[CLSA-2026:1793117610] tomcat: Fix of 2 CVEs
Type:
security
Severity:
None
Release date:
2026-10-27 16:13:39 UTC
Description:
- Rebase onto AL2 7.0.76-10.amzn2.0.19 - Fix CVE-2026-76183 - Fix CVE-2026-78383 - Retain the TuxCare ELS patches: canonical-path containment checks in DefaultServlet, FileStore, ContextConfig, ExpandWar and HostConfig with the new FileUtil helper and its File.separator follow-up; the LockOutRealm and RealmBase credential-handling fixes; constant-time comparison in AbstractAjpProcessor and DigestAuthenticator via the new ConstantTime utility; and the bounded request-body read in WebdavServlet - Declare the patch files by literal name rather than through the name and version macros; the set of patches applied is unchanged
Updated packages:
  • tomcat-7.0.76-10.amzn2.0.19.tuxcare.els1.noarch.rpm
    sha:8e1bb04e52f8ddd9335f3611a59b21d2dded5fb8d9fea11c4a6e47b236f22001
  • tomcat-admin-webapps-7.0.76-10.amzn2.0.19.tuxcare.els1.noarch.rpm
    sha:8d4bd19c9523604b71614b6ed0daf24ccc1d25297b9de3a06aaa2440895134bb
  • tomcat-docs-webapp-7.0.76-10.amzn2.0.19.tuxcare.els1.noarch.rpm
    sha:834772bb8cab0f0577a8c9279dc18a3e83c397e5a3ca87930ebe3627afa95216
  • tomcat-el-2.2-api-7.0.76-10.amzn2.0.19.tuxcare.els1.noarch.rpm
    sha:805be6e8e843695e408876a52b04bf8fed12cbf66d4480ef9392e889ace7e703
  • tomcat-javadoc-7.0.76-10.amzn2.0.19.tuxcare.els1.noarch.rpm
    sha:b450eaad754b5fd3abc5ed8df1cec0b5d37cff83b6a9dcd2db2ce7b963d0be2e
  • tomcat-jsp-2.2-api-7.0.76-10.amzn2.0.19.tuxcare.els1.noarch.rpm
    sha:1671bfb4b876de0eecb82fb0c362af54a040a99d60b0870414389458e2906976
  • tomcat-jsvc-7.0.76-10.amzn2.0.19.tuxcare.els1.noarch.rpm
    sha:3dc67d809329e5cfcc3f943a93c95e37dfd767149db2b05219c8ddb8d6ee29fd
  • tomcat-lib-7.0.76-10.amzn2.0.19.tuxcare.els1.noarch.rpm
    sha:bd46b82e211e8560d7c5843374f587a5785dbc328f6552815eb4b0f5adf2cecb
  • tomcat-servlet-3.0-api-7.0.76-10.amzn2.0.19.tuxcare.els1.noarch.rpm
    sha:0e6185845c93e1de886aed5aad7cf8c7aeb65479f533948c25b5c93a3463c9da
  • tomcat-webapps-7.0.76-10.amzn2.0.19.tuxcare.els1.noarch.rpm
    sha:98911c1acf4b94d6aef43ca19002307f980db986f583609a4733968261535e92
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.