Security Bulletin: IBM Db2 Developer Extension is affected by vulnerability in tomcat-embed-core (CVE-2026-25854, CVE-2026-29129, CVE-2026-29145, CVE-2026-29146, CVE-2026-32990)

Summary IBM Db2 Developer Extension is affected by vulnerability in tomcat-embed-core CVE-2026-25854, CVE-2026-29129, CVE-2026-29145, CVE-2026-29146, CVE-2026-32990 Vulnerability Details CVEID:CVE-2026-25854 DESCRIPTION: Occasional URL redirection to untrusted Site 'Open Redirect' vulnerability i...

ROOT-APP-MAVEN-CVE-2026-29129 CVE-2026-29129 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root

Root has patched CVE-2026-29129 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...

Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in tomcat-embed-core-11.0.18.jar

Summary IBM Watson Discovery Cartridge affected by vulnerability in tomcat-embed-core-11.0.18.jar Vulnerability Details CVEID:CVE-2026-24880 DESCRIPTION: Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in Apache Tomcat via invalid chunk extension. This...

Security update for tomcat

This update for tomcat fixes the following issues: Security fixes: CVE-2026-24880: Request smuggling via invalid chunk extension bsc1261850. CVE-2026-25854: Occasionally open redirect bsc1261851. CVE-2026-29129: TLS cipher order is not preserved bsc1261852. CVE-2026-29145: OCSP checks sometimes...

Security update for tomcat10

This update for tomcat10 fixes the following issues: Security fixes: CVE-2026-24880: Request smuggling via invalid chunk extension bsc1261850. CVE-2026-25854: Occasionally open redirect bsc1261851. CVE-2026-29129: TLS cipher order is not preserved bsc1261852. CVE-2026-29145: OCSP checks sometimes...

Security update for tomcat

This update for tomcat fixes the following issues: Security fixes: CVE-2026-24880: Request smuggling via invalid chunk extension bsc1261850. CVE-2026-25854: Occasionally open redirect bsc1261851. CVE-2026-29129: TLS cipher order is not preserved bsc1261852. CVE-2026-29145: OCSP checks sometimes...

SUSE-SU-2026:1572-1 Security update for tomcat

This update for tomcat fixes the following issues: Security fixes: - CVE-2026-24880: Request smuggling via invalid chunk extension bsc1261850. - CVE-2026-25854: Occasionally open redirect bsc1261851. - CVE-2026-29129: TLS cipher order is not preserved bsc1261852. - CVE-2026-29145: OCSP checks...

Security update for tomcat10 (important)

openSUSE security update: security update for tomcat10 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20612-1 Rating: important References: bsc1258371 bsc1261850 bsc1261851 bsc1261852 bsc1261853 bsc1261854 bsc1261855 bsc1261856 bsc1261857...

OPENSUSE-SU-2026:20595-1 Security update for tomcat11

This update for tomcat11 fixes the following issues: - Update to Tomcat 11.0.21 - CVE-2026-24880: Request smuggling via invalid chunk extension bsc1261850. - CVE-2026-25854: Occasionally open redirect bsc1261851. - CVE-2026-29129: TLS cipher order is not preserved bsc1261852. - CVE-2026-29145: OC...

OESA-2026-1970 tomcat security update

Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Security Fixes: Inconsistent Interpretation of...

tomcat-9.0.117-1.1 on GA media (moderate)

tomcat-9.0.117-1.1 on GA media Announcement ID: openSUSE-SU-2026:10547-1 Rating: moderate Cross-References: CVE-2026-24880 CVE-2026-25854 CVE-2026-29129 CVE-2026-29145 CVE-2026-29146 CVE-2026-32990 CVE-2026-34483 CVE-2026-34486 CVE-2026-34487 CVE-2026-34500 CVSS scores: CVE-2026-24880 SUSE : 4.8...

tomcat11-11.0.21-1.1 on GA media (moderate)

tomcat11-11.0.21-1.1 on GA media Announcement ID: openSUSE-SU-2026:10549-1 Rating: moderate Cross-References: CVE-2026-24880 CVE-2026-25854 CVE-2026-29129 CVE-2026-29145 CVE-2026-29146 CVE-2026-32990 CVE-2026-34483 CVE-2026-34486 CVE-2026-34487 CVE-2026-34500 CVSS scores: CVE-2026-24880 SUSE : 4....

Linux Distros Unpatched Vulnerability : CVE-2026-29129

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Configured cipher preference order not preserved vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.16 through 11.0.18, from 10.1.51...

com.github.hazendaz.tomcat:tomcat9-config (9.0.115), org.ops4j.pax.web:pax-web-spi (8.0.35) potentially affected by CVE-2026-29129 via org.apache.tomcat:tomcat (9.0.115)

org.apache.tomcat:tomcat MAVEN version 9.0.115 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - com.github.hazendaz.tomcat:tomcat9-config 9.0.115 - org.ops4j.pax.web:pax-web-spi 8.0.35 Source cves:...

com.github.waffle:waffle-tomcat9 (3.6.0), org.apache.cxf.fediz.examples.wsclientwebapp:webapp (1.7.2) +9 more potentially affected by CVE-2026-29129 via org.apache.tomcat:tomcat-coyote (9.0.115)

org.apache.tomcat:tomcat-coyote MAVEN version 9.0.115 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-coyote and may be impacted: - com.github.waffle:waffle-tomcat9 3.6.0 - org.apache.cxf.fediz.examples.wsclientwebapp:webapp...

ai.telosforge:kimaira-starter-dms (1.2.6), ai.telosforge:kimaira-starter-web-security (1.2.6) +721 more potentially affected by CVE-2026-29129 via org.apache.tomcat.embed:tomcat-embed-core (10.1.52)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 10.1.52 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ai.telosforge:kimaira-starter-dms 1.2.6 -...

com.github.hazendaz.tomcat:tomcat10-config (10.1.52), org.apache.tomee:apache-tomee (10.1.4) +6 more potentially affected by CVE-2026-29129 via org.apache.tomcat:tomcat (10.1.52)

org.apache.tomcat:tomcat MAVEN version 10.1.52 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - com.github.hazendaz.tomcat:tomcat10-config 10.1.52 - org.apache.tomee:apache-tomee 10.1.4 -...

com.github.hazendaz.tomcat:tomcat11-config (11.0.18) potentially affected by CVE-2026-29129 via org.apache.tomcat:tomcat (11.0.18)

org.apache.tomcat:tomcat MAVEN version 11.0.18 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - com.github.hazendaz.tomcat:tomcat11-config 11.0.18 Source cves: CVE-2026-29129 Source advisory:...

com.github.mjeanroy:junit-servers-tomcat-9 (3.5.0), com.github.waffle.demo:waffle-demo-spring-boot-filter2 (3.6.0) +32 more potentially affected by CVE-2026-29129 via org.apache.tomcat.embed:tomcat-embed-core (9.0.115)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 9.0.115 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.mjeanroy:junit-servers-tomcat-9 3.5.0 -...

ai.timefold.solver.enterprise:timefold-solver-enterprise-spring-boot-integration-test (2.0.0-beta-2), ai.timefold.solver:spring-boot-integration-test (>=2.0.0-beta-1, <=2.0.0-beta-2) +495 more potentially affected by CVE-2026-29129 via org.apache.tomcat.embed:tomcat-embed-core (11.0.18)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 11.0.18 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: -...