tomcat11-admin-webapps-11.0.10-150600.13.9.1<>,hhp9|Bn1_eh'6WDO#AW[ N-oӯ< vRER:ȅdՃd<FʼnD8z pE-d}nA \#͛ZSՍX{Nc()=C' #NyP =}xpd0$<> ]TJqx&_aFz+UȆ($ty~[Oy X[{,sđGs>@ED?E4d! / o 'Kekr(t( ( ( (  ( ((l((L   (898:>;F;G<(H<(I=D(X=lY=x\=(]>L(^? bB{cC$dCeCfClCuC(vDdzDDDDE0Ctomcat11-admin-webapps11.0.10150600.13.9.1The host manager and manager web applications for Apache TomcatThe host manager and manager web-based applications for Apache Tomcat.hh01-ch2dSUSE Linux Enterprise 15SUSE LLC Apache-2.0https://www.suse.com/Productivity/Networking/Web/Servershttps://tomcat.apache.orglinuxnoarchchown -R tomcat:tomcat /usr/share/tomcat/tomcat-webapps/manager/META-INF runuser -u tomcat -g tomcat -- xsltproc --output /usr/share/tomcat/tomcat-webapps/manager/META-INF/context.xml /etc/tomcat/allowLinking.xslt /usr/share/tomcat/tomcat-webapps/manager/META-INF/context.xml if [ ! -e /usr/share/tomcat/webapps/manager ]; then ln -sf /usr/share/tomcat/tomcat-webapps/manager /usr/share/tomcat/webapps/manager fi chown -R tomcat:tomcat /usr/share/tomcat/tomcat-webapps/host-manager/META-INF runuser -u tomcat -g tomcat -- xsltproc --output /usr/share/tomcat/tomcat-webapps/host-manager/META-INF/context.xml /etc/tomcat/allowLinking.xslt /usr/share/tomcat/tomcat-webapps/host-manager/META-INF/context.xml if [ ! -e /usr/share/tomcat/webapps/host-manager ]; then ln -sf /usr/share/tomcat/tomcat-webapps/host-manager /usr/share/tomcat/webapps/host-manager fi_  H* PT~` v> 5*xj PT~eAA큤AA큤A큤A큤AA큤AA큤A큤A큤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-11.0.10-150600.13.9.1.src.rpmconfig(tomcat11-admin-webapps)tomcat-implementation-admin-webappstomcat11-admin-webapps     /bin/shconfig(tomcat11-admin-webapps)libxslt-toolsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PartialHardlinkSets)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)tomcat11util-linux11.0.10-150600.13.9.13.0.4-14.6.0-14.0.4-14.0-15.2-111.0.10-150600.13.9.1tomcat-implementation-admin-webapps4.14.3hP@hChZ@hH@h@hhmmichele.bussolotto@suse.commichele.bussolotto@suse.commichele.bussolotto@suse.commichele.bussolotto@suse.comfstrba@suse.comfstrba@suse.comricardo.mestre@suse.com- Update to Tomcat 11.0.10 * Fixed CVEs: + CVE-2025-48989: Update the HTTP/2 overhead documentation (bsc#1243895) * Catalina + Fix: Fix bloom filter population for archive indexing when using a packed WAR containing one or more JAR files. (markt) * Coyote + Fix: 69748: Add missing call to set keep-alive timeout when using HTTP/1.1 following an async request, which was present for AJP. (remm/markt) + Fix: 69762: Fix possible overflow during HPACK decoding of integers. Note that the maximum permitted value of an HPACK decoded integer is Integer.MAX_VALUE. (markt) + Fix: Update the HTTP/2 overhead documentation - particularly the code comments - to reflect the deprecation of the PRIORITY frame and clarify that a stream reset always triggers an overhead increase. (markt) * Cluster + Update: Add enableStatistics configuration attribute for the DeltaManager, defaulting to true. (remm) * WebSocket + Fix: Align the WebSocket extension handling for WebSocket client connections with WebSocket server connections. The WebSocket client now only includes an extension requested by an endpoint in the opening handshake if the WebSocket client supports that extension. (markt) * Web applications + Fix: Manager and Host Manager. Provide the Manager and Host Manager web applications with a dedicated favicon file rather than using the one from the ROOT web application which might not be present or may represent something entirely different. Pull requests #876 and #878 by Simon Arame. * Other + Update: Update Checkstyle to 10.26.1. (markt) + Add: Improvements to French translations. (remm) + Add: Improvements to Japanese translations by tak7iji. (markt)- Update to Tomcat 11.0.9 - adapt tomcat-jdt.patch * Fixed CVEs: + CVE-2025-52520: Align size tracking for multipart requests with FileUpload's use of long. (bsc#1246388) + CVE-2025-53506: Apply the initial HTTP/2 connection limits earlier. (bsc#1246318) * Catalina + Fix: Ensure application configured welcome files override the defaults when configuring an embedded web application programmatically. (markt) + Update: Optimize Request#getCharsetHolder to avoid repeated parsing when charset is null. Patch provided by morning-gu. (schultz) + Fix: Allow the default servlet to set the content length when the content length is known, no content has been written and a Writer is being used. (markt) + Fix: 69717: Correct a regression in the fix for CVE-2025-49125 that prevented access to PreResources and PostResources when mounted below the web application root with a path that was terminated with a file separator. (remm/markt) + Fix: 69731: Fix an issue that meant that the value of maxParameterCount applied was smaller than intended for multipart uploads with non-file parts when the parts were processed before query string parameters. (markt) + Fix: Align size tracking for multipart requests with FileUpload's use of long. (schultz) * Coyote + Fix: 69710: Increase the default for maxPartCount from 10 to 50. Update the documentation to provide more details on the memory requirements to support multi-part uploads while avoiding a denial of service risk. (markt) + Fix: 69713: Correctly handle an HTTP/2 data frame that includes padding when the headers include a content-length. (remm/markt) + Fix: Correctly collect statistics for HTTP/2 requests and avoid counting one request multiple times. Based on pull request #868 by qingdaoheze. (markt) + Fix: Fix JMX value for keepAliveCount on the endpoint. Also add the value of useVirtualThreads in JMX. (remm) + Fix: 69728: Remove incorrect warning when HTTP/2 is used with optional certificate verification and improve the warnings when a web application tries to use CLIENT-CERT with either HTTP/2 or a JSSE implementation of TLS 1.3. (markt) + Fix: When setting the initial HTTP/2 connection limit, apply those limits earlier. (markt) * Jasper + Code: Remove IMPL_OBJ_START from EL grammar for IDENTIFIER. (markt) + Code: Remove the INSTANCEOF and FUNCTIONSUFFIX definitions from the EL grammar as both are unused. (markt) * Web applications + Add: Documentation. Provide more explicit guidance regarding the security considerations for enabling write access to the web application via WebDAV, HTTP PUT requests or similar. (markt) + Add: Documentation. Add a section on reverse proxies to the security considerations page. (markt) * Other + Update: Update to the Eclipse JDT compiler 4.36. (markt) + Update: Update UnboundID to 7.0.3. (markt) + Update: Update Checkstyle to 10.25.1. (markt) + Update: Improvements to French translations. (remm) + Update: Improvements to Japanese translations provided by tak7iji. (markt)- Update to Tomcat 11.0.8 * Fixed CVEs: + CVE-2025-46701: refactor CGI servlet to access resources via WebResources (bsc#1243815) + CVE-2025-48988: limits the total number of parts in a multi-part request and limits the size of the headers provided with each part (bsc#1244656) + CVE-2025-49125: Expand checks for webAppMount (bsc#1244649) * Catalina + Add: Support for the java:module namespace which mirrors the java:comp namespace. + Fix: 69690: Calling HttpServletRequest.getParameter() and related methods for a request with content type multipart/form-data when the mapped servlet does not have a @MultipartConfig or equivalent should not trigger an exception. Note that calling getPart() or getParts() is these circumstances will trigger an exception. + Add: Support parsing of multiple path parameters separated by ; in a single URL segment. Based on pull request #860 by Chenjp. + Fix: 69699: Encode redirect URL used by the rewrite valve with the session id if appropriate, and handle cross context with different session configuration when using rewrite. + Add: #863: Support for comments at the end of lines in text rewrite map files to align behaviour with Apache httpd. Pull request provided by Chenjp. + Fix: 69706: Saved request serialization issue in FORM introduced when allowing infinite session timeouts. + Fix: Expand the path checks for Pre-Resources and Post-Resources mounted at a path within the web application. + Fix: Process possible path parameters rewrite production in the rewrite valve. + Fix: 69588: Enable allowLinking to be set on PreResources, JarResources and PostResources. If not set explicitly, the setting will be inherited from the Resources. + Add: 69633: Support for Filters using context root mappings. + Fix: 69643: Optimize directory listing for large amount of files. Patch submitted by Loic de l'Eprevier. + Fix: #843: Off by one validation logic for partial PUT ranges and associated test case. Submitted by Chenjp. + Refactor: GCI servlet to access resources via the WebResource API. + Fix: 69662: Report name in exception message when a naming lookup failure occurs. Based on code submitted by Donald Smith. + Fix: Ensure that the FORM authentication attribute authenticationSessionTimeout works correctly when sessions have an infinite timeout when authentication starts. + Add: Provide a content type based on file extension when web application resources are accessed via a URL. * Coyote + Refactor: #861: TaskQueue to use the new interface RetryableQueue which enables better integration of custom Executors which provide their own BlockingQueue implementation. Pull request provided by Paulo Almeida. + Add: Finer grained control of multi-part request processing via two new attributes on the Connector element. maxPartCount limits the total number of parts in a multi-part request and maxPartHeaderSize limits the size of the headers provided with each part. Add support for these new attributes to the ParameterLimitValve. * Jasper + Fix: 69696: Mark the JSP wrapper for reload after a failed compilation. + Fix: 69635: Add support to jakarta.el.ImportHandler for resolving inner classes. + Add: #842: Support for optimized execution of c:set and c:remove tags, when activated via JSP servlet param useNonstandardTagOptimizations. + Fix: An edge case compilation bug for JSP and tag files on case insensitive file systems that was exposed by the test case for 69635. * Web applications + Fix: 69694: Improve error reporting of deployment tasks done using the manager webapp when a copy operation fails. + Add: 68876: Documentation. Update the UML diagrams for server start-up, request processing and authentication using PlantUML and include the source files for each diagram. * Other + Add: Thread name to webappClassLoader.stackTraceRequestThread message. Patch provided by Felix Zhang. + Update: Tomcat Native to 2.0.9. + Update: The internal fork of Apache Commons FileUpload to 1.6.0-RC1 (2025-06-05). + Update: EasyMock to 5.6.0. + Update: Checkstyle to 10.25.0. + Fix: Use the full path when the installer for Windows sets calls icacls.exe to set file permissions. + Update: Improvements to Japanese translations provided by tak7iji. + Update: Jacoco to 0.8.13. + Code: Explicitly set the locale to be used for Javadoc. For official releases, this locale will be English (US) to support reproducible builds. + Update: Byte Buddy to 1.17.5. + Update: Checkstyle to 10.23.1. + Update: File extension to media type mappings to align with the current list used by the Apache Web Server (httpd). + Update: Improvements to French translations. + Update: Improvements to Japanese translations provided by tak7iji.- Hardening permissions (bsc#1242722)- Do not require standalone versions of apis that tomcat itself carries - Do not version dependencies- Make conflicts and provides more generic- Initial packaging of tomcat11 11.0.6/bin/shh01-ch2d 1756204563  !" $)*11.0.10-150600.13.9.111.0.1011.0.10-150600.13.9.1   host-managerMETA-INFcontext.xmlWEB-INFjsp401.jsp403.jsp404.jspmanager.xmlweb.xmlcssmanager.cssimagesasf-logo.svgfavicon.icotomcat.svgindex.jspmanagerMETA-INFcontext.xmlWEB-INFjsp401.jsp403.jsp404.jspconnectorCerts.jspconnectorCiphers.jspconnectorTrustedCerts.jspsessionDetail.jspsessionsList.jspweb.xmlcssmanager.cssimagesasf-logo.svgfavicon.icotomcat.svgindex.jspstatus.xsdxform.xsl/usr/share/tomcat/tomcat-webapps//usr/share/tomcat/tomcat-webapps/host-manager//usr/share/tomcat/tomcat-webapps/host-manager/META-INF//usr/share/tomcat/tomcat-webapps/host-manager/WEB-INF//usr/share/tomcat/tomcat-webapps/host-manager/WEB-INF/jsp//usr/share/tomcat/tomcat-webapps/host-manager/css//usr/share/tomcat/tomcat-webapps/host-manager/images//usr/share/tomcat/tomcat-webapps/manager//usr/share/tomcat/tomcat-webapps/manager/META-INF//usr/share/tomcat/tomcat-webapps/manager/WEB-INF//usr/share/tomcat/tomcat-webapps/manager/WEB-INF/jsp//usr/share/tomcat/tomcat-webapps/manager/css//usr/share/tomcat/tomcat-webapps/manager/images/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:40364/SUSE_SLE-15-SP6_Update/416f190d6a2ae9a5ac18cd8763a39da0-tomcat11.SUSE_SLE-15-SP6_Updatedrpmxz5noarch-suse-linuxdirectoryXML 1.0 document, ASCII textHTML document, ASCII textASCII textSVG Scalable Vector Graphics image$&<23Vutf-802fc07edca171c3c6968f1d914b76eb7d936a386e3326a6241d7facb7ecabea5?7zXZ !t/n]"k%3u̜W[Ц|"3؄8tGyeLX`mtnkWWms=þkIrs{F849ع< ]ߊ`xVceiA ?fo{.2i%.%JiOXھCh#N򃅼&,$@I$%VMͥi?UJtsTTYS:[Ҁ{!?"w'(4_Rztpce@[~`8uD:Z_GI#'VSA9QNG "OEE̋rz?ȭOU/=p#H@Kh%a c^B ر .+7R?eCaUI: ;\cI7f߄+[OhWe8=5}7Rl@dsc[C$8'!f}Xheoio` kT 1!pHgAi ˎ?AHG&0t .X霖j잮ul/&EYoҜ.z4Awִ U^'Lw$.PgڠggG0a:qKg.s]G||= ~>[=&] \-?S6v}8Ut,A{iTԺs^=7n7%( Zxo 2wTA>r13=JN*{:;U N d ÛKQ` pi:W1H&\n(]Hz@NWԵ+ <Xt\z"%g*"Gߛ7v$eV́Zj!ڂOj_²4_Nڹ8% }$f?x o;/|1 /.R"̓E#~`e*}G@ꢠrKg=4ͪ=O$"ύY^E@P6{#+̯x6@I|n\_pMۈ=Er Hl/H.HLljJ{ >s:<Cn\ sA."C`jХA=Q縧:CjFf9G$MF Q$S7܆ g? {ȏZz|/V%hc?*|Lu\C]5N~%-J y\UyZvuv8sȢ}$TM:cG)K viCL5H(@Qw?rmTT@vZD#(q}PՁ'E#cHOZ0Vɘj̀1dj&f-54F=en~bCd@Y|+[VM-~ڀV))z-̴^s$g)uQ<;PQ:G-FV9C(1|ƑS5iއO9墪qcyU3$RFPu ꑗdAtFOy:@mbar#~ji Ð0e҄%_OwK/fD%JbF5},`緙JTքFQv Eb& ;_U82@k~u#~'QF=Hd@\(4;/1*]*h ma5lY[V*] yqS8G_a+?8p"OuO 0~B&( ,0sn ;Gt |AALXqKR$p-Ҹ)VGE-rDԸMແ$5bpb> Jpjkhe$kò`)* 攠轖H _fioPa+@M2J6$>¨ Y.th=gk Wx:_x ;S5M0[{} KJyRC1ܻ,}{P/V "jj˲6Z@N$ݎy2XKBJ9O3lS$jX*` 4%Wh>zoN2ui2}^t J Rgba"hP\Ubgj'Bу'_!;W^*^_ @G?B%KxvGsrY>Xϲx%x $cAoh&\pv:u?|W^d$ kPJijQdz@CsGk>$`D:+KkssRZ g@٫BwkefW7@LtJΠx(n2q"LIê}_?p ZdVUe1@d[g(}'eb'8/+PJXӁZw0چ0XˀP&MHW 9у8<~޲Z6@=\νGγ~̇؜+@c稘BB2(Ţ-uҽMp/Ԥ+ͻӇ<ߥ,ӨkV|j? `f콽3y[4*/G^wz `)(*i 7'®޼Gv"pPKx*D0C.Ξ $ҮY!Sv42^>{b go A`|4nЧ@3~9z_JфÎgȱ WpwCOj7Oҏ-sQ a'5XT0e#!͈޼ġBȌm[Z`F:YW>3#DyԞ{xSt1WÍ9=@6^"{=SP,xKй;LzZr,YŏL}-V0ś:؄߃a6@AP͒NAVKO\ Zt)RWSHET ɻJ 1|\4 7+"=UlO.i. "{KΔk.=F,7{9krΤ䄘sJqD&"وAGg:\{&!5'ޜ8_z44(\zu`LorEP5*%k#v)Iy`*ٱ5{؛|],*eArU:::P/Av4Sp_Ob}C9R~iL9b~ok:.v[B;mfLi)t9l4d~8[?\-qhŝ ɐ}̹Ip|,n:MK:Kېs2j. %]MBH _K(PVQouN:~E=fW oYD~{兩Zbǒ޿߿,|%ayRR$~r[&g֒7*J6n[~!HgSیmhR-?*=3Ӣ#Im>eOd]4fJ@/.o+>ޏ,TI@~S)Bn;4ZL~1ϪMp(ua5מ/Lm .`HhI,9#)P@+`c}=H!5ϡ: k=m.۴M"x5,{ŗиA?:M/.tޔ+݉o@UL9TL_B |ŤܸjsӆT3]s*Dd}Q&=6Wp έrHzn &`YՕ]uh]P'|X=6Kإ(WF iIPm},yyQ6:Q5 B$nM_0>6N؟ǝ sKX.ףm8xk>e"8T>r!%*̐u<=&SDwKT*=g%ār~/!mS5s̷\XUAkq`8?1eeJ$FA!8iRͼfv  } 6lU* 8^oEM"~ Gw,Co "K4 xke039jIGj@I̷gow:0ͶR0 W0fW߹;˽9ZSOdM<=eWZՠz 齑!ZՒ gt_zsN›ڰ͆lAU dBeRYak[ǧ;c]%k8vTTVOTߜFxk)틟_e tP*7 CYr<7~&BB1ptTHu/Bp25Roüm|' K95A#Tr(RJ1,2r͔)5[tHoCh7x/yj교uGUmIQLpo.a:[ [̓%1>!Ytb%C۪Cm"ݍ-ax7yZЕƽ{$Y>]Ux*˄somp3  <0hԖ?lHt^K&{ 3w"磪XC4yoCB+,vʀy YZ