Updated tomcat packages fix security vulnerabilities

🗓️ 12 Apr 2026 05:23:15Reported by Gentoo FoundationType

mageia

mageia🔗 advisories.mageia.org👁 7 Views

Tomcat updates fix CVEs: request smuggling, redirects, TLS order, OCSP checks, padding oracle, JSON logs.

Reporter	Title	Published	Views	Family All 436
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM DataStax Enterprise	27 May 202617:14	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for April 2026	30 Apr 202611:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in tomcat-embed-core-11.0.18.jar	13 May 202616:45	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Tomcat might affect IBM Storage Defender Copy Data Management	4 May 202616:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integration Bus for z/OS is vulnerable to multiple vulnerabilities due to Apache Tomcat	14 May 202614:09	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Tomcat and Lodash might affect IBM Storage Defender Copy Data Management	4 May 202616:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerabilities in pygments-2.19.2-py3-none-any.whl	17 Jun 202615:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in tomcat-embed-core-11.0.18.jar	17 Jun 202615:30	–	ibm
IBM Security Bulletins	Security Bulletin: The Apache Tomcat application server that is shipped with IBM ApplinX is vulnerable to multiple vulnerabilities.	16 Jun 202617:54	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	27 May 202616:03	–	ibm

OS	OS Version	Architecture	Package	Package Version	Filename
Mageia	9	any	tomcat	9.0.117-1	tomcat-9.0.117-1.noarch.rpm

Source	Link
bugs	www.bugs.mageia.org/show_bug.cgi
openwall	www.openwall.com/lists/oss-security/2026/04/09/20
openwall	www.openwall.com/lists/oss-security/2026/04/09/21
openwall	www.openwall.com/lists/oss-security/2026/04/09/22
openwall	www.openwall.com/lists/oss-security/2026/04/09/23
openwall	www.openwall.com/lists/oss-security/2026/04/09/24
openwall	www.openwall.com/lists/oss-security/2026/04/09/25
openwall	www.openwall.com/lists/oss-security/2026/04/09/26
openwall	www.openwall.com/lists/oss-security/2026/04/09/27
openwall	www.openwall.com/lists/oss-security/2026/04/09/28

12 Apr 2026 05:23Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.19.1

EPSS0.03645

SSVC

request smuggling redirects security protocol order ocsp checks padding oracle json logs