[CLSA-2026:1794250535] tomcat: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-11-11 14:52:15 UTC
Description:
- CVE-2026-65182: select the security constraint with the longest matching path - CVE-2026-41284: limit the size of WebDAV LOCK and PROPFIND request bodies - CVE-2026-101296: always use a simple bind to validate user credentials in JNDIRealm
Updated packages:
  • tomcat-7.0.76-16.el7_9.tuxcare.els8.noarch.rpm
    sha:42f49a550794d2e9b27f287e64475f7386f80d337cd7a18aa39040beb2fbbb83
  • tomcat-admin-webapps-7.0.76-16.el7_9.tuxcare.els8.noarch.rpm
    sha:d86c0e9ef6ee8b23779af2155a0e858712c5e2953b8f86ef8307b35bfeca20c6
  • tomcat-docs-webapp-7.0.76-16.el7_9.tuxcare.els8.noarch.rpm
    sha:aff8049fd190e0055c34f8c9551adeed75746853b2b5ebcee3447e62adb589aa
  • tomcat-el-2.2-api-7.0.76-16.el7_9.tuxcare.els8.noarch.rpm
    sha:7dc8d64ec597af244af846cec3c65fdbc1bfa7cc4e3f72df17bdb938972285e0
  • tomcat-javadoc-7.0.76-16.el7_9.tuxcare.els8.noarch.rpm
    sha:e60b17bf92ec3adbad58449a14368c8a6b456c3e6cfda003855dd578d0e6a3ce
  • tomcat-jsp-2.2-api-7.0.76-16.el7_9.tuxcare.els8.noarch.rpm
    sha:1b79f5fa81d471f0f35a5aef2f8458034c9d6274421b8cdcf58eb3f2ad8d5ea0
  • tomcat-jsvc-7.0.76-16.el7_9.tuxcare.els8.noarch.rpm
    sha:80ac645408d437d42e3b82ccacf51e9d8f2fd6dc1d36f9d2c205ce226d43e179
  • tomcat-lib-7.0.76-16.el7_9.tuxcare.els8.noarch.rpm
    sha:54c2162c28d0c335c0837d30f34de39d22f881a140fa034561b0894f14d26506
  • tomcat-servlet-3.0-api-7.0.76-16.el7_9.tuxcare.els8.noarch.rpm
    sha:79690c8fcd4fb5d17df70e64ed6a45e9371abb2013425e48ded2d59fcf1011d1
  • tomcat-webapps-7.0.76-16.el7_9.tuxcare.els8.noarch.rpm
    sha:bc7a573fb0a26e71b892e305a0022d37ace8266b5bc8548a992d176c37fd9239
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.