Fixed packages 36
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.2::el10 | jws6-tomcat | 0:10.1.49-9.redhat_00007.1.el10jws |
| Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.2::el10 | jws6-tomcat-admin-webapps | 0:10.1.49-9.redhat_00007.1.el10jws |
| Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.2::el10 | jws6-tomcat-docs-webapp | 0:10.1.49-9.redhat_00007.1.el10jws |
| Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.2::el10 | jws6-tomcat-el-5.0-api | 0:10.1.49-9.redhat_00007.1.el10jws |
| Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.2::el10 | jws6-tomcat-javadoc | 0:10.1.49-9.redhat_00007.1.el10jws |
| Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.2::el10 | jws6-tomcat-jsp-3.1-api | 0:10.1.49-9.redhat_00007.1.el10jws |
| Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.2::el10 | jws6-tomcat-lib | 0:10.1.49-9.redhat_00007.1.el10jws |
| Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.2::el10 | jws6-tomcat-native | 0:1.3.6-1.redhat_1.el10jws |
| Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.2::el10 | jws6-tomcat-native-debuginfo | 0:1.3.6-1.redhat_1.el10jws |
| Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.2::el10 | jws6-tomcat-selinux | 0:10.1.49-9.redhat_00007.1.el10jws |
| Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.2::el10 | jws6-tomcat-servlet-6.0-api | 0:10.1.49-9.redhat_00007.1.el10jws |
| Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.2::el10 | jws6-tomcat-webapps | 0:10.1.49-9.redhat_00007.1.el10jws |
| Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.2::el8 | jws6-tomcat | 0:10.1.49-9.redhat_00007.1.el8jws |
| Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.2::el8 | jws6-tomcat-admin-webapps | 0:10.1.49-9.redhat_00007.1.el8jws |
| Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.2::el8 | jws6-tomcat-docs-webapp | 0:10.1.49-9.redhat_00007.1.el8jws |
| Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.2::el8 | jws6-tomcat-el-5.0-api | 0:10.1.49-9.redhat_00007.1.el8jws |
| Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.2::el8 | jws6-tomcat-javadoc | 0:10.1.49-9.redhat_00007.1.el8jws |
| Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.2::el8 | jws6-tomcat-jsp-3.1-api | 0:10.1.49-9.redhat_00007.1.el8jws |
| Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.2::el8 | jws6-tomcat-lib | 0:10.1.49-9.redhat_00007.1.el8jws |
| Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.2::el8 | jws6-tomcat-native | 0:1.3.6-1.redhat_1.el8jws |
| Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.2::el8 | jws6-tomcat-native-debuginfo | 0:1.3.6-1.redhat_1.el8jws |
| Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.2::el8 | jws6-tomcat-selinux | 0:10.1.49-9.redhat_00007.1.el8jws |
| Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.2::el8 | jws6-tomcat-servlet-6.0-api | 0:10.1.49-9.redhat_00007.1.el8jws |
| Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.2::el8 | jws6-tomcat-webapps | 0:10.1.49-9.redhat_00007.1.el8jws |
| Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.2::el9 | jws6-tomcat | 0:10.1.49-9.redhat_00007.1.el9jws |
| Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.2::el9 | jws6-tomcat-admin-webapps | 0:10.1.49-9.redhat_00007.1.el9jws |
| Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.2::el9 | jws6-tomcat-docs-webapp | 0:10.1.49-9.redhat_00007.1.el9jws |
| Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.2::el9 | jws6-tomcat-el-5.0-api | 0:10.1.49-9.redhat_00007.1.el9jws |
| Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.2::el9 | jws6-tomcat-javadoc | 0:10.1.49-9.redhat_00007.1.el9jws |
| Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.2::el9 | jws6-tomcat-jsp-3.1-api | 0:10.1.49-9.redhat_00007.1.el9jws |
| Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.2::el9 | jws6-tomcat-lib | 0:10.1.49-9.redhat_00007.1.el9jws |
| Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.2::el9 | jws6-tomcat-native | 0:1.3.6-1.redhat_1.el9jws |
| Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.2::el9 | jws6-tomcat-native-debuginfo | 0:1.3.6-1.redhat_1.el9jws |
| Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.2::el9 | jws6-tomcat-selinux | 0:10.1.49-9.redhat_00007.1.el9jws |
| Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.2::el9 | jws6-tomcat-servlet-6.0-api | 0:10.1.49-9.redhat_00007.1.el9jws |
| Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.2::el9 | jws6-tomcat-webapps | 0:10.1.49-9.redhat_00007.1.el9jws |
Vulnerabilities 1
-
High 7.4
Apache Tomcat Native, Apache Tomcat: OCSP revocation bypass
Improper Input Validation vulnerability in Apache Tomcat Native, Apache Tomcat. When using an OCSP responder, Tomcat Native (and Tomcat's FFM port of the Tomcat Native code) did not complete verification or freshness checks on the OCSP response which could al…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
article
https://docs.redhat.com/en/documentation/red_hat_jboss_web_server/6.2/html/red_hat_jboss_web_server_6.2_service_pack_1_release_notes/index
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2440426
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_5611.json
-
report
https://access.redhat.com/security/cve/CVE-2026-24734
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-24734
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-24734
-
article
https://lists.apache.org/thread/292dlmx3fz1888v6v16221kpozq56gml