Release date:
2026-11-09 13:56:02 UTC
Description:
* SECURITY UPDATE: Security constraint bypass when a collection lists
overlapping URL patterns
- debian/patches/CVE-2026-65182.patch: select the security constraint
with the longest matching path in RealmBase
- CVE-2026-65182
* SECURITY UPDATE: Incorrect rewrite rule processing in RewriteValve
- debian/patches/CVE-2026-65927.patch: restart from the first rule on
the next flag, skip the whole chain including its terminal rule when
a chained rule does not match, always discard the original query
string with the qsdiscard flag, and stop parsing the configuration
on a read error
- CVE-2026-65927
Updated packages:
-
libtomcat9-embed-java_9.0.31-1~deb10u12+tuxcare.els10_all.deb
sha:446c775038bd53a45c23012966b6fa969db4a5f8
-
libtomcat9-java_9.0.31-1~deb10u12+tuxcare.els10_all.deb
sha:448b18f0e11ac8e460216baf8cec9d6a9613b830
-
tomcat9_9.0.31-1~deb10u12+tuxcare.els10_all.deb
sha:7c230d52c4404373402ab4d6ebf5b47832f0d5f1
-
tomcat9-admin_9.0.31-1~deb10u12+tuxcare.els10_all.deb
sha:ff6da782cda50bdf845d86b7fa05c93abecc2f2d
-
tomcat9-common_9.0.31-1~deb10u12+tuxcare.els10_all.deb
sha:f0017362810acaaf4d82f7156b28711abe69dcf2
-
tomcat9-docs_9.0.31-1~deb10u12+tuxcare.els10_all.deb
sha:5213ad496eb747e1588c3b89721ea2a6af7985e9
-
tomcat9-examples_9.0.31-1~deb10u12+tuxcare.els10_all.deb
sha:1857e09999744b94a4c525d222f8864b76fbe7cd
-
tomcat9-user_9.0.31-1~deb10u12+tuxcare.els10_all.deb
sha:8b3ce68cf55c019463f9589fcf53e6e71198efa9
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
