openSUSE-SU-2026:20414-1

csafDEsuse_csaf

Security update for tomcat11

Advisory ansehen veröffentlicht 2026-03-24

Security update for tomcat11

01

beschreibt (3)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2026-24734UShigh7.5—
Improper Input Validation vulnerability in Apache Tomcat Native, Apache Tomcat. When using an OCSP responder, Tomcat Native (and Tomcat's FFM port of the Tomcat Native code) did n…
CVE-2026-24733USlow3.7Exploit
Improper Input Validation vulnerability in Apache Tomcat. Tomcat did not limit HTTP/0.9 requests to the GET method. If a security constraint was configured to allow HEAD request…
CVE-2025-66614UScritical9.1—
Improper Input Validation vulnerability. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.14, from 10.1.0-M1 through 10.1.49, from 9.0.0-M1 through 9.0.112. The foll…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (33)

  • Behobentomcat11-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobentomcat11-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobentomcat11-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobentomcat11-admin-webapps-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobentomcat11-admin-webapps-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobentomcat11-admin-webapps-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobentomcat11-doc-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobentomcat11-doc-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobentomcat11-doc-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobentomcat11-docs-webapp-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobentomcat11-docs-webapp-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobentomcat11-docs-webapp-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobentomcat11-el-6_0-api-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobentomcat11-el-6_0-api-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobentomcat11-el-6_0-api-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobentomcat11-embed-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobentomcat11-embed-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobentomcat11-embed-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobentomcat11-jsp-4_0-api-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobentomcat11-jsp-4_0-api-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobentomcat11-jsp-4_0-api-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobentomcat11-jsvc-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobentomcat11-jsvc-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobentomcat11-jsvc-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobentomcat11-lib-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobentomcat11-lib-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobentomcat11-lib-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobentomcat11-servlet-6_1-api-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobentomcat11-servlet-6_1-api-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobentomcat11-servlet-6_1-api-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobentomcat11-webapps-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobentomcat11-webapps-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobentomcat11-webapps-0:11.0.18-160000.1.1.noarch as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan