[CLSA-2026:1786880926] tomcat6: Fix of CVE-2026-55957
Type:
security
Severity:
Important
Release date:
2026-08-18 20:51:48 UTC
Description:
- CVE-2026-55957: tomcat6: JNDIRealm GSSAPI authenticated bind allowed authentication without the correct password
CVEs fixed:
Updated packages:
  • tomcat6-6.0.24-115.el6_10.tuxcare.els3.noarch.rpm
    sha:e02bc54d6e7727eb0f0994aa1963f06adf9e5f6380cc06b2294313838f1afe7a
  • tomcat6-admin-webapps-6.0.24-115.el6_10.tuxcare.els3.noarch.rpm
    sha:d0b8666e0019ea452a1ebebc6b09c2d32360d5786db1547ebd13e835c95bb846
  • tomcat6-docs-webapp-6.0.24-115.el6_10.tuxcare.els3.noarch.rpm
    sha:f7871ba39dc358a81c86c8f4879369b0706e73edfdc4a01bd2dc27c567e996a1
  • tomcat6-el-2.1-api-6.0.24-115.el6_10.tuxcare.els3.noarch.rpm
    sha:71e210a76800371355b3c1ddea222eb1783701f168031fe6785903dba56c68cf
  • tomcat6-javadoc-6.0.24-115.el6_10.tuxcare.els3.noarch.rpm
    sha:41bb82931ea6dffc9c29760166513bc600d010c30fc60fd66411bbf8b916ce35
  • tomcat6-jsp-2.1-api-6.0.24-115.el6_10.tuxcare.els3.noarch.rpm
    sha:96eefcb11529d25bad72e32b2a88246bda2a240cc45e6c73f67bde409855ed1a
  • tomcat6-lib-6.0.24-115.el6_10.tuxcare.els3.noarch.rpm
    sha:ef2a007e5fd8c51bd00cf161725134304a625f9d24c5ca6d9ec8fb1c37bf5305
  • tomcat6-servlet-2.5-api-6.0.24-115.el6_10.tuxcare.els3.noarch.rpm
    sha:65e9035d2e07b1daad1b1823ef239a9d0a75a4e5b2accca06a2078e2b341dc7b
  • tomcat6-webapps-6.0.24-115.el6_10.tuxcare.els3.noarch.rpm
    sha:bf8e65bc372874d1baf0efe0b606fe74766c399c5406a6de8443139704d5b105
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.