[CLSA-2026:1794423436] tomcat: Fix of CVE-2026-68569
Type:
security
Severity:
Important
Release date:
2026-11-12 19:17:43 UTC
Description:
- CVE-2026-68569: fix DataSourceRealm and JDBCRealm to fail authentication when the role lookup fails and to reject non-existent users (High)
CVEs fixed:
Updated packages:
  • tomcat-7.0.76-16.el7_9.tuxcare.els7.noarch.rpm
    sha:e8cb066996d578366a000d2ad2605e6f4525035c2f9d7f20f76d8912e6834995
  • tomcat-admin-webapps-7.0.76-16.el7_9.tuxcare.els7.noarch.rpm
    sha:fefb8ae158e0ad7f17ea3f8f2f1803a43fd619cbc5c66ac9b6d049aa4cbc0219
  • tomcat-docs-webapp-7.0.76-16.el7_9.tuxcare.els7.noarch.rpm
    sha:a16b4d002c063b888c6b918d47180f78a522812699bbb2a93098f6dd5306b971
  • tomcat-el-2.2-api-7.0.76-16.el7_9.tuxcare.els7.noarch.rpm
    sha:7d303d279d5784737601ef803a6be323850edf4bfd65cca587af9c6e41c9601b
  • tomcat-javadoc-7.0.76-16.el7_9.tuxcare.els7.noarch.rpm
    sha:650c5332842610461704fa8c83a2877da8c7095cf5b0f29a572a37fbd339d993
  • tomcat-jsp-2.2-api-7.0.76-16.el7_9.tuxcare.els7.noarch.rpm
    sha:65213e112cea3146ad30f79649a9d84ed39cf8890edcc3c78b8258968c3a6442
  • tomcat-jsvc-7.0.76-16.el7_9.tuxcare.els7.noarch.rpm
    sha:91c3952da64382c733283ffdc9b743fac945c57b7e11ff274eeb368851993e87
  • tomcat-lib-7.0.76-16.el7_9.tuxcare.els7.noarch.rpm
    sha:f1014a5411befd7a43f82025c71b862d937e3c868bb5b03ecb5e5d8ede3b1da6
  • tomcat-servlet-3.0-api-7.0.76-16.el7_9.tuxcare.els7.noarch.rpm
    sha:4d02dcb7b755cef38e291319e0d822ddf00e29bb8740cb887b1ff9684413c3c5
  • tomcat-webapps-7.0.76-16.el7_9.tuxcare.els7.noarch.rpm
    sha:b6ca01dfadcb3d1a999a79f8bcc9af14780ce44d9138ed3a8357097c41ce25f9
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.