Release date:
2026-09-02 12:48:31 UTC
Description:
- CVE-2026-68525: refresh the security constraints after FORM authentication when the
restored request changes the HTTP method, so a constraint that permits POST but not
GET is re-evaluated instead of being bypassed (upstream tomcat 9.0.121)
Updated packages:
-
tomcat-9.0.87-3.el9_6.3.tuxcare.els16.noarch.rpm
sha:31cbfee7d191db7c3bca382baa1514c1138779e0598f1f8e829f89e7e93ccba9
-
tomcat-admin-webapps-9.0.87-3.el9_6.3.tuxcare.els16.noarch.rpm
sha:67416686c70af8061dad126062c10cce8f85d2178b120fd14570426f820da655
-
tomcat-docs-webapp-9.0.87-3.el9_6.3.tuxcare.els16.noarch.rpm
sha:60254d7c5443eb045882174b28bd183b45d436165222e19f2973c13552a38536
-
tomcat-el-3.0-api-9.0.87-3.el9_6.3.tuxcare.els16.noarch.rpm
sha:1108e7e80bbb1664ef98d3134ea1baa8d2a839878162732d05779d52a165af63
-
tomcat-jsp-2.3-api-9.0.87-3.el9_6.3.tuxcare.els16.noarch.rpm
sha:3a4cb96ae496e0f9718a0d3a36a5102fefb2f726a990830a96eb8bf77eea9661
-
tomcat-lib-9.0.87-3.el9_6.3.tuxcare.els16.noarch.rpm
sha:8c5c681c5c35e985f1024857a51f919e730c1df62bbecd845a88950a20f74173
-
tomcat-servlet-4.0-api-9.0.87-3.el9_6.3.tuxcare.els16.noarch.rpm
sha:6a070b53d779907fd395edbae5638e828bbd18fa1c4657556f91febcbb00ee86
-
tomcat-webapps-9.0.87-3.el9_6.3.tuxcare.els16.noarch.rpm
sha:6a005aaceeb346707887cbe7673088fb2f12c73359481d0f55fa98b8fa6239ae
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
