CLEANSTART-2026-AM77386 Security fix for CVE-2026-32990 applied in: tomcat9 9.0.115-r0

Security vulnerability affects the tomcat9 package. This issue is resolved in later releases. See references for vulnerability details...

Moderate: Red Hat Security Advisory: tomcat9 security update

An update for tomcat9 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

tomcat9 security update

1:9.0.120-1 - Resolves: RHEL-192649 Tomcat9: Improper Input Validation vulnerability due to incomplete fix CVE-2026-32990 - Resolves: RHEL-192818 Tomcat9: HTTP/2 request headers not validated CVE-2026-41293 - Resolves: RHEL-219582 Tomcat9: Insufficient documentation for EncryptInterceptor may lea...

Oracle Linux 10 : tomcat9 (ELSA-2026-68651)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-68651 advisory. - Resolves: RHEL-192649 Tomcat9: Improper Input Validation vulnerability due to incomplete fix CVE-2026-32990 - Resolves: RHEL-192818 Tomcat9: HTTP/2...

Astra Linux – Vulnerability in Tomcat9

There is a vulnerability in Apache Tomcat related to unchecked error conditions. If Tomcat is configured to use a custom Jakarta Authentication ServerAuthContext component, it may throw an exception during the authentication process without explicitly setting an HTTP status indicating failure. As...

Important: Red Hat Security Advisory: tomcat9 security update

An update for tomcat9 is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

RHEL 10 : tomcat9 (RHSA-2026:67163)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67163 advisory. Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages...

CLEANSTART-2026-OJ84385 Security fixes in tomcat9 9.0.70-r0

Package tomcat9 version 9.0.70-r0 fixes 1 vulnerabilities: CVE-2022-45143...

CLEANSTART-2026-IK14021 Security fixes in tomcat9 9.0.58-r0

Package tomcat9 version 9.0.58-r0 fixes 1 vulnerabilities: CVE-2022-23181...

RHSA-2026:36789 Red Hat Security Advisory: tomcat9 security update

Bulletin has no description...

Debian: Security Advisory (DLA-4468-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHSA-2025:23052 Red Hat Security Advisory: tomcat9 security update

Bulletin has no description...

RHEL 10 : tomcat9 (RHSA-2025:23053)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:23053 advisory. Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages...

tomcat9 security update

An update is available for tomcat9. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Tomcat is the servlet container that is used in the official Reference...

RHSA-2025:14178 Red Hat Security Advisory: tomcat9 security update

Bulletin has no description...

Debian dla-4244 : libtomcat9-embed-java - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4244 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4244-1 [email protected]...

Debian: Security Advisory (DLA-4244-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important Photon OS Security Update - PHSA-2025-5.0-0565

Updates of 'apache-tomcat10', 'apache-tomcat9' packages of Photon OS have been released...

RHSA-2025:11332 Red Hat Security Advisory: tomcat9 security update

Bulletin has no description...

Oracle Linux 10 : tomcat9 (ELSA-2025-11332)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-11332 advisory. - Resolves: RHEL-91765 tomcat: DoS via malformed HTTP/2 PRIORITYUPDATE frame CVE-2025-31650 Tenable has extracted the preceding description block...