100 matches found
ROS-20261027-73-0071
The vulnerability in tomcat11 is related to flaws in the authentication process. Exploiting this vulnerability could allow a remote attacker to escalate their privileges...
OPENSUSE-SU-2026:12256-1 tomcat11-11.0.27-1.1 on GA media
These are all security issues fixed in the tomcat11-11.0.27-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-122925
These are all security issues fixed in the tomcat11-11.0.27-1.1 package on the GA media of openSUSE Tumbleweed...
ROS-20261023-73-0241
The vulnerability in Tomcat11 relates to bypassing authentication using an alternative username. Exploiting this vulnerability allows a malicious actor to bypass authentication...
ROS-20261023-73-0115
The vulnerability in Tomcat11 is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failures...
ROS-20261023-73-0163
The vulnerability in Tomcat11 is related to the lack of verification for certificate revocation. Exploiting this vulnerability allows a remote attacker to execute a “man-in-the-middle” attack...
ROS-20261023-73-0235
The vulnerability in Tomcat11 is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers, who operate remotely, to gain increased privileges...
ROS-20261023-73-0247
The vulnerability in Tomcat11 is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20261023-73-0253
The vulnerability in Tomcat11 is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to send hidden HTTP requests remotely a type of HTTP request smuggling attack...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: tomcat11: tomcat11-11.0.27-0.1.hum1 noarch tomcat11-admin-webapps-11.0.27-0.1.hum1 noarch tomcat11-common-11.0.27-0.1.hum1 noarch tomcat11-docs-webapp-11.0.27-0.1.hum1 noarch...
SUSE SLED15: libtcnative-1-0 / libtcnative-1-0-devel / tomcat11 / etc (SUSE-SU-2026:4544-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4544-1 advisory. Security issues fixed: libtcnative-1-0: - CVE-2026-86243: buffer overread during the TLS handshake permits a...
Security update for libtcnative-1-0, tomcat11
This update for libtcnative-1-0, tomcat11 fixes the following issues: Security issues fixed: libtcnative-1-0: CVE-2026-86243: buffer overread during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash bsc1282623. CVE-2026-86246: insecure ALLOWCLIENTRENEGOTIATION,...
SUSE-SU-2026:4544-1 Security update for libtcnative-1-0, tomcat11
This update for libtcnative-1-0, tomcat11 fixes the following issues: Security issues fixed: libtcnative-1-0: - CVE-2026-86243: buffer overread during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash bsc1282623. - CVE-2026-86246: insecure ALLOWCLIENTRENEGOTIATION,...
Security update for libtcnative-1-0, libtcnative-2-0, tomcat, tomcat10, tomcat11 (critical)
openSUSE security update: security update for libtcnative-1-0, libtcnative-2-0, tomcat, tomcat10, tomcat11 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21984-1 Rating: critical References: bsc1282581 bsc1282599 bsc1282620 bsc1282621 bsc1282622...
OPENSUSE-SU-2026:21984-1 Security update for libtcnative-1-0, libtcnative-2-0, tomcat, tomcat10, tomcat11
This update for libtcnative-1-0, libtcnative-2-0, tomcat, tomcat10, tomcat11 fixes the following issues: Security issues fixed: - CVE-2026-73581: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore bsc1282631. - CVE-2026-75973: improper authentication when...
OPENSUSE-SU-2026:11908-1 tomcat11-11.0.26-1.1 on GA media
These are all security issues fixed in the tomcat11-11.0.26-1.1 package on the GA media of openSUSE Tumbleweed...
com.github.hazendaz.tomcat:tomcat11-config (>=11.0.0-m6, <=11.0.25), org.apache.tomee:apache-tomee (11.0.0-m1) +10 more potentially affected by CVE-2026-76183 via org.apache.tomcat:tomcat (>=11.0.0-m6, <=11.0.25)
org.apache.tomcat:tomcat MAVEN version =11.0.0-m6, =11.0.0-m6, =3.0.0, =3.0.0, =11.0.0, =11.1.3 Source cves: CVE-2026-76183 Source advisory: SNYK:JAVA-ORGAPACHETOMCAT-20825536...
ROS-20260922-73-0089
The vulnerability in Tomcat11 is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...