From eacc238d729b5e39b58d0f96cbcc7b459425208c Mon Sep 17 00:00:00 2001 From: Tim-Lukas Blom Date: Mon, 29 Sep 2025 16:27:51 +0200 Subject: [PATCH 1/5] DOCKER-468 Update tomcat for CVE-2025-24813 Signed-off-by: Tim-Lukas Blom --- tomcat-base/tomcat-embedded-10/overload.gradle | 2 +- tomcat-base/tomcat-embedded-9/overload.gradle | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/tomcat-base/tomcat-embedded-10/overload.gradle b/tomcat-base/tomcat-embedded-10/overload.gradle index 30ac5419..47009112 100644 --- a/tomcat-base/tomcat-embedded-10/overload.gradle +++ b/tomcat-base/tomcat-embedded-10/overload.gradle @@ -1,5 +1,5 @@ ext { tomcat = [ - version: '10.1.34' + version: '10.1.46' ] } \ No newline at end of file diff --git a/tomcat-base/tomcat-embedded-9/overload.gradle b/tomcat-base/tomcat-embedded-9/overload.gradle index bc9e1b54..4c14e2ad 100644 --- a/tomcat-base/tomcat-embedded-9/overload.gradle +++ b/tomcat-base/tomcat-embedded-9/overload.gradle @@ -1,5 +1,5 @@ ext { tomcat = [ - version: '9.0.98' + version: '9.0.109' ] } \ No newline at end of file From b4d5f7dd7a0ddac54fc85489b3760e905ada46f8 Mon Sep 17 00:00:00 2001 From: Tim-Lukas Blom Date: Mon, 29 Sep 2025 16:30:37 +0200 Subject: [PATCH 2/5] DOCKER-468 Updated changelog Signed-off-by: Tim-Lukas Blom --- Changelog.md | 1 + 1 file changed, 1 insertion(+) diff --git a/Changelog.md b/Changelog.md index ee98fcd7..5a26916c 100644 --- a/Changelog.md +++ b/Changelog.md @@ -7,6 +7,7 @@ The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/). ## released ### Fixed +* [PR #230](https://github.com/xenit-eu/docker-alfresco/pull/230) DOCKER-468 Update Tomcat for CVE-2025-24813 * [PR #220](https://github.com/xenit-eu/docker-alfresco/pull/220) DOCKER-463 Fixed json logging for Alfresco 7.4/23.x * [PR #213](https://github.com/xenit-eu/docker-alfresco/pull/213) DOCKER-460 update tomcat for CVE-2024-50379 * [PR #118](https://github.com/xenit-eu/docker-alfresco/pull/118) ALFREDOPS-842 upgrade json logging version to 0.0.6 From 1454d7a3717da0c418dfb2e5c91374d5457de45e Mon Sep 17 00:00:00 2001 From: Tim-Lukas Blom Date: Tue, 30 Sep 2025 11:24:06 +0200 Subject: [PATCH 3/5] DOCKER-468 tomcat 9 to version 9.0.99 Signed-off-by: Tim-Lukas Blom --- tomcat-base/tomcat-embedded-9/overload.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tomcat-base/tomcat-embedded-9/overload.gradle b/tomcat-base/tomcat-embedded-9/overload.gradle index 4c14e2ad..b30e9bc4 100644 --- a/tomcat-base/tomcat-embedded-9/overload.gradle +++ b/tomcat-base/tomcat-embedded-9/overload.gradle @@ -1,5 +1,5 @@ ext { tomcat = [ - version: '9.0.109' + version: '9.0.99' ] } \ No newline at end of file From 8ee8363c677096884d9a315deed2738481f9eb6d Mon Sep 17 00:00:00 2001 From: Tim-Lukas Blom Date: Wed, 1 Oct 2025 09:51:26 +0200 Subject: [PATCH 4/5] DOCKER-468 tomcat v9.0.104 Signed-off-by: Tim-Lukas Blom --- tomcat-base/tomcat-embedded-9/overload.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tomcat-base/tomcat-embedded-9/overload.gradle b/tomcat-base/tomcat-embedded-9/overload.gradle index b30e9bc4..5b40c5a3 100644 --- a/tomcat-base/tomcat-embedded-9/overload.gradle +++ b/tomcat-base/tomcat-embedded-9/overload.gradle @@ -1,5 +1,5 @@ ext { tomcat = [ - version: '9.0.99' + version: '9.0.104' ] } \ No newline at end of file From 618fcd8f03e85f4f27e941ad4c3081bc060263fc Mon Sep 17 00:00:00 2001 From: Tim-Lukas Blom Date: Wed, 1 Oct 2025 10:08:45 +0200 Subject: [PATCH 5/5] DOCKER-468 tomcat v9.0.100 Signed-off-by: Tim-Lukas Blom --- tomcat-base/tomcat-embedded-9/overload.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tomcat-base/tomcat-embedded-9/overload.gradle b/tomcat-base/tomcat-embedded-9/overload.gradle index 5b40c5a3..9ebd25b2 100644 --- a/tomcat-base/tomcat-embedded-9/overload.gradle +++ b/tomcat-base/tomcat-embedded-9/overload.gradle @@ -1,5 +1,5 @@ ext { tomcat = [ - version: '9.0.104' + version: '9.0.100' ] } \ No newline at end of file