Alerts This Week
Warning Icon 1 652
Alerts This Week
Warning Icon 1 652

Debian Tomcat 11 High Risk Denial of Service Auth Bypass Vuln DSA-6329-1

debian
Calendar Grey June 8, 2026
Debian Logo
Tomcat 11 faces multiple security issues leading to possible denial of service and data exposure. Update now.
Multiple security vulnerabilities have been discovered in Tomcat 11, a Java based web server, servlet and JSP engine which may result in a denial of service, authentication bypass ...
Topics%20covered

Topics Covered

security advisory denial of service debian authentication bypass sensitive data tomcat11

Summary

Although we are not aware of any problems, new upstream versions may introduce
new options, limits or code changes which may or may not affect your existing
web applications. We recommend to consult the Tomcat 11 documentation for
further information.

For the stable distribution (trixie), these problems have been fixed in
version 11.0.22-1~deb13u1.

We recommend that you upgrade your tomcat11 packages.

For the detailed security status of tomcat11 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/tomcat11

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
important
Lowest
Low
Medium
High
Critical

Package: tomcat11
CVE ID: CVE-2026-24734 CVE-2026-24880 CVE-2026-25854 CVE-2026-29129

Topics%20covered

Topics Covered

security advisory denial of service debian authentication bypass sensitive data tomcat11

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here