-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 19 Sep 2026 23:03:17 +0200
Source: tomcat10
Architecture: source
Version: 10.1.60-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Bastien Roucariès <rouca@debian.org>
Changes:
 tomcat10 (10.1.60-1~deb13u1) trixie-security; urgency=high
 .
   * Team upload
   * New upstream version includes the security fixes for the following reported
     vulnerabilities:
     CVE-2026-50229, CVE-2026-53404, CVE-2026-53434, CVE-2026-55276,
     CVE-2026-55955, CVE-2026-55956, CVE-2026-59083, CVE-2026-59084,
     CVE-2026-65182, CVE-2026-65183, CVE-2026-65637, CVE-2026-65905,
     CVE-2026-65927, CVE-2026-66299, CVE-2026-66422, CVE-2026-68525,
     CVE-2026-68569, CVE-2026-68763, CVE-2026-73180
Checksums-Sha1:
 e86c642ee51c40bbe8fd6169e506e2ae1572a0ef 2949 tomcat10_10.1.60-1~deb13u1.dsc
 ed78d8261c01ba7e7ff01add818c4ccc67ac7b9e 5243632 tomcat10_10.1.60.orig.tar.xz
 da9c8925c66f8e4dbfc6ecfdff046ed75a317eeb 38520 tomcat10_10.1.60-1~deb13u1.debian.tar.xz
 aef870ee3914beb65a0ddcba5f3d365b8484903e 11092 tomcat10_10.1.60-1~deb13u1_source.buildinfo
Checksums-Sha256:
 d020887eeb0bbb3e0c78a376d3cd0995aeefef18f6d14d30545a219594ab0d0b 2949 tomcat10_10.1.60-1~deb13u1.dsc
 9927f9a2a5be2d76fd5c0fd12ccafac64f4696c40901668c70c0fbc56258d660 5243632 tomcat10_10.1.60.orig.tar.xz
 9abccf405db30515baa02f83c4974645e8e16e7dbf41b090b9a6910b5a19b84e 38520 tomcat10_10.1.60-1~deb13u1.debian.tar.xz
 be346b5fa460d0f97e78252564f93a4b76d031fe223a842f1d7e6185200da38f 11092 tomcat10_10.1.60-1~deb13u1_source.buildinfo
Files:
 9acd941b7a629bc9800f728887a44b11 2949 java optional tomcat10_10.1.60-1~deb13u1.dsc
 11431f9e2f702cd6c233dd2ca039856f 5243632 java optional tomcat10_10.1.60.orig.tar.xz
 26f6061f043efbe7ab8e79714c15d221 38520 java optional tomcat10_10.1.60-1~deb13u1.debian.tar.xz
 2f4cff84156c481ba63a4e90fb12c034 11092 java optional tomcat10_10.1.60-1~deb13u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEXQGHuUCiRbrXsPVqADoaLapBCF8FAmrx8AwACgkQADoaLapB
CF/jWA/7BYjVkf3GZUOHTOl48BB7M6+IiiuD+ZSvfhLvhpgpst3a/1IpZGJtwyjo
GZvn5kJEUb9BTGvyJPyx6f6bwrO2oOwC5X0lk0rxpYkJZTHJouO3B+LBaLn0yQBr
/wT/6sPhNPoSGI0oExBXobF7SS8ejLSruo2ygzFKlLXVB1wBFlmg7yZfyh7C8Jwy
dL0oq540XH2ZlQFKSven7W4IDC+RBYHa+nrbD5N2LDL9G850Y2AdHqzwBv/hdike
7VvX8VlhKULfn6MiSTFzffcqa19V8S/cmB30LwKhZDzSKdav69znogvXCiyGo+/i
uKyNy/o//FoLyg76Vpg9q+SNTTOOit7QvINGdEWJkE+wDB1CuR7KAxTrMw1JoGAS
I59MeICfHk8IPVq4v2PKgPRNfx3LOqA4kzOeVPUajyXwPuFh5xiw3F98Y9ssKOeh
fm+28LjAgnjRhT2Ddo+Fs+DqKngiQl+Xcd8qLdnWh4otua0l6D4+RJazvV1+Fb7f
4MogWjesHKY+G3/bEgeJK7erv04UjHMStxPwKuFIZL8xAQ6JtD94HLocOInTdM1i
FDG/7aLJdFiQ158f3llUvtnlGOOemyWoBvItBkA9F8VDjwf9CWT/JBh1I3oqd0cm
U2J6meh9cYzYrjf1oJZ+5zI25d4VB0xslnW84mU2nDxUklzP6j4=
=vSeP
-----END PGP SIGNATURE-----