An update for tomcat is now available for openEuler-24.03-LTS-SP1,openEuler-24.03-LTS-SP3,openEuler-24.03-LTS-SP4,openEuler-20.03-LTS-SP4,openEuler-22.03-LTS-SP4 Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2026-3233 Final 1.0 1.0 2026-08-07 Initial 2026-08-07 2026-08-07 openEuler SA Tool V1.0 2026-08-07 tomcat security update An update for tomcat is now available for openEuler-24.03-LTS-SP1,openEuler-24.03-LTS-SP3,openEuler-24.03-LTS-SP4,openEuler-20.03-LTS-SP4,openEuler-22.03-LTS-SP4 Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Security Fix(es): Uncontrolled Resource Consumption vulnerability in Apache Tomcat's WebSocket chat example. This issue affects Apache Tomcat: from 11.0.0-M20 through 11.0.24, from 10.1.24 through 10.1.57, from 9.0.89 through 9.0.120. Users who have followed the security guidance to remove the examples web application are not affected by this issue.(CVE-2026-66299) An update for tomcat is now available for openEuler-24.03-LTS-SP1,openEuler-24.03-LTS-SP3,openEuler-24.03-LTS-SP4,openEuler-20.03-LTS-SP4,openEuler-22.03-LTS-SP4. openEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. High tomcat https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3233 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-66299 https://nvd.nist.gov/vuln/detail/CVE-2026-66299 openEuler-24.03-LTS-SP1 openEuler-24.03-LTS-SP3 openEuler-24.03-LTS-SP4 openEuler-20.03-LTS-SP4 openEuler-22.03-LTS-SP4 tomcat-9.0.120-2.oe2403sp1.noarch.rpm tomcat-help-9.0.120-2.oe2403sp1.noarch.rpm tomcat-jsvc-9.0.120-2.oe2403sp1.noarch.rpm tomcat-9.0.120-2.oe2403sp3.noarch.rpm tomcat-help-9.0.120-2.oe2403sp3.noarch.rpm tomcat-jsvc-9.0.120-2.oe2403sp3.noarch.rpm tomcat-9.0.120-2.oe2403sp4.noarch.rpm tomcat-help-9.0.120-2.oe2403sp4.noarch.rpm tomcat-jsvc-9.0.120-2.oe2403sp4.noarch.rpm tomcat-9.0.120-2.oe2003sp4.noarch.rpm tomcat-help-9.0.120-2.oe2003sp4.noarch.rpm tomcat-jsvc-9.0.120-2.oe2003sp4.noarch.rpm tomcat-9.0.120-2.oe2203sp4.noarch.rpm tomcat-help-9.0.120-2.oe2203sp4.noarch.rpm tomcat-jsvc-9.0.120-2.oe2203sp4.noarch.rpm tomcat-9.0.120-2.oe2403sp1.src.rpm tomcat-9.0.120-2.oe2403sp3.src.rpm tomcat-9.0.120-2.oe2403sp4.src.rpm tomcat-9.0.120-2.oe2003sp4.src.rpm tomcat-9.0.120-2.oe2203sp4.src.rpm Uncontrolled Resource Consumption vulnerability in Apache Tomcat's WebSocket chat example. This issue affects Apache Tomcat: from 11.0.0-M20 through 11.0.24, from 10.1.24 through 10.1.57, from 9.0.89 through 9.0.120. Users who have followed the security guidance to remove the examples web application are not affected by this issue. 2026-08-07 CVE-2026-66299 openEuler-24.03-LTS-SP1 openEuler-24.03-LTS-SP3 openEuler-24.03-LTS-SP4 openEuler-20.03-LTS-SP4 openEuler-22.03-LTS-SP4 High 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H tomcat security update 2026-08-07 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3233