openSUSE: 2025:1024-1 important: tomcat10 Advisory Security Update

This update for tomcat10 fixes the following issues:

* CVE-2025-24813: Fixed potential RCE and/or information disclosure/corruption

with partial PUT (bsc#1239302)

Other fixes:

* Update to Tomcat 10.1.39

* Fixes:

* launch with java 17 (bsc#1239676)

* Catalina

* Fix: 69602: Fix regression in releases from 12-2024 that were too strict and rejected weak etags in the If-Range header with a 400 response. Instead will consider it as a failed match since strong etags are required for If-Range. (remm)

* Fix: When looking up class loader resources by resource name, the resource name should not start with '/'. If the resource name does start with '/', Tomcat is lenient and looks it up as if the '/' was not present. When the web application class loader was configured with external repositories and names starting with '/' were used for lookups, it was possible that cached 'not found' results could effectively hide lookup results using the correct resource name. (markt)