CLSA-2026-1784297753
tomcat: Fix of 3 CVEs
No scoreFix available
- Bump release to skip the already-released els6 tag, which was set one release ahead of its changelog entry and cannot be changed
What each source reports
OSV No score
tomcat: Fix of 3 CVEs
- Bump release to skip the already-released els6 tag, which was set one release ahead of its changelog entry and cannot be changed
- Record
CLSA-2026-1784297753- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
tomcatTuxCare:AlmaLinux:9.2 |
before 1:9.0.62-12.el9_2.1.tuxcare.els7 | 1:9.0.62-12.el9_2.1.tuxcare.els7 |
tomcat-admin-webappsTuxCare:AlmaLinux:9.2 |
before 1:9.0.62-12.el9_2.1.tuxcare.els7 | 1:9.0.62-12.el9_2.1.tuxcare.els7 |
tomcat-docs-webappTuxCare:AlmaLinux:9.2 |
before 1:9.0.62-12.el9_2.1.tuxcare.els7 | 1:9.0.62-12.el9_2.1.tuxcare.els7 |
tomcat-el-3.0-apiTuxCare:AlmaLinux:9.2 |
before 1:9.0.62-12.el9_2.1.tuxcare.els7 | 1:9.0.62-12.el9_2.1.tuxcare.els7 |
tomcat-jsp-2.3-apiTuxCare:AlmaLinux:9.2 |
before 1:9.0.62-12.el9_2.1.tuxcare.els7 | 1:9.0.62-12.el9_2.1.tuxcare.els7 |
tomcat-libTuxCare:AlmaLinux:9.2 |
before 1:9.0.62-12.el9_2.1.tuxcare.els7 | 1:9.0.62-12.el9_2.1.tuxcare.els7 |
tomcat-servlet-4.0-apiTuxCare:AlmaLinux:9.2 |
before 1:9.0.62-12.el9_2.1.tuxcare.els7 | 1:9.0.62-12.el9_2.1.tuxcare.els7 |
tomcat-webappsTuxCare:AlmaLinux:9.2 |
before 1:9.0.62-12.el9_2.1.tuxcare.els7 | 1:9.0.62-12.el9_2.1.tuxcare.els7 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CLSA-2026-1784297753 is a vulnerability with no CVSS score yet in tomcat, published July 23, 2026. No source lists public exploit code. Fixed in tomcat 1:9.0.62-12.el9_2.1.tuxcare.els7.