-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 20 Sep 2026 13:06:01 +0200 Source: tomcat10 Architecture: source Version: 10.1.60-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org> Changed-By: Bastien Roucariès <rouca@debian.org> Closes: 1142455 1145699 Changes: tomcat10 (10.1.60-1~deb12u1) bookworm-security; urgency=high . * Team upload * New upstream version includes the security fixes for the following reported vulnerabilities: CVE-2026-50229, CVE-2026-53404, CVE-2026-53434, CVE-2026-55276, CVE-2026-55955, CVE-2026-55956, CVE-2026-59083, CVE-2026-59084, CVE-2026-65182, CVE-2026-65183, CVE-2026-65637, CVE-2026-65905, CVE-2026-65927, CVE-2026-66299, CVE-2026-66422, CVE-2026-68525, CVE-2026-68569, CVE-2026-68763, CVE-2026-73180 (Closes: #1145699, #1142455) Checksums-Sha1: 504e71228b0c889cb0b5396d4260872a81dfdb0b 2894 tomcat10_10.1.60-1~deb12u1.dsc ed78d8261c01ba7e7ff01add818c4ccc67ac7b9e 5243632 tomcat10_10.1.60.orig.tar.xz 5c891576c9e89927eb8b5d890d70a316a862a637 39456 tomcat10_10.1.60-1~deb12u1.debian.tar.xz 9535dc2fb9c473d2fd082ef9c24b1152d1d2d42c 11092 tomcat10_10.1.60-1~deb12u1_source.buildinfo Checksums-Sha256: ebaec61508a9ebcaf903f3e000fe9ac9010285599880b5a85bd23efa1e282b44 2894 tomcat10_10.1.60-1~deb12u1.dsc 9927f9a2a5be2d76fd5c0fd12ccafac64f4696c40901668c70c0fbc56258d660 5243632 tomcat10_10.1.60.orig.tar.xz c66f511048d9722230823fda44f1ae7d38ab9543d6e680e7f8a110e15dfb5fef 39456 tomcat10_10.1.60-1~deb12u1.debian.tar.xz 98df85eaf3a9ccd1b603e8059a2808437725f822ca2099c5c58fd4c7a8ae4217 11092 tomcat10_10.1.60-1~deb12u1_source.buildinfo Files: 15abfef4868c758ef73a3a708d237852 2894 java optional tomcat10_10.1.60-1~deb12u1.dsc 11431f9e2f702cd6c233dd2ca039856f 5243632 java optional tomcat10_10.1.60.orig.tar.xz f638b92ba958187301cbb25901115ddd 39456 java optional tomcat10_10.1.60-1~deb12u1.debian.tar.xz 2cbef1d468b2ee96f5b4f7fb197fd87f 11092 java optional tomcat10_10.1.60-1~deb12u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEXQGHuUCiRbrXsPVqADoaLapBCF8FAmrx/5QACgkQADoaLapB CF/S+hAAlZ4TTH6zDTkWTZp++jkj0/EU2Z+6lapaCfPEJOaa1u/4xRaleM90ed6P GAI9wJfBFu6VsnIGDwwhBf735Iv1E5Tl98j8LveYEtvNvPRX5dStYy4+mtC4a16O XwH6L4dfeqSlqSN52Jc0ZReJpATin8SJkZ9uLWR30QuHKRuca+RM39j4DgqTTDR0 jVv7eIqKqON82KtN7fR9TqXts7nzwQ9tnuL+GYjnZm18oXuYQTQWt3UuQ5HQOxBO 2owyCvTC2Z91JRV42NEo5T6thOd0gY5QOte1rXqXpP1asiwwd3Ot0c7zxrdFDPNG rpu66Q4PD5v81sO0NH2HJcFuFYfIDCkKDhoZv4lWh4qKfVqR6STzQWj69FmlFsqU se4Ay7V/JvSld/UzKN4kLNKm9XEv15iZ0+4KeApU28+/PfuBDI5/2f9sTksbFH6Z bcQ8ch2mN0jovieRdDk739hiW9zCO9DnykbzhqXB9e0INyTLnNR4BQN4cwHzSxqW 45FVtmp5MZpsdBWOZ+NzyVuCVZI/BvAJZ4RB+0G5scV09Qt/VkGcZZAvr2NUvG2N S3QAeuGwTRFwuGOUdwPfDW5pvpPZveGeBv5BUQqrdPuE9T8vQTKR0VmWW4tUsBO/ J/V9p8MHwFSHuiJAA/lDv2iJ2GR+BuE/QrOKsH16AtG+QRTB5Rs= =dCqp -----END PGP SIGNATURE-----
