[CLSA-2026:1794250267] tomcat: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-11-09 18:51:18 UTC
Description:
- CVE-2026-65182: select the security constraint with the longest matching path - CVE-2026-41284: limit the size of WebDAV LOCK and PROPFIND request bodies - CVE-2026-101296: always use a simple bind to validate user credentials in JNDIRealm
Updated packages:
  • tomcat-7.0.76-16.el7_9.tuxcare.els8.noarch.rpm
    sha:d3191734af842edb85ae8a7921e38f24eefdf4cc590fb99398e4042f0766e806
  • tomcat-admin-webapps-7.0.76-16.el7_9.tuxcare.els8.noarch.rpm
    sha:e02596aa6b3242643ebf003555144048c943142b8bb81c7a4c84dc5963eb427a
  • tomcat-docs-webapp-7.0.76-16.el7_9.tuxcare.els8.noarch.rpm
    sha:baea0470e6d5a7d8dbc9c057ac57f98039690c8a3f1e56449cdaafb016a8218b
  • tomcat-el-2.2-api-7.0.76-16.el7_9.tuxcare.els8.noarch.rpm
    sha:d4bdab0643f7330033a18d0739f986f15c9b6b9402e00896694658b141317822
  • tomcat-javadoc-7.0.76-16.el7_9.tuxcare.els8.noarch.rpm
    sha:f6b37cbbb39edc733b8a23b8801ba3fb05eb51bdbe7ffccf5dfbe0281fc2def0
  • tomcat-jsp-2.2-api-7.0.76-16.el7_9.tuxcare.els8.noarch.rpm
    sha:afadbc85c94bbb6b50988d30108cb1ec24bed2862be7490f41c53807845a25e7
  • tomcat-jsvc-7.0.76-16.el7_9.tuxcare.els8.noarch.rpm
    sha:0cc68e8cb4228ee1b5e52c30d94a6223c3c0ef69898bc193d27d7f323f7cf64c
  • tomcat-lib-7.0.76-16.el7_9.tuxcare.els8.noarch.rpm
    sha:2076a2ee2c0817100bac85c3b0f10122568ca8e9cd83c57e890ececfcd841035
  • tomcat-servlet-3.0-api-7.0.76-16.el7_9.tuxcare.els8.noarch.rpm
    sha:c1c0bc4214689b043b686e5929f5b2e8eba119916ec442409bfc9bc11f705b0c
  • tomcat-webapps-7.0.76-16.el7_9.tuxcare.els8.noarch.rpm
    sha:797d0d63b21ecdfe41a5ead00f5f0293baec59f6265e7680d5a09f2e3537af4d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.