[CLSA-2026:1792400805] Fix CVE(s): CVE-2026-68569
Type:
security
Severity:
Important
Release date:
2026-10-19 09:09:01 UTC
Description:
* SECURITY UPDATE: Authentication bypass in DataSourceRealm and JDBCRealm - debian/patches/CVE-2026-68569.patch: Fail authentication when the database connection or the user or role lookup fails, and require the user to exist in the database for CLIENT-CERT and SPNEGO authentication in DataSourceRealm and JDBCRealm - CVE-2026-68569
CVEs fixed:
Updated packages:
  • libtomcat9-embed-java_9.0.31-1ubuntu0.9+tuxcare.els9_all.deb
    sha:cd2a65c98e79df6356f1b7082713dce3b8e396b5
  • libtomcat9-java_9.0.31-1ubuntu0.9+tuxcare.els9_all.deb
    sha:0e03d027ef3534b020243212714e55a19889e430
  • tomcat9_9.0.31-1ubuntu0.9+tuxcare.els9_all.deb
    sha:6c4fe701e0657b1263c123c79d5da3622dd0241e
  • tomcat9-admin_9.0.31-1ubuntu0.9+tuxcare.els9_all.deb
    sha:89fb651d051f212a617d3464346ac097f990bf98
  • tomcat9-common_9.0.31-1ubuntu0.9+tuxcare.els9_all.deb
    sha:0b88d10ff07e844cf9c09e69a6dec9d0821734df
  • tomcat9-docs_9.0.31-1ubuntu0.9+tuxcare.els9_all.deb
    sha:d2d82b7495713d172ef4c2c34ed0df19d95f48e5
  • tomcat9-examples_9.0.31-1ubuntu0.9+tuxcare.els9_all.deb
    sha:baad3ba21b6d2f892d6cc27f6e042aba2275c1b1
  • tomcat9-user_9.0.31-1ubuntu0.9+tuxcare.els9_all.deb
    sha:655d3569430f6c38162c3dec30f90905109c2adc
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.