OPENSUSE-SU-2026:21984-1 Security update for libtcnative-1-0, libtcnative-2-0, tomcat, tomcat10, tomcat11

This update for libtcnative-1-0, libtcnative-2-0, tomcat, tomcat10, tomcat11 fixes the following issues: Security issues fixed: - CVE-2026-73581: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore bsc1282631. - CVE-2026-75973: improper authentication when...

OPENSUSE-SU-2026:11907-1 tomcat10-10.1.60-1.1 on GA media

These are all security issues fixed in the tomcat10-10.1.60-1.1 package on the GA media of openSUSE Tumbleweed...

ROS-20260922-73-0088

The vulnerability in Tomcat10 is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

ROS-20260922-73-0085

The vulnerability in Tomcat10 is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

ROS-20260922-73-0076

The vulnerability in Tomcat10 is related to access control deficiencies. Exploiting this vulnerability can allow attackers to increase their privileges...

ROS-20260922-73-0056

The vulnerability in Tomcat10 is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260922-73-0119

The vulnerability in Tomcat10 is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260922-73-0067

The vulnerability in Tomcat10 is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260922-73-0062

The vulnerability in Tomcat10 is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers, who operate remotely, to gain increased privileges...

ROS-20260922-73-0073

The vulnerability in Tomcat10 is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260922-73-0082

The vulnerability in Tomcat10 relates to bypassing the authentication process. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260922-73-0054

The vulnerability in Tomcat10 is related to incorrect session duration. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260922-73-0079

The vulnerability in Tomcat10 is related to a single-shift error. Exploiting this vulnerability can allow an attacker to cause a service failure...

CLEANSTART-2026-SR71382 Security fix for CVE-2025-31650 applied in: tomcat10 10.1.53-r0

Security vulnerability affects the tomcat10 package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-EV68545 Security fix for CVE-2025-31651 applied in: tomcat10 10.1.53-r0

Security vulnerability affects the tomcat10 package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-BB54045 Security fix for CVE-2025-66614 applied in: thingsboard 4.3.0.1-r2, thingsboard 4.3.1-r0, tomcat10 10.0.27-r1

CVE-2025-66614 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101691

Security vulnerability affects the tomcat10 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100471

Security vulnerability affects the tomcat10 package. This issue is resolved in later releases. See references for vulnerability details...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: tomcat10: tomcat10-10.1.60-0.1.hum1 noarch tomcat10-admin-webapps-10.1.60-0.1.hum1 noarch tomcat10-common-10.1.60-0.1.hum1 noarch tomcat10-docs-webapp-10.1.60-0.1.hum1 noarch...

SUSE-SU-2026:23711-1 Security update for tomcat10

This update for tomcat10 fixes the following issues: - CVE-2026-65182: Bypass longest prefix security constraint bsc1276893. - CVE-2026-65183: TOCTOU when setting specific permissions for Unix Domain Sockets bsc1276894. - CVE-2026-65637: HTTP/2 no-authority bypass of strict SNI validation - fix...