SUSE-SU-2026:20084-1

Security update for tomcat

view advisory published 2026-01-14

Security update for tomcat

describes (3)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-61795US	—	1.25% (69th)	—	2025-10-27
Improper Resource Shutdown or Release vulnerability in Apache Tomcat. If an error occurred (including exceeding limits) during the processing of a multipart upload, temporary copi…
CVE-2025-55754US	—	10.2% (96th)	—	2025-10-27
Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. Tomcat did not escape ANSI escape sequences in log messages. If Tomcat was running in…
CVE-2025-55752US	—	64.4% (99th)	Exploit	2025-10-27
Relative Path Traversal vulnerability in Apache Tomcat. The fix for bug 60013 introduced a regression where the rewritten URL was normalized before it was decoded. This intr…

references

External citations — patches, advisories, analysis.

SUSE Bug 1252753self
SUSE Bug 1252756self
SUSE Bug 1252905self
URL of this CSAF noticeself
E-Mail link for SUSE-SU-2026:20084-1self
SUSE CVE CVE-2025-55752 pageself
SUSE CVE CVE-2025-55754 pageself
SUSE CVE CVE-2025-61795 pageself

remediations (66)

Fixedtomcat-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-admin-webapps-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-admin-webapps-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-admin-webapps-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-admin-webapps-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-admin-webapps-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-admin-webapps-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-docs-webapp-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-docs-webapp-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-docs-webapp-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-docs-webapp-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-docs-webapp-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-docs-webapp-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-el-3_0-api-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-el-3_0-api-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-el-3_0-api-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-el-3_0-api-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-el-3_0-api-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-el-3_0-api-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-embed-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-embed-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-embed-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-embed-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-embed-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-embed-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-javadoc-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-javadoc-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-javadoc-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-javadoc-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-javadoc-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-javadoc-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-jsp-2_3-api-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-jsp-2_3-api-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-jsp-2_3-api-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-jsp-2_3-api-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-jsp-2_3-api-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-jsp-2_3-api-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-jsvc-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-jsvc-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-jsvc-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-jsvc-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-jsvc-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-jsvc-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-lib-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-lib-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-lib-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-lib-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-lib-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-lib-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-servlet-4_0-api-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-servlet-4_0-api-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-servlet-4_0-api-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-servlet-4_0-api-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-servlet-4_0-api-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-servlet-4_0-api-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-webapps-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-webapps-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-webapps-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-webapps-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-webapps-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat-webapps-0:9.0.111-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan