{"id":"CLSA-2026-1774426919","summary":"Fix CVE(s): CVE-2025-66614","details":"   * SECURITY UPDATE: SNI hostname not stored for NIO2 and APR connectors\n     - debian/patches/CVE-2025-66614.patch: store SNI hostname for NIO2 and\n       APR connections so that SNI checks are not bypassed\n     - CVE-2025-66614","modified":"2026-06-04T09:45:18.180628686Z","published":"2026-03-25T08:22:04Z","upstream":["CVE-2025-66614"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1774426919.html"}],"affected":[{"package":{"name":"libtomcat9-embed-java","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libtomcat9-embed-java?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.31-1~deb10u12+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1774426919.json"}},{"package":{"name":"libtomcat9-java","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libtomcat9-java?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.31-1~deb10u12+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1774426919.json"}},{"package":{"name":"tomcat9","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/tomcat9?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.31-1~deb10u12+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1774426919.json"}},{"package":{"name":"tomcat9-admin","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/tomcat9-admin?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.31-1~deb10u12+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1774426919.json"}},{"package":{"name":"tomcat9-common","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/tomcat9-common?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.31-1~deb10u12+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1774426919.json"}},{"package":{"name":"tomcat9-docs","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/tomcat9-docs?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.31-1~deb10u12+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1774426919.json"}},{"package":{"name":"tomcat9-examples","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/tomcat9-examples?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.31-1~deb10u12+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1774426919.json"}},{"package":{"name":"tomcat9-user","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/tomcat9-user?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.31-1~deb10u12+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1774426919.json"}}],"schema_version":"1.7.5"}