Alert GCSA-26238 - Aggiornamento di sicurezza per Apache Tomcat

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

******************************************************************

   alert ID: GCSA-26238
       data: 29 settembre 2026
     titolo: Aggiornamento di sicurezza per Apache Tomcat

******************************************************************

:: Descrizione del problema

   Sono state rilasciate nuove versioni del server web Apache Tomcat,
   con le quali vengono risolte 15 vulnerabilita',
   di cui 4 con gravita' "critica" e 9 con gravita' "alta".

   Maggiori informazioni sono disponibili alla sezione "Riferimenti".


:: Software interessato

   Apache Tomcat versioni precedenti alla 9.0.122
   Apache Tomcat versioni precedenti alla 10.1.60
   Apache Tomcat versioni precedenti alla 11.0.26


:: Impatto

   Denial of Service (DoS)
   Bypass delle funzionalita' di sicurezza (SFB)
   Attacco all'integrita' dei dati (Data Manipulation)


:: Soluzioni

   Aggiornare alle versioni piu' recenti

   https://tomcat.apache.org/download-90.cgi
   https://tomcat.apache.org/download-10.cgi
   https://tomcat.apache.org/download-11.cgi


:: Riferimenti

   Apache.org
   https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.122
   https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.60
   https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.26

   Mitre CVE
   https://www.cve.org/CVERecord?id=CVE-2026-34500
   https://www.cve.org/CVERecord?id=CVE-2026-41293
   https://www.cve.org/CVERecord?id=CVE-2026-73581
   https://www.cve.org/CVERecord?id=CVE-2026-75973
   https://www.cve.org/CVERecord?id=CVE-2026-76183
   https://www.cve.org/CVERecord?id=CVE-2026-77756
   https://www.cve.org/CVERecord?id=CVE-2026-77762
   https://www.cve.org/CVERecord?id=CVE-2026-77791
   https://www.cve.org/CVERecord?id=CVE-2026-78383
   https://www.cve.org/CVERecord?id=CVE-2026-78437
   https://www.cve.org/CVERecord?id=CVE-2026-79677
   https://www.cve.org/CVERecord?id=CVE-2026-86248
   https://www.cve.org/CVERecord?id=CVE-2026-86350
   https://www.cve.org/CVERecord?id=CVE-2026-87022


GARR CERT Security Alert - subscribe/unsubscribe:
https://www.cert.garr.it/alert/ricevi-gli-alert-di-cert
-----BEGIN PGP SIGNATURE-----

iF0EAREIAB0WIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCaruWNAAKCRDBnEyTZRJg
Qq40AJ9HkeUYsvr1Dv4WbfekM2ZJmaQ8GACeN1OAa9rkISE35hRUfLtXsAmo7Jg=
=V9X6
-----END PGP SIGNATURE-----