Packages / openSUSE Tumbleweed / Source / Productivity/Networking/Web/Servers / tomcat

Source Package: tomcat (9.0.120-2.1)

Apache Servlet/JSP/EL Engine, RI for Servlet 4.0/JSP 2.3/EL 3.0 API

The following binary packages are built from this source package:

tomcat
Apache Servlet/JSP/EL Engine, RI for Servlet 4.0/JSP 2.3/EL 3.0 API
tomcat-admin-webapps
The host manager and manager web applications for Apache Tomcat
tomcat-docs-webapp
The "docs" web application for Apache Tomcat
tomcat-el-3_0-api
Expression Language v3.0 API
tomcat-embed
Libraries for Embedding Apache Tomcat
tomcat-javadoc
Javadoc generated documentation for Apache Tomcat
tomcat-jsp-2_3-api
Apache Tomcat JSP API implementation classes
tomcat-jsvc
Apache jsvc wrapper for Apache Tomcat as separate service
tomcat-lib
Libraries needed to run the Tomcat Web container
tomcat-servlet-4_0-api
Apache Tomcat Servlet API implementation classes
tomcat-webapps
ROOT and examples web applications for Apache Tomcat

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

CVE	Severity	Version impact
[CVE-2026-101296] Published: Oct 20, 2026, 1:45:39 PM UTC tomcat10: CVE-2026-101296	Critical(9.1)	Affected Details (11) `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.123-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.123-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.123-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.123-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.123-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.123-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.123-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Affected · Fixed: `9.0.123-1.1` dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.123-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.123-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.123-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed
[CVE-2026-73581] Published: Sep 16, 2026, 3:12:00 PM UTC Improper Check for Certificate Revocation vulnerability in Apache Tomcat. Both the OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore. This issue affects Apach	Medium(6.5)	Affected Details (11) `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.122-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.122-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.122-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.122-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.122-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.122-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.122-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Affected · Fixed: `9.0.122-1.1` nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.122-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.122-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.122-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed
[CVE-2026-65182] Published: Aug 18, 2026, 9:28:35 AM UTC Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constraint for a longer path is specified before a more restrictive constraint	Critical(9.1)	Affected Details (11) `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.121-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.121-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.121-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.121-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.121-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.121-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.121-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Affected · Fixed: `9.0.121-1.1` nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.121-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.121-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.121-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed
[CVE-2026-59083] Published: Jul 8, 2026, 8:42:23 PM UTC Improper Handling of URL Encoding (Hex Encoding) vulnerability in Apache Tomcat's rewrite valve allowed security constraint bypass for some configurations. This issue affects Apache Tomcat: from 11.0	High(8.2)	Unknown Details (11) `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.120-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.120-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.120-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.120-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.120-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.120-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.120-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Fixed · Fixed: `9.0.120-1.1` nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.120-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.120-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.120-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed
[CVE-2026-50229] Published: Jun 29, 2026, 9:02:11 AM UTC Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in the number guess example for Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.	Medium(6.1)	Unknown Details (11) `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.119-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.119-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.119-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.119-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.119-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.119-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.119-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Fixed · Fixed: `9.0.119-1.1` nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.119-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.119-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.119-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed
[CVE-2026-41284] Published: May 12, 2026, 3:14:45 PM UTC Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 th	High(7.5)	Unknown Details (11) `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.118-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.118-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.118-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.118-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.118-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.118-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.118-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Fixed · Fixed: `9.0.118-1.1` nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.118-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.118-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.118-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed
[CVE-2026-24880] Published: Apr 9, 2026, 7:12:10 PM UTC Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache Tomcat via invalid chunk extension. This issue affects Apache Tomcat: from 11.0.0-M1 through 1	High(7.5)	Unknown Details (11) `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.117-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.117-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.117-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.117-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.117-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.117-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.117-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Fixed · Fixed: `9.0.117-1.1` nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.117-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.117-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.117-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed
[CVE-2025-55752] Published: Oct 27, 2025, 5:29:56 PM UTC Relative Path Traversal vulnerability in Apache Tomcat. The fix for bug 60013 introduced a regression where the rewritten URL was normalized before it was decoded. This introduced the pos	High(7.5)	Unknown Details (11) `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.111-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.111-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.111-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.111-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.111-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.111-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.111-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Fixed · Fixed: `9.0.111-1.1` nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.111-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.111-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.111-1.1` Version impact unknown nvd · tomcat · opensuse · tumbleweed
[CVE-2025-48989] Published: Aug 13, 2025, 12:00:00 AM UTC tomcat10: CVE-2025-48989	High(7.5)	Unknown Details (11) `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.108-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.108-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.108-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.108-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.108-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.108-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.108-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Fixed · Fixed: `9.0.108-1.1` dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.108-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.108-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.108-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed
[CVE-2025-52434] Published: Jul 7, 2025, 10:00:00 PM UTC tomcat9: CVE-2025-52434	Medium(5.9)	Unknown Details (11) `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.107-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.107-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.107-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.107-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.107-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.107-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.107-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Fixed · Fixed: `9.0.107-1.1` dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.107-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.107-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.107-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed
[CVE-2025-46701] Published: May 29, 2025, 7:06:04 PM UTC Tomcat vulnerabilities	Medium(6.5)	Unknown Details (11) `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.106-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.106-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.106-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.106-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.106-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.106-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.106-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Fixed · Fixed: `9.0.106-1.1` usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.106-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.106-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.106-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed
[CVE-2025-31650] Published: Apr 7, 2025, 5:01:23 PM UTC Tomcat vulnerabilities	High(7.5)	Unknown Details (11) `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.104-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.104-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.104-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.104-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.104-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.104-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.104-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Fixed · Fixed: `9.0.104-1.1` usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.104-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.104-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.104-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed
[CVE-2025-66614] Published: Jan 1, 2025, 12:00:00 AM UTC tomcat10: CVE-2025-66614	Critical(9.1)	Unknown Details (11) `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.115-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.115-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.115-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.115-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.115-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.115-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.115-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Fixed · Fixed: `9.0.115-1.1` dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.115-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.115-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.115-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed
[CVE-2024-56337] Published: Dec 20, 2024, 3:28:54 PM UTC tomcat10: CVE-2024-56337	High(8.1)	Unknown Details (11) `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.99-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.99-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.99-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.99-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.99-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.99-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.99-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Fixed · Fixed: `9.0.99-1.1` dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.99-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.99-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.99-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed
[CVE-2024-50379] Published: Dec 17, 2024, 12:34:54 PM UTC Tomcat vulnerabilities	High(8.1)	Unknown Details (11) `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.98-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.98-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.98-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.98-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.98-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.98-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.98-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Fixed · Fixed: `9.0.98-1.1` usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.98-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.98-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.98-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed
[CVE-2024-52316] Published: Nov 17, 2024, 11:00:00 PM UTC tomcat10: CVE-2024-52316	Critical(9.8)	Unknown Details (11) `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.97-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.97-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.97-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.97-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.97-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.97-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.97-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Fixed · Fixed: `9.0.97-1.1` dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.97-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.97-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.97-1.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed
[CVE-2024-52317] Published: Nov 17, 2024, 11:00:00 PM UTC Tomcat vulnerabilities	Medium(6.5)	Unknown Details (11) `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.102-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.102-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.102-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.102-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.102-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.102-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.102-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Fixed · Fixed: `9.0.102-1.1` usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.102-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.102-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.102-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed
[CVE-2024-34750] Published: Jul 3, 2024, 12:00:00 AM UTC Tomcat vulnerabilities	High(7.5)	Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 27, 2026, 3:15:30 AM UTC Details (11) `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.91-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.91-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.91-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.91-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.91-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.91-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.91-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Fixed · Fixed: `9.0.91-1.1` usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.91-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.91-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.91-1.1` Version impact unknown usn · tomcat · opensuse · tumbleweed
[CVE-2021-43980] Published: Sep 28, 2022, 2:15:00 PM UTC tomcat9: CVE-2021-43980	Medium(5.9)	Unknown Details (11) `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.43-11.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.43-11.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.43-11.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.43-11.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.43-11.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.43-11.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.43-11.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Fixed · Fixed: `9.0.43-11.1` dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.43-11.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.43-11.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.43-11.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed
[CVE-2022-23181] Published: Jan 25, 2022, 11:00:00 PM UTC tomcat9: CVE-2022-23181	High(7)	Unknown Details (11) `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.43-5.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.43-5.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.43-5.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.43-5.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.43-5.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.43-5.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.43-5.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Fixed · Fixed: `9.0.43-5.1` dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.43-5.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.43-5.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed `9.0.120-2.1` · noarch · tumbleweed Unknown · Fixed: `9.0.43-5.1` Version impact unknown dsa · tomcat · opensuse · tumbleweed

[Next results]

Last synced: Oct 28, 2026, 6:50:34 AM UTC

[CVE catalog]

Sources

openSUSE Tumbleweed OSSSep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
tumbleweed-oss-multiarch:4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f
Repository-signature verification record
Signed object
https://download.opensuse.org/tumbleweed/repo/oss/repodata/repomd.xml
Signed-object SHA-256
4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f
Signer fingerprint
AD485664E901B867051AB15F35A2F86E29B700A4
Keyring revision
opensuse-project-signing-key.asc
SHA-256 b5745739ebfb95b25b8e810f9bcb847fe750ccda598bd85f02f0e974599a6d7e
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Result
Recorded as verified; digest details unavailable