Release date:
2026-11-04 08:52:21 UTC
Description:
* SECURITY UPDATE: Security constraint bypass when a collection lists
overlapping URL patterns
- debian/patches/CVE-2026-65182.patch: select the security constraint
with the longest matching path in RealmBase
- CVE-2026-65182
* SECURITY UPDATE: Incorrect rewrite rule processing in RewriteValve
- debian/patches/CVE-2026-65927.patch: restart from the first rule on
the next flag, skip the whole chain including its terminal rule when
a chained rule does not match, always discard the original query
string with the qsdiscard flag, and stop parsing the configuration
on a read error
- CVE-2026-65927
Updated packages:
-
libtomcat9-embed-java_9.0.118-0+deb11u1+tuxcare.els3_all.deb
sha:673c26f271c56d8c1eaa00edf432e5a27c928a35
-
libtomcat9-java_9.0.118-0+deb11u1+tuxcare.els3_all.deb
sha:a4b12efae64cd1108c27d4f7f19699179d143e01
-
tomcat9_9.0.118-0+deb11u1+tuxcare.els3_all.deb
sha:851fc30277669c999b91841485690ab988aebed4
-
tomcat9-admin_9.0.118-0+deb11u1+tuxcare.els3_all.deb
sha:5ae3fca5c97d78854d51f28e05ae3417948ff621
-
tomcat9-common_9.0.118-0+deb11u1+tuxcare.els3_all.deb
sha:a84a581f0034a882352eac94f7d193145d54db14
-
tomcat9-docs_9.0.118-0+deb11u1+tuxcare.els3_all.deb
sha:117433cc037b9378030cafdda97e0b65c6038b0e
-
tomcat9-examples_9.0.118-0+deb11u1+tuxcare.els3_all.deb
sha:aabad8855d3072a0283641323d1f44002729c0ea
-
tomcat9-user_9.0.118-0+deb11u1+tuxcare.els3_all.deb
sha:46155587b1b8abf1b91fa5996c2f5e1a6eb9b705
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
