[CLSA-2026:1794250719] tomcat: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-11-11 15:50:28 UTC
Description:
- CVE-2026-65182: select the security constraint with the longest matching path - CVE-2026-41284: limit the size of WebDAV LOCK and PROPFIND request bodies - CVE-2026-101296: always use a simple bind to validate user credentials in JNDIRealm
Updated packages:
  • tomcat-7.0.76-16.el7_9.tuxcare.els8.noarch.rpm
    sha:810928aeeba02b976b4c0db7cedc925663a73e70bd5d6ee175ff1ba89a8b190f
  • tomcat-admin-webapps-7.0.76-16.el7_9.tuxcare.els8.noarch.rpm
    sha:60c3e12f5a3fac660bdd3b025abe95ed47c3346437de8b9e86f06948095ff5a7
  • tomcat-docs-webapp-7.0.76-16.el7_9.tuxcare.els8.noarch.rpm
    sha:1283da2eae46aec337620dd117c5f87538c8b6944b0b7f0dba23d864ed9608a8
  • tomcat-el-2.2-api-7.0.76-16.el7_9.tuxcare.els8.noarch.rpm
    sha:e5e7c1a23e02e96edf802917267da73083c1a06c2c9092c03be7be9bd26ae3ec
  • tomcat-javadoc-7.0.76-16.el7_9.tuxcare.els8.noarch.rpm
    sha:a7e5123c069df5b693e5867830c869f72fe56143ce27e2bce020d2f57769f6b7
  • tomcat-jsp-2.2-api-7.0.76-16.el7_9.tuxcare.els8.noarch.rpm
    sha:1b3d3ebe83359e8851fad333ae1e92dd50a5d50eea466cfa02c348b74032c657
  • tomcat-jsvc-7.0.76-16.el7_9.tuxcare.els8.noarch.rpm
    sha:292223f3bf984bb667121eec096d9e4d3ba750bada4753a34ce5dffce490479b
  • tomcat-lib-7.0.76-16.el7_9.tuxcare.els8.noarch.rpm
    sha:dd81f9140711a205f5f4f71fc529e3d11758aba4e4fa0f54f0e238a3c842d55d
  • tomcat-servlet-3.0-api-7.0.76-16.el7_9.tuxcare.els8.noarch.rpm
    sha:7784ef42c55d0065a864f7b811d4312fa88ef653d0a34b4255f27b4fed55698d
  • tomcat-webapps-7.0.76-16.el7_9.tuxcare.els8.noarch.rpm
    sha:35e53b7843b8621f092bb4e5eb5d52aa7f3d78c24b60e00c662eaa2912cd7456
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.