RHSA-2026:38505: CVEs fixed (Red Hat)

RHSA-2026:38505 fixes 2 tracked CVEs. Affected systems and fixed versions.

• CVE-2026-34486 HIGH 7.5 EXPLOITED DOWNGRADE DOWNGRADE Apache Tomcat Missing Encryption of Sensitive Data Vulnerability
• CVE-2026-29146 HIGH 7.5 UPGRADE Padding Oracle vulnerability in Apache Tomcat's EncryptInterceptor with default configuration. This issue aff

Applies to

• RHEL 7 Extended Lifecycle Support · fixed in tomcat-7.0.76-18.el7_9

← Back to latest CVEs