[CLSA-2026:1792501691] tomcat: Fix of CVE-2026-65637
Type:
security
Severity:
Important
Release date:
2026-10-20 13:08:21 UTC
Description:
- CVE-2026-65637: require an authority (an :authority pseudo header or a Host header) for every HTTP/2 request (upstream tomcat 9.0.121)
CVEs fixed:
Updated packages:
  • tomcat-9.0.120-2.el9_8.tuxcare.els2.noarch.rpm
    sha:cee08693d6a55ee0e6a1754c70f29ab7489cc300447236a89debc49efe5bdd2b
  • tomcat-admin-webapps-9.0.120-2.el9_8.tuxcare.els2.noarch.rpm
    sha:f9bc63ec5f6a04529215ee1d3074cbf0ee328ae54738442b2be637c0f67febea
  • tomcat-docs-webapp-9.0.120-2.el9_8.tuxcare.els2.noarch.rpm
    sha:6cbbc02febe9a3180109c4a14c80b865a87eeb3f72376386b045183593451396
  • tomcat-el-3.0-api-9.0.120-2.el9_8.tuxcare.els2.noarch.rpm
    sha:6159649f8302036b4f98b3822af59ccb01abb67e34bfaf4158b2d02c47744aeb
  • tomcat-jsp-2.3-api-9.0.120-2.el9_8.tuxcare.els2.noarch.rpm
    sha:81cb53897587c3edfd5e0361446cb35bed4da07d6e06f5b81a9b49fb53f3e698
  • tomcat-lib-9.0.120-2.el9_8.tuxcare.els2.noarch.rpm
    sha:b748a5ba7a811fb6a17eff14ad68f91313c3d0606e4bf7faea624d412137cb70
  • tomcat-servlet-4.0-api-9.0.120-2.el9_8.tuxcare.els2.noarch.rpm
    sha:13b37594ed13bb9f33c7a0dc640f666710245f0080ea2ce5365b4314af07de27
  • tomcat-webapps-9.0.120-2.el9_8.tuxcare.els2.noarch.rpm
    sha:4c0c4b8cd98436fbb953865341e1da4c595f7667743510ed32ccbaf20b925e72
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.