JVNVU#93110597: Apache Tomcatにおける複数の脆弱性（2026年10月20日）

The Apache Software Foundationから、Apache Tomcatの8件の脆弱性に対してアドバイザリが公開されました。

Apache Tomcatのアドバイザリを参照してください。

ベンダ	リンク
The Apache Software Foundation	[SECURITY] CVE-2026-101356 Apache Tomcat - HTTP/2 request/response mix-up after error during async processing
	[SECURITY] CVE-2026-101296 Apache Tomcat - JNDIRealm bind credential validation fails open for non-GSSAPI SASL mechanisms
	[SECURITY] CVE-2026-93446 Apache Tomcat - Possible TLS 1.3 connection failures
	[SECURITY] CVE-2026-88041 Apache Tomcat - HTTP/2 trailer header cross-contamination
	[SECURITY] CVE-2026-74049 Apache Tomcat - Jasper JSTL <c:redirect> plug-in implementation omits page abort (SKIP_PAGE)
	[SECURITY] CVE-2026-74048 Apache Tomcat - OpenSSL-FFM FIPS failure does not prevent start-up
	[SECURITY] CVE-2026-103119 Apache Tomcat - AJP response mix-up
	[SECURITY] CVE-2026-80353 Apache Tomcat - TOCTOU when setting specific permissions for Unix Domain Sockets - Fix for CVE-2026-65183 did not address APR connector

JVNVU#93110597 Apache Tomcatにおける複数の脆弱性（2026年10月20日）