Alert GCSA-26238 - Aggiornamento di sicurezza per Apache Tomcat

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ****************************************************************** alert ID: GCSA-26238 data: 29 settembre 2026 titolo: Aggiornamento di sicurezza per Apache Tomcat ****************************************************************** :: Descrizione del problema Sono state rilasciate nuove versioni del server web Apache Tomcat, con le quali vengono risolte 15 vulnerabilita', di cui 4 con gravita' "critica" e 9 con gravita' "alta". Maggiori informazioni sono disponibili alla sezione "Riferimenti". :: Software interessato Apache Tomcat versioni precedenti alla 9.0.122 Apache Tomcat versioni precedenti alla 10.1.60 Apache Tomcat versioni precedenti alla 11.0.26 :: Impatto Denial of Service (DoS) Bypass delle funzionalita' di sicurezza (SFB) Attacco all'integrita' dei dati (Data Manipulation) :: Soluzioni Aggiornare alle versioni piu' recenti https://tomcat.apache.org/download-90.cgi https://tomcat.apache.org/download-10.cgi https://tomcat.apache.org/download-11.cgi :: Riferimenti Apache.org https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.122 https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.60 https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.26 Mitre CVE https://www.cve.org/CVERecord?id=CVE-2026-34500 https://www.cve.org/CVERecord?id=CVE-2026-41293 https://www.cve.org/CVERecord?id=CVE-2026-73581 https://www.cve.org/CVERecord?id=CVE-2026-75973 https://www.cve.org/CVERecord?id=CVE-2026-76183 https://www.cve.org/CVERecord?id=CVE-2026-77756 https://www.cve.org/CVERecord?id=CVE-2026-77762 https://www.cve.org/CVERecord?id=CVE-2026-77791 https://www.cve.org/CVERecord?id=CVE-2026-78383 https://www.cve.org/CVERecord?id=CVE-2026-78437 https://www.cve.org/CVERecord?id=CVE-2026-79677 https://www.cve.org/CVERecord?id=CVE-2026-86248 https://www.cve.org/CVERecord?id=CVE-2026-86350 https://www.cve.org/CVERecord?id=CVE-2026-87022 GARR CERT Security Alert - subscribe/unsubscribe: https://www.cert.garr.it/alert/ricevi-gli-alert-di-cert -----BEGIN PGP SIGNATURE----- iF0EAREIAB0WIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCaruWNAAKCRDBnEyTZRJg Qq40AJ9HkeUYsvr1Dv4WbfekM2ZJmaQ8GACeN1OAa9rkISE35hRUfLtXsAmo7Jg= =V9X6 -----END PGP SIGNATURE-----