SUSE-SU-2026:22195-1 Security update for tomcat

This update for tomcat fixes the following issues Update to Tomcat 9.0.118: - CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handling bsc1265162. - CVE-2026-41293: HTTP/2 request headers not validated bsc1265163. - CVE-2026-42498: WebSocket authentication header exposure bsc1265165. -...

SUSE-SU-2026:22196-1 Security update for tomcat11

This update for tomcat11 fixes the following issues Update to Tomcat 11.0.22: - CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handling bsc1265162. - CVE-2026-41293: HTTP/2 request headers not validated bsc1265163. - CVE-2026-42498: WebSocket authentication header exposure bsc1265165....

OPENSUSE-SU-2026:21121-1 Security update for tomcat11

This update for tomcat11 fixes the following issues Update to Tomcat 11.0.22: - CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handling bsc1265162. - CVE-2026-41293: HTTP/2 request headers not validated bsc1265163. - CVE-2026-42498: WebSocket authentication header exposure bsc1265165....

Linux Distros Unpatched Vulnerability : CVE-2026-12151

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Impact: The undici WebSocket client enforces maxPayloadSize on the cumulative byte count of fragments in a message but does not enforce a limit on the number of...

Linux Distros Unpatched Vulnerability : CVE-2026-9675

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Impact: The undici WebSocket client enforces maxPayloadSize per-frame but does not enforce the cumulative size of fragmented uncompressed messages. A malicious...

SUSE SLES12 Security Update : qemu (SUSE-SU-2026:2406-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2406-1 advisory. - CVE-2023-1544: pvrdma: out-of-bounds read in pvrdmaringnextelemread bsc1209554. - CVE-2025-11234: qemu-kvm: use-after-free in websocket...

Linux Distros Unpatched Vulnerability : CVE-2026-48779

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ws is an open source WebSocket client and server for Node.js. All versions from 1.1.0 up to but not including 5.2.5, from 6.0.0 up to 6.2.4, from 7.0.0 up to...

org.http4k:http4k-aws (3.153.0), org.http4k:http4k-client-apache (3.153.0) +31 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (3.153.0)

org.http4k:http4k-core MAVEN version 3.153.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.153.0 - org.http4k:http4k-client-apache 3.153.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (3.34.0), org.http4k:http4k-client-apache (3.34.0) +25 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (3.34.0)

org.http4k:http4k-core MAVEN version 3.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.34.0 - org.http4k:http4k-client-apache 3.34.0 - org.http4k:http4k-client-apache-async 3.34...

org.http4k:http4k-aws (3.11.1), org.http4k:http4k-client-apache (3.11.1) +23 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (3.11.1)

org.http4k:http4k-core MAVEN version 3.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.11.1 - org.http4k:http4k-client-apache 3.11.1 - org.http4k:http4k-client-apache-async 3.11...

org.http4k:http4k-aws (3.173.0), org.http4k:http4k-client-apache (3.173.0) +24 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (3.173.0)

org.http4k:http4k-core MAVEN version 3.173.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.173.0 - org.http4k:http4k-client-apache 3.173.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (3.16.0), org.http4k:http4k-client-apache (3.16.0) +23 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (3.16.0)

org.http4k:http4k-core MAVEN version 3.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.16.0 - org.http4k:http4k-client-apache 3.16.0 - org.http4k:http4k-client-apache-async 3.16...

org.http4k:http4k-aws (3.21.2), org.http4k:http4k-client-apache (3.21.2) +24 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (3.21.2)

org.http4k:http4k-core MAVEN version 3.21.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.21.2 - org.http4k:http4k-client-apache 3.21.2 - org.http4k:http4k-client-apache-async 3.21...

org.http4k:http4k-aws (3.187.0), org.http4k:http4k-client-apache (3.187.0) +31 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (3.187.0)

org.http4k:http4k-core MAVEN version 3.187.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.187.0 - org.http4k:http4k-client-apache 3.187.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (3.160.0), org.http4k:http4k-client-apache (3.160.0) +27 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (3.160.0)

org.http4k:http4k-core MAVEN version 3.160.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.160.0 - org.http4k:http4k-client-apache 3.160.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (3.190.0), org.http4k:http4k-client-apache (3.190.0) +31 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (3.190.0)

org.http4k:http4k-core MAVEN version 3.190.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.190.0 - org.http4k:http4k-client-apache 3.190.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (3.23.1), org.http4k:http4k-client-apache (3.23.1) +25 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (3.23.1)

org.http4k:http4k-core MAVEN version 3.23.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.23.1 - org.http4k:http4k-client-apache 3.23.1 - org.http4k:http4k-client-apache-async 3.23...

org.http4k:http4k-aws (3.6.1), org.http4k:http4k-client-apache (3.6.1) +21 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (3.6.1)

org.http4k:http4k-core MAVEN version 3.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.6.1 - org.http4k:http4k-client-apache 3.6.1 - org.http4k:http4k-client-okhttp 3.6.1 -...

org.http4k:http4k-aws (3.3.0), org.http4k:http4k-client-apache (3.3.0) +19 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (3.3.0)

org.http4k:http4k-core MAVEN version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.3.0 - org.http4k:http4k-client-apache 3.3.0 - org.http4k:http4k-client-okhttp 3.3.0 -...

org.http4k:http4k-aws (3.186.0), org.http4k:http4k-client-apache (3.186.0) +31 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (3.186.0)

org.http4k:http4k-core MAVEN version 3.186.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.186.0 - org.http4k:http4k-client-apache 3.186.0 - org.http4k:http4k-client-apache-async...