UnratedFix available
Security update for libtcnative-1-0, tomcat, tomcat10
Type: advisorySources: OSV
This update for libtcnative-1-0, tomcat, tomcat10 fixes the following issues: Security issues fixed: libtcnative-1-0: - CVE-2026-86243: buffer overread during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash (bsc#1282623). - CVE-2026-86246: insecure ALLOW_CLIENT_RENEGOTIATION, NO_EXTENDED_MASTER_SECRET, IGNORE_UNEXPECTED_EOF and ALLOW_NO_DHE_KEX options enabled by default (bsc#1282622). - CVE-2026-86247: race condition allows client certificate verification requirements to be down-graded for some configurations (bsc#1282621). tomcat,tomcat10: - CVE-2026-73581: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore (bsc#1282631). - CVE-2026-75973: improper authentication when Jakarta authentication is configured with `SimpleAuthConfigProvider` (bsc#1282630). - CVE-2026-76183: security constraints for any WebSocket endpoint can be bypassed (bsc#1282629). - CVE-2026-77756: inconsistent interpretation of HTTP requests allows an attacker to cause one request from another user to fail when Tomcat is located behind a reverse proxy (bsc#1282628). - CVE-2026-77762: stale HPACK emitter injects trailers fields into another HTTP/2 request (bsc#1282599). - CVE-2026-77791: uncontrolled resource consumption when sending WebSocket close message enabled a DoS attack (bsc#1282627). - CVE-2026-78383: allocation of resources without limits or throttling allows an unauthenticated AJP request to pin an AJP processing thread leading to de
- Products
- libtcnative-1-0, tomcat, tomcat10
- Affected versions
- Not specified
- Fixed versions
- 1.3.9-150200.6.11.2, 10.1.60-150200.5.82.2, 9.0.122-150200.123.2
- CVEs
- CVE-2026-73581, CVE-2026-75973, CVE-2026-76183, CVE-2026-77756, CVE-2026-77762, CVE-2026-77791, CVE-2026-78383, CVE-2026-78437, CVE-2026-79677, CVE-2026-86243, CVE-2026-86246, CVE-2026-86247, CVE-2026-86248, CVE-2026-86350, CVE-2026-87022
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 28 Oct 2026, 03:48 UTC · Revision 1
Source evidence
Security update for libtcnative-1-0, tomcat, tomcat10
core-osv · Original sourcePublished 6 Oct 2026, 10:05 UTC
This update for libtcnative-1-0, tomcat, tomcat10 fixes the following issues: Security issues fixed: libtcnative-1-0: - CVE-2026-86243: buffer overread during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash (bsc#1282623). - CVE-2026-86246: insecure ALLOW_CLIENT_RENEGOTIATION, NO_EXTENDED_MASTER_SECRET, IGNORE_UNEXPECTED_EOF and ALLOW_NO_DHE_KEX options enabled by default (bsc#1282622). - CVE-2026-86247: race condition allows client certificate verification requirements to be down-graded for some configurations (bsc#1282621). tomcat,tomcat10: - CVE-2026-73581: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore (bsc#1282631). - CVE-2026-75973: improper authentication when Jakarta authentication is configured with `SimpleAuthConfigProvider` (bsc#1282630). - CVE-2026-76183: security constraints for any WebSocket endpoint can be bypassed (bsc#1282629). - CVE-2026-77756: inconsistent interpretation of HTTP requests allows an attacker to cause one request from another user to fail when Tomcat is located behind a reverse proxy (bsc#1282628). - CVE-2026-77762: stale HPACK emitter injects trailers fields into another HTTP/2 request (bsc#1282599). - CVE-2026-77791: uncontrolled resource consumption when sending WebSocket close message enabled a DoS attack (bsc#1282627). - CVE-2026-78383: allocation of resources without limits or throttling allows an unauthenticated AJP request to pin an AJP processing thread leading to de
osv:SUSE-SU-2026:4546-1
tomcat
Fixed versions: 9.0.122-150200.123.2
tomcat10
Fixed versions: 10.1.60-150200.5.82.2
libtcnative-1-0
Fixed versions: 1.3.9-150200.6.11.2
tomcat
Fixed versions: 9.0.122-150200.123.2
libtcnative-1-0
Fixed versions: 1.3.9-150200.6.11.2
tomcat
Fixed versions: 9.0.122-150200.123.2
libtcnative-1-0
Fixed versions: 1.3.9-150200.6.11.2
tomcat
Fixed versions: 9.0.122-150200.123.2
tomcat10
Fixed versions: 10.1.60-150200.5.82.2
libtcnative-1-0
Fixed versions: 1.3.9-150200.6.11.2
tomcat
Fixed versions: 9.0.122-150200.123.2
tomcat10
Fixed versions: 10.1.60-150200.5.82.2
libtcnative-1-0
Fixed versions: 1.3.9-150200.6.11.2
tomcat
Fixed versions: 9.0.122-150200.123.2
libtcnative-1-0
Fixed versions: 1.3.9-150200.6.11.2
tomcat
Fixed versions: 9.0.122-150200.123.2
tomcat10
Fixed versions: 10.1.60-150200.5.82.2
tomcat
Fixed versions: 9.0.122-150200.123.2
tomcat10
Fixed versions: 10.1.60-150200.5.82.2
libtcnative-1-0
Fixed versions: 1.3.9-150200.6.11.2
tomcat
Fixed versions: 9.0.122-150200.123.2
libtcnative-1-0
Fixed versions: 1.3.9-150200.6.11.2
tomcat
Fixed versions: 9.0.122-150200.123.2
tomcat10
Fixed versions: 10.1.60-150200.5.82.2
tomcat
Fixed versions: 9.0.122-150200.123.2
tomcat10
Fixed versions: 10.1.60-150200.5.82.2
Complete source record
{
"id": "add98957d75d74f422745b19b02002bee997f1f51566de92d805d0a6c24632dd",
"url": "https://osv.dev/vulnerability/SUSE-SU-2026%3A4546-1",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Security update for libtcnative-1-0, tomcat, tomcat10",
"summary": "This update for libtcnative-1-0, tomcat, tomcat10 fixes the following issues: Security issues fixed: libtcnative-1-0: - CVE-2026-86243: buffer overread during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash (bsc#1282623). - CVE-2026-86246: insecure ALLOW_CLIENT_RENEGOTIATION, NO_EXTENDED_MASTER_SECRET, IGNORE_UNEXPECTED_EOF and ALLOW_NO_DHE_KEX options enabled by default (bsc#1282622). - CVE-2026-86247: race condition allows client certificate verification requirements to be down-graded for some configurations (bsc#1282621). tomcat,tomcat10: - CVE-2026-73581: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore (bsc#1282631). - CVE-2026-75973: improper authentication when Jakarta authentication is configured with `SimpleAuthConfigProvider` (bsc#1282630). - CVE-2026-76183: security constraints for any WebSocket endpoint can be bypassed (bsc#1282629). - CVE-2026-77756: inconsistent interpretation of HTTP requests allows an attacker to cause one request from another user to fail when Tomcat is located behind a reverse proxy (bsc#1282628). - CVE-2026-77762: stale HPACK emitter injects trailers fields into another HTTP/2 request (bsc#1282599). - CVE-2026-77791: uncontrolled resource consumption when sending WebSocket close message enabled a DoS attack (bsc#1282627). - CVE-2026-78383: allocation of resources without limits or throttling allows an unauthenticated AJP request to pin an AJP processing thread leading to de",
"evidence": "osv:SUSE-SU-2026:4546-1",
"products": [
{
"name": {
"value": "tomcat",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.122-150200.123.2",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "tomcat10",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "10.1.60-150200.5.82.2",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libtcnative-1-0",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.3.9-150200.6.11.2",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "tomcat",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.122-150200.123.2",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libtcnative-1-0",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.3.9-150200.6.11.2",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "tomcat",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.122-150200.123.2",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libtcnative-1-0",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.3.9-150200.6.11.2",
"evidence": "/affected/6/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "tomcat",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.122-150200.123.2",
"evidence": "/affected/7/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "tomcat10",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "10.1.60-150200.5.82.2",
"evidence": "/affected/8/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libtcnative-1-0",
"evidence": "/affected/9/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.3.9-150200.6.11.2",
"evidence": "/affected/9/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "tomcat",
"evidence": "/affected/10/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.122-150200.123.2",
"evidence": "/affected/10/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "tomcat10",
"evidence": "/affected/11/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "10.1.60-150200.5.82.2",
"evidence": "/affected/11/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libtcnative-1-0",
"evidence": "/affected/12/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.3.9-150200.6.11.2",
"evidence": "/affected/12/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "tomcat",
"evidence": "/affected/13/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.122-150200.123.2",
"evidence": "/affected/13/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libtcnative-1-0",
"evidence": "/affected/14/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.3.9-150200.6.11.2",
"evidence": "/affected/14/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "tomcat",
"evidence": "/affected/15/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.122-150200.123.2",
"evidence": "/affected/15/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "tomcat10",
"evidence": "/affected/16/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "10.1.60-150200.5.82.2",
"evidence": "/affected/16/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "tomcat",
"evidence": "/affected/17/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.122-150200.123.2",
"evidence": "/affected/17/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "tomcat10",
"evidence": "/affected/18/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "10.1.60-150200.5.82.2",
"evidence": "/affected/18/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libtcnative-1-0",
"evidence": "/affected/19/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.3.9-150200.6.11.2",
"evidence": "/affected/19/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "tomcat",
"evidence": "/affected/20/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.122-150200.123.2",
"evidence": "/affected/20/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libtcnative-1-0",
"evidence": "/affected/21/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.3.9-150200.6.11.2",
"evidence": "/affected/21/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "tomcat",
"evidence": "/affected/22/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.122-150200.123.2",
"evidence": "/affected/22/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "tomcat10",
"evidence": "/affected/23/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "10.1.60-150200.5.82.2",
"evidence": "/affected/23/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "tomcat",
"evidence": "/affected/24/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.122-150200.123.2",
"evidence": "/affected/24/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "tomcat10",
"evidence": "/affected/25/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "10.1.60-150200.5.82.2",
"evidence": "/affected/25/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "SUSE-SU-2026:4546-1",
"aliases": [
"SUSE-SU-2026:4546-1"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "9.0.122-150200.123.2"
}
]
}
],
"package": {
"name": "tomcat",
"purl": "pkg:rpm/suse/tomcat&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2015%20SP7",
"ecosystem": "SUSE:Linux Enterprise Module for Web and Scripting 15 SP7"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4546-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"tomcat": "9.0.122-150200.123.2",
"tomcat10": "10.1.60-150200.5.82.2",
"tomcat-lib": "9.0.122-150200.123.2",
"tomcat10-lib": "10.1.60-150200.5.82.2",
"tomcat-webapps": "9.0.122-150200.123.2",
"tomcat10-webapps": "10.1.60-150200.5.82.2",
"tomcat-el-3_0-api": "9.0.122-150200.123.2",
"tomcat-jsp-2_3-api": "9.0.122-150200.123.2",
"tomcat10-el-5_0-api": "10.1.60-150200.5.82.2",
"tomcat-admin-webapps": "9.0.122-150200.123.2",
"tomcat10-jsp-3_1-api": "10.1.60-150200.5.82.2",
"tomcat-servlet-4_0-api": "9.0.122-150200.123.2",
"tomcat10-admin-webapps": "10.1.60-150200.5.82.2",
"tomcat10-servlet-6_0-api": "10.1.60-150200.5.82.2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "10.1.60-150200.5.82.2"
}
]
}
],
"package": {
"name": "tomcat10",
"purl": "pkg:rpm/suse/tomcat10&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2015%20SP7",
"ecosystem": "SUSE:Linux Enterprise Module for Web and Scripting 15 SP7"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4546-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"tomcat": "9.0.122-150200.123.2",
"tomcat10": "10.1.60-150200.5.82.2",
"tomcat-lib": "9.0.122-150200.123.2",
"tomcat10-lib": "10.1.60-150200.5.82.2",
"tomcat-webapps": "9.0.122-150200.123.2",
"tomcat10-webapps": "10.1.60-150200.5.82.2",
"tomcat-el-3_0-api": "9.0.122-150200.123.2",
"tomcat-jsp-2_3-api": "9.0.122-150200.123.2",
"tomcat10-el-5_0-api": "10.1.60-150200.5.82.2",
"tomcat-admin-webapps": "9.0.122-150200.123.2",
"tomcat10-jsp-3_1-api": "10.1.60-150200.5.82.2",
"tomcat-servlet-4_0-api": "9.0.122-150200.123.2",
"tomcat10-admin-webapps": "10.1.60-150200.5.82.2",
"tomcat10-servlet-6_0-api": "10.1.60-150200.5.82.2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.3.9-150200.6.11.2"
}
]
}
],
"package": {
"name": "libtcnative-1-0",
"purl": "pkg:rpm/suse/libtcnative-1-0&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS",
"ecosystem": "SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4546-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"tomcat": "9.0.122-150200.123.2",
"tomcat-lib": "9.0.122-150200.123.2",
"tomcat-webapps": "9.0.122-150200.123.2",
"libtcnative-1-0": "1.3.9-150200.6.11.2",
"tomcat-el-3_0-api": "9.0.122-150200.123.2",
"tomcat-jsp-2_3-api": "9.0.122-150200.123.2",
"tomcat-admin-webapps": "9.0.122-150200.123.2",
"libtcnative-1-0-devel": "1.3.9-150200.6.11.2",
"tomcat-servlet-4_0-api": "9.0.122-150200.123.2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "9.0.122-150200.123.2"
}
]
}
],
"package": {
"name": "tomcat",
"purl": "pkg:rpm/suse/tomcat&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS",
"ecosystem": "SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4546-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"tomcat": "9.0.122-150200.123.2",
"tomcat-lib": "9.0.122-150200.123.2",
"tomcat-webapps": "9.0.122-150200.123.2",
"libtcnative-1-0": "1.3.9-150200.6.11.2",
"tomcat-el-3_0-api": "9.0.122-150200.123.2",
"tomcat-jsp-2_3-api": "9.0.122-150200.123.2",
"tomcat-admin-webapps": "9.0.122-150200.123.2",
"libtcnative-1-0-devel": "1.3.9-150200.6.11.2",
"tomcat-servlet-4_0-api": "9.0.122-150200.123.2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.3.9-150200.6.11.2"
}
]
}
],
"package": {
"name": "libtcnative-1-0",
"purl": "pkg:rpm/suse/libtcnative-1-0&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS",
"ecosystem": "SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4546-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"tomcat": "9.0.122-150200.123.2",
"tomcat-lib": "9.0.122-150200.123.2",
"tomcat-webapps": "9.0.122-150200.123.2",
"libtcnative-1-0": "1.3.9-150200.6.11.2",
"tomcat-el-3_0-api": "9.0.122-150200.123.2",
"tomcat-jsp-2_3-api": "9.0.122-150200.123.2",
"tomcat-admin-webapps": "9.0.122-150200.123.2",
"libtcnative-1-0-devel": "1.3.9-150200.6.11.2",
"tomcat-servlet-4_0-api": "9.0.122-150200.123.2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "9.0.122-150200.123.2"
}
]
}
],
"package": {
"name": "tomcat",
"purl": "pkg:rpm/suse/tomcat&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS",
"ecosystem": "SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4546-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"tomcat": "9.0.122-150200.123.2",
"tomcat-lib": "9.0.122-150200.123.2",
"tomcat-webapps": "9.0.122-150200.123.2",
"libtcnative-1-0": "1.3.9-150200.6.11.2",
"tomcat-el-3_0-api": "9.0.122-150200.123.2",
"tomcat-jsp-2_3-api": "9.0.122-150200.123.2",
"tomcat-admin-webapps": "9.0.122-150200.123.2",
"libtcnative-1-0-devel": "1.3.9-150200.6.11.2",
"tomcat-servlet-4_0-api": "9.0.122-150200.123.2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.3.9-150200.6.11.2"
}
]
}
],
"package": {
"name": "libtcnative-1-0",
"purl": "pkg:rpm/suse/libtcnative-1-0&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS",
"ecosystem": "SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4546-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"tomcat": "9.0.122-150200.123.2",
"tomcat10": "10.1.60-150200.5.82.2",
"tomcat-lib": "9.0.122-150200.123.2",
"tomcat10-lib": "10.1.60-150200.5.82.2",
"tomcat-webapps": "9.0.122-150200.123.2",
"libtcnative-1-0": "1.3.9-150200.6.11.2",
"tomcat10-webapps": "10.1.60-150200.5.82.2",
"tomcat-el-3_0-api": "9.0.122-150200.123.2",
"tomcat-jsp-2_3-api": "9.0.122-150200.123.2",
"tomcat10-el-5_0-api": "10.1.60-150200.5.82.2",
"tomcat-admin-webapps": "9.0.122-150200.123.2",
"tomcat10-jsp-3_1-api": "10.1.60-150200.5.82.2",
"libtcnative-1-0-devel": "1.3.9-150200.6.11.2",
"tomcat-servlet-4_0-api": "9.0.122-150200.123.2",
"tomcat10-admin-webapps": "10.1.60-150200.5.82.2",
"tomcat10-servlet-6_0-api": "10.1.60-150200.5.82.2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "9.0.122-150200.123.2"
}
]
}
],
"package": {
"name": "tomcat",
"purl": "pkg:rpm/suse/tomcat&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS",
"ecosystem": "SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4546-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"tomcat": "9.0.122-150200.123.2",
"tomcat10": "10.1.60-150200.5.82.2",
"tomcat-lib": "9.0.122-150200.123.2",
"tomcat10-lib": "10.1.60-150200.5.82.2",
"tomcat-webapps": "9.0.122-150200.123.2",
"libtcnative-1-0": "1.3.9-150200.6.11.2",
"tomcat10-webapps": "10.1.60-150200.5.82.2",
"tomcat-el-3_0-api": "9.0.122-150200.123.2",
"tomcat-jsp-2_3-api": "9.0.122-150200.123.2",
"tomcat10-el-5_0-api": "10.1.60-150200.5.82.2",
"tomcat-admin-webapps": "9.0.122-150200.123.2",
"tomcat10-jsp-3_1-api": "10.1.60-150200.5.82.2",
"libtcnative-1-0-devel": "1.3.9-150200.6.11.2",
"tomcat-servlet-4_0-api": "9.0.122-150200.123.2",
"tomcat10-admin-webapps": "10.1.60-150200.5.82.2",
"tomcat10-servlet-6_0-api": "10.1.60-150200.5.82.2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "10.1.60-150200.5.82.2"
}
]
}
],
"package": {
"name": "tomcat10",
"purl": "pkg:rpm/suse/tomcat10&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS",
"ecosystem": "SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4546-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"tomcat": "9.0.122-150200.123.2",
"tomcat10": "10.1.60-150200.5.82.2",
"tomcat-lib": "9.0.122-150200.123.2",
"tomcat10-lib": "10.1.60-150200.5.82.2",
"tomcat-webapps": "9.0.122-150200.123.2",
"libtcnative-1-0": "1.3.9-150200.6.11.2",
"tomcat10-webapps": "10.1.60-150200.5.82.2",
"tomcat-el-3_0-api": "9.0.122-150200.123.2",
"tomcat-jsp-2_3-api": "9.0.122-150200.123.2",
"tomcat10-el-5_0-api": "10.1.60-150200.5.82.2",
"tomcat-admin-webapps": "9.0.122-150200.123.2",
"tomcat10-jsp-3_1-api": "10.1.60-150200.5.82.2",
"libtcnative-1-0-devel": "1.3.9-150200.6.11.2",
"tomcat-servlet-4_0-api": "9.0.122-150200.123.2",
"tomcat10-admin-webapps": "10.1.60-150200.5.82.2",
"tomcat10-servlet-6_0-api": "10.1.60-150200.5.82.2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.3.9-150200.6.11.2"
}
]
}
],
"package": {
"name": "libtcnative-1-0",
"purl": "pkg:rpm/suse/libtcnative-1-0&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS",
"ecosystem": "SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4546-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"tomcat": "9.0.122-150200.123.2",
"tomcat10": "10.1.60-150200.5.82.2",
"tomcat-lib": "9.0.122-150200.123.2",
"tomcat10-lib": "10.1.60-150200.5.82.2",
"tomcat-webapps": "9.0.122-150200.123.2",
"libtcnative-1-0": "1.3.9-150200.6.11.2",
"tomcat10-webapps": "10.1.60-150200.5.82.2",
"tomcat-el-3_0-api": "9.0.122-150200.123.2",
"tomcat-jsp-2_3-api": "9.0.122-150200.123.2",
"tomcat10-el-5_0-api": "10.1.60-150200.5.82.2",
"tomcat-admin-webapps": "9.0.122-150200.123.2",
"tomcat10-jsp-3_1-api": "10.1.60-150200.5.82.2",
"libtcnative-1-0-devel": "1.3.9-150200.6.11.2",
"tomcat-servlet-4_0-api": "9.0.122-150200.123.2",
"tomcat10-admin-webapps": "10.1.60-150200.5.82.2",
"tomcat10-servlet-6_0-api": "10.1.60-150200.5.82.2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "9.0.122-150200.123.2"
}
]
}
],
"package": {
"name": "tomcat",
"purl": "pkg:rpm/suse/tomcat&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS",
"ecosystem": "SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4546-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"tomcat": "9.0.122-150200.123.2",
"tomcat10": "10.1.60-150200.5.82.2",
"tomcat-lib": "9.0.122-150200.123.2",
"tomcat10-lib": "10.1.60-150200.5.82.2",
"tomcat-webapps": "9.0.122-150200.123.2",
"libtcnative-1-0": "1.3.9-150200.6.11.2",
"tomcat10-webapps": "10.1.60-150200.5.82.2",
"tomcat-el-3_0-api": "9.0.122-150200.123.2",
"tomcat-jsp-2_3-api": "9.0.122-150200.123.2",
"tomcat10-el-5_0-api": "10.1.60-150200.5.82.2",
"tomcat-admin-webapps": "9.0.122-150200.123.2",
"tomcat10-jsp-3_1-api": "10.1.60-150200.5.82.2",
"libtcnative-1-0-devel": "1.3.9-150200.6.11.2",
"tomcat-servlet-4_0-api": "9.0.122-150200.123.2",
"tomcat10-admin-webapps": "10.1.60-150200.5.82.2",
"tomcat10-servlet-6_0-api": "10.1.60-150200.5.82.2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "10.1.60-150200.5.82.2"
}
]
}
],
"package": {
"name": "tomcat10",
"purl": "pkg:rpm/suse/tomcat10&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS",
"ecosystem": "SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4546-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"tomcat": "9.0.122-150200.123.2",
"tomcat10": "10.1.60-150200.5.82.2",
"tomcat-lib": "9.0.122-150200.123.2",
"tomcat10-lib": "10.1.60-150200.5.82.2",
"tomcat-webapps": "9.0.122-150200.123.2",
"libtcnative-1-0": "1.3.9-150200.6.11.2",
"tomcat10-webapps": "10.1.60-150200.5.82.2",
"tomcat-el-3_0-api": "9.0.122-150200.123.2",
"tomcat-jsp-2_3-api": "9.0.122-150200.123.2",
"tomcat10-el-5_0-api": "10.1.60-150200.5.82.2",
"tomcat-admin-webapps": "9.0.122-150200.123.2",
"tomcat10-jsp-3_1-api": "10.1.60-150200.5.82.2",
"libtcnative-1-0-devel": "1.3.9-150200.6.11.2",
"tomcat-servlet-4_0-api": "9.0.122-150200.123.2",
"tomcat10-admin-webapps": "10.1.60-150200.5.82.2",
"tomcat10-servlet-6_0-api": "10.1.60-150200.5.82.2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.3.9-150200.6.11.2"
}
]
}
],
"package": {
"name": "libtcnative-1-0",
"purl": "pkg:rpm/suse/libtcnative-1-0&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS",
"ecosystem": "SUSE:Linux Enterprise Server 15 SP4-LTSS"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4546-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"tomcat": "9.0.122-150200.123.2",
"tomcat-lib": "9.0.122-150200.123.2",
"tomcat-webapps": "9.0.122-150200.123.2",
"libtcnative-1-0": "1.3.9-150200.6.11.2",
"tomcat-el-3_0-api": "9.0.122-150200.123.2",
"tomcat-jsp-2_3-api": "9.0.122-150200.123.2",
"tomcat-admin-webapps": "9.0.122-150200.123.2",
"libtcnative-1-0-devel": "1.3.9-150200.6.11.2",
"tomcat-servlet-4_0-api": "9.0.122-150200.123.2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "9.0.122-150200.123.2"
}
]
}
],
"package": {
"name": "tomcat",
"purl": "pkg:rpm/suse/tomcat&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS",
"ecosystem": "SUSE:Linux Enterprise Server 15 SP4-LTSS"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4546-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"tomcat": "9.0.122-150200.123.2",
"tomcat-lib": "9.0.122-150200.123.2",
"tomcat-webapps": "9.0.122-150200.123.2",
"libtcnative-1-0": "1.3.9-150200.6.11.2",
"tomcat-el-3_0-api": "9.0.122-150200.123.2",
"tomcat-jsp-2_3-api": "9.0.122-150200.123.2",
"tomcat-admin-webapps": "9.0.122-150200.123.2",
"libtcnative-1-0-devel": "1.3.9-150200.6.11.2",
"tomcat-servlet-4_0-api": "9.0.122-150200.123.2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.3.9-150200.6.11.2"
}
]
}
],
"package": {
"name": "libtcnative-1-0",
"purl": "pkg:rpm/suse/libtcnative-1-0&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS",
"ecosystem": "SUSE:Linux Enterprise Server 15 SP5-LTSS"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4546-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"tomcat": "9.0.122-150200.123.2",
"tomcat10": "10.1.60-150200.5.82.2",
"tomcat-lib": "9.0.122-150200.123.2",
"tomcat10-lib": "10.1.60-150200.5.82.2",
"tomcat-webapps": "9.0.122-150200.123.2",
"libtcnative-1-0": "1.3.9-150200.6.11.2",
"tomcat10-webapps": "10.1.60-150200.5.82.2",
"tomcat-el-3_0-api": "9.0.122-150200.123.2",
"tomcat-jsp-2_3-api": "9.0.122-150200.123.2",
"tomcat10-el-5_0-api": "10.1.60-150200.5.82.2",
"tomcat-admin-webapps": "9.0.122-150200.123.2",
"tomcat10-jsp-3_1-api": "10.1.60-150200.5.82.2",
"libtcnative-1-0-devel": "1.3.9-150200.6.11.2",
"tomcat-servlet-4_0-api": "9.0.122-150200.123.2",
"tomcat10-admin-webapps": "10.1.60-150200.5.82.2",
"tomcat10-servlet-6_0-api": "10.1.60-150200.5.82.2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "9.0.122-150200.123.2"
}
]
}
],
"package": {
"name": "tomcat",
"purl": "pkg:rpm/suse/tomcat&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS",
"ecosystem": "SUSE:Linux Enterprise Server 15 SP5-LTSS"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4546-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"tomcat": "9.0.122-150200.123.2",
"tomcat10": "10.1.60-150200.5.82.2",
"tomcat-lib": "9.0.122-150200.123.2",
"tomcat10-lib": "10.1.60-150200.5.82.2",
"tomcat-webapps": "9.0.122-150200.123.2",
"libtcnative-1-0": "1.3.9-150200.6.11.2",
"tomcat10-webapps": "10.1.60-150200.5.82.2",
"tomcat-el-3_0-api": "9.0.122-150200.123.2",
"tomcat-jsp-2_3-api": "9.0.122-150200.123.2",
"tomcat10-el-5_0-api": "10.1.60-150200.5.82.2",
"tomcat-admin-webapps": "9.0.122-150200.123.2",
"tomcat10-jsp-3_1-api": "10.1.60-150200.5.82.2",
"libtcnative-1-0-devel": "1.3.9-150200.6.11.2",
"tomcat-servlet-4_0-api": "9.0.122-150200.123.2",
"tomcat10-admin-webapps": "10.1.60-150200.5.82.2",
"tomcat10-servlet-6_0-api": "10.1.60-150200.5.82.2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "10.1.60-150200.5.82.2"
}
]
}
],
"package": {
"name": "tomcat10",
"purl": "pkg:rpm/suse/tomcat10&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS",
"ecosystem": "SUSE:Linux Enterprise Server 15 SP5-LTSS"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4546-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"tomcat": "9.0.122-150200.123.2",
"tomcat10": "10.1.60-150200.5.82.2",
"tomcat-lib": "9.0.122-150200.123.2",
"tomcat10-lib": "10.1.60-150200.5.82.2",
"tomcat-webapps": "9.0.122-150200.123.2",
"libtcnative-1-0": "1.3.9-150200.6.11.2",
"tomcat10-webapps": "10.1.60-150200.5.82.2",
"tomcat-el-3_0-api": "9.0.122-150200.123.2",
"tomcat-jsp-2_3-api": "9.0.122-150200.123.2",
"tomcat10-el-5_0-api": "10.1.60-150200.5.82.2",
"tomcat-admin-webapps": "9.0.122-150200.123.2",
"tomcat10-jsp-3_1-api": "10.1.60-150200.5.82.2",
"libtcnative-1-0-devel": "1.3.9-150200.6.11.2",
"tomcat-servlet-4_0-api": "9.0.122-150200.123.2",
"tomcat10-admin-webapps": "10.1.60-150200.5.82.2",
"tomcat10-servlet-6_0-api": "10.1.60-150200.5.82.2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "9.0.122-150200.123.2"
}
]
}
],
"package": {
"name": "tomcat",
"purl": "pkg:rpm/suse/tomcat&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP6-LTSS",
"ecosystem": "SUSE:Linux Enterprise Server 15 SP6-LTSS"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4546-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"tomcat": "9.0.122-150200.123.2",
"tomcat10": "10.1.60-150200.5.82.2",
"tomcat-lib": "9.0.122-150200.123.2",
"tomcat10-lib": "10.1.60-150200.5.82.2",
"tomcat-webapps": "9.0.122-150200.123.2",
"tomcat10-webapps": "10.1.60-150200.5.82.2",
"tomcat-el-3_0-api": "9.0.122-150200.123.2",
"tomcat-jsp-2_3-api": "9.0.122-150200.123.2",
"tomcat10-el-5_0-api": "10.1.60-150200.5.82.2",
"tomcat-admin-webapps": "9.0.122-150200.123.2",
"tomcat10-jsp-3_1-api": "10.1.60-150200.5.82.2",
"tomcat-servlet-4_0-api": "9.0.122-150200.123.2",
"tomcat10-admin-webapps": "10.1.60-150200.5.82.2",
"tomcat10-servlet-6_0-api": "10.1.60-150200.5.82.2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "10.1.60-150200.5.82.2"
}
]
}
],
"package": {
"name": "tomcat10",
"purl": "pkg:rpm/suse/tomcat10&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP6-LTSS",
"ecosystem": "SUSE:Linux Enterprise Server 15 SP6-LTSS"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4546-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"tomcat": "9.0.122-150200.123.2",
"tomcat10": "10.1.60-150200.5.82.2",
"tomcat-lib": "9.0.122-150200.123.2",
"tomcat10-lib": "10.1.60-150200.5.82.2",
"tomcat-webapps": "9.0.122-150200.123.2",
"tomcat10-webapps": "10.1.60-150200.5.82.2",
"tomcat-el-3_0-api": "9.0.122-150200.123.2",
"tomcat-jsp-2_3-api": "9.0.122-150200.123.2",
"tomcat10-el-5_0-api": "10.1.60-150200.5.82.2",
"tomcat-admin-webapps": "9.0.122-150200.123.2",
"tomcat10-jsp-3_1-api": "10.1.60-150200.5.82.2",
"tomcat-servlet-4_0-api": "9.0.122-150200.123.2",
"tomcat10-admin-webapps": "10.1.60-150200.5.82.2",
"tomcat10-servlet-6_0-api": "10.1.60-150200.5.82.2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.3.9-150200.6.11.2"
}
]
}
],
"package": {
"name": "libtcnative-1-0",
"purl": "pkg:rpm/suse/libtcnative-1-0&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4",
"ecosystem": "SUSE:Linux Enterprise Server for SAP Applications 15 SP4"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4546-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"tomcat": "9.0.122-150200.123.2",
"tomcat-lib": "9.0.122-150200.123.2",
"tomcat-webapps": "9.0.122-150200.123.2",
"libtcnative-1-0": "1.3.9-150200.6.11.2",
"tomcat-el-3_0-api": "9.0.122-150200.123.2",
"tomcat-jsp-2_3-api": "9.0.122-150200.123.2",
"tomcat-admin-webapps": "9.0.122-150200.123.2",
"libtcnative-1-0-devel": "1.3.9-150200.6.11.2",
"tomcat-servlet-4_0-api": "9.0.122-150200.123.2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "9.0.122-150200.123.2"
}
]
}
],
"package": {
"name": "tomcat",
"purl": "pkg:rpm/suse/tomcat&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4",
"ecosystem": "SUSE:Linux Enterprise Server for SAP Applications 15 SP4"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4546-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"tomcat": "9.0.122-150200.123.2",
"tomcat-lib": "9.0.122-150200.123.2",
"tomcat-webapps": "9.0.122-150200.123.2",
"libtcnative-1-0": "1.3.9-150200.6.11.2",
"tomcat-el-3_0-api": "9.0.122-150200.123.2",
"tomcat-jsp-2_3-api": "9.0.122-150200.123.2",
"tomcat-admin-webapps": "9.0.122-150200.123.2",
"libtcnative-1-0-devel": "1.3.9-150200.6.11.2",
"tomcat-servlet-4_0-api": "9.0.122-150200.123.2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.3.9-150200.6.11.2"
}
]
}
],
"package": {
"name": "libtcnative-1-0",
"purl": "pkg:rpm/suse/libtcnative-1-0&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5",
"ecosystem": "SUSE:Linux Enterprise Server for SAP Applications 15 SP5"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4546-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"tomcat": "9.0.122-150200.123.2",
"tomcat10": "10.1.60-150200.5.82.2",
"tomcat-lib": "9.0.122-150200.123.2",
"tomcat10-lib": "10.1.60-150200.5.82.2",
"tomcat-webapps": "9.0.122-150200.123.2",
"libtcnative-1-0": "1.3.9-150200.6.11.2",
"tomcat10-webapps": "10.1.60-150200.5.82.2",
"tomcat-el-3_0-api": "9.0.122-150200.123.2",
"tomcat-jsp-2_3-api": "9.0.122-150200.123.2",
"tomcat10-el-5_0-api": "10.1.60-150200.5.82.2",
"tomcat-admin-webapps": "9.0.122-150200.123.2",
"tomcat10-jsp-3_1-api": "10.1.60-150200.5.82.2",
"libtcnative-1-0-devel": "1.3.9-150200.6.11.2",
"tomcat-servlet-4_0-api": "9.0.122-150200.123.2",
"tomcat10-admin-webapps": "10.1.60-150200.5.82.2",
"tomcat10-servlet-6_0-api": "10.1.60-150200.5.82.2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "9.0.122-150200.123.2"
}
]
}
],
"package": {
"name": "tomcat",
"purl": "pkg:rpm/suse/tomcat&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5",
"ecosystem": "SUSE:Linux Enterprise Server for SAP Applications 15 SP5"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4546-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"tomcat": "9.0.122-150200.123.2",
"tomcat10": "10.1.60-150200.5.82.2",
"tomcat-lib": "9.0.122-150200.123.2",
"tomcat10-lib": "10.1.60-150200.5.82.2",
"tomcat-webapps": "9.0.122-150200.123.2",
"libtcnative-1-0": "1.3.9-150200.6.11.2",
"tomcat10-webapps": "10.1.60-150200.5.82.2",
"tomcat-el-3_0-api": "9.0.122-150200.123.2",
"tomcat-jsp-2_3-api": "9.0.122-150200.123.2",
"tomcat10-el-5_0-api": "10.1.60-150200.5.82.2",
"tomcat-admin-webapps": "9.0.122-150200.123.2",
"tomcat10-jsp-3_1-api": "10.1.60-150200.5.82.2",
"libtcnative-1-0-devel": "1.3.9-150200.6.11.2",
"tomcat-servlet-4_0-api": "9.0.122-150200.123.2",
"tomcat10-admin-webapps": "10.1.60-150200.5.82.2",
"tomcat10-servlet-6_0-api": "10.1.60-150200.5.82.2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "10.1.60-150200.5.82.2"
}
]
}
],
"package": {
"name": "tomcat10",
"purl": "pkg:rpm/suse/tomcat10&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5",
"ecosystem": "SUSE:Linux Enterprise Server for SAP Applications 15 SP5"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4546-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"tomcat": "9.0.122-150200.123.2",
"tomcat10": "10.1.60-150200.5.82.2",
"tomcat-lib": "9.0.122-150200.123.2",
"tomcat10-lib": "10.1.60-150200.5.82.2",
"tomcat-webapps": "9.0.122-150200.123.2",
"libtcnative-1-0": "1.3.9-150200.6.11.2",
"tomcat10-webapps": "10.1.60-150200.5.82.2",
"tomcat-el-3_0-api": "9.0.122-150200.123.2",
"tomcat-jsp-2_3-api": "9.0.122-150200.123.2",
"tomcat10-el-5_0-api": "10.1.60-150200.5.82.2",
"tomcat-admin-webapps": "9.0.122-150200.123.2",
"tomcat10-jsp-3_1-api": "10.1.60-150200.5.82.2",
"libtcnative-1-0-devel": "1.3.9-150200.6.11.2",
"tomcat-servlet-4_0-api": "9.0.122-150200.123.2",
"tomcat10-admin-webapps": "10.1.60-150200.5.82.2",
"tomcat10-servlet-6_0-api": "10.1.60-150200.5.82.2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "9.0.122-150200.123.2"
}
]
}
],
"package": {
"name": "tomcat",
"purl": "pkg:rpm/suse/tomcat&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP6",
"ecosystem": "SUSE:Linux Enterprise Server for SAP Applications 15 SP6"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4546-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"tomcat": "9.0.122-150200.123.2",
"tomcat10": "10.1.60-150200.5.82.2",
"tomcat-lib": "9.0.122-150200.123.2",
"tomcat10-lib": "10.1.60-150200.5.82.2",
"tomcat-webapps": "9.0.122-150200.123.2",
"tomcat10-webapps": "10.1.60-150200.5.82.2",
"tomcat-el-3_0-api": "9.0.122-150200.123.2",
"tomcat-jsp-2_3-api": "9.0.122-150200.123.2",
"tomcat10-el-5_0-api": "10.1.60-150200.5.82.2",
"tomcat-admin-webapps": "9.0.122-150200.123.2",
"tomcat10-jsp-3_1-api": "10.1.60-150200.5.82.2",
"tomcat-servlet-4_0-api": "9.0.122-150200.123.2",
"tomcat10-admin-webapps": "10.1.60-150200.5.82.2",
"tomcat10-servlet-6_0-api": "10.1.60-150200.5.82.2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "10.1.60-150200.5.82.2"
}
]
}
],
"package": {
"name": "tomcat10",
"purl": "pkg:rpm/suse/tomcat10&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP6",
"ecosystem": "SUSE:Linux Enterprise Server for SAP Applications 15 SP6"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4546-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"tomcat": "9.0.122-150200.123.2",
"tomcat10": "10.1.60-150200.5.82.2",
"tomcat-lib": "9.0.122-150200.123.2",
"tomcat10-lib": "10.1.60-150200.5.82.2",
"tomcat-webapps": "9.0.122-150200.123.2",
"tomcat10-webapps": "10.1.60-150200.5.82.2",
"tomcat-el-3_0-api": "9.0.122-150200.123.2",
"tomcat-jsp-2_3-api": "9.0.122-150200.123.2",
"tomcat10-el-5_0-api": "10.1.60-150200.5.82.2",
"tomcat-admin-webapps": "9.0.122-150200.123.2",
"tomcat10-jsp-3_1-api": "10.1.60-150200.5.82.2",
"tomcat-servlet-4_0-api": "9.0.122-150200.123.2",
"tomcat10-admin-webapps": "10.1.60-150200.5.82.2",
"tomcat10-servlet-6_0-api": "10.1.60-150200.5.82.2"
}
]
}
}
],
"modified": "2026-10-07T10:15:37.757753015Z",
"provider": "osv",
"upstream": [
"CVE-2026-73581",
"CVE-2026-75973",
"CVE-2026-76183",
"CVE-2026-77756",
"CVE-2026-77762",
"CVE-2026-77791",
"CVE-2026-78383",
"CVE-2026-78437",
"CVE-2026-79677",
"CVE-2026-86243",
"CVE-2026-86246",
"CVE-2026-86247",
"CVE-2026-86248",
"CVE-2026-86350",
"CVE-2026-87022"
],
"references": [
"https://www.suse.com/support/update/announcement/2026/suse-su-20264546-1/",
"https://bugzilla.suse.com/1282581",
"https://bugzilla.suse.com/1282599",
"https://bugzilla.suse.com/1282620",
"https://bugzilla.suse.com/1282621",
"https://bugzilla.suse.com/1282622",
"https://bugzilla.suse.com/1282623",
"https://bugzilla.suse.com/1282624",
"https://bugzilla.suse.com/1282625",
"https://bugzilla.suse.com/1282626",
"https://bugzilla.suse.com/1282627",
"https://bugzilla.suse.com/1282628",
"https://bugzilla.suse.com/1282629",
"https://bugzilla.suse.com/1282630",
"https://bugzilla.suse.com/1282631",
"https://bugzilla.suse.com/1282787",
"https://bugzilla.suse.com/622430",
"https://www.suse.com/security/cve/CVE-2026-73581",
"https://www.suse.com/security/cve/CVE-2026-75973",
"https://www.suse.com/security/cve/CVE-2026-76183",
"https://www.suse.com/security/cve/CVE-2026-77756",
"https://www.suse.com/security/cve/CVE-2026-77762",
"https://www.suse.com/security/cve/CVE-2026-77791",
"https://www.suse.com/security/cve/CVE-2026-78383",
"https://www.suse.com/security/cve/CVE-2026-78437",
"https://www.suse.com/security/cve/CVE-2026-79677",
"https://www.suse.com/security/cve/CVE-2026-86243",
"https://www.suse.com/security/cve/CVE-2026-86246",
"https://www.suse.com/security/cve/CVE-2026-86247",
"https://www.suse.com/security/cve/CVE-2026-86248",
"https://www.suse.com/security/cve/CVE-2026-86350",
"https://www.suse.com/security/cve/CVE-2026-87022"
]
},
"related_cves": [
{
"value": "CVE-2026-73581",
"evidence": "/upstream"
},
{
"value": "CVE-2026-75973",
"evidence": "/upstream"
},
{
"value": "CVE-2026-76183",
"evidence": "/upstream"
},
{
"value": "CVE-2026-77756",
"evidence": "/upstream"
},
{
"value": "CVE-2026-77762",
"evidence": "/upstream"
},
{
"value": "CVE-2026-77791",
"evidence": "/upstream"
},
{
"value": "CVE-2026-78383",
"evidence": "/upstream"
},
{
"value": "CVE-2026-78437",
"evidence": "/upstream"
},
{
"value": "CVE-2026-79677",
"evidence": "/upstream"
},
{
"value": "CVE-2026-86243",
"evidence": "/upstream"
},
{
"value": "CVE-2026-86246",
"evidence": "/upstream"
},
{
"value": "CVE-2026-86247",
"evidence": "/upstream"
},
{
"value": "CVE-2026-86248",
"evidence": "/upstream"
},
{
"value": "CVE-2026-86350",
"evidence": "/upstream"
},
{
"value": "CVE-2026-87022",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 94895,
"published_at": "2026-10-06T10:05:09+00:00"
}