ELSA-2026-93469

ELSA-2026-93469 - tomcat security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-11-02

Description

[1:9.0.121-1]
- Resolves: RHEL-255800
tomcat: Security constraint bypass due to improper access control (CVE-2026-65182)
- Resolves:
tomcat: Local information disclosure via Unix domain socket TOCTOU race condition (CVE-2026-65183)
- Resolves: RHEL-271827
tomcat: Improper Input Validation allows HTTP/2 no-authority bypass of strict SNI validation (CVE-2026-65637)
- Resolves: RHEL-271903
tomcat: Limited replay attack possible with DIGEST authentication (CVE-2026-65905)
- Resolves: RHEL-271776
tomcat: Access control bypass due to off-by-one error in RewriteValve [N] flag processing (CVE-2026-65927)
- Resolves:
tomcat: DoS in WebSocket chat example (CVE-2026-66299)
- Resolves:
tomcat: Servlet role references can bypass declarative role constraints (CVE-2026-66422)
- Resolves: RHEL-271800
tomcat: Unauthorized resource access via FORM authentication bypass(CVE-2026-68525)
- Resolves: RHEL-271810
tomcat: Principal lookup could fail open in some cases (CVE-2026-68569)
- Resolves: RHEL-271732
tomcat: Denial of Service via HTTP/2 allocation leak (CVE-2026-68763)
- Resolves:
tomcat: Default to Moderate (Impact missing upstream) (CVE-2026-73180)

Related CVEs

CVE-2026-65182

CVE-2026-65637

CVE-2026-65905

CVE-2026-65927

CVE-2026-68525

CVE-2026-68569

CVE-2026-68763

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	tomcat-9.0.121-1.el9_8.src.rpm	31c99f01d262f74d8092a90f9149a9b4014b4a03e0fea4678f18205f7f4ab0de	-	ol9_aarch64_appstream
	tomcat-9.0.121-1.el9_8.noarch.rpm	139025f55e35527dde46d07142026674de9959ad96a8cdb4ddee8a5470fcfb35	-	ol9_aarch64_appstream
	tomcat-admin-webapps-9.0.121-1.el9_8.noarch.rpm	2b466d5d39565f53029af9c269e7e0f83fba60ae662cc2ddc9b7d34785bc5f90	-	ol9_aarch64_appstream
	tomcat-docs-webapp-9.0.121-1.el9_8.noarch.rpm	a416144829410866c098107915a9a31cadc96a97bd1114e4efd6071bb08a5588	-	ol9_aarch64_appstream
	tomcat-el-3.0-api-9.0.121-1.el9_8.noarch.rpm	37b60ea10a81c085a7f130eb2f79e5135ebcade84d442d0b780cd7390334c4c4	-	ol9_aarch64_appstream
	tomcat-jsp-2.3-api-9.0.121-1.el9_8.noarch.rpm	294677e4483747e972923b00754e9c41eb6dc1b97bccc4abeae6c74685ca40f9	-	ol9_aarch64_appstream
	tomcat-lib-9.0.121-1.el9_8.noarch.rpm	caf6a3fc707f846829b18cf99e2d4afead99996a348b76f0a202de7956106046	-	ol9_aarch64_appstream
	tomcat-servlet-4.0-api-9.0.121-1.el9_8.noarch.rpm	1801820b3bf65144cf25c10270f7819fa86530c07b093fc22b4c08f7dd5cd6cf	-	ol9_aarch64_appstream
	tomcat-webapps-9.0.121-1.el9_8.noarch.rpm	6ba621a29611f9603fbf3498ea5d777239e67d73ca84d8f9399cc90c5b47394b	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	tomcat-9.0.121-1.el9_8.src.rpm	31c99f01d262f74d8092a90f9149a9b4014b4a03e0fea4678f18205f7f4ab0de	-	ol9_x86_64_appstream
	tomcat-9.0.121-1.el9_8.noarch.rpm	139025f55e35527dde46d07142026674de9959ad96a8cdb4ddee8a5470fcfb35	-	ol9_x86_64_appstream
	tomcat-admin-webapps-9.0.121-1.el9_8.noarch.rpm	2b466d5d39565f53029af9c269e7e0f83fba60ae662cc2ddc9b7d34785bc5f90	-	ol9_x86_64_appstream
	tomcat-docs-webapp-9.0.121-1.el9_8.noarch.rpm	a416144829410866c098107915a9a31cadc96a97bd1114e4efd6071bb08a5588	-	ol9_x86_64_appstream
	tomcat-el-3.0-api-9.0.121-1.el9_8.noarch.rpm	37b60ea10a81c085a7f130eb2f79e5135ebcade84d442d0b780cd7390334c4c4	-	ol9_x86_64_appstream
	tomcat-jsp-2.3-api-9.0.121-1.el9_8.noarch.rpm	294677e4483747e972923b00754e9c41eb6dc1b97bccc4abeae6c74685ca40f9	-	ol9_x86_64_appstream
	tomcat-lib-9.0.121-1.el9_8.noarch.rpm	caf6a3fc707f846829b18cf99e2d4afead99996a348b76f0a202de7956106046	-	ol9_x86_64_appstream
	tomcat-servlet-4.0-api-9.0.121-1.el9_8.noarch.rpm	1801820b3bf65144cf25c10270f7819fa86530c07b093fc22b4c08f7dd5cd6cf	-	ol9_x86_64_appstream
	tomcat-webapps-9.0.121-1.el9_8.noarch.rpm	6ba621a29611f9603fbf3498ea5d777239e67d73ca84d8f9399cc90c5b47394b	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team