gpp_maybe Security update for tomcat

SUSE-SLES-16.0-623

This update for tomcat fixes the following issues: - CVE-2026-24880: Request smuggling via invalid chunk extension (bsc#1261850). - CVE-2026-25854: Occasionally open redirect (bsc#1261851). - CVE-2026-29129: TLS cipher order is not preserved (bsc#1261852). - CVE-2026-29145: OCSP checks sometimes soft-fail even when soft-fail is disabled (bsc#1261853). - CVE-2026-29146,CVE-2026-34486: Fix for allowed bypass of EncryptInterceptor (bsc#1261854). - CVE-2026-34483: Incomplete escaping of JSON access logs (bsc#1261855). - CVE-2026-34487: Cloud membership for clustering component exposed the Kubernetes bearer token (bsc#1261856). - CVE-2026-34500: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (bsc#1261857). - CVE-2026-32990: The fix for CVE-2025-66614 was incomplete. (bsc#1258371)

• Release Date
  Apr 22 2026
• References
  Bugzilla: 1258371, 1261850, 1261851, 1261852, 1261853, 1261854, 1261855, 1261856, 1261857
  CVEs: CVE-2025-66614, CVE-2026-24880, CVE-2026-25854, CVE-2026-29129, CVE-2026-29145, CVE-2026-29146, CVE-2026-32990, CVE-2026-34483, CVE-2026-34486, CVE-2026-34487, CVE-2026-34500
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server 16.0 s390x

• Packages
  tomcat
  Apache Servlet/JSP/EL Engine, RI for Servlet 4.0/JSP 2.3/EL 3.0 API

  9.0.117-160000.1.1 lock rpm

  tomcat-admin-webapps
  The host manager and manager web applications for Apache Tomcat

  9.0.117-160000.1.1 lock rpm

  tomcat-docs-webapp
  The "docs" web application for Apache Tomcat

  9.0.117-160000.1.1 lock rpm

  tomcat-el-3_0-api
  Expression Language v3.0 API

  9.0.117-160000.1.1 lock rpm

  tomcat-embed
  Libraries for Embedding Apache Tomcat

  9.0.117-160000.1.1 lock rpm

  tomcat-javadoc
  Javadoc generated documentation for Apache Tomcat

  9.0.117-160000.1.1 lock rpm

  tomcat-jsp-2_3-api
  Apache Tomcat JSP API implementation classes

  9.0.117-160000.1.1 lock rpm

  tomcat-jsvc
  Apache jsvc wrapper for Apache Tomcat as separate service

  9.0.117-160000.1.1 lock rpm

  tomcat-lib
  Libraries needed to run the Tomcat Web container

  9.0.117-160000.1.1 lock rpm

  tomcat-servlet-4_0-api
  Apache Tomcat Servlet API implementation classes

  9.0.117-160000.1.1 lock rpm

  tomcat-webapps
  ROOT and examples web applications for Apache Tomcat

  9.0.117-160000.1.1 lock rpm

SUSE Linux Enterprise Server 16.0 ppc64le

• Packages
  tomcat
  Apache Servlet/JSP/EL Engine, RI for Servlet 4.0/JSP 2.3/EL 3.0 API

  9.0.117-160000.1.1 lock rpm

  tomcat-admin-webapps
  The host manager and manager web applications for Apache Tomcat

  9.0.117-160000.1.1 lock rpm

  tomcat-docs-webapp
  The "docs" web application for Apache Tomcat

  9.0.117-160000.1.1 lock rpm

  tomcat-el-3_0-api
  Expression Language v3.0 API

  9.0.117-160000.1.1 lock rpm

  tomcat-embed
  Libraries for Embedding Apache Tomcat

  9.0.117-160000.1.1 lock rpm

  tomcat-javadoc
  Javadoc generated documentation for Apache Tomcat

  9.0.117-160000.1.1 lock rpm

  tomcat-jsp-2_3-api
  Apache Tomcat JSP API implementation classes

  9.0.117-160000.1.1 lock rpm

  tomcat-jsvc
  Apache jsvc wrapper for Apache Tomcat as separate service

  9.0.117-160000.1.1 lock rpm

  tomcat-lib
  Libraries needed to run the Tomcat Web container

  9.0.117-160000.1.1 lock rpm

  tomcat-servlet-4_0-api
  Apache Tomcat Servlet API implementation classes

  9.0.117-160000.1.1 lock rpm

  tomcat-webapps
  ROOT and examples web applications for Apache Tomcat

  9.0.117-160000.1.1 lock rpm

SUSE Linux Enterprise Server 16.0 x86_64

• Packages
  tomcat
  Apache Servlet/JSP/EL Engine, RI for Servlet 4.0/JSP 2.3/EL 3.0 API

  9.0.117-160000.1.1 lock rpm

  tomcat-admin-webapps
  The host manager and manager web applications for Apache Tomcat

  9.0.117-160000.1.1 lock rpm

  tomcat-docs-webapp
  The "docs" web application for Apache Tomcat

  9.0.117-160000.1.1 lock rpm

  tomcat-el-3_0-api
  Expression Language v3.0 API

  9.0.117-160000.1.1 lock rpm

  tomcat-embed
  Libraries for Embedding Apache Tomcat

  9.0.117-160000.1.1 lock rpm

  tomcat-javadoc
  Javadoc generated documentation for Apache Tomcat

  9.0.117-160000.1.1 lock rpm

  tomcat-jsp-2_3-api
  Apache Tomcat JSP API implementation classes

  9.0.117-160000.1.1 lock rpm

  tomcat-jsvc
  Apache jsvc wrapper for Apache Tomcat as separate service

  9.0.117-160000.1.1 lock rpm

  tomcat-lib
  Libraries needed to run the Tomcat Web container

  9.0.117-160000.1.1 lock rpm

  tomcat-servlet-4_0-api
  Apache Tomcat Servlet API implementation classes

  9.0.117-160000.1.1 lock rpm

  tomcat-webapps
  ROOT and examples web applications for Apache Tomcat

  9.0.117-160000.1.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 ppc64le

• Packages
  tomcat
  Apache Servlet/JSP/EL Engine, RI for Servlet 4.0/JSP 2.3/EL 3.0 API

  9.0.117-160000.1.1 lock rpm

  tomcat-admin-webapps
  The host manager and manager web applications for Apache Tomcat

  9.0.117-160000.1.1 lock rpm

  tomcat-docs-webapp
  The "docs" web application for Apache Tomcat

  9.0.117-160000.1.1 lock rpm

  tomcat-el-3_0-api
  Expression Language v3.0 API

  9.0.117-160000.1.1 lock rpm

  tomcat-embed
  Libraries for Embedding Apache Tomcat

  9.0.117-160000.1.1 lock rpm

  tomcat-javadoc
  Javadoc generated documentation for Apache Tomcat

  9.0.117-160000.1.1 lock rpm

  tomcat-jsp-2_3-api
  Apache Tomcat JSP API implementation classes

  9.0.117-160000.1.1 lock rpm

  tomcat-jsvc
  Apache jsvc wrapper for Apache Tomcat as separate service

  9.0.117-160000.1.1 lock rpm

  tomcat-lib
  Libraries needed to run the Tomcat Web container

  9.0.117-160000.1.1 lock rpm

  tomcat-servlet-4_0-api
  Apache Tomcat Servlet API implementation classes

  9.0.117-160000.1.1 lock rpm

  tomcat-webapps
  ROOT and examples web applications for Apache Tomcat

  9.0.117-160000.1.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 x86_64

• Packages
  tomcat
  Apache Servlet/JSP/EL Engine, RI for Servlet 4.0/JSP 2.3/EL 3.0 API

  9.0.117-160000.1.1 lock rpm

  tomcat-admin-webapps
  The host manager and manager web applications for Apache Tomcat

  9.0.117-160000.1.1 lock rpm

  tomcat-docs-webapp
  The "docs" web application for Apache Tomcat

  9.0.117-160000.1.1 lock rpm

  tomcat-el-3_0-api
  Expression Language v3.0 API

  9.0.117-160000.1.1 lock rpm

  tomcat-embed
  Libraries for Embedding Apache Tomcat

  9.0.117-160000.1.1 lock rpm

  tomcat-javadoc
  Javadoc generated documentation for Apache Tomcat

  9.0.117-160000.1.1 lock rpm

  tomcat-jsp-2_3-api
  Apache Tomcat JSP API implementation classes

  9.0.117-160000.1.1 lock rpm

  tomcat-jsvc
  Apache jsvc wrapper for Apache Tomcat as separate service

  9.0.117-160000.1.1 lock rpm

  tomcat-lib
  Libraries needed to run the Tomcat Web container

  9.0.117-160000.1.1 lock rpm

  tomcat-servlet-4_0-api
  Apache Tomcat Servlet API implementation classes

  9.0.117-160000.1.1 lock rpm

  tomcat-webapps
  ROOT and examples web applications for Apache Tomcat

  9.0.117-160000.1.1 lock rpm

SUSE Linux Enterprise Server 16.0 aarch64

• Packages
  tomcat
  Apache Servlet/JSP/EL Engine, RI for Servlet 4.0/JSP 2.3/EL 3.0 API

  9.0.117-160000.1.1 lock rpm

  tomcat-admin-webapps
  The host manager and manager web applications for Apache Tomcat

  9.0.117-160000.1.1 lock rpm

  tomcat-docs-webapp
  The "docs" web application for Apache Tomcat

  9.0.117-160000.1.1 lock rpm

  tomcat-el-3_0-api
  Expression Language v3.0 API

  9.0.117-160000.1.1 lock rpm

  tomcat-embed
  Libraries for Embedding Apache Tomcat

  9.0.117-160000.1.1 lock rpm

  tomcat-javadoc
  Javadoc generated documentation for Apache Tomcat

  9.0.117-160000.1.1 lock rpm

  tomcat-jsp-2_3-api
  Apache Tomcat JSP API implementation classes

  9.0.117-160000.1.1 lock rpm

  tomcat-jsvc
  Apache jsvc wrapper for Apache Tomcat as separate service

  9.0.117-160000.1.1 lock rpm

  tomcat-lib
  Libraries needed to run the Tomcat Web container

  9.0.117-160000.1.1 lock rpm

  tomcat-servlet-4_0-api
  Apache Tomcat Servlet API implementation classes

  9.0.117-160000.1.1 lock rpm

  tomcat-webapps
  ROOT and examples web applications for Apache Tomcat

  9.0.117-160000.1.1 lock rpm