NEW
Component: tomcat
Keywords: FutureFeature, Triaged
Assignee: csutherl(a)redhat.com
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: akrajcik(a)redhat.com, alee(a)redhat.com,
csutherl(a)redhat.com, dsoumis(a)redhat.com,
ivan.afonichev(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
szappis(a)redhat.com
Target Milestone: ---
Classification: Fedora
Releases retrieved: 10.1.53
Upstream release that is considered latest: 10.1.53
Current version/release in rawhide: 10.1.52-2.fc45
URL: https://tomcat.apache.org/whichversion.html
Please consult the package updates policy before you issue an update to a
stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/
More information about the service that created this bug can be found at:
https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M…
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
Based on the information from Anitya:
https://release-monitoring.org/project/371865/
To change the monitoring settings for the project, please visit:
https://src.fedoraproject.org/rpms/tomcat
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2450432
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2211812
Bug ID: 2211812
Summary: resteasy-6.2.4.Final is available
Product: Fedora
Version: rawhide
Status: NEW
Component: resteasy
Keywords: FutureFeature, Triaged
Assignee: edewata(a)redhat.com
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: alee(a)redhat.com, alexander.m.scheel(a)gmail.com,
cfu(a)redhat.com, ckelley(a)redhat.com, dchen(a)redhat.com,
edewata(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jmagne(a)redhat.com, mfargett(a)redhat.com,
mharmsen(a)redhat.com, puntogil(a)libero.it
Target Milestone: ---
Classification: Fedora
Releases retrieved: 3.15.7.Final
Upstream release that is considered latest: 6.2.4.Final
Current version/release in rawhide: 3.0.26-25.fc39
URL: https://resteasy.dev/
Please consult the package updates policy before you issue an update to a
stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/
More information about the service that created this bug can be found at:
https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M…
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
Based on the information from Anitya:
https://release-monitoring.org/project/11453/
To change the monitoring settings for the project, please visit:
https://src.fedoraproject.org/rpms/resteasy
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2211812
https://bugzilla.redhat.com/show_bug.cgi?id=2149756
Bug ID: 2149756
Summary: aqute-bnd-6.4.0 is available
Product: Fedora
Version: rawhide
Status: NEW
Component: aqute-bnd
Keywords: FutureFeature, Triaged
Assignee: mizdebsk(a)redhat.com
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com
Target Milestone: ---
Classification: Fedora
Releases retrieved: 6.4.0
Upstream release that is considered latest: 6.4.0
Current version/release in rawhide: 6.3.1-2.fc38
URL: http://bnd.bndtools.org/
Please consult the package updates policy before you issue an update to a
stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/
More information about the service that created this bug can be found at:
https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M…
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
Based on the information from Anitya:
https://release-monitoring.org/project/98/
To change the monitoring settings for the project, please visit:
https://src.fedoraproject.org/rpms/aqute-bnd
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2149756
https://bugzilla.redhat.com/show_bug.cgi?id=1807472
Bug ID: 1807472
Summary: jflex-1.8.0 is available
Product: Fedora
Version: rawhide
Status: NEW
Component: jflex
Keywords: FutureFeature, Triaged
Assignee: stewardship-sig(a)lists.fedoraproject.org
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: akurtako(a)redhat.com, decathorpe(a)gmail.com,
jaromir.capik(a)email.cz,
java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com,
stewardship-sig(a)lists.fedoraproject.org
Target Milestone: ---
Classification: Fedora
Latest upstream release: 1.8.0
Current version/release in rawhide: 1.7.0-2.fc32
URL: http://jflex.de/download.html
Please consult the package updates policy before you issue an update to a
stable branch: https://fedoraproject.org/wiki/Updates_Policy
More information about the service that created this bug can be found at:
https://fedoraproject.org/wiki/Upstream_release_monitoring
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
Based on the information from anitya:
https://release-monitoring.org/project/1449/
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2412302
Bug ID: 2412302
Summary: Command tomcat-digest does not work
Product: Fedora
Version: 43
Hardware: x86_64
URL: https://github.com/dogtagpki/pki/actions/runs/19042963
645/job/54385194983#step:27:1
OS: Linux
Status: NEW
Component: tomcat
Severity: medium
Assignee: csutherl(a)redhat.com
Reporter: mfargett(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: akrajcik(a)redhat.com, alee(a)redhat.com,
csutherl(a)redhat.com, dsoumis(a)redhat.com,
ivan.afonichev(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
szappis(a)redhat.com
Target Milestone: ---
Classification: Fedora
The command tomcat-digest included in tomcat package does not work as expected
but provide an exception for missing class.
Reproducible: Always
Steps to Reproduce:
1. Install tomcat package
2. Run the command tomcat-digest
3.
Actual Results:
$ tomcat-digest Secret.123
/usr/bin/build-classpath: Could not find commons-daemon Java extension for this
JVM
/usr/bin/build-classpath: Could not find servlet Java extension for this JVM
/usr/bin/build-classpath: error: Some specified jars were not found
Nov 04, 2025 5:25:03 PM org.apache.catalina.startup.Tool main
SEVERE: Exception locating main() method
java.lang.NoClassDefFoundError: jakarta/servlet/http/HttpServletRequest
at java.base/java.lang.ClassLoader.defineClass1(Native Method)
at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:962)
at
java.base/java.security.SecureClassLoader.defineClass(SecureClassLoader.java:144)
at
java.base/jdk.internal.loader.BuiltinClassLoader.defineClass(BuiltinClassLoader.java:776)
at
java.base/jdk.internal.loader.BuiltinClassLoader.findClassOnClassPathOrNull(BuiltinClassLoader.java:691)
at
java.base/jdk.internal.loader.BuiltinClassLoader.loadClassOrNull(BuiltinClassLoader.java:620)
at
java.base/jdk.internal.loader.BuiltinClassLoader.loadClass(BuiltinClassLoader.java:578)
at java.base/java.lang.ClassLoader.loadClass(ClassLoader.java:490)
at java.base/java.lang.Class.getDeclaredMethods0(Native Method)
at java.base/java.lang.Class.privateGetDeclaredMethods(Class.java:3010)
at java.base/java.lang.Class.getMethodsRecursive(Class.java:3146)
at java.base/java.lang.Class.getMethod0(Class.java:3131)
at java.base/java.lang.Class.getMethod(Class.java:2164)
at org.apache.catalina.startup.Tool.main(Tool.java:205)
Caused by: java.lang.ClassNotFoundException:
jakarta.servlet.http.HttpServletRequest
at
java.base/jdk.internal.loader.BuiltinClassLoader.loadClass(BuiltinClassLoader.java:580)
at java.base/java.lang.ClassLoader.loadClass(ClassLoader.java:490)
... 14 more
Expected Results:
$ tomcat-digest Secret.123
Secret.123:aeac5fb53b58010cd5c54388b3560c3e68a1a101cb12954932091fe9e915f792$1$ceb32bf97ab86dd7814e553b3fac81e9881ff02da0a699526752aeafcfe11a8ee20514ecc93ddb7a5100c44143abafe20136a83831e2afff32b4f7ca5356264e
Additional Information:
]# rpm -qa|grep tomcat
tomcat-servlet-6.0-api-10.1.46-1.fc43.noarch
tomcat-el-5.0-api-10.1.46-1.fc43.noarch
tomcat-jsp-3.1-api-10.1.46-1.fc43.noarch
tomcat-lib-10.1.46-1.fc43.noarch
tomcat-10.1.46-1.fc43.noarch
tomcat-native-2.0.8-3.fc43.x86_64
tomcat-jakartaee-migration-1.0.9-7.fc43.noarch
dogtag-jss-tomcat-5.9.0~alpha1-1.fc43.x86_64
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2412302
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2406626
Bug ID: 2406626
Summary: CVE-2025-61795 tomcat: Apache Tomcat: Denial of
service [fedora-42]
Product: Fedora
Version: 42
Status: NEW
Whiteboard: {"flaws": ["6eab9c9d-1aeb-40eb-be2d-8ce11f77fb37"]}
Component: tomcat
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: csutherl(a)redhat.com
Reporter: jmoroney(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: akrajcik(a)redhat.com, alee(a)redhat.com,
csutherl(a)redhat.com, dsoumis(a)redhat.com,
ivan.afonichev(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
szappis(a)redhat.com
Blocks: 2406588
Target Milestone: ---
Classification: Fedora
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability
management information. If something is wrong or missing, please contact a
member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essent…
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2406626
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2406638
Bug ID: 2406638
Summary: CVE-2025-55754 tomcat: Apache Tomcat: console
manipulation [fedora-42]
Product: Fedora
Version: 42
Status: NEW
Whiteboard: {"flaws": ["9a5be6b2-f8bb-4b09-a91c-667240ba4e89"]}
Component: tomcat
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: csutherl(a)redhat.com
Reporter: jmoroney(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: akrajcik(a)redhat.com, alee(a)redhat.com,
csutherl(a)redhat.com, dsoumis(a)redhat.com,
ivan.afonichev(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
szappis(a)redhat.com
Blocks: 2406590
Target Milestone: ---
Classification: Fedora
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability
management information. If something is wrong or missing, please contact a
member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essent…
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2406638
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2406656
Bug ID: 2406656
Summary: CVE-2025-55752 tomcat: Apache Tomcat: Directory
traversal via rewrite with possible RCE [fedora-42]
Product: Fedora
Version: 42
Status: NEW
Whiteboard: {"flaws": ["2f1c6e1f-2261-4664-91a4-b78afd22d293"]}
Component: tomcat
Keywords: Security, SecurityTracking
Severity: high
Priority: high
Assignee: csutherl(a)redhat.com
Reporter: jmoroney(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: akrajcik(a)redhat.com, alee(a)redhat.com,
csutherl(a)redhat.com, dsoumis(a)redhat.com,
ivan.afonichev(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
szappis(a)redhat.com
Blocks: 2406591
Target Milestone: ---
Classification: Fedora
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability
management information. If something is wrong or missing, please contact a
member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essent…
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2406656
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2429952
Bug ID: 2429952
Summary: CVE-2025-48976 tomcat: Apache Commons FileUpload DoS
via part headers [fedora-41]
Product: Fedora
Version: 41
Status: NEW
Whiteboard: {"flaws": ["eea4b59d-5a66-4519-87a1-eee9ed9ae716"]}
Component: tomcat
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: csutherl(a)redhat.com
Reporter: ahanwate(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: akrajcik(a)redhat.com, alee(a)redhat.com,
csutherl(a)redhat.com, dsoumis(a)redhat.com,
ivan.afonichev(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
szappis(a)redhat.com
Blocks: 2373020 (CVE-2025-48976)
Target Milestone: ---
Classification: Fedora
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=2373020
[Bug 2373020] CVE-2025-48976 apache-commons-fileupload: Apache Commons
FileUpload DoS via part headers
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2429952
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…