Updated tomcat packages fix security vulnerabilities

🗓️ 04 Sep 2026 17:53:22Reported by Gentoo FoundationType

mageia🔗 advisories.mageia.org👁 11 Views

Multiple security vulnerabilities in Tomcat including auth bypass, DoS, and constraint bypass.

Reporter	Title	Published	Views	Family All 689
IBM Security Bulletins	Security Bulletin: IBM ApplinX is vulnerable to multiple issues like improper Access control, Authentication Bypass, Improper Authorization and more due to the use of Apache-Tomcat .	22 Sep 202612:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found in CICS Transaction Gateway for Multiplatforms.	9 Sep 202609:46	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	27 Aug 202619:16	–	ibm
IBM Security Bulletins	Security Bulletin: DEV-EXT - tomcat-embed-core-10.1.57.jar (Publicly disclosed vulnerability found by Scanner)	17 Sep 202620:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integration Bus for z/OS is vulnerable to Improper Handling of URL Encoding and Insufficient Technical Documentation due to Apache Tomcat (CVE-2026-59083 & CVE-2026-59084)	29 Jul 202616:38	–	ibm
IBM Security Bulletins	Security Bulletin: Apache Tomcat (tomcat-embed-websocket) ‚Äî Insufficient Session Expiration via WebSocket	17 Sep 202620:19	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities were addressed in IBM DataStax Enterprise 6.9.25	16 Sep 202616:29	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Tomcat affects DB2 Dev Extension (CVE-2026-59083, CVE-2026-59084)	17 Sep 202619:50	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Tomcat Server library (CVE-2026-59083, CVE-2026-55956) affect Power HMC.	22 Sep 202607:03	–	ibm
attackerkb	CVE-2026-59084	14 Jul 202608:24	–	attackerkb

OS	OS Version	Architecture	Package	Package Version	Filename
Mageia	9	noarch	tomcat	9.0.121-1.mga9	tomcat-9.0.121-1.mga9.noarch.rpm
Mageia	10	noarch	tomcat	9.0.121-1.mga10	tomcat-9.0.121-1.mga10.noarch.rpm

Source	Link
bugs	www.bugs.mageia.org/show_bug.cgi
openwall	www.openwall.com/lists/oss-security/2026/07/14/7
lists	www.lists.apache.org/thread/3g63zos2gkjo5vgnrk8kxmosv47w6wbq
openwall	www.openwall.com/lists/oss-security/2026/07/14/8
lists	www.lists.apache.org/thread/7w9746ootcxo0gvx26xjpw80l31f1qw7
openwall	www.openwall.com/lists/oss-security/2026/07/28/25
lists	www.lists.apache.org/thread/8owczcc1o8qw1rxmg9gvfk4w2jnh4l5k
openwall	www.openwall.com/lists/oss-security/2026/08/26/1
openwall	www.openwall.com/lists/oss-security/2026/08/26/2
openwall	www.openwall.com/lists/oss-security/2026/08/26/3

04 Sep 2026 17:53Current

8.4High risk

Vulners AI Score8.4

CVSS 3.15.3

EPSS0.00775

SSVC

Tomcat security vulnerability auth bypass denial of service constraint bypass package update