CVE catalog

CVE-2025-48976

tomcat10 affected and fixed versions

[CVE catalog]

Allocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in Apache Commons FileUpload. This issue affects Apache Commons FileUpload: from 1.0 before 1.6; from 2.0.0-M1 before 2.0.0-M4. Users are recommended to upgrade to versions 1.6 or 2.0.0-M4, which fix the issue.

Severity
High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
32.88% · Oct 27, 2026

Projects and upstream resources

Related catalog projects (1)

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Version impact has not been established. The original provider fields are retained below.

Provider details and historical evidence
Original provider fields
{
  "package_releases": [
    {
      "name": "tomcat9",
      "status": "fixed",
      "release": "sid",
      "version": "9.0.122-1"
    },
    {
      "name": "tomcat9",
      "status": "fixed",
      "release": "forky",
      "version": "9.0.122-1"
    },
    {
      "name": "tomcat9",
      "status": "fixed",
      "release": "trixie",
      "version": "9.0.95-1"
    },
    {
      "name": "tomcat9",
      "status": "fixed",
      "release": "bookworm",
      "version": "9.0.70-2"
    },
    {
      "name": "tomcat10",
      "status": "fixed",
      "release": "sid",
      "version": "10.1.60-1"
    },
    {
      "name": "tomcat10",
      "status": "fixed",
      "release": "forky",
      "version": "10.1.60-1"
    },
    {
      "name": "tomcat10",
      "status": "fixed",
      "release": "trixie",
      "version": "10.1.55-1~deb13u1"
    },
    {
      "name": "tomcat10",
      "status": "fixed",
      "release": "trixie-security",
      "version": "10.1.55-1~deb13u1"
    },
    {
      "name": "tomcat10",
      "status": "fixed",
      "release": "bookworm",
      "version": "10.1.55-1~deb12u1"
    },
    {
      "name": "tomcat10",
      "status": "fixed",
      "release": "bookworm-security",
      "version": "10.1.55-1~deb12u1"
    },
    {
      "name": "libcommons-fileupload-java",
      "status": "fixed",
      "release": "sid",
      "version": "1.6.0-1"
    },
    {
      "name": "libcommons-fileupload-java",
      "status": "fixed",
      "release": "forky",
      "version": "1.6.0-1"
    },
    {
      "name": "libcommons-fileupload-java",
      "status": "vulnerable",
      "release": "trixie",
      "version": "1.5-1.1"
    },
    {
      "name": "libcommons-fileupload-java",
      "status": "vulnerable",
      "release": "bookworm",
      "version": "1.4-2"
    }
  ],
  "fixed_versions": [
    {
      "bug": null,
      "name": "tomcat9",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "9.0.70-2"
    },
    {
      "bug": null,
      "name": "tomcat9",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "9.0.70-2"
    },
    {
      "bug": null,
      "name": "tomcat9",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "9.0.70-2"
    },
    {
      "bug": null,
      "name": "tomcat9",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "9.0.70-2"
    },
    {
      "bug": 1108119,
      "name": "tomcat10",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "10.1.46-1"
    },
    {
      "bug": 1108119,
      "name": "tomcat10",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "10.1.46-1"
    },
    {
      "bug": 1108119,
      "name": "tomcat10",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "10.1.52-1~deb13u1"
    },
    {
      "bug": 1108119,
      "name": "tomcat10",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "10.1.52-1~deb12u1"
    },
    {
      "bug": 1108120,
      "name": "libcommons-fileupload-java",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "1.6.0-1"
    },
    {
      "bug": 1108120,
      "name": "libcommons-fileupload-java",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "1.6.0-1"
    },
    {
      "bug": 1108120,
      "name": "libcommons-fileupload-java",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": ""
    },
    {
      "bug": 1108120,
      "name": "libcommons-fileupload-java",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": ""
    }
  ],
  "distribution_packages": [
    {
      "name": "apache-commons-fileupload",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.0-1.1"
            }
          ]
        }
      ],
      "release": "tumbleweed",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "1.6.0-1.1",
      "provider_record_id": "OPENSUSE-SU-2025:15208-1"
    },
    {
      "name": "jakarta-commons-fileupload",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.0-126.3.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp5-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "1.6.0-126.3.1",
      "provider_record_id": "SUSE-SU-2025:02184-1"
    },
    {
      "name": "jakarta-commons-fileupload",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.0-126.3.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server ltss extended security 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "1.6.0-126.3.1",
      "provider_record_id": "SUSE-SU-2025:02184-1"
    },
    {
      "name": "apache-commons-fileupload",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.0-150200.3.12.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for web and scripting 15 sp6",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "1.6.0-150200.3.12.1",
      "provider_record_id": "SUSE-SU-2025:02159-1"
    },
    {
      "name": "apache-commons-fileupload",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.0-150200.3.12.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for web and scripting 15 sp7",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "1.6.0-150200.3.12.1",
      "provider_record_id": "SUSE-SU-2025:02159-1"
    },
    {
      "name": "apache-commons-fileupload",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.0-150200.3.12.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp3-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "1.6.0-150200.3.12.1",
      "provider_record_id": "SUSE-SU-2025:02159-1"
    },
    {
      "name": "apache-commons-fileupload",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.0-150200.3.12.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp4-espos",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "1.6.0-150200.3.12.1",
      "provider_record_id": "SUSE-SU-2025:02159-1"
    },
    {
      "name": "apache-commons-fileupload",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.0-150200.3.12.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp4-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "1.6.0-150200.3.12.1",
      "provider_record_id": "SUSE-SU-2025:02159-1"
    },
    {
      "name": "apache-commons-fileupload",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.0-150200.3.12.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp5-espos",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "1.6.0-150200.3.12.1",
      "provider_record_id": "SUSE-SU-2025:02159-1"
    },
    {
      "name": "apache-commons-fileupload",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.0-150200.3.12.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp5-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "1.6.0-150200.3.12.1",
      "provider_record_id": "SUSE-SU-2025:02159-1"
    },
    {
      "name": "apache-commons-fileupload",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.0-150200.3.12.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp3-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "1.6.0-150200.3.12.1",
      "provider_record_id": "SUSE-SU-2025:02159-1"
    },
    {
      "name": "apache-commons-fileupload",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.0-150200.3.12.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp4-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "1.6.0-150200.3.12.1",
      "provider_record_id": "SUSE-SU-2025:02159-1"
    },
    {
      "name": "apache-commons-fileupload",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.0-150200.3.12.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp5-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "1.6.0-150200.3.12.1",
      "provider_record_id": "SUSE-SU-2025:02159-1"
    },
    {
      "name": "apache-commons-fileupload",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.0-150200.3.12.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "1.6.0-150200.3.12.1",
      "provider_record_id": "SUSE-SU-2025:02159-1"
    },
    {
      "name": "apache-commons-fileupload",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.0-150200.3.12.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "1.6.0-150200.3.12.1",
      "provider_record_id": "SUSE-SU-2025:02159-1"
    },
    {
      "name": "apache-commons-fileupload",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.0-150200.3.12.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "1.6.0-150200.3.12.1",
      "provider_record_id": "SUSE-SU-2025:02159-1"
    },
    {
      "name": "apache-commons-fileupload",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.0-150200.3.12.1"
            }
          ]
        }
      ],
      "release": "manager server 4.3",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "1.6.0-150200.3.12.1",
      "provider_record_id": "SUSE-SU-2025:02159-1"
    },
    {
      "name": "apache-commons-fileupload",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.0-150200.3.12.1"
            }
          ]
        }
      ],
      "release": "enterprise storage 7.1",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "1.6.0-150200.3.12.1",
      "provider_record_id": "SUSE-SU-2025:02159-1"
    },
    {
      "name": "apache-commons-fileupload",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.0-150200.3.12.1"
            }
          ]
        }
      ],
      "release": "leap 15.6",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "1.6.0-150200.3.12.1",
      "provider_record_id": "SUSE-SU-2025:02159-1"
    }
  ]
}

[Debian bug #1108119][Debian bug #1108120]

Publisher notes

[trixie] libcommons-fileupload-java: Minor issue [bookworm] libcommons-fileupload-java: Minor issue

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [libcommons-fileupload-java]Unknown
    Details (2)

    • 1.4-2 · all · bookworm

      Affected

      dsa · libcommons-fileupload-java · debian · bookworm; dsa · libcommons-fileupload-java · debian · 12

    • 1.4-2 · all · bookworm

      Affected

      dsa · libcommons-fileupload-java · debian · bookworm; dsa · libcommons-fileupload-java · debian · 12

  • [libcommons-fileupload-java-doc]Unknown

    Source package: [libcommons-fileupload-java]

    Details (2)

    • 1.4-2 · all · bookworm

      Affected

      dsa · libcommons-fileupload-java · debian · bookworm; dsa · libcommons-fileupload-java · debian · 12

    • 1.4-2 · all · bookworm

      Affected

      dsa · libcommons-fileupload-java · debian · bookworm; dsa · libcommons-fileupload-java · debian · 12

  • [libtomcat10-embed-java]Unknown

    Source package: [tomcat10]

    Details (6)

    • 10.1.55-1~deb12u1 · all · bookworm

      Fixed · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

    • 10.1.55-1~deb12u1 · all · bookworm

      Fixed · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

    • 10.1.40-1~bpo12+1 · all · bookworm-backports

      Affected · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

    • 10.1.40-1~bpo12+1 · all · bookworm-backports

      Affected · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

    • 10.1.55-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

    • 10.1.55-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

  • [libtomcat10-java]Unknown

    Source package: [tomcat10]

    Details (6)

    • 10.1.55-1~deb12u1 · all · bookworm

      Fixed · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

    • 10.1.55-1~deb12u1 · all · bookworm

      Fixed · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

    • 10.1.40-1~bpo12+1 · all · bookworm-backports

      Affected · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

    • 10.1.40-1~bpo12+1 · all · bookworm-backports

      Affected · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

    • 10.1.55-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

    • 10.1.55-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

  • [libtomcat9-java]Unknown

    Source package: [tomcat9]

    Details (2)

    • 9.0.70-2 · all · bookworm

      Fixed · Fixed: 9.0.70-2

      dsa · tomcat9 · debian · bookworm; dsa · tomcat9 · debian · 12

    • 9.0.70-2 · all · bookworm

      Fixed · Fixed: 9.0.70-2

      dsa · tomcat9 · debian · bookworm; dsa · tomcat9 · debian · 12

  • [tomcat10]Unknown
    Details (6)

    • 10.1.55-1~deb12u1 · all · bookworm

      Fixed · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

    • 10.1.55-1~deb12u1 · all · bookworm

      Fixed · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

    • 10.1.40-1~bpo12+1 · all · bookworm-backports

      Affected · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

    • 10.1.40-1~bpo12+1 · all · bookworm-backports

      Affected · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

    • 10.1.55-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

    • 10.1.55-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

  • [tomcat10-admin]Unknown

    Source package: [tomcat10]

    Details (6)

    • 10.1.55-1~deb12u1 · all · bookworm

      Fixed · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

    • 10.1.55-1~deb12u1 · all · bookworm

      Fixed · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

    • 10.1.40-1~bpo12+1 · all · bookworm-backports

      Affected · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

    • 10.1.40-1~bpo12+1 · all · bookworm-backports

      Affected · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

    • 10.1.55-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

    • 10.1.55-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

  • [tomcat10-common]Unknown

    Source package: [tomcat10]

    Details (6)

    • 10.1.55-1~deb12u1 · all · bookworm

      Fixed · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

    • 10.1.55-1~deb12u1 · all · bookworm

      Fixed · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

    • 10.1.40-1~bpo12+1 · all · bookworm-backports

      Affected · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

    • 10.1.40-1~bpo12+1 · all · bookworm-backports

      Affected · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

    • 10.1.55-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

    • 10.1.55-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

  • [tomcat10-docs]Unknown

    Source package: [tomcat10]

    Details (6)

    • 10.1.55-1~deb12u1 · all · bookworm

      Fixed · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

    • 10.1.55-1~deb12u1 · all · bookworm

      Fixed · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

    • 10.1.40-1~bpo12+1 · all · bookworm-backports

      Affected · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

    • 10.1.40-1~bpo12+1 · all · bookworm-backports

      Affected · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

    • 10.1.55-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

    • 10.1.55-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

  • [tomcat10-examples]Unknown

    Source package: [tomcat10]

    Details (6)

    • 10.1.55-1~deb12u1 · all · bookworm

      Fixed · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

    • 10.1.55-1~deb12u1 · all · bookworm

      Fixed · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

    • 10.1.40-1~bpo12+1 · all · bookworm-backports

      Affected · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

    • 10.1.40-1~bpo12+1 · all · bookworm-backports

      Affected · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

    • 10.1.55-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

    • 10.1.55-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

  • [tomcat10-user]Unknown

    Source package: [tomcat10]

    Details (6)

    • 10.1.55-1~deb12u1 · all · bookworm

      Fixed · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

    • 10.1.55-1~deb12u1 · all · bookworm

      Fixed · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

    • 10.1.40-1~bpo12+1 · all · bookworm-backports

      Affected · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

    • 10.1.40-1~bpo12+1 · all · bookworm-backports

      Affected · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

    • 10.1.55-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

    • 10.1.55-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 10.1.52-1~deb12u1

      dsa · tomcat10 · debian · bookworm; dsa · tomcat10 · debian · 12

[Debian 13 (Trixie)]

  • [libcommons-fileupload-java]Unknown
    Details (2)

    • 1.5-1.1 · all · trixie

      Affected

      dsa · libcommons-fileupload-java · debian · 13

    • 1.5-1.1 · all · trixie

      Affected

      dsa · libcommons-fileupload-java · debian · 13

  • [libcommons-fileupload-java-doc]Unknown

    Source package: [libcommons-fileupload-java]

    Details (2)

    • 1.5-1.1 · all · trixie

      Affected

      dsa · libcommons-fileupload-java · debian · 13

    • 1.5-1.1 · all · trixie

      Affected

      dsa · libcommons-fileupload-java · debian · 13

  • [libtomcat10-embed-java]Unknown

    Source package: [tomcat10]

    Details (4)

    • 10.1.55-1~deb13u1 · all · trixie

      Fixed · Fixed: 10.1.52-1~deb13u1

      dsa · tomcat10 · debian · 13

    • 10.1.55-1~deb13u1 · all · trixie

      Fixed · Fixed: 10.1.52-1~deb13u1

      dsa · tomcat10 · debian · 13

    • 10.1.55-1~deb13u1 · all · trixie-security

      Fixed · Fixed: 10.1.52-1~deb13u1

      dsa · tomcat10 · debian · 13

    • 10.1.55-1~deb13u1 · all · trixie-security

      Fixed · Fixed: 10.1.52-1~deb13u1

      dsa · tomcat10 · debian · 13

  • [libtomcat10-java]Unknown

    Source package: [tomcat10]

    Details (4)

    • 10.1.55-1~deb13u1 · all · trixie

      Fixed · Fixed: 10.1.52-1~deb13u1

      dsa · tomcat10 · debian · 13

    • 10.1.55-1~deb13u1 · all · trixie

      Fixed · Fixed: 10.1.52-1~deb13u1

      dsa · tomcat10 · debian · 13

    • 10.1.55-1~deb13u1 · all · trixie-security

      Fixed · Fixed: 10.1.52-1~deb13u1

      dsa · tomcat10 · debian · 13

    • 10.1.55-1~deb13u1 · all · trixie-security

      Fixed · Fixed: 10.1.52-1~deb13u1

      dsa · tomcat10 · debian · 13

  • [libtomcat11-embed-java]Unknown

    Source package: [tomcat11]

    Details (4)

    • 11.0.22-1~deb13u1 · all · trixie

      Fixed · Fixed: 11.0.15-1~deb13u1

      dsa · tomcat11 · debian · 13

    • 11.0.22-1~deb13u1 · all · trixie

      Fixed · Fixed: 11.0.15-1~deb13u1

      dsa · tomcat11 · debian · 13

    • 11.0.22-1~deb13u1 · all · trixie-security

      Fixed · Fixed: 11.0.15-1~deb13u1

      dsa · tomcat11 · debian · 13

    • 11.0.22-1~deb13u1 · all · trixie-security

      Fixed · Fixed: 11.0.15-1~deb13u1

      dsa · tomcat11 · debian · 13

  • [libtomcat11-java]Unknown

    Source package: [tomcat11]

    Details (4)

    • 11.0.22-1~deb13u1 · all · trixie

      Fixed · Fixed: 11.0.15-1~deb13u1

      dsa · tomcat11 · debian · 13

    • 11.0.22-1~deb13u1 · all · trixie

      Fixed · Fixed: 11.0.15-1~deb13u1

      dsa · tomcat11 · debian · 13

    • 11.0.22-1~deb13u1 · all · trixie-security

      Fixed · Fixed: 11.0.15-1~deb13u1

      dsa · tomcat11 · debian · 13

    • 11.0.22-1~deb13u1 · all · trixie-security

      Fixed · Fixed: 11.0.15-1~deb13u1

      dsa · tomcat11 · debian · 13

  • [libtomcat9-java]Unknown

    Source package: [tomcat9]

    Details (2)

    • 9.0.95-1 · all · trixie

      Fixed · Fixed: 9.0.70-2

      dsa · tomcat9 · debian · 13

    • 9.0.95-1 · all · trixie

      Fixed · Fixed: 9.0.70-2

      dsa · tomcat9 · debian · 13

  • [tomcat10]Unknown
    Details (4)

    • 10.1.55-1~deb13u1 · all · trixie

      Fixed · Fixed: 10.1.52-1~deb13u1

      dsa · tomcat10 · debian · 13

    • 10.1.55-1~deb13u1 · all · trixie

      Fixed · Fixed: 10.1.52-1~deb13u1

      dsa · tomcat10 · debian · 13

    • 10.1.55-1~deb13u1 · all · trixie-security

      Fixed · Fixed: 10.1.52-1~deb13u1

      dsa · tomcat10 · debian · 13

    • 10.1.55-1~deb13u1 · all · trixie-security

      Fixed · Fixed: 10.1.52-1~deb13u1

      dsa · tomcat10 · debian · 13

  • [tomcat10-admin]Unknown

    Source package: [tomcat10]

    Details (4)

    • 10.1.55-1~deb13u1 · all · trixie

      Fixed · Fixed: 10.1.52-1~deb13u1

      dsa · tomcat10 · debian · 13

    • 10.1.55-1~deb13u1 · all · trixie

      Fixed · Fixed: 10.1.52-1~deb13u1

      dsa · tomcat10 · debian · 13

    • 10.1.55-1~deb13u1 · all · trixie-security

      Fixed · Fixed: 10.1.52-1~deb13u1

      dsa · tomcat10 · debian · 13

    • 10.1.55-1~deb13u1 · all · trixie-security

      Fixed · Fixed: 10.1.52-1~deb13u1

      dsa · tomcat10 · debian · 13

Next results

Observed:

References

[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]