Debian Releases Security Advisories for Tomcat9, Tomcat10, and Tomcat11 Vulnerabilities

Debian has issued critical security advisories for Tomcat9, Tomcat10, and Tomcat11 addressing various vulnerabilities. Tomcat9 (DLA-4619) fixed an authentication bypass and denial-of-service issue in version 9.0.118-0+deb11u1. Tomcat10 (DSA-6328) addressed a similar critical denial-of-service vulnerability in versions 10.1.55-1~deb12u1 for oldstable and 10.1.55-1~deb13u1 for stable. Tomcat11 (DSA-6329) resolved a moderate DDoS vulnerability in version 11.0.22-1~deb13u1. All advisories recommend upgrading affected packages and consulting the respective documentation for further details. The vulnerabilities may introduce new options or limits that could impact existing web applications. Users are urged to apply updates promptly to mitigate potential risks.

Key Points: • Debian released critical advisories for Tomcat9, Tomcat10, and Tomcat11 vulnerabilities. • Tomcat9 and Tomcat10 vulnerabilities involve authentication bypass and denial-of-service risks. • Users are advised to upgrade to the latest versions to mitigate security risks.