28 matches found
Security update for libtcnative-1-0, tomcat11
This update for libtcnative-1-0, tomcat11 fixes the following issues: Security issues fixed: libtcnative-1-0: CVE-2026-86243: buffer overread during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash bsc1282623. CVE-2026-86246: insecure ALLOWCLIENTRENEGOTIATION,...
Security update for libtcnative-1-0, libtcnative-2-0, tomcat, tomcat10, tomcat11 (critical)
openSUSE security update: security update for libtcnative-1-0, libtcnative-2-0, tomcat, tomcat10, tomcat11 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21984-1 Rating: critical References: bsc1282581 bsc1282599 bsc1282620 bsc1282621 bsc1282622...
OPENSUSE-SU-2026:21984-1 Security update for libtcnative-1-0, libtcnative-2-0, tomcat, tomcat10, tomcat11
This update for libtcnative-1-0, libtcnative-2-0, tomcat, tomcat10, tomcat11 fixes the following issues: Security issues fixed: - CVE-2026-73581: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore bsc1282631. - CVE-2026-75973: improper authentication when...
OPENSUSE-SU-2026:11908-1 tomcat11-11.0.26-1.1 on GA media
These are all security issues fixed in the tomcat11-11.0.26-1.1 package on the GA media of openSUSE Tumbleweed...
ROS-20260922-73-0086
The vulnerability in Tomcat11 is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...
ROS-20260922-73-0077
The vulnerability in Tomcat11 is related to access control deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges...
ROS-20260922-73-0120
The vulnerability in Tomcat11 is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260922-73-0055
The vulnerability in Tomcat11 is related to incorrect session duration. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
ROS-20260922-73-0083
The vulnerability in Tomcat11 relates to bypassing the authentication process. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information...
ROS-20260922-73-0074
The vulnerability in Tomcat11 is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
ROS-20260922-73-0080
The vulnerability in Tomcat11 is related to a single shift error. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260922-73-0063
The vulnerability in Tomcat11 is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers, who operate remotely, to gain increased privileges...
ROS-20260922-73-0089
The vulnerability in Tomcat11 is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...
ROS-20260922-73-0065
The vulnerability in Tomcat11 is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
ROS-20260922-73-0057
The vulnerability in Tomcat11 is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: tomcat11: tomcat11-11.0.26-0.1.hum1 noarch tomcat11-admin-webapps-11.0.26-0.1.hum1 noarch tomcat11-common-11.0.26-0.1.hum1 noarch tomcat11-docs-webapp-11.0.26-0.1.hum1 noarch...
SUSE-SU-2026:23691-1 Security update for tomcat11
This update for tomcat11 fixes the following issues: - CVE-2026-65182: Bypass longest prefix security constraint bsc1276893. - CVE-2026-65183: TOCTOU when setting specific permissions for Unix Domain Sockets bsc1276894. - CVE-2026-65637: HTTP/2 no-authority bypass of strict SNI validation - fix...
SUSE-SU-2026:23710-1 Security update for tomcat11
This update for tomcat11 fixes the following issues: - CVE-2026-65182: Bypass longest prefix security constraint bsc1276893. - CVE-2026-65183: TOCTOU when setting specific permissions for Unix Domain Sockets bsc1276894. - CVE-2026-65637: HTTP/2 no-authority bypass of strict SNI validation - fix...