网安资讯详情 - SecLens 情报雷达

网安资讯，一网打尽。汇集权威漏洞通告与行业要闻，结合分组浏览、智能过滤、RSS订阅 和 Webhook 推送，多通道拓展您的安全情报视野。

(RHSA-2026:25341) Important: tomcat9 update

来源： redhat_advisory · 发布时间 2026-06-12 00:44 (UTC+08:00) · 抓取时间 2026-06-12 00:50 (UTC+08:00)

原文链接

摘要

Important: tomcat9 update

正文

Overview Updated Packages Important: tomcat9 update Security Advisory: Important Identify and remediate systems affected by this advisory. View affected systems CVE-2026-24734 tomcat9: Apache Tomcat: Certificate revocation bypass due to improper OCSP response validation Certificate revocation bypass due to improper OCSP response validation Rebase fixes from tomcat 9.0.117. Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x BZ - 2440426 - CVE-2026-24734 tomcat: Apache Tomcat: Certificate revocation bypass due to improper OCSP response validation (none) https://access.redhat.com/security/updates/classification/#important https://redhat.atlassian.net/browse/RHEL-150720 The Red Hat security contact is [email protected] . More contact details at https://access.redhat.com/security/team/contact/ .

标签

扩展字段

{
  "product_names": [
    "Red Hat Enterprise Linux for x86_64 - 4 years of updates",
    "Red Hat Enterprise Linux for x86_64 - Extended Update Support",
    "Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle",
    "Red Hat Enterprise Linux for IBM z Systems - 4 years of updates",
    "Red Hat Enterprise Linux for Power, little endian",
    "Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle",
    "Red Hat Enterprise Linux for x86_64 - Extended Life Cycle",
    "Red Hat Enterprise Linux for IBM z Systems - Extended Update Support",
    "Red Hat Enterprise Linux for ARM 64 - Extended Update Support",
    "Red Hat Enterprise Linux for IBM z Systems",
    "Red Hat Enterprise Linux for Power, little endian - 4 years of support",
    "Red Hat Enterprise Linux for x86_64",
    "Red Hat Enterprise Linux for ARM 64 - 4 years of updates",
    "Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle",
    "Red Hat Enterprise Linux for ARM 64",
    "Red Hat Enterprise Linux for Power, little endian - Extended Update Support"
  ],
  "update_date": [
    "2026-06-11T16:44:29Z"
  ]
}