- Update to Tomcat 10.1.44

apache-tomcat-10.1.43-src.tar.gz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAmhkU9cACgkQHPApP6U8
-pFhElw/+PtORhhIobN6tQaSZYWQ8wfgNnd+gYpT31sp7ufUmKpHDYU0/FeU/kCmZ
-FEIPbxPfEA4vHjbJh6E+sN59+s8HO5A255M3qum/NIJW8XsN5EdZcn+8fZVogMp7
-jWtnB7A9TPZ32mOljY7GXfXe4Da7PUoH8DZgD+eJ/iXrYoK6dgha5Z0cUQWuHq7j
-h/nCajbnNhsicIipAXUlUEwkWi6br3CPSFTdULmG9WvxgUEvKetSftOScqtOCE5C
-Tb5SZFyHuui2BAT9d6D6Varjae8GcpvkBupa6YhL981jERrGybo38IfSP2HWAlwP
-vQIuCGkhSoe/Nn65f2UxMiftyWPY8AgyedRFzE2EXxyxWZCOXksbovvqlhKxoStk
-MofhhAMhNApdk7d+wipuLcjRXdQBXo5PSo0782uDE+Fyl7sTl7dRnVmQNCTyrVUg
-/bFqMUzuQS7znqXNj+0yD9x1aC+LeiNMsvYTfPihqv7SeJUqz10CyqkkO8aYetGJ
-RhHlcrzl0+hsCzyYV8W2BG28GHfTRxSfYA43tlTqg5c7BFzOs3NlJFLwMcxToszw
-7Lb2xXevGnBRSM27UbXeLFXr9/xDiMu9C0fxAIpCNKhFVIidNoJ/vvIkMtj38xzT
-DWz0EQB/8TSwfEmqs+c5uppziZa7eN6iJfWBp18IqPLC1wPgKGY=
-=VK2I
------END PGP SIGNATURE-----

apache-tomcat-10.1.44-src.tar.gz.asc

@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQIzBAABCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAmiQsokACgkQHPApP6U8
+pFgXgBAAiqI8kGmeyVtr0mqgwHibJK8EnjUBcsiFzV2PdTSsGKX7Xk5GBkR7xJ5i
+3MZJw44irpJmaQdkcMVfB5IlUx/xNqEXsAd1Ac1xrJFSxA8xqgPD7Wsec1bruR6s
+Wac3c5d1uqasq8Scu95NsSjWvXc4kr3fkUk9dTCAyUcrtXwQffibXN1MZwuKvG+5
+/49h8IbVTxutj0mp45WnyxTa5yiITkX1homdXv5L1Y+TqdGaR7gagKGQAoTUeGL+
+UR3pmDP2720SleMbmTWjSZqykOxpnBgsOL7UNoGzzu/wMW4HKGZAfvjxWPq8oyPq
+mPGQbHPtDkOzak/Eb+CBkrYE78KO9Iv9qgJ1JhTRzuGncLvNZ1RMmxxhGJr0uR9+
+qHdKHsGAIJI9Mj8dZLWoBkpKJq/OjxXBnKu1U+ax5nocOegvk7xK9TZ6YbxoSBmW
+JtDRE0GLSA9CfL22xhFSfQMG/l+WMdQi5vwrHPTB9GW2HxS0Oc+L8rKfxovM5rUb
+17rMa+wyJgPfc2efSaJwMPz+8AZEV7IrMwiqDx5cUegdgCG5z8n9EOVyL+iJgZp5
+EdUpQxNWnLil9YP4zkqHauJXNCBwcXZyUiNhuQRLBGT/hkBk6SD2WKC1qz42dGK6
+8zyulJBo/ninEQPnXzIDysHFd+/lXuo7vknKC3DAQtDESGF6MHY=
+=h0AE
+-----END PGP SIGNATURE-----

tomcat10.changes

@@ -1,3 +1,42 @@
+-------------------------------------------------------------------
+Mon Aug 25 13:28:00 UTC 2025 - Michele Bussolotto <michele.bussolotto@suse.com>
+
+- Update to Tomcat 10.1.44
+  * Fixed CVEs:
+    + CVE-2025-48989: Update the HTTP/2 overhead documentation (bsc#1243895)
+  * Catalina
+    + Fix: Fix bloom filter population for archive indexing when using a packed
+      WAR containing one or more JAR files. (markt)
+  * Coyote
+    + Fix: 69748: Add missing call to set keep-alive timeout when using
+      HTTP/1.1 following an async request, which was present for AJP.
+      (remm/markt)
+    + Fix: 69762: Fix possible overflow during HPACK decoding of integers. Note
+      that the maximum permitted value of an HPACK decoded integer is
+      Integer.MAX_VALUE. (markt)
+    + Fix: Update the HTTP/2 overhead documentation - particularly the code
+      comments - to reflect the deprecation of the PRIORITY frame and clarify
+      that a stream reset always triggers an overhead increase. (markt)
+    + Fix: 69762: Additional overflow fix for HPACK decoding of integers. Pull
+      request #880 by Chenjp. (markt)
+  * Cluster
+    + Update: Add enableStatistics configuration attribute for the
+      DeltaManager, defaulting to true. (remm)
+  * WebSocket
+    + Fix: Align the WebSocket extension handling for WebSocket client
+      connections with WebSocket server connections. The WebSocket client now
+      only includes an extension requested by an endpoint in the opening
+      handshake if the WebSocket client supports that extension. (markt)
+  * Web applications
+    + Fix: Manager and Host Manager. Provide the Manager and Host Manager web
+      applications with a dedicated favicon file rather than using the one from
+      the ROOT web application which might not be present or may represent
+      something entirely different. Pull requests #876 and #878 by Simon Arame.
+  * Other
+    + Update: Update Checkstyle to 10.26.1. (markt)
+    + Add: Improvements to French translations. (remm)
+    + Add: Improvements to Japanese translations by tak7iji. (markt) 
+
 -------------------------------------------------------------------
 Wed Aug  6 12:45:13 UTC 2025 - Michele Bussolotto <michele.bussolotto@suse.com>
 

tomcat10.spec

@@ -29,7 +29,7 @@
 %define elspec %{elspec_major}.%{elspec_minor}
 %define major_version 10
 %define minor_version 1
-%define micro_version 43
+%define micro_version 44
 %define java_major 1
 %define java_minor 11
 %define java_version %{java_major}.%{java_minor}