[CLSA-2026:1774261838] tomcat: Fix of CVE-2025-66614
Type:
security
Severity:
Critical
Release date:
2026-03-23 10:30:42 UTC
Description:
- CVE-2025-66614: add protocol host name and SNI host name matching
Updated packages:
  • tomcat-9.0.87-3.el9_6.3.tuxcare.els3.noarch.rpm
    sha:e0b536197ed5fe29e14f962be2d6c62f4d1945d1c6ee4d72cf5fe042ca5446a0
  • tomcat-admin-webapps-9.0.87-3.el9_6.3.tuxcare.els3.noarch.rpm
    sha:8b84fbdaa032d0e6b93b9df4692407d04b8495aab8db14c8b718cbc9cd4ef2af
  • tomcat-docs-webapp-9.0.87-3.el9_6.3.tuxcare.els3.noarch.rpm
    sha:36aa17046c1537379540aaa1ee0593d74a87f61594e3bef577538da3f273ceef
  • tomcat-el-3.0-api-9.0.87-3.el9_6.3.tuxcare.els3.noarch.rpm
    sha:6b5fe420177d405c46deac0bd61255fcd36fc07a129edbe2264817a3077a8628
  • tomcat-jsp-2.3-api-9.0.87-3.el9_6.3.tuxcare.els3.noarch.rpm
    sha:a06bb9e2e0af734d09e93113176fda178ed671b69faab0035e0ee52d79a58901
  • tomcat-lib-9.0.87-3.el9_6.3.tuxcare.els3.noarch.rpm
    sha:4d7b913bc56b3e77e67c27646ab06bac373c35e746bdd869c8dd17b0b21bc3e0
  • tomcat-servlet-4.0-api-9.0.87-3.el9_6.3.tuxcare.els3.noarch.rpm
    sha:caeb907dc834d962a6c654bc91db953d86664cd834c181db9e2b4430c04ecc3f
  • tomcat-webapps-9.0.87-3.el9_6.3.tuxcare.els3.noarch.rpm
    sha:5d4080816eaf306c43711fd864269b6c54cb9f2ef666f833a9f2356c9edec236
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.