Debian Tomcat11 Moderate DDoS Bypass Sensitive Info Vuln DSA-6329-1
debian
June 8, 2026
Multiple security vulnerabilities have been discovered in Tomcat 11, a Java based web server, servlet and JSP engine which may result in a denial of service, authentication bypass ...
Summary
Although we are not aware of any problems, new upstream versions may introduce
new options, limits or code changes which may or may not affect your existing
web applications. We recommend to consult the Tomcat 11 documentation for
further information.
For the stable distribution (trixie), these problems have been fixed in
version 11.0.22-1~deb13u1.
We recommend that you upgrade your tomcat11 packages.
For the detailed security status of tomcat11 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/tomcat11
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
PREVIOUS
NEXT
Severity
moderate
Lowest
Low
Medium
High
Critical
Package: tomcat11
CVE ID: CVE-2026-24734 CVE-2026-24880 CVE-2026-25854 CVE-2026-29129
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!