SUSE-SU-2026:0877-1

csafDEsuse_csaf

Security update for tomcat11

view advisory published 2026-03-12

Security update for tomcat11

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2026-24734UShigh7.5—
Improper Input Validation vulnerability in Apache Tomcat Native, Apache Tomcat. When using an OCSP responder, Tomcat Native (and Tomcat's FFM port of the Tomcat Native code) did n…
CVE-2026-24733USlow3.7Exploit
Improper Input Validation vulnerability in Apache Tomcat. Tomcat did not limit HTTP/0.9 requests to the GET method. If a security constraint was configured to allow HEAD request…
CVE-2025-66614UScritical9.1—
Improper Input Validation vulnerability. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.14, from 10.1.0-M1 through 10.1.49, from 9.0.0-M1 through 9.0.112. The foll…
02

references

External citations — patches, advisories, analysis.

03

remediations (75)

  • Fixedtomcat11-0:11.0.18-150600.13.15.1.noarch as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-0:11.0.18-150600.13.15.1.noarch as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-0:11.0.18-150600.13.15.1.noarch as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-0:11.0.18-150600.13.15.1.noarch as component of SUSE Linux Enterprise Server 15 SP6-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-0:11.0.18-150600.13.15.1.noarch as component of SUSE Linux Enterprise Server 15 SP6-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-0:11.0.18-150600.13.15.1.noarch as component of SUSE Linux Enterprise Server 15 SP6-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-0:11.0.18-150600.13.15.1.noarch as component of openSUSE Leap 15.6

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-0:11.0.18-150600.13.15.1.noarch as component of openSUSE Leap 15.6

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-0:11.0.18-150600.13.15.1.noarch as component of openSUSE Leap 15.6

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-admin-webapps-0:11.0.18-150600.13.15.1.noarch as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-admin-webapps-0:11.0.18-150600.13.15.1.noarch as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-admin-webapps-0:11.0.18-150600.13.15.1.noarch as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-admin-webapps-0:11.0.18-150600.13.15.1.noarch as component of SUSE Linux Enterprise Server 15 SP6-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-admin-webapps-0:11.0.18-150600.13.15.1.noarch as component of SUSE Linux Enterprise Server 15 SP6-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-admin-webapps-0:11.0.18-150600.13.15.1.noarch as component of SUSE Linux Enterprise Server 15 SP6-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-admin-webapps-0:11.0.18-150600.13.15.1.noarch as component of openSUSE Leap 15.6

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-admin-webapps-0:11.0.18-150600.13.15.1.noarch as component of openSUSE Leap 15.6

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-admin-webapps-0:11.0.18-150600.13.15.1.noarch as component of openSUSE Leap 15.6

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-doc-0:11.0.18-150600.13.15.1.noarch as component of openSUSE Leap 15.6

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-doc-0:11.0.18-150600.13.15.1.noarch as component of openSUSE Leap 15.6

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-doc-0:11.0.18-150600.13.15.1.noarch as component of openSUSE Leap 15.6

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-docs-webapp-0:11.0.18-150600.13.15.1.noarch as component of openSUSE Leap 15.6

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-docs-webapp-0:11.0.18-150600.13.15.1.noarch as component of openSUSE Leap 15.6

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-docs-webapp-0:11.0.18-150600.13.15.1.noarch as component of openSUSE Leap 15.6

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-el-6_0-api-0:11.0.18-150600.13.15.1.noarch as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-el-6_0-api-0:11.0.18-150600.13.15.1.noarch as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-el-6_0-api-0:11.0.18-150600.13.15.1.noarch as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-el-6_0-api-0:11.0.18-150600.13.15.1.noarch as component of SUSE Linux Enterprise Server 15 SP6-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-el-6_0-api-0:11.0.18-150600.13.15.1.noarch as component of SUSE Linux Enterprise Server 15 SP6-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-el-6_0-api-0:11.0.18-150600.13.15.1.noarch as component of SUSE Linux Enterprise Server 15 SP6-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-el-6_0-api-0:11.0.18-150600.13.15.1.noarch as component of openSUSE Leap 15.6

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-el-6_0-api-0:11.0.18-150600.13.15.1.noarch as component of openSUSE Leap 15.6

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-el-6_0-api-0:11.0.18-150600.13.15.1.noarch as component of openSUSE Leap 15.6

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-embed-0:11.0.18-150600.13.15.1.noarch as component of openSUSE Leap 15.6

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-embed-0:11.0.18-150600.13.15.1.noarch as component of openSUSE Leap 15.6

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-embed-0:11.0.18-150600.13.15.1.noarch as component of openSUSE Leap 15.6

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-jsp-4_0-api-0:11.0.18-150600.13.15.1.noarch as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-jsp-4_0-api-0:11.0.18-150600.13.15.1.noarch as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-jsp-4_0-api-0:11.0.18-150600.13.15.1.noarch as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-jsp-4_0-api-0:11.0.18-150600.13.15.1.noarch as component of SUSE Linux Enterprise Server 15 SP6-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-jsp-4_0-api-0:11.0.18-150600.13.15.1.noarch as component of SUSE Linux Enterprise Server 15 SP6-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-jsp-4_0-api-0:11.0.18-150600.13.15.1.noarch as component of SUSE Linux Enterprise Server 15 SP6-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-jsp-4_0-api-0:11.0.18-150600.13.15.1.noarch as component of openSUSE Leap 15.6

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-jsp-4_0-api-0:11.0.18-150600.13.15.1.noarch as component of openSUSE Leap 15.6

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-jsp-4_0-api-0:11.0.18-150600.13.15.1.noarch as component of openSUSE Leap 15.6

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-jsvc-0:11.0.18-150600.13.15.1.noarch as component of openSUSE Leap 15.6

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-jsvc-0:11.0.18-150600.13.15.1.noarch as component of openSUSE Leap 15.6

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-jsvc-0:11.0.18-150600.13.15.1.noarch as component of openSUSE Leap 15.6

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-lib-0:11.0.18-150600.13.15.1.noarch as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-lib-0:11.0.18-150600.13.15.1.noarch as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-lib-0:11.0.18-150600.13.15.1.noarch as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-lib-0:11.0.18-150600.13.15.1.noarch as component of SUSE Linux Enterprise Server 15 SP6-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-lib-0:11.0.18-150600.13.15.1.noarch as component of SUSE Linux Enterprise Server 15 SP6-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-lib-0:11.0.18-150600.13.15.1.noarch as component of SUSE Linux Enterprise Server 15 SP6-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-lib-0:11.0.18-150600.13.15.1.noarch as component of openSUSE Leap 15.6

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-lib-0:11.0.18-150600.13.15.1.noarch as component of openSUSE Leap 15.6

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-lib-0:11.0.18-150600.13.15.1.noarch as component of openSUSE Leap 15.6

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-servlet-6_1-api-0:11.0.18-150600.13.15.1.noarch as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-servlet-6_1-api-0:11.0.18-150600.13.15.1.noarch as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-servlet-6_1-api-0:11.0.18-150600.13.15.1.noarch as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-servlet-6_1-api-0:11.0.18-150600.13.15.1.noarch as component of SUSE Linux Enterprise Server 15 SP6-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-servlet-6_1-api-0:11.0.18-150600.13.15.1.noarch as component of SUSE Linux Enterprise Server 15 SP6-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-servlet-6_1-api-0:11.0.18-150600.13.15.1.noarch as component of SUSE Linux Enterprise Server 15 SP6-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-servlet-6_1-api-0:11.0.18-150600.13.15.1.noarch as component of openSUSE Leap 15.6

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-servlet-6_1-api-0:11.0.18-150600.13.15.1.noarch as component of openSUSE Leap 15.6

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-servlet-6_1-api-0:11.0.18-150600.13.15.1.noarch as component of openSUSE Leap 15.6

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-webapps-0:11.0.18-150600.13.15.1.noarch as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-webapps-0:11.0.18-150600.13.15.1.noarch as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-webapps-0:11.0.18-150600.13.15.1.noarch as component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-webapps-0:11.0.18-150600.13.15.1.noarch as component of SUSE Linux Enterprise Server 15 SP6-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-webapps-0:11.0.18-150600.13.15.1.noarch as component of SUSE Linux Enterprise Server 15 SP6-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-webapps-0:11.0.18-150600.13.15.1.noarch as component of SUSE Linux Enterprise Server 15 SP6-LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-webapps-0:11.0.18-150600.13.15.1.noarch as component of openSUSE Leap 15.6

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-webapps-0:11.0.18-150600.13.15.1.noarch as component of openSUSE Leap 15.6

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedtomcat11-webapps-0:11.0.18-150600.13.15.1.noarch as component of openSUSE Leap 15.6

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan