Apache Tomcat
Apache Tomcat Native Updates Address Three TLS Flaws
09/23/2026
Tomcat Native updates fix handshake crashes, insecure TLS defaults and a client-certificate race. Verify the native library loaded by each JVM; updating Tomcat Java files or system OpenSSL alone does not establish remediation.
Apache Tomcat Updates Address Twelve Security Flaws
09/23/2026
Tomcat updates address certificate checks, shared authentication, WebSocket controls and HTTP/AJP resource handling. Update the matching supported branch, including embedded runtimes through their vendor, and migrate unsupported releases rather than assuming their final builds are fixed.