[CLSA-2026:1794250264] tomcat: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-11-09 18:51:16 UTC
Description:
- CVE-2026-65182: select the security constraint with the longest matching path - CVE-2026-41284: limit the size of WebDAV LOCK and PROPFIND request bodies - CVE-2026-101296: always use a simple bind to validate user credentials in JNDIRealm
Updated packages:
  • tomcat-7.0.76-16.el7_9.tuxcare.els8.noarch.rpm
    sha:73d52ffed5b018f8569d76cd14730d89f74c1276e5e2e1fb5cc1381e143f6bfe
  • tomcat-admin-webapps-7.0.76-16.el7_9.tuxcare.els8.noarch.rpm
    sha:e2674f0e884adf4f13189555d0236e6574127489aed60c087b0ce13864f310c1
  • tomcat-docs-webapp-7.0.76-16.el7_9.tuxcare.els8.noarch.rpm
    sha:a3a5f4c4a661e27f29eb8d51acbd08a8c5cae049587acf0aee0909595319cac9
  • tomcat-el-2.2-api-7.0.76-16.el7_9.tuxcare.els8.noarch.rpm
    sha:0698af7192a48efa617a7568fcd5e40bc0f7ee32a618a36a49283c25c6faf4f3
  • tomcat-javadoc-7.0.76-16.el7_9.tuxcare.els8.noarch.rpm
    sha:17403fe81e2a5176a304691e580d0a15f7e458740466f1d7adc906549c5fb991
  • tomcat-jsp-2.2-api-7.0.76-16.el7_9.tuxcare.els8.noarch.rpm
    sha:b035ab97564fb7dfa97df26bb4ec1a74706c2608882e12a7d7bbf9669ab22f03
  • tomcat-jsvc-7.0.76-16.el7_9.tuxcare.els8.noarch.rpm
    sha:565dcbd667afc93b15a90969515871c5bde88b77887ee54e6fcf2f7dca89eb44
  • tomcat-lib-7.0.76-16.el7_9.tuxcare.els8.noarch.rpm
    sha:5ce1d442c8820a8e9c1834e53dd63772d27e907839d24dbc5d91be6646a886ee
  • tomcat-servlet-3.0-api-7.0.76-16.el7_9.tuxcare.els8.noarch.rpm
    sha:9a61b84661df915cd0be44bd25c9920959e614c061be26cd99333990c65e6650
  • tomcat-webapps-7.0.76-16.el7_9.tuxcare.els8.noarch.rpm
    sha:d2793dd28b1388ffe2764d30c041d6270dc9afa2a8fa840482bd0e0ea92377d1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.