Описание
ELSA-2026-92862: tomcat security, bug fix, and enhancement update (IMPORTANT)
[1:10.1.49-5]
- Resolves: RHEL-264918 tomcat: Stalled TLS handshake when the server's first flight is too large
- Resolves: RHEL-255786 tomcat: Security constraint bypass due to improper access control (CVE-2026-65182)
- Resolves: RHEL-271888 tomcat: Authentication bypass via limited replay attack in DIGEST authenticator (CVE-2026-65905)
- Resolves: RHEL-271766 tomcat: Access control bypass due to off-by-one error in RewriteValve [N] flag processing (CVE-2026-65927)
- Resolves: RHEL-271791 tomcat: Unauthorized resource access via FORM authentication bypass (CVE-2026-68525)
- Resolves: RHEL-271741 tomcat: Improper Authentication due to principal lookup failure (CVE-2026-68569)
- Resolves: RHEL-271720 tomcat: Denial of Service via HTTP/2 allocation leak (CVE-2026-68763)
Обновленные пакеты
Oracle Linux 10
Oracle Linux aarch64
tomcat
10.1.49-5.el10_2
tomcat-admin-webapps
10.1.49-5.el10_2
tomcat-docs-webapp
10.1.49-5.el10_2
tomcat-el-5.0-api
10.1.49-5.el10_2
tomcat-jsp-3.1-api
10.1.49-5.el10_2
tomcat-lib
10.1.49-5.el10_2
tomcat-servlet-6.0-api
10.1.49-5.el10_2
tomcat-webapps
10.1.49-5.el10_2
Oracle Linux x86_64
tomcat
10.1.49-5.el10_2
tomcat-admin-webapps
10.1.49-5.el10_2
tomcat-docs-webapp
10.1.49-5.el10_2
tomcat-el-5.0-api
10.1.49-5.el10_2
tomcat-jsp-3.1-api
10.1.49-5.el10_2
tomcat-lib
10.1.49-5.el10_2
tomcat-servlet-6.0-api
10.1.49-5.el10_2
tomcat-webapps
10.1.49-5.el10_2
