Unity Linux 20.1060a / 20.1070a Security Update: tomcat (UTSA-2025-986121)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986121 advisory. Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1...

Unity Linux 20.1060a / 20.1070a Security Update: tomcat (UTSA-2025-986137)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986137 advisory. Improper Resource Shutdown or Release vulnerability in Apache Tomcat made Tomcat vulnerable to the made you reset attack. This issue affects Apache Tomcat: from...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: tomcat (UTSA-2025-986098)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986098 advisory. Improper Resource Shutdown or Release vulnerability in Apache Tomcat made Tomcat vulnerable to the made you reset attack. This issue affects Apache Tomcat: from...

Fixed in Apache Tomcat 11.0.12

Low: Delayed cleaning of multipart upload temporary files may lead to DoS CVE-2025-61795 If an error occurred including exceeding limits during the processing of a multipart upload, temporary copies of the uploaded parts written to local storage were not cleaned up immediately but left for the...

Fixed in Apache Tomcat 10.1.47

Low: Delayed cleaning of multipart upload temporary files may lead to DoS CVE-2025-61795 If an error occurred including exceeding limits during the processing of a multipart upload, temporary copies of the uploaded parts written to local storage were not cleaned up immediately but left for the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: tomcat (UTSA-2025-986105)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986105 advisory. Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Apache Tomcat when using the APR/Native connector. This wa...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: tomcat (UTSA-2025-590701)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-590701 advisory. Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1...

Unity Linux 20.1060a / 20.1070a Security Update: tomcat (UTSA-2025-986134)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986134 advisory. Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Apache Tomcat when using the APR/Native connector. This wa...

Unity Linux 20.1060a / 20.1070a Security Update: tomcat (UTSA-2025-986136)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986136 advisory. For some unlikely configurations of multipart upload, an Integer Overflow vulnerability in Apache Tomcat could lead to a DoS via bypassing of size limits. This issue...

Unity Linux 20.1060a / 20.1070a Security Update: tomcat (UTSA-2025-986123)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986123 advisory. Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling for some invalid HTTP priority headers resulted in incomplete clean-up of the fail...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: tomcat (UTSA-2025-608316)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-608316 advisory. Improper Handling of Case Sensitivity vulnerability in Apache Tomcat's GCI servlet allows security constraint bypass of security constraints that apply to the pathIn...

PT-2025-44001

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 8.5.0 through 8.5.100 Apache Tomcat versions 9.0.0.M1 through 9.0.109 Apache Tomcat versions 10.1.0-M1 through 10.1.46 Apache Tomcat versions 11.0.0-M1 through 11.0.11 Description An improper resource shutdown or release...

Unity Linux 20.1060a / 20.1070a Security Update: tomcat (UTSA-2025-986116)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986116 advisory. Authentication Bypass Using an Alternate Path or Channel vulnerability in Apache Tomcat. When using PreResources or PostResources mounted other than at the root of t...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: tomcat (UTSA-2025-986107)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986107 advisory. Session Fixation vulnerability in Apache Tomcat via rewrite valve. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1 through 10.1.41,...

Unity Linux 20.1060a / 20.1070a Security Update: tomcat (UTSA-2025-986128)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986128 advisory. Uncontrolled Resource Consumption vulnerability in Apache Tomcat if an HTTP/2 client did not acknowledge the initial settings frame that reduces the maximum permitte...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: tomcat (UTSA-2025-986094)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986094 advisory. For some unlikely configurations of multipart upload, an Integer Overflow vulnerability in Apache Tomcat could lead to a DoS via bypassing of size limits. This issue...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: tomcat (UTSA-2025-986092)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986092 advisory. Uncontrolled Resource Consumption vulnerability in Apache Tomcat if an HTTP/2 client did not acknowledge the initial settings frame that reduces the maximum permitte...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: tomcat (UTSA-2025-590646)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-590646 advisory. Authentication Bypass Using an Alternate Path or Channel vulnerability in Apache Tomcat. When using PreResources or PostResources mounted other than at the root of t...

Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in tomcat-embed-core-10.1.42.jar

Summary IBM Watson Discovery Cartridge contains a vulnerable version of tomcat-embed-core-10.1.42.jar Vulnerability Details CVEID:CVE-2025-48989 DESCRIPTION: Improper Resource Shutdown or Release vulnerability in Apache Tomcat made Tomcat vulnerable to the made you reset attack. This issue affect...

Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in tomcat-embed-core-9.0.106.jar

Summary IBM Watson Discovery Cartridge contains a vulnerable version of tomcat-embed-core-9.0.106.jar Vulnerability Details CVEID:CVE-2025-53506 DESCRIPTION: Uncontrolled Resource Consumption vulnerability in Apache Tomcat if an HTTP/2 client did not acknowledge the initial settings frame that...