Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: tomcat10: tomcat10-10.1.61-0.1.hum1 noarch tomcat10-admin-webapps-10.1.61-0.1.hum1 noarch tomcat10-common-10.1.61-0.1.hum1 noarch tomcat10-docs-webapp-10.1.61-0.1.hum1 noarch...

Security update for libtcnative-1-0, tomcat, tomcat10

This update for libtcnative-1-0, tomcat, tomcat10 fixes the following issues: Security issues fixed: libtcnative-1-0: CVE-2026-86243: buffer overread during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash bsc1282623. CVE-2026-86246: insecure ALLOWCLIENTRENEGOTIATION,...

SUSE-SU-2026:4546-1 Security update for libtcnative-1-0, tomcat, tomcat10

This update for libtcnative-1-0, tomcat, tomcat10 fixes the following issues: Security issues fixed: libtcnative-1-0: - CVE-2026-86243: buffer overread during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash bsc1282623. - CVE-2026-86246: insecure ALLOWCLIENTRENEGOTIATIO...

Security update for libtcnative-1-0, libtcnative-2-0, tomcat, tomcat10, tomcat11 (critical)

openSUSE security update: security update for libtcnative-1-0, libtcnative-2-0, tomcat, tomcat10, tomcat11 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21984-1 Rating: critical References: bsc1282581 bsc1282599 bsc1282620 bsc1282621 bsc1282622...

OPENSUSE-SU-2026:21984-1 Security update for libtcnative-1-0, libtcnative-2-0, tomcat, tomcat10, tomcat11

This update for libtcnative-1-0, libtcnative-2-0, tomcat, tomcat10, tomcat11 fixes the following issues: Security issues fixed: - CVE-2026-73581: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore bsc1282631. - CVE-2026-75973: improper authentication when...

OPENSUSE-SU-2026:11907-1 tomcat10-10.1.60-1.1 on GA media

These are all security issues fixed in the tomcat10-10.1.60-1.1 package on the GA media of openSUSE Tumbleweed...

ROS-20260922-73-0054

The vulnerability in Tomcat10 is related to incorrect session duration. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260922-73-0076

The vulnerability in Tomcat10 is related to access control deficiencies. Exploiting this vulnerability can allow attackers to increase their privileges...

ROS-20260922-73-0085

The vulnerability in Tomcat10 is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

ROS-20260922-73-0119

The vulnerability in Tomcat10 is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260922-73-0056

The vulnerability in Tomcat10 is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260922-73-0073

The vulnerability in Tomcat10 is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260922-73-0088

The vulnerability in Tomcat10 is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

ROS-20260922-73-0067

The vulnerability in Tomcat10 is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260922-73-0079

The vulnerability in Tomcat10 is related to a single-shift error. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260922-73-0082

The vulnerability in Tomcat10 relates to bypassing the authentication process. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260922-73-0062

The vulnerability in Tomcat10 is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers, who operate remotely, to gain increased privileges...

CLEANSTART-2026-SR71382 Security fix for CVE-2025-31650 applied in: tomcat10 10.1.53-r0

Security vulnerability affects the tomcat10 package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-EV68545 Security fix for CVE-2025-31651 applied in: tomcat10 10.1.53-r0

Security vulnerability affects the tomcat10 package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-BB54045 Security fix for CVE-2025-66614 applied in: thingsboard 4.3.0.1-r2, thingsboard 4.3.1-r0, tomcat10 10.0.27-r1

CVE-2025-66614 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...