CLSA-2026-1784625369

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1784625369.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1784625369
Upstream
Published
2026-07-21T09:16:34Z
Modified
2026-10-26T09:31:19Z
Summary
tomcat: Fix of CVE-2026-59083
Details
  • CVE-2026-59083: decode the rewritten URL with Tomcat's UDecoder.URLDecode() instead of java.net.URLDecoder in the RewriteValve, fixing improper URL (hex) encoding handling that could bypass security constraints for some configurations (upstream tomcat 9.0.120)
References

Affected packages

TuxCare:AlmaLinux:9.6
tomcat

Package

Name
tomcat
Purl
pkg:rpm/tuxcare/tomcat?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:9.0.87-3.el9_6.3.tuxcare.els10

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1784625369.json"
tomcat-admin-webapps

Package

Name
tomcat-admin-webapps
Purl
pkg:rpm/tuxcare/tomcat-admin-webapps?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:9.0.87-3.el9_6.3.tuxcare.els10

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1784625369.json"
tomcat-docs-webapp

Package

Name
tomcat-docs-webapp
Purl
pkg:rpm/tuxcare/tomcat-docs-webapp?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:9.0.87-3.el9_6.3.tuxcare.els10

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1784625369.json"
tomcat-el-3.0-api

Package

Name
tomcat-el-3.0-api
Purl
pkg:rpm/tuxcare/tomcat-el-3.0-api?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:9.0.87-3.el9_6.3.tuxcare.els10

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1784625369.json"
tomcat-jsp-2.3-api

Package

Name
tomcat-jsp-2.3-api
Purl
pkg:rpm/tuxcare/tomcat-jsp-2.3-api?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:9.0.87-3.el9_6.3.tuxcare.els10

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1784625369.json"
tomcat-lib

Package

Name
tomcat-lib
Purl
pkg:rpm/tuxcare/tomcat-lib?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:9.0.87-3.el9_6.3.tuxcare.els10

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1784625369.json"
tomcat-servlet-4.0-api

Package

Name
tomcat-servlet-4.0-api
Purl
pkg:rpm/tuxcare/tomcat-servlet-4.0-api?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:9.0.87-3.el9_6.3.tuxcare.els10

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1784625369.json"
tomcat-webapps

Package

Name
tomcat-webapps
Purl
pkg:rpm/tuxcare/tomcat-webapps?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:9.0.87-3.el9_6.3.tuxcare.els10

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1784625369.json"