Alert GCSA-26196 - Aggiornamento di sicurezza per Apache Tomcat

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

******************************************************************

   alert ID: GCSA-26196
       data: 29 agosto 2026
     titolo: Aggiornamento di sicurezza per Apache Tomcat

******************************************************************

:: Descrizione del problema

   Sono state rilasciate nuove versioni del server web Apache Tomcat,
   con le quali vengono risolte 11 vulnerabilita'.

   Maggiori informazioni sono disponibili alla sezione "Riferimenti".


:: Software interessato

   Apache Tomcat versioni precedenti alla 9.0.121
   Apache Tomcat versioni precedenti alla 10.1.59
   Apache Tomcat versioni precedenti alla 11.0.25


:: Impatto

   Denial of Service (DoS)
   Bypass delle funzionalita' di sicurezza (SFB)


:: Soluzioni

   Aggiornare alle versioni piu' recenti

   https://tomcat.apache.org/download-90.cgi
   https://tomcat.apache.org/download-10.cgi
   https://tomcat.apache.org/download-11.cgi


:: Riferimenti

   Apache.org
   https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.121
   https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.59
   https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.25

   Mitre CVE
   https://www.cve.org/CVERecord?id=CVE-2026-73180
   https://www.cve.org/CVERecord?id=CVE-2026-68763
   https://www.cve.org/CVERecord?id=CVE-2026-68569
   https://www.cve.org/CVERecord?id=CVE-2026-68525
   https://www.cve.org/CVERecord?id=CVE-2026-66422
   https://www.cve.org/CVERecord?id=CVE-2026-66299
   https://www.cve.org/CVERecord?id=CVE-2026-65927
   https://www.cve.org/CVERecord?id=CVE-2026-65905
   https://www.cve.org/CVERecord?id=CVE-2026-65637
   https://www.cve.org/CVERecord?id=CVE-2026-65183
   https://www.cve.org/CVERecord?id=CVE-2026-65182


GARR CERT Security Alert - subscribe/unsubscribe:
https://www.cert.garr.it/alert/ricevi-gli-alert-di-cert
-----BEGIN PGP SIGNATURE-----

iF0EAREIAB0WIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCapMX2AAKCRDBnEyTZRJg
Qj+qAJ0Y7lrBAZyXX+HTOi36s9dQdbVo8QCeMVG9iNR8xnBIYpQ7NGWa7gmpoQA=
=kUhO
-----END PGP SIGNATURE-----