SUSE-CU-2025:989-1: Security update of containers/apache-tomcat

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: containers/apache-tomcat
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2025:989-1
Container Tags        : containers/apache-tomcat:10.1-openjdk17 , containers/apache-tomcat:10.1.34-openjdk17 , containers/apache-tomcat:10.1.34-openjdk17-62.23
Container Release     : 62.23
Severity              : important
Type                  : security
References            : 1231472 1236878 1236960 CVE-2024-12133 
-----------------------------------------------------------------

The container containers/apache-tomcat was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2025:501-1
Released:    Thu Feb 13 10:53:21 2025
Summary:     Recommended update for permissions
Type:        recommended
Severity:    moderate
References:  1236960
This update for permissions fixes the following issues:

- Version update 20240826.
- Reintroduced nscd socket, this is a whitelisting for glibc (bsc#1236960).

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2025:508-1
Released:    Thu Feb 13 12:29:31 2025
Summary:     Recommended update for findutils
Type:        recommended
Severity:    moderate
References:  1231472
This update for findutils fixes the following issue:

- fix crash when file system loop was encountered (bsc#1231472).

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2025:548-1
Released:    Fri Feb 14 11:19:24 2025
Summary:     Security update for libtasn1
Type:        security
Severity:    important
References:  1236878,CVE-2024-12133
This update for libtasn1 fixes the following issues:

- CVE-2024-12133: the processing of input DER data containing a large number of SEQUENCE OF or SET OF elements takes
  quadratic time to complete. (bsc#1236878)


The following package changes have been done:

- findutils-4.8.0-150300.3.3.2 updated
- libtasn1-6-4.13-150000.4.11.1 updated
- libtasn1-4.13-150000.4.11.1 updated
- permissions-20240826-150600.10.18.2 updated