{"id":"CLSA-2026-1786633537","summary":"Fix CVE(s): CVE-2024-23672, CVE-2024-56337","details":"   * SECURITY UPDATE: DoS via incomplete cleanup vulnerability\n     - debian/patches/CVE-2024-23672.patch: add a session close timeout so a\n       client that never answers the close message cannot hold the connection\n       open, in java/org/apache/tomcat/websocket/WsSession.java\n     - CVE-2024-23672\n   * SECURITY UPDATE: TOCTOU race condition on case insensitive file systems\n     - debian/patches/CVE-2024-56337.patch: disable the JVM canonical file name\n       cache via sun.io.useCanonCaches in bin/catalina.sh\n     - CVE-2024-56337","modified":"2026-10-26T09:32:01.823455152Z","published":"2026-08-13T15:05:47Z","upstream":["CVE-2024-23672","CVE-2024-56337"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2026-1786633537.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-23672"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-56337"}],"affected":[{"package":{"name":"libservlet3.1-java","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libservlet3.1-java?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.32-1ubuntu1.13+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1786633537.json"}},{"package":{"name":"libservlet3.1-java-doc","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libservlet3.1-java-doc?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.32-1ubuntu1.13+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1786633537.json"}},{"package":{"name":"libtomcat8-java","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libtomcat8-java?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.32-1ubuntu1.13+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1786633537.json"}},{"package":{"name":"tomcat8","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/tomcat8?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.32-1ubuntu1.13+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1786633537.json"}},{"package":{"name":"tomcat8-admin","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/tomcat8-admin?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.32-1ubuntu1.13+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1786633537.json"}},{"package":{"name":"tomcat8-common","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/tomcat8-common?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.32-1ubuntu1.13+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1786633537.json"}},{"package":{"name":"tomcat8-docs","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/tomcat8-docs?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.32-1ubuntu1.13+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1786633537.json"}},{"package":{"name":"tomcat8-examples","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/tomcat8-examples?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.32-1ubuntu1.13+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1786633537.json"}},{"package":{"name":"tomcat8-user","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/tomcat8-user?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.32-1ubuntu1.13+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1786633537.json"}}],"schema_version":"1.9.0"}