ALSA-2026:25341

See a problem?
Import Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:25341.json
JSON Data
https://api.osv.dev/v1/vulns/ALSA-2026:25341
Published
2026-06-11T00:00:00Z
Modified
2026-07-08T14:30:05.087149270Z
Summary
Important: tomcat9 update
Details

Certificate revocation bypass due to improper OCSP response validation

References

Affected packages

AlmaLinux:10
tomcat9

Package

Name
tomcat9
Purl
pkg:rpm/almalinux/tomcat9

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:9.0.117-1.el10_2.alma.1

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:25341.json"
tomcat9-admin-webapps

Package

Name
tomcat9-admin-webapps
Purl
pkg:rpm/almalinux/tomcat9-admin-webapps

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:9.0.117-1.el10_2.alma.1

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:25341.json"
tomcat9-docs-webapp

Package

Name
tomcat9-docs-webapp
Purl
pkg:rpm/almalinux/tomcat9-docs-webapp

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:9.0.117-1.el10_2.alma.1

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:25341.json"
tomcat9-el-3.0-api

Package

Name
tomcat9-el-3.0-api
Purl
pkg:rpm/almalinux/tomcat9-el-3.0-api

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:9.0.117-1.el10_2.alma.1

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:25341.json"
tomcat9-jsp-2.3-api

Package

Name
tomcat9-jsp-2.3-api
Purl
pkg:rpm/almalinux/tomcat9-jsp-2.3-api

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:9.0.117-1.el10_2.alma.1

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:25341.json"
tomcat9-lib

Package

Name
tomcat9-lib
Purl
pkg:rpm/almalinux/tomcat9-lib

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:9.0.117-1.el10_2.alma.1

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:25341.json"
tomcat9-servlet-4.0-api

Package

Name
tomcat9-servlet-4.0-api
Purl
pkg:rpm/almalinux/tomcat9-servlet-4.0-api

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:9.0.117-1.el10_2.alma.1

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:25341.json"
tomcat9-webapps

Package

Name
tomcat9-webapps
Purl
pkg:rpm/almalinux/tomcat9-webapps

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:9.0.117-1.el10_2.alma.1

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:25341.json"