You are viewing a plain text version of this content. The canonical link for it is here.
- [ANN] Apache Tomcat Migration tool for Jakarta EE 1.0.13 - posted by Mark Thomas <ma...@apache.org> on 2026/10/05 13:14:24 UTC, 0 replies.
- [ANN] Apache Tomcat 11.0.27 Available - posted by Mark Thomas <ma...@apache.org> on 2026/10/12 10:48:18 UTC, 0 replies.
- [ANN] Apache Tomcat 10.1.61 Available - posted by Christopher Schultz <sc...@apache.org> on 2026/10/12 10:49:22 UTC, 0 replies.
- [ANN] Apache Tomcat 9.0.123 available - posted by Rémy Maucherat <re...@apache.org> on 2026/10/12 13:08:59 UTC, 0 replies.
- [SECURITY] CVE-2026-74048 Apache Tomcat - OpenSSL-FFM FIPS failure does not prevent start-up - posted by Mark Thomas <ma...@apache.org> on 2026/10/20 13:28:09 UTC, 0 replies.
- [SECURITY] CVE-2026-74049 Apache Tomcat - Jasper JSTL plug-in implementation omits page abort (SKIP_PAGE) - posted by Mark Thomas <ma...@apache.org> on 2026/10/20 13:28:16 UTC, 0 replies.
- [SECURITY] CVE-2026-80353 Apache Tomcat - TOCTOU when setting specific permissions for Unix Domain Sockets - Fix for CVE-2026-65183 did not address APR connector - posted by Mark Thomas <ma...@apache.org> on 2026/10/20 13:28:22 UTC, 0 replies.
- [SECURITY] CVE-2026-88041 Apache Tomcat - HTTP/2 trailer header cross-contamination - posted by Mark Thomas <ma...@apache.org> on 2026/10/20 13:28:27 UTC, 0 replies.
- [SECURITY] CVE-2026-93446 Apache Tomcat - Possible TLS 1.3 connection failures - posted by Mark Thomas <ma...@apache.org> on 2026/10/20 13:28:30 UTC, 0 replies.
- [SECURITY] CVE-2026-101296 Apache Tomcat - JNDIRealm bind credential validation fails open for non-GSSAPI SASL mechanisms - posted by Mark Thomas <ma...@apache.org> on 2026/10/20 13:28:35 UTC, 0 replies.
- [SECURITY] CVE-2026-101356 Apache Tomcat - HTTP/2 request/response mix-up after error during async processing - posted by Mark Thomas <ma...@apache.org> on 2026/10/20 13:28:38 UTC, 0 replies.
- [SECURITY] CVE-2026-103119 Apache Tomcat - AJP response mix-up - posted by Mark Thomas <ma...@apache.org> on 2026/10/20 13:28:42 UTC, 0 replies.