SECURITY UPDATE: DoS via incomplete cleanup vulnerability
debian/patches/CVE-2024-23672.patch: add a session close timeout so a
client that never answers the close message cannot hold the connection
open, in java/org/apache/tomcat/websocket/WsSession.java
CVE-2024-23672
SECURITY UPDATE: TOCTOU race condition on case insensitive file systems
debian/patches/CVE-2024-56337.patch: disable the JVM canonical file name
cache via sun.io.useCanonCaches in bin/catalina.sh