Release tomcat-10.1.49-1.el10 ALSA-2026:18537
- Langage dominant
- Aucune donnée de langage
- Étoiles
- 2
- Forks
- 0
- Métriques de merge des PR
- Aucune PR mergée en 30 j
Description
tomcat security update
Severity: Important
Description
Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.
Security Fix(es):
* tomcat: Apache Tomcat: Security constraint bypass for CGI scripts (CVE-2025-46701)
* org.apache.tomcat/tomcat-catalina: tomcat: Apache Tomcat: session fixation via rewrite valve (CVE-2025-55668)
* org.apache.tomcat/tomcat-juli: tomcat: Apache Tomcat: console manipulation (CVE-2025-55754)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Affected packages:
tomcat-10.1.49-1.el10.noarch
tomcat-admin-webapps-10.1.49-1.el10.noarch
tomcat-docs-webapp-10.1.49-1.el10.noarch
tomcat-el-5.0-api-10.1.49-1.el10.noarch
tomcat-jsp-3.1-api-10.1.49-1.el10.noarch
tomcat-lib-10.1.49-1.el10.noarch
tomcat-servlet-6.0-api-10.1.49-1.el10.noarch
tomcat-webapps-10.1.49-1.el10.noarch
tomcat-10.1.49-1.el10.noarch
tomcat-admin-webapps-10.1.49-1.el10.noarch
tomcat-docs-webapp-10.1.49-1.el10.noarch
tomcat-el-5.0-api-10.1.49-1.el10.noarch
tomcat-jsp-3.1-api-10.1.49-1.el10.noarch
tomcat-lib-10.1.49-1.el10.noarch
tomcat-servlet-6.0-api-10.1.49-1.el10.noarch
tomcat-webapps-10.1.49-1.el10.noarch
tomcat-10.1.49-1.el10.noarch
tomcat-admin-webapps-10.1.49-1.el10.noarch
tomcat-docs-webapp-10.1.49-1.el10.noarch
tomcat-el-5.0-api-10.1.49-1.el10.noarch
tomcat-jsp-3.1-api-10.1.49-1.el10.noarch
tomcat-lib-10.1.49-1.el10.noarch
tomcat-servlet-6.0-api-10.1.49-1.el10.noarch
tomcat-webapps-10.1.49-1.el10.noarch
tomcat-10.1.49-1.el10.noarch
tomcat-admin-webapps-10.1.49-1.el10.noarch
tomcat-docs-webapp-10.1.49-1.el10.noarch
tomcat-el-5.0-api-10.1.49-1.el10.noarch
tomcat-jsp-3.1-api-10.1.49-1.el10.noarch
tomcat-lib-10.1.49-1.el10.noarch
tomcat-servlet-6.0-api-10.1.49-1.el10.noarch
tomcat-webapps-10.1.49-1.el10.noarch
tomcat-10.1.49-1.el10.noarch
tomcat-admin-webapps-10.1.49-1.el10.noarch
tomcat-docs-webapp-10.1.49-1.el10.noarch
tomcat-el-5.0-api-10.1.49-1.el10.noarch
tomcat-jsp-3.1-api-10.1.49-1.el10.noarch
tomcat-lib-10.1.49-1.el10.noarch
tomcat-servlet-6.0-api-10.1.49-1.el10.noarch
tomcat-webapps-10.1.49-1.el10.noarch
Guide de contribution
Ouvrir le guide de contribution
Évaluation
Cette issue n'a pas encore été évaluée.