Security Bulletin: IBM Db2 Developer Extension is affected by vulnerability in tomcat-embed-core (CVE-2026-41284,CVE-2026-42498,CVE-2026-43514,CVE-2026-24880, CVE-2026-34483,CVE-2026-34487,CVE-2026-34500)

Summary IBM Db2 Developer Extension is affected by vulnerability in tomcat-embed-core CVE-2026-41284,CVE-2026-42498,CVE-2026-43514,CVE-2026-24880, CVE-2026-34483,CVE-2026-34487,CVE-2026-34500 Vulnerability Details CVEID:CVE-2026-41284 DESCRIPTION: Allocation of Resources Without Limits or...

Security update for tomcat11 (important)

openSUSE security update: security update for tomcat11 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21121-1 Rating: important References: bsc1265145 bsc1265162 bsc1265163 bsc1265165 bsc1265166 bsc1265167 bsc1265168 Cross-References: CVE-2026-4128...

Security Bulletin: Multiple Vulnerabilities in IBM DevOps Build.

Summary Multiple vulnerabilities were addressed in IBM DevOps Build 7.1.0.4. Vulnerability Details CVEID:CVE-2026-41284 DESCRIPTION: Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M...

SUSE SLES16: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc (SUSE-SU-2026:22195-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:22195-1 advisory. This update for tomcat fixes the following issues Update to Tomcat 9.0.118: - CVE-2026-41284: Unbounded read in WebDAV LOCK and...

OPENSUSE-SU-2026:21117-1 Security update for tomcat

This update for tomcat fixes the following issues Update to Tomcat 9.0.118: - CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handling bsc1265162. - CVE-2026-41293: HTTP/2 request headers not validated bsc1265163. - CVE-2026-42498: WebSocket authentication header exposure bsc1265165. -...

OPENSUSE-SU-2026:21122-1 Security update for tomcat10

This update for tomcat10 fixes the following issues Update to Tomcat 10.1.55: - CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handling bsc1265162. - CVE-2026-41293: HTTP/2 request headers not validated bsc1265163. - CVE-2026-42498: WebSocket authentication header exposure bsc1265165....

SUSE SLES12 Security Update : tomcat (SUSE-SU-2026:2299-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2299-1 advisory. This update for tomcat fixes the following issues Update to Tomcat 9.0.118: - CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handli...

Security update for tomcat

This update for tomcat fixes the following issues Update to Tomcat 9.0.118: CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handling bsc1265162. CVE-2026-41293: HTTP/2 request headers not validated bsc1265163. CVE-2026-42498: WebSocket authentication header exposure bsc1265165...

tomcat10-10.1.55-1.1 on GA media (moderate)

tomcat10-10.1.55-1.1 on GA media Announcement ID: openSUSE-SU-2026:10926-1 Rating: moderate Cross-References: CVE-2026-41284 CVE-2026-41293 CVE-2026-42498 CVE-2026-43512 CVE-2026-43513 CVE-2026-43514 CVE-2026-43515 CVSS scores: CVE-2026-41284 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:...

tomcat11-11.0.22-1.1 on GA media (moderate)

tomcat11-11.0.22-1.1 on GA media Announcement ID: openSUSE-SU-2026:10927-1 Rating: moderate Cross-References: CVE-2026-41284 CVE-2026-41293 CVE-2026-42498 CVE-2026-43512 CVE-2026-43513 CVE-2026-43514 CVE-2026-43515 CVSS scores: CVE-2026-41284 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:...

Linux Distros Unpatched Vulnerability : CVE-2026-41284

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from...

io.fabric8.jube.images.fabric8:tomcat-8.0 (>=2.1.11, <=2.2.0) potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat (8.0.23)

org.apache.tomcat:tomcat MAVEN version 8.0.23 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - io.fabric8.jube.images.fabric8:tomcat-8.0 =2.1.11, =2.2.0 Source cves: CVE-2026-41284 Source advisory:...

org.apache.tomee:apache-tomee (7.0.3), org.apache.tomee:arquillian-tomee-codi-tests (7.0.3) +6 more potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat (8.5.11)

org.apache.tomcat:tomcat MAVEN version 8.5.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.apache.tomee:apache-tomee 7.0.3 - org.apache.tomee:arquillian-tomee-codi-tests 7.0.3 -...

com.earldouglas:war-runner (>=5.0.0-m5_3.1, <=5.2.2_3.1), com.heroku:webapp-runner (>=8.5.68.0, <=8.5.68.1) +10 more potentially affected by CVE-2026-41284 via org.apache.tomcat.embed:tomcat-embed-core (8.5.68)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.68 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.earldouglas:war-runner =5.0.0-m53.1, =8.5.68.0, =8.5.68.0, =8.5.68.0,...

org.apache.tomcat.embed:tomcat-embed-jasper (8.5.8), org.apache.tomcat.embed:tomcat-embed-websocket (8.5.8) +1 more potentially affected by CVE-2026-41284 via org.apache.tomcat.embed:tomcat-embed-core (8.5.8)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 8.5.8 -...

org.apache.tomcat:tomcat-catalina-ha (8.0.43), org.apache.tomcat:tomcat-catalina-jmx-remote (8.0.43) +6 more potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat-catalina (8.0.43)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.43 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 8.0.43 - org.apache.tomcat:tomcat-catalina-jmx-remote...

org.openl.rules.demo:org.openl.rules.demo.demo (>=5.16.3, <=5.19.9) potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat (7.0.40)

org.apache.tomcat:tomcat MAVEN version 7.0.40 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.openl.rules.demo:org.openl.rules.demo.demo =5.16.3, =5.19.9 Source cves: CVE-2026-41284 Source advisory:...

com.bsb.common.vaadin:com.bsb.common.vaadin.embed (>=0.1, <=0.4), com.bsb.common.vaadin:com.bsb.common.vaadin7.embed (0.4) +9 more potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat-catalina (7.0.26)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.26 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.bsb.common.vaadin:com.bsb.common.vaadin.embed =0.1, =3.0.0, =0.9.10.m2, =1.9.5, =2.5.0,...

io.continual:continualflowcontrol (>=0.2.23, <=0.2.27), io.continual:continualhttp (>=0.2.23, <=0.2.57) +14 more potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat-catalina (8.5.65)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.65 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - io.continual:continualflowcontrol =0.2.23, =0.2.23, =0.3.0, =0.2.23, =0.2.39, =0.2.23,...

ch.rasc:embeddedtc (2.11), com.aol.microservices:micro-tomcat (>=0.79, <=0.82) +4 more potentially affected by CVE-2026-41284 via org.apache.tomcat.embed:tomcat-embed-core (8.0.29)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.29 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.rasc:embeddedtc 2.11 - com.aol.microservices:micro-tomcat =0.79, =0.79,...