Описание
ELSA-2026-69259: tomcat update (MODERATE)
[1:10.1.49-4]
- Resolves: RHEL-192817 tomcat: HTTP/2 request headers not validated (CVE-2026-41293)
- Resolves: RHEL-192648 tomcat: Improper Input Validation vulnerability due to incomplete fix (CVE-2026-32990)
- Resolves: RHEL-238208 tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication (CVE-2026-42498)
- Resolves: RHEL-238224 tomcat: Improper Handling of Case Sensitivity in LockOutRealm (CVE-2026-43513)
- Resolves: RHEL-238259 tomcat: Improper Authorization allows security bypass (CVE-2026-43515)
- Resolves: RHEL-238284 tomcat: Authentication bypass via digest authentication (CVE-2026-43512)
Обновленные пакеты
Oracle Linux 10
Oracle Linux aarch64
tomcat
10.1.49-4.el10_2
tomcat-admin-webapps
10.1.49-4.el10_2
tomcat-docs-webapp
10.1.49-4.el10_2
tomcat-el-5.0-api
10.1.49-4.el10_2
tomcat-jsp-3.1-api
10.1.49-4.el10_2
tomcat-lib
10.1.49-4.el10_2
tomcat-servlet-6.0-api
10.1.49-4.el10_2
tomcat-webapps
10.1.49-4.el10_2
Oracle Linux x86_64
tomcat
10.1.49-4.el10_2
tomcat-admin-webapps
10.1.49-4.el10_2
tomcat-docs-webapp
10.1.49-4.el10_2
tomcat-el-5.0-api
10.1.49-4.el10_2
tomcat-jsp-3.1-api
10.1.49-4.el10_2
tomcat-lib
10.1.49-4.el10_2
tomcat-servlet-6.0-api
10.1.49-4.el10_2
tomcat-webapps
10.1.49-4.el10_2
