RHSA-2026:67164: CVEs fixed (Red Hat)

RHSA-2026:67164 fixes 2 tracked CVEs. Affected systems and fixed versions.

• CVE-2026-43512 CRITICAL 9.8 UPGRADE DEPRECATED: Authentication Bypass Issues vulnerability in digest authentication in Apache Tomcat. This issue
• CVE-2026-55957 HIGH 7.3 UPGRADE Missing Critical Step in Authentication vulnerability in Apache Tomcat when the JNDIRealm was configured to au

Applies to

• RHEL 10.0 Extended Update Support · fixed in tomcat-10.1.49-1.el10_0

← Back to latest CVEs