CLSA-2026-1779366607

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1779366607.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1779366607
Upstream
CVE (4)
Published
2026-05-21T15:42:09Z
Modified
2026-10-26T09:43:50Z
Summary
tomcat: Fix of 4 CVEs
Details
  • CVE-2026-43514: fix observable timing discrepancy when comparing AJP secret (Low)
  • CVE-2026-43512: fix authentication bypass in DIGEST authentication when password is null (Moderate)
  • CVE-2026-43515: fix improper authorization when multiple method constraints apply to the same extension pattern (Moderate)
  • CVE-2026-43513: fix LockOutRealm bypass via case-variant usernames against case-insensitive realms (Low)
References

Affected packages

TuxCare:CentOS:7
tomcat

Package

Name
tomcat
Purl
pkg:rpm/tuxcare/tomcat?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.0.76-16.el7_9.tuxcare.els4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1779366607.json"
tomcat-admin-webapps

Package

Name
tomcat-admin-webapps
Purl
pkg:rpm/tuxcare/tomcat-admin-webapps?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.0.76-16.el7_9.tuxcare.els4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1779366607.json"
tomcat-docs-webapp

Package

Name
tomcat-docs-webapp
Purl
pkg:rpm/tuxcare/tomcat-docs-webapp?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.0.76-16.el7_9.tuxcare.els4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1779366607.json"
tomcat-el-2.2-api

Package

Name
tomcat-el-2.2-api
Purl
pkg:rpm/tuxcare/tomcat-el-2.2-api?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.0.76-16.el7_9.tuxcare.els4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1779366607.json"
tomcat-javadoc

Package

Name
tomcat-javadoc
Purl
pkg:rpm/tuxcare/tomcat-javadoc?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.0.76-16.el7_9.tuxcare.els4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1779366607.json"
tomcat-jsp-2.2-api

Package

Name
tomcat-jsp-2.2-api
Purl
pkg:rpm/tuxcare/tomcat-jsp-2.2-api?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.0.76-16.el7_9.tuxcare.els4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1779366607.json"
tomcat-jsvc

Package

Name
tomcat-jsvc
Purl
pkg:rpm/tuxcare/tomcat-jsvc?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.0.76-16.el7_9.tuxcare.els4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1779366607.json"
tomcat-lib

Package

Name
tomcat-lib
Purl
pkg:rpm/tuxcare/tomcat-lib?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.0.76-16.el7_9.tuxcare.els4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1779366607.json"
tomcat-servlet-3.0-api

Package

Name
tomcat-servlet-3.0-api
Purl
pkg:rpm/tuxcare/tomcat-servlet-3.0-api?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.0.76-16.el7_9.tuxcare.els4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1779366607.json"
tomcat-webapps

Package

Name
tomcat-webapps
Purl
pkg:rpm/tuxcare/tomcat-webapps?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.0.76-16.el7_9.tuxcare.els4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1779366607.json"