openSUSE-SU-2026:20414-1

Security update for tomcat11

view advisory published 2026-03-24

Security update for tomcat11

describes (3)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2026-24734US	high7.5	0.57% (47th)	—	2026-02-17
Improper Input Validation vulnerability in Apache Tomcat Native, Apache Tomcat. When using an OCSP responder, Tomcat Native (and Tomcat's FFM port of the Tomcat Native code) did n…
CVE-2026-24733US	low3.7	0.55% (45th)	Exploit	2026-02-17
Improper Input Validation vulnerability in Apache Tomcat. Tomcat did not limit HTTP/0.9 requests to the GET method. If a security constraint was configured to allow HEAD request…
CVE-2025-66614US	critical9.1	0.27% (19th)	—	2026-02-17
Improper Input Validation vulnerability. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.14, from 10.1.0-M1 through 10.1.49, from 9.0.0-M1 through 9.0.112. The foll…

references

External citations — patches, advisories, analysis.

remediations (33)

Fixedtomcat11-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat11-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat11-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat11-admin-webapps-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat11-admin-webapps-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat11-admin-webapps-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat11-doc-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat11-doc-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat11-doc-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat11-docs-webapp-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat11-docs-webapp-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat11-docs-webapp-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat11-el-6_0-api-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat11-el-6_0-api-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat11-el-6_0-api-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat11-embed-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat11-embed-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat11-embed-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat11-jsp-4_0-api-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat11-jsp-4_0-api-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat11-jsp-4_0-api-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat11-jsvc-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat11-jsvc-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat11-jsvc-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat11-lib-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat11-lib-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat11-lib-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat11-servlet-6_1-api-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat11-servlet-6_1-api-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat11-servlet-6_1-api-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat11-webapps-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat11-webapps-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtomcat11-webapps-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan