announce http://www.mail-archive.com/announce@tomcat.apache.org announce @ tomcat.apache Thu, 09 Apr 2026 19:35:52 GMT Thu, 09 Apr 2026 19:35:52 GMT http://blogs.law.harvard.edu/tech/rss MHonArc RSS 2.0 RCFile themailarchive@gmail.com (The Mail Archive) The Mail Archive http://www.mail-archive.com/nanologo.png http://www.mail-archive.com/announce@tomcat.apache.org [SECURITY] CVE-2026-34500 Apache Tomcat - OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled http://www.mail-archive.com/announce@tomcat.apache.org/msg00772.html <font color=#6f6f6f> 2026/04/09</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Thu, 09 Apr 2026 19:35:51 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00772.html [SECURITY] CVE-2026-34486 Apache Tomcat - Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor http://www.mail-archive.com/announce@tomcat.apache.org/msg00771.html <font color=#6f6f6f> 2026/04/09</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Thu, 09 Apr 2026 19:34:25 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00771.html [SECURITY] CVE-2026-34483 Apache Tomcat - Incomplete escaping of JSON access logs http://www.mail-archive.com/announce@tomcat.apache.org/msg00770.html <font color=#6f6f6f> 2026/04/09</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Thu, 09 Apr 2026 19:33:23 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00770.html [SECURITY] CVE-2026-34487 Apache Tomcat - Cloud membership for clustering component exposed the Kubernetes bearer token http://www.mail-archive.com/announce@tomcat.apache.org/msg00769.html <font color=#6f6f6f> 2026/04/09</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Thu, 09 Apr 2026 19:28:37 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00769.html [SECURITY] CVE-2026-32990 Apache Tomcat - The fix for CVE-2025-66614 is incomplete http://www.mail-archive.com/announce@tomcat.apache.org/msg00768.html <font color=#6f6f6f> 2026/04/09</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Thu, 09 Apr 2026 19:27:31 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00768.html [SECURITY] CVE-2026-29129 Apache Tomcat - Configured TLS cipher preference order not preserved http://www.mail-archive.com/announce@tomcat.apache.org/msg00767.html <font color=#6f6f6f> 2026/04/09</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Thu, 09 Apr 2026 19:17:36 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00767.html [SECURITY] CVE-2026-29145 Apache Tomcat and Tomcat Native - OCSP checks sometimes soft-fail even when soft-fail is disabled http://www.mail-archive.com/announce@tomcat.apache.org/msg00766.html <font color=#6f6f6f> 2026/04/09</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Thu, 09 Apr 2026 19:17:26 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00766.html [SECURITY] CVE-2026-29146 Apache Tomcat - EncryptInterceptor vulnerable to padding oracle attack by default http://www.mail-archive.com/announce@tomcat.apache.org/msg00765.html <font color=#6f6f6f> 2026/04/09</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Thu, 09 Apr 2026 19:16:27 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00765.html [SECURITY] CVE-2026-24880 Apache Tomcat - Request smuggling via invalid chunk extension http://www.mail-archive.com/announce@tomcat.apache.org/msg00764.html <font color=#6f6f6f> 2026/04/09</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Thu, 09 Apr 2026 19:12:27 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00764.html [SECURITY] CVE-2026-25854 Apache Tomcat - Occasionally open redirect http://www.mail-archive.com/announce@tomcat.apache.org/msg00763.html <font color=#6f6f6f> 2026/04/09</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Thu, 09 Apr 2026 19:12:08 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00763.html [ANN] Apache Tomcat 11.0.21 Available http://www.mail-archive.com/announce@tomcat.apache.org/msg00762.html <font color=#6f6f6f> 2026/04/04</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Sat, 04 Apr 2026 12:05:36 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00762.html [ANN] Apache Tomcat 9.0.117 available http://www.mail-archive.com/announce@tomcat.apache.org/msg00761.html <font color=#6f6f6f> 2026/04/03</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Rémy Maucherat%22">Rémy Maucherat</a> Fri, 03 Apr 2026 09:28:06 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00761.html [ANN] Apache Tomcat 10.1.54 Available http://www.mail-archive.com/announce@tomcat.apache.org/msg00760.html <font color=#6f6f6f> 2026/04/03</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Christopher Schultz%22">Christopher Schultz</a> Fri, 03 Apr 2026 07:29:40 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00760.html [ANN] End Of Support for Tomcat Native 1.x http://www.mail-archive.com/announce@tomcat.apache.org/msg00759.html <font color=#6f6f6f> 2026/04/03</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Christopher Schultz%22">Christopher Schultz</a> Fri, 03 Apr 2026 07:24:52 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00759.html [ANN] Apache Tomcat 10.1.53 Available http://www.mail-archive.com/announce@tomcat.apache.org/msg00758.html <font color=#6f6f6f> 2026/03/24</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Christopher Schultz%22">Christopher Schultz</a> Tue, 24 Mar 2026 07:58:14 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00758.html [ANN] Apache Tomcat 9.0.116 available http://www.mail-archive.com/announce@tomcat.apache.org/msg00757.html <font color=#6f6f6f> 2026/03/20</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Rémy Maucherat%22">Rémy Maucherat</a> Fri, 20 Mar 2026 14:56:05 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00757.html [ANN] Apache Tomcat 11.0.20 Available http://www.mail-archive.com/announce@tomcat.apache.org/msg00756.html <font color=#6f6f6f> 2026/03/20</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Fri, 20 Mar 2026 12:18:49 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00756.html [ANN] Apache Tomcat Native 1.3.7 released http://www.mail-archive.com/announce@tomcat.apache.org/msg00755.html <font color=#6f6f6f> 2026/03/10</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Tue, 10 Mar 2026 10:46:00 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00755.html [ANN] Apache Tomcat Native 2.0.14 released http://www.mail-archive.com/announce@tomcat.apache.org/msg00754.html <font color=#6f6f6f> 2026/03/10</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Tue, 10 Mar 2026 10:44:38 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00754.html [SECURITY] CVE-2026-24733 Apache Tomcat - Security constraint bypass with HTTP/0.9 http://www.mail-archive.com/announce@tomcat.apache.org/msg00753.html <font color=#6f6f6f> 2026/02/17</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Tue, 17 Feb 2026 18:30:50 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00753.html [SECURITY] CVE-2026-24734 Apache Tomcat and Tomcat Native - OCSP revocation bypass http://www.mail-archive.com/announce@tomcat.apache.org/msg00752.html <font color=#6f6f6f> 2026/02/17</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Tue, 17 Feb 2026 18:26:41 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00752.html [SECURITY] CVE-2025-66614 Apache Tomcat - Client certificate verification bypass due to virtual host mapping http://www.mail-archive.com/announce@tomcat.apache.org/msg00751.html <font color=#6f6f6f> 2026/02/17</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Tue, 17 Feb 2026 18:24:00 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00751.html [ANN] End of support for Apache Tomcat Native 1.3.x http://www.mail-archive.com/announce@tomcat.apache.org/msg00750.html <font color=#6f6f6f> 2026/02/11</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Wed, 11 Feb 2026 12:29:36 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00750.html [ANN] Tomcat 9.0.x End of Support and Tomcat 9 long term support plan http://www.mail-archive.com/announce@tomcat.apache.org/msg00749.html <font color=#6f6f6f> 2026/02/11</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Wed, 11 Feb 2026 12:25:12 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00749.html [ANN] Apache Tomcat Native 1.3.6 released http://www.mail-archive.com/announce@tomcat.apache.org/msg00748.html <font color=#6f6f6f> 2026/02/11</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Wed, 11 Feb 2026 11:45:20 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00748.html [ANN] Apache Tomcat Native 2.0.13 released http://www.mail-archive.com/announce@tomcat.apache.org/msg00747.html <font color=#6f6f6f> 2026/02/11</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Wed, 11 Feb 2026 10:13:28 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00747.html [ANN] Apache Tomcat 11.0.18 Available http://www.mail-archive.com/announce@tomcat.apache.org/msg00746.html <font color=#6f6f6f> 2026/01/30</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Fri, 30 Jan 2026 10:12:46 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00746.html [ANN] Apache Tomcat 10.1.52 Available http://www.mail-archive.com/announce@tomcat.apache.org/msg00745.html <font color=#6f6f6f> 2026/01/28</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Christopher Schultz%22">Christopher Schultz</a> Wed, 28 Jan 2026 10:00:32 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00745.html [ANN] Apache Tomcat 9.0.115 available http://www.mail-archive.com/announce@tomcat.apache.org/msg00744.html <font color=#6f6f6f> 2026/01/23</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Rémy Maucherat%22">Rémy Maucherat</a> Fri, 23 Jan 2026 16:09:16 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00744.html [ANN] Apache Tomcat Native 1.3.4 released http://www.mail-archive.com/announce@tomcat.apache.org/msg00743.html <font color=#6f6f6f> 2026/01/12</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Mon, 12 Jan 2026 12:11:31 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00743.html [ANN] Apache Tomcat Native 2.0.12 released http://www.mail-archive.com/announce@tomcat.apache.org/msg00742.html <font color=#6f6f6f> 2026/01/12</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Mon, 12 Jan 2026 12:09:17 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00742.html [ANN] Apache Tomcat 10.1.50 Available http://www.mail-archive.com/announce@tomcat.apache.org/msg00741.html <font color=#6f6f6f> 2025/12/09</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Christopher Schultz%22">Christopher Schultz</a> Tue, 09 Dec 2025 08:29:04 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00741.html [ANN] Apache Tomcat 11.0.15 Available http://www.mail-archive.com/announce@tomcat.apache.org/msg00740.html <font color=#6f6f6f> 2025/12/08</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Mon, 08 Dec 2025 09:30:47 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00740.html [ANN] Apache Tomcat 9.0.113 available http://www.mail-archive.com/announce@tomcat.apache.org/msg00739.html <font color=#6f6f6f> 2025/12/07</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Rémy Maucherat%22">Rémy Maucherat</a> Sun, 07 Dec 2025 15:40:25 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00739.html [ANN] Apache Tomcat Migration tool for Jakarta EE 1.0.10 http://www.mail-archive.com/announce@tomcat.apache.org/msg00738.html <font color=#6f6f6f> 2025/11/24</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Mon, 24 Nov 2025 22:39:39 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00738.html [ANN] Apache Tomcat 10.1.49 Available http://www.mail-archive.com/announce@tomcat.apache.org/msg00737.html <font color=#6f6f6f> 2025/11/11</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Christopher Schultz%22">Christopher Schultz</a> Tue, 11 Nov 2025 07:32:29 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00737.html [ANN] Apache Tomcat 9.0.112 available http://www.mail-archive.com/announce@tomcat.apache.org/msg00736.html <font color=#6f6f6f> 2025/11/10</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Rémy Maucherat%22">Rémy Maucherat</a> Mon, 10 Nov 2025 16:09:20 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00736.html [ANN] Apache Tomcat 11.0.14 Available http://www.mail-archive.com/announce@tomcat.apache.org/msg00735.html <font color=#6f6f6f> 2025/11/10</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Mon, 10 Nov 2025 15:44:24 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00735.html [SECURITY] CVE-2025-61795 Apache Tomcat - Delayed cleaning of multipart upload temporary files may lead to DoS http://www.mail-archive.com/announce@tomcat.apache.org/msg00734.html <font color=#6f6f6f> 2025/10/27</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Mon, 27 Oct 2025 17:20:55 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00734.html [SECURITY] CVE-2025-55752 Apache Tomcat - Directory traversal via rewrite with possible RCE if PUT is enabled http://www.mail-archive.com/announce@tomcat.apache.org/msg00733.html <font color=#6f6f6f> 2025/10/27</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Mon, 27 Oct 2025 17:18:27 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00733.html [SECURITY] CVE-2025-55754 Apache Tomcat - Console manipulation via escape sequences in log messages http://www.mail-archive.com/announce@tomcat.apache.org/msg00732.html <font color=#6f6f6f> 2025/10/27</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Mon, 27 Oct 2025 17:15:24 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00732.html [ANN] Apache Tomcat 9.0.110 available http://www.mail-archive.com/announce@tomcat.apache.org/msg00731.html <font color=#6f6f6f> 2025/10/18</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Rémy Maucherat%22">Rémy Maucherat</a> Sat, 18 Oct 2025 17:58:20 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00731.html [ANN] Apache Tomcat 11.0.12 Available http://www.mail-archive.com/announce@tomcat.apache.org/msg00730.html <font color=#6f6f6f> 2025/10/18</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Sat, 18 Oct 2025 04:55:12 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00730.html [ANN] Apache Tomcat 10.1.47 Available http://www.mail-archive.com/announce@tomcat.apache.org/msg00729.html <font color=#6f6f6f> 2025/10/18</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Christopher Schultz%22">Christopher Schultz</a> Sat, 18 Oct 2025 03:28:17 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00729.html [ANN] Apache Tomcat 11.0.13 Available http://www.mail-archive.com/announce@tomcat.apache.org/msg00728.html <font color=#6f6f6f> 2025/10/17</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Fri, 17 Oct 2025 22:43:49 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00728.html [ANN] Apache Tomcat 10.1.48 Available http://www.mail-archive.com/announce@tomcat.apache.org/msg00727.html <font color=#6f6f6f> 2025/10/17</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Christopher Schultz%22">Christopher Schultz</a> Fri, 17 Oct 2025 18:31:26 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00727.html [ANN] Apache Tomcat 9.0.111 available http://www.mail-archive.com/announce@tomcat.apache.org/msg00726.html <font color=#6f6f6f> 2025/10/13</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Rémy Maucherat%22">Rémy Maucherat</a> Mon, 13 Oct 2025 20:43:57 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00726.html [ANN] Apache Tomcat 10.1.46 Available http://www.mail-archive.com/announce@tomcat.apache.org/msg00725.html <font color=#6f6f6f> 2025/09/12</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Christopher Schultz%22">Christopher Schultz</a> Fri, 12 Sep 2025 14:13:23 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00725.html [ANN] Apache Tomcat 10.1.45 Available (with IMPORTANT NOTE) http://www.mail-archive.com/announce@tomcat.apache.org/msg00724.html <font color=#6f6f6f> 2025/09/08</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Christopher Schultz%22">Christopher Schultz</a> Mon, 08 Sep 2025 14:26:23 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00724.html [ANN] Apache Tomcat 11.0.11 Available http://www.mail-archive.com/announce@tomcat.apache.org/msg00723.html <font color=#6f6f6f> 2025/09/07</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Sun, 07 Sep 2025 16:26:50 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00723.html [ANN] Apache Tomcat 9.0.109 available http://www.mail-archive.com/announce@tomcat.apache.org/msg00722.html <font color=#6f6f6f> 2025/09/06</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Rémy Maucherat%22">Rémy Maucherat</a> Sat, 06 Sep 2025 01:22:11 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00722.html [SECURITY] CVE-2025-55668 Apache Tomcat - Session fixation via rewrite valve http://www.mail-archive.com/announce@tomcat.apache.org/msg00721.html <font color=#6f6f6f> 2025/08/13</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Wed, 13 Aug 2025 13:16:49 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00721.html [SECURITY] CVE-2025-48989 Apache Tomcat - DoS in HTP/2 - Made You Reset http://www.mail-archive.com/announce@tomcat.apache.org/msg00720.html <font color=#6f6f6f> 2025/08/13</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Wed, 13 Aug 2025 12:09:12 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00720.html [ANN] Apache Tomcat 10.1.44 Available http://www.mail-archive.com/announce@tomcat.apache.org/msg00719.html <font color=#6f6f6f> 2025/08/07</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Christopher Schultz%22">Christopher Schultz</a> Thu, 07 Aug 2025 18:41:50 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00719.html [SECURITY] Upcoming updates to recent(ish)Tomcat CVEs http://www.mail-archive.com/announce@tomcat.apache.org/msg00718.html <font color=#6f6f6f> 2025/08/07</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Thu, 07 Aug 2025 10:42:54 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00718.html [ANN] Apache Tomcat 11.0.10 Available http://www.mail-archive.com/announce@tomcat.apache.org/msg00717.html <font color=#6f6f6f> 2025/08/07</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Thu, 07 Aug 2025 08:43:56 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00717.html [ANN] Apache Tomcat 9.0.108 available http://www.mail-archive.com/announce@tomcat.apache.org/msg00716.html <font color=#6f6f6f> 2025/08/06</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Rémy Maucherat%22">Rémy Maucherat</a> Wed, 06 Aug 2025 17:56:55 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00716.html [SECURITY] CVE-2025-52520 Apache Tomcat - DoS in multipart upload [CORRECTION] http://www.mail-archive.com/announce@tomcat.apache.org/msg00715.html <font color=#6f6f6f> 2025/07/11</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Christopher Schultz%22">Christopher Schultz</a> Fri, 11 Jul 2025 18:50:02 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00715.html [SECURITY] CVE-2025-52520 Apache Tomcat - DoS in multipart upload http://www.mail-archive.com/announce@tomcat.apache.org/msg00714.html <font color=#6f6f6f> 2025/07/10</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Thu, 10 Jul 2025 19:25:33 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00714.html [SECURITY] CVE-2025-53506 Apache Tomcat - DoS in HTP/2 http://www.mail-archive.com/announce@tomcat.apache.org/msg00713.html <font color=#6f6f6f> 2025/07/10</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Thu, 10 Jul 2025 19:23:43 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00713.html [SECURITY] CVE-2025-53506 Apache Tomcat - DoS in HTP/2 http://www.mail-archive.com/announce@tomcat.apache.org/msg00712.html <font color=#6f6f6f> 2025/07/10</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Thu, 10 Jul 2025 19:03:49 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00712.html [SECURITY] CVE-2025-52520 Apache Tomcat - DoS in multipart upload http://www.mail-archive.com/announce@tomcat.apache.org/msg00711.html <font color=#6f6f6f> 2025/07/10</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Thu, 10 Jul 2025 19:01:04 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00711.html [SECURITY] CVE-2025-52434 Apache Tomcat -APR/native Connector crash leading to DoS http://www.mail-archive.com/announce@tomcat.apache.org/msg00710.html <font color=#6f6f6f> 2025/07/10</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Thu, 10 Jul 2025 18:59:05 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00710.html [ANN] Apache Tomcat 9.0.107 available http://www.mail-archive.com/announce@tomcat.apache.org/msg00709.html <font color=#6f6f6f> 2025/07/04</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Rémy Maucherat%22">Rémy Maucherat</a> Fri, 04 Jul 2025 21:03:55 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00709.html [ANN] Apache Tomcat 11.0.9 Available http://www.mail-archive.com/announce@tomcat.apache.org/msg00708.html <font color=#6f6f6f> 2025/07/04</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Fri, 04 Jul 2025 20:11:29 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00708.html [ANN] Apache Tomcat 10.1.43 Available http://www.mail-archive.com/announce@tomcat.apache.org/msg00707.html <font color=#6f6f6f> 2025/07/04</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Christopher Schultz%22">Christopher Schultz</a> Fri, 04 Jul 2025 20:05:06 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00707.html [SECURITY] CVE-2025-49124 Apache Tomcat - Side-loading via Tomcat installer for Windows http://www.mail-archive.com/announce@tomcat.apache.org/msg00706.html <font color=#6f6f6f> 2025/06/16</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Mon, 16 Jun 2025 14:20:39 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00706.html [SECURITY] CVE-2025-49125 Apache Tomcat - Security constraint bypass for pre/post-resources http://www.mail-archive.com/announce@tomcat.apache.org/msg00705.html <font color=#6f6f6f> 2025/06/16</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Mon, 16 Jun 2025 14:15:12 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00705.html [SECURITY] CVE-2025-48988 Apache Tomcat - DoS in multipart upload http://www.mail-archive.com/announce@tomcat.apache.org/msg00704.html <font color=#6f6f6f> 2025/06/16</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Mon, 16 Jun 2025 14:09:03 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00704.html [SECURITY] CVE-2025-48976 Apache Tomcat - DoS in Commons FileUpload http://www.mail-archive.com/announce@tomcat.apache.org/msg00703.html <font color=#6f6f6f> 2025/06/16</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Mon, 16 Jun 2025 14:06:36 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00703.html [ANN] Apache Tomcat 11.0.8 Available http://www.mail-archive.com/announce@tomcat.apache.org/msg00702.html <font color=#6f6f6f> 2025/06/10</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Tue, 10 Jun 2025 10:43:10 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00702.html [ANN] Apache Tomcat 9.0.106 available http://www.mail-archive.com/announce@tomcat.apache.org/msg00701.html <font color=#6f6f6f> 2025/06/10</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Rémy Maucherat%22">Rémy Maucherat</a> Tue, 10 Jun 2025 08:38:40 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00701.html [ANN] Apache Tomcat 10.1.42 Available http://www.mail-archive.com/announce@tomcat.apache.org/msg00700.html <font color=#6f6f6f> 2025/06/10</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Christopher Schultz%22">Christopher Schultz</a> Tue, 10 Jun 2025 06:57:16 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00700.html [SECURITY] CVE-2025-46701 Apache Tomcat - CGI security constraint bypass http://www.mail-archive.com/announce@tomcat.apache.org/msg00699.html <font color=#6f6f6f> 2025/05/29</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Thu, 29 May 2025 19:04:58 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00699.html [ANN] Apache Tomcat 9.0.105 available http://www.mail-archive.com/announce@tomcat.apache.org/msg00698.html <font color=#6f6f6f> 2025/05/12</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Rémy Maucherat%22">Rémy Maucherat</a> Mon, 12 May 2025 21:05:56 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00698.html [ANN] Apache Tomcat 10.1.41 Available http://www.mail-archive.com/announce@tomcat.apache.org/msg00697.html <font color=#6f6f6f> 2025/05/12</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Christopher Schultz%22">Christopher Schultz</a> Mon, 12 May 2025 17:38:02 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00697.html [SECURITY] CVE-2025-31651 Apache Tomcat - Rewrite rule bypass http://www.mail-archive.com/announce@tomcat.apache.org/msg00696.html <font color=#6f6f6f> 2025/04/28</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Mon, 28 Apr 2025 19:13:48 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00696.html [SECURITY] CVE-2025-31650 Apache Tomcat - DoS via invalid HTTP prioritization header http://www.mail-archive.com/announce@tomcat.apache.org/msg00695.html <font color=#6f6f6f> 2025/04/28</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Mon, 28 Apr 2025 19:11:22 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00695.html [ANN] Apache Tomcat 9.0.104 available http://www.mail-archive.com/announce@tomcat.apache.org/msg00694.html <font color=#6f6f6f> 2025/04/09</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Rémy Maucherat%22">Rémy Maucherat</a> Wed, 09 Apr 2025 21:19:52 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00694.html [SECURITY] CVE-2025-24813 Potential RCE and/or information disclosure and/or information corruption with partial PUT http://www.mail-archive.com/announce@tomcat.apache.org/msg00693.html <font color=#6f6f6f> 2025/03/11</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Tue, 11 Mar 2025 17:05:43 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00693.html [ANN] Apache Tomcat 9.0.102 available http://www.mail-archive.com/announce@tomcat.apache.org/msg00692.html <font color=#6f6f6f> 2025/03/06</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Rémy Maucherat%22">Rémy Maucherat</a> Thu, 06 Mar 2025 20:24:03 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00692.html The future of Tomcat 9 http://www.mail-archive.com/announce@tomcat.apache.org/msg00691.html <font color=#6f6f6f> 2025/02/25</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Tue, 25 Feb 2025 10:47:29 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00691.html [ANN] Apache Tomcat 9.0.100 available http://www.mail-archive.com/announce@tomcat.apache.org/msg00690.html <font color=#6f6f6f> 2025/02/17</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Rémy Maucherat%22">Rémy Maucherat</a> Mon, 17 Feb 2025 13:55:57 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00690.html [ANN] Apache Tomcat 11.0.4 Available http://www.mail-archive.com/announce@tomcat.apache.org/msg00689.html <font color=#6f6f6f> 2025/02/17</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Mon, 17 Feb 2025 10:45:58 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00689.html [ANN] Apache Tomcat 11.0.3 Available http://www.mail-archive.com/announce@tomcat.apache.org/msg00688.html <font color=#6f6f6f> 2025/02/10</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Mon, 10 Feb 2025 16:11:04 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00688.html [ANN] Apache Tomcat 9.0.99 available http://www.mail-archive.com/announce@tomcat.apache.org/msg00687.html <font color=#6f6f6f> 2025/02/10</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Rémy Maucherat%22">Rémy Maucherat</a> Mon, 10 Feb 2025 15:55:51 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00687.html [ANN] Apache Tomcat Migration tool for Jakarta EE 1.0.9 http://www.mail-archive.com/announce@tomcat.apache.org/msg00686.html <font color=#6f6f6f> 2025/01/21</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Tue, 21 Jan 2025 08:44:54 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00686.html [SECURITY] CVE-2024-56337 Apache Tomcat - RCE via write-enabled default servlet - CVE-2024-50379 mitigation was incomplete http://www.mail-archive.com/announce@tomcat.apache.org/msg00685.html <font color=#6f6f6f> 2024/12/20</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Fri, 20 Dec 2024 15:27:56 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00685.html [SECURITY] CVE-2024-54677 Apache Tomcat - DoS in examples web application http://www.mail-archive.com/announce@tomcat.apache.org/msg00684.html <font color=#6f6f6f> 2024/12/17</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Tue, 17 Dec 2024 12:32:50 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00684.html [SECURITY] CVE-2024-50379 Apache Tomcat - RCE via write-enabled default servlet http://www.mail-archive.com/announce@tomcat.apache.org/msg00683.html <font color=#6f6f6f> 2024/12/17</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Tue, 17 Dec 2024 12:27:45 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00683.html [ANN] Apache Tomcat 9.0.98 available http://www.mail-archive.com/announce@tomcat.apache.org/msg00682.html <font color=#6f6f6f> 2024/12/09</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Rémy Maucherat%22">Rémy Maucherat</a> Mon, 09 Dec 2024 15:04:19 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00682.html [ANN] Apache Tomcat 11.0.2 Available http://www.mail-archive.com/announce@tomcat.apache.org/msg00681.html <font color=#6f6f6f> 2024/12/09</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Mon, 09 Dec 2024 13:21:31 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00681.html [SECURITY] CVE-2024-52316 Apache Tomcat - Authentication Bypass http://www.mail-archive.com/announce@tomcat.apache.org/msg00680.html <font color=#6f6f6f> 2024/11/19</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Tue, 19 Nov 2024 01:13:50 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00680.html [SECURITY] CVE-2024-52317 Apache Tomcat - Request and/or response mix-up http://www.mail-archive.com/announce@tomcat.apache.org/msg00679.html <font color=#6f6f6f> 2024/11/18</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Mon, 18 Nov 2024 14:12:35 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00679.html [SECURITY] CVE-2024-52318 Apache Tomcat - XSS in generated JSPs http://www.mail-archive.com/announce@tomcat.apache.org/msg00678.html <font color=#6f6f6f> 2024/11/18</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Mon, 18 Nov 2024 12:19:02 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00678.html [SECURITY] CVE-2024-52317 Apache Tomcat - Request and/or response mix-up http://www.mail-archive.com/announce@tomcat.apache.org/msg00677.html <font color=#6f6f6f> 2024/11/18</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Mon, 18 Nov 2024 11:23:55 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00677.html [ANN] Apache Tomcat 10.1.33 Available http://www.mail-archive.com/announce@tomcat.apache.org/msg00676.html <font color=#6f6f6f> 2024/11/11</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Christopher Schultz%22">Christopher Schultz</a> Mon, 11 Nov 2024 15:26:33 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00676.html [ANN] Apache Tomcat 9.0.97 available http://www.mail-archive.com/announce@tomcat.apache.org/msg00675.html <font color=#6f6f6f> 2024/11/09</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Rémy Maucherat%22">Rémy Maucherat</a> Sat, 09 Nov 2024 14:08:38 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00675.html [ANN] Apache Tomcat 11.0.0 Available http://www.mail-archive.com/announce@tomcat.apache.org/msg00674.html <font color=#6f6f6f> 2024/10/09</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Mark Thomas%22">Mark Thomas</a> Wed, 09 Oct 2024 17:09:19 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00674.html [ANN] Apache Tomcat 9.0.96 available http://www.mail-archive.com/announce@tomcat.apache.org/msg00673.html <font color=#6f6f6f> 2024/10/08</font> -- <a href="http://www.mail-archive.com/search?l=announce@tomcat.apache.org&q=from:%22Rémy Maucherat%22">Rémy Maucherat</a> Tue, 08 Oct 2024 13:37:20 GMT http://www.mail-archive.com/announce@tomcat.apache.org/msg00673.html