# CVE-2023-28708: tomcat9: When using the RemoteIpFilter with requests received from a    reverse proxy via HTTP that include the X-Forwarded-Pr...

CVE-2023-28708 is fixed in 32 products on 1 platform, first by DEBIAN-CVE-2023-28708, released March 22, 2023. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2023-28708
- Priority: Routine
- CVSS: 4.3 (medium)
- EPSS: 0.0183
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Mar 22, 2023

## Description

When using the RemoteIpFilter with requests received from a    reverse proxy via HTTP that include the X-Forwarded-Proto    header set to https, session cookies created by Apache Tomcat 11.0.0-M1 to 11.0.0.-M2, 10.1.0-M1 to 10.1.5, 9.0.0-M1 to 9.0.71 and 8.5.0 to 8.5.85 did not include the secure attribute. This could result in the user agent transmitting the session cookie over an insecure channel.  Older, EOL versions may also be affected.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | libtomcat8-embed-java Ubuntu 18.04.6 LTS (bionic) | 8.5.39-1ubuntu1~18.04.3+esm5 | [libtomcat8-embed-java 8.5.39-1ubuntu1~18.04.3+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libtomcat8-embed-java-8.5.39-1ubuntu1-18.04.3-esm5.md) | Mar 13, 2024 |
| Linux | libtomcat8-java Ubuntu 18.04.6 LTS (bionic) | 8.5.39-1ubuntu1~18.04.3+esm5 | [libtomcat8-java 8.5.39-1ubuntu1~18.04.3+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libtomcat8-java-8.5.39-1ubuntu1-18.04.3-esm5.md) | Mar 13, 2024 |
| Linux | libtomcat9-embed-java Ubuntu 18.04.6 LTS (bionic) | 9.0.16-3ubuntu0.18.04.2+esm4 | [libtomcat9-embed-java 9.0.16-3ubuntu0.18.04.2+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libtomcat9-embed-java-9.0.16-3ubuntu0.18.04.2-esm4.md) | Mar 13, 2024 |
| Linux | libtomcat9-embed-java Ubuntu 20.04 LTS (focal) | 9.0.31-1ubuntu0.8 | [libtomcat9-embed-java 9.0.31-1ubuntu0.8](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libtomcat9-embed-java-9.0.31-1ubuntu0.8.md) | Mar 13, 2024 |
| Linux | libtomcat9-embed-java Ubuntu 22.04.1 LTS (jammy) | 9.0.58-1ubuntu0.1+esm4 | [libtomcat9-embed-java 9.0.58-1ubuntu0.1+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libtomcat9-embed-java-9.0.58-1ubuntu0.1-esm4.md) | Mar 13, 2024 |
| Linux | libtomcat9-java Ubuntu 18.04.6 LTS (bionic) | 9.0.16-3ubuntu0.18.04.2+esm4 | [libtomcat9-java 9.0.16-3ubuntu0.18.04.2+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libtomcat9-java-9.0.16-3ubuntu0.18.04.2-esm4.md) | Mar 13, 2024 |
| Linux | libtomcat9-java Ubuntu 20.04 LTS (focal) | 9.0.31-1ubuntu0.8 | [libtomcat9-java 9.0.31-1ubuntu0.8](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libtomcat9-java-9.0.31-1ubuntu0.8.md) | Mar 13, 2024 |
| Linux | libtomcat9-java Ubuntu 22.04.1 LTS (jammy) | 9.0.58-1ubuntu0.1+esm4 | [libtomcat9-java 9.0.58-1ubuntu0.1+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libtomcat9-java-9.0.58-1ubuntu0.1-esm4.md) | Mar 13, 2024 |
| Linux | libtomcat9-java Ubuntu 24.04.5 LTS (noble) | 9.0.70-2ubuntu0.1+esm2 | [libtomcat9-java 9.0.70-2ubuntu0.1+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libtomcat9-java-9.0.70-2ubuntu0.1-esm2.md) | Nov 7, 2024 |
| Linux | libtomcat9-java Ubuntu 24.10 (oracular) | 9.0.70-2ubuntu1.24.10.2 | [libtomcat9-java 9.0.70-2ubuntu1.24.10.2](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libtomcat9-java-9.0.70-2ubuntu1.24.10.2.md) | Jan 16, 2026 |
| Linux | libtomcat9-java Ubuntu 25.04 (plucky) | 9.0.70-2ubuntu1.25.04.2 | [libtomcat9-java 9.0.70-2ubuntu1.25.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libtomcat9-java-9.0.70-2ubuntu1.25.04.2.md) | Jan 16, 2026 |
| Linux | libtomcat9-java Ubuntu 25.10 (questing) | 9.0.70-2ubuntu3 | [libtomcat9-java 9.0.70-2ubuntu3](https://patchblox.com/security/data/fix/linux/ubuntu-questing-libtomcat9-java-9.0.70-2ubuntu3.md) | Nov 7, 2024 |
| Linux | tomcat RHEL 8 | 1:9.0.62-27.el8_9 | [RHSA-2023:7065](https://patchblox.com/security/data/fix/linux/rhsa-2023-7065.md) | Nov 14, 2023 |
| Linux | tomcat RHEL 9 | 1:9.0.62-37.el9_3 | [RHSA-2023:6570](https://patchblox.com/security/data/fix/linux/rhsa-2023-6570.md) | Nov 7, 2023 |
| Linux | tomcat almalinux 8 | 1:9.0.62-27.el8_9 | [ALSA-2023:7065](https://patchblox.com/security/data/fix/linux/alsa-2023-7065.md) | Nov 14, 2023 |
| Linux | tomcat almalinux 9 | 1:9.0.62-37.el9_3 | [ALSA-2023:6570](https://patchblox.com/security/data/fix/linux/alsa-2023-6570.md) | Nov 7, 2023 |
| Linux | tomcat ol 8 | 1:9.0.62-27.el8_9 | [ELSA-2023-7065](https://patchblox.com/security/data/fix/linux/elsa-2023-7065.md) | Nov 17, 2023 |
| Linux | tomcat ol 9 | 1:9.0.62-37.el9_3 | [ELSA-2023-6570](https://patchblox.com/security/data/fix/linux/elsa-2023-6570.md) | Nov 11, 2023 |
| Linux | tomcat-admin-webapps RHEL 8 | 1:9.0.62-27.el8_9 | [RHSA-2023:7065](https://patchblox.com/security/data/fix/linux/rhsa-2023-7065.md) | Nov 14, 2023 |
| Linux | tomcat-admin-webapps RHEL 9 | 1:9.0.62-37.el9_3 | [RHSA-2023:6570](https://patchblox.com/security/data/fix/linux/rhsa-2023-6570.md) | Nov 7, 2023 |
| Linux | tomcat-admin-webapps almalinux 8 | 1:9.0.62-27.el8_9 | [ALSA-2023:7065](https://patchblox.com/security/data/fix/linux/alsa-2023-7065.md) | Nov 14, 2023 |
| Linux | tomcat-admin-webapps almalinux 9 | 1:9.0.62-37.el9_3 | [ALSA-2023:6570](https://patchblox.com/security/data/fix/linux/alsa-2023-6570.md) | Nov 7, 2023 |
| Linux | tomcat-admin-webapps ol 8 | 1:9.0.62-27.el8_9 | [ELSA-2023-7065](https://patchblox.com/security/data/fix/linux/elsa-2023-7065.md) | Nov 17, 2023 |
| Linux | tomcat-admin-webapps ol 9 | 1:9.0.62-37.el9_3 | [ELSA-2023-6570](https://patchblox.com/security/data/fix/linux/elsa-2023-6570.md) | Nov 11, 2023 |
| Linux | tomcat-docs-webapp RHEL 8 | 1:9.0.62-27.el8_9 | [RHSA-2023:7065](https://patchblox.com/security/data/fix/linux/rhsa-2023-7065.md) | Nov 14, 2023 |
| Linux | tomcat-docs-webapp RHEL 9 | 1:9.0.62-37.el9_3 | [RHSA-2023:6570](https://patchblox.com/security/data/fix/linux/rhsa-2023-6570.md) | Nov 7, 2023 |
| Linux | tomcat-docs-webapp almalinux 8 | 1:9.0.62-27.el8_9 | [ALSA-2023:7065](https://patchblox.com/security/data/fix/linux/alsa-2023-7065.md) | Nov 14, 2023 |
| Linux | tomcat-docs-webapp almalinux 9 | 1:9.0.62-37.el9_3 | [ALSA-2023:6570](https://patchblox.com/security/data/fix/linux/alsa-2023-6570.md) | Nov 7, 2023 |
| Linux | tomcat-docs-webapp ol 8 | 1:9.0.62-27.el8_9 | [ELSA-2023-7065](https://patchblox.com/security/data/fix/linux/elsa-2023-7065.md) | Nov 17, 2023 |
| Linux | tomcat-docs-webapp ol 9 | 1:9.0.62-37.el9_3 | [ELSA-2023-6570](https://patchblox.com/security/data/fix/linux/elsa-2023-6570.md) | Nov 11, 2023 |
| Linux | tomcat-el-3.0-api RHEL 8 | 1:9.0.62-27.el8_9 | [RHSA-2023:7065](https://patchblox.com/security/data/fix/linux/rhsa-2023-7065.md) | Nov 14, 2023 |
| Linux | tomcat-el-3.0-api RHEL 9 | 1:9.0.62-37.el9_3 | [RHSA-2023:6570](https://patchblox.com/security/data/fix/linux/rhsa-2023-6570.md) | Nov 7, 2023 |
| Linux | tomcat-el-3.0-api almalinux 8 | 1:9.0.62-27.el8_9 | [ALSA-2023:7065](https://patchblox.com/security/data/fix/linux/alsa-2023-7065.md) | Nov 14, 2023 |
| Linux | tomcat-el-3.0-api almalinux 9 | 1:9.0.62-37.el9_3 | [ALSA-2023:6570](https://patchblox.com/security/data/fix/linux/alsa-2023-6570.md) | Nov 7, 2023 |
| Linux | tomcat-el-3.0-api ol 8 | 1:9.0.62-27.el8_9 | [ELSA-2023-7065](https://patchblox.com/security/data/fix/linux/elsa-2023-7065.md) | Nov 17, 2023 |
| Linux | tomcat-el-3.0-api ol 9 | 1:9.0.62-37.el9_3 | [ELSA-2023-6570](https://patchblox.com/security/data/fix/linux/elsa-2023-6570.md) | Nov 11, 2023 |
| Linux | tomcat-jsp-2.3-api RHEL 8 | 1:9.0.62-27.el8_9 | [RHSA-2023:7065](https://patchblox.com/security/data/fix/linux/rhsa-2023-7065.md) | Nov 14, 2023 |
| Linux | tomcat-jsp-2.3-api RHEL 9 | 1:9.0.62-37.el9_3 | [RHSA-2023:6570](https://patchblox.com/security/data/fix/linux/rhsa-2023-6570.md) | Nov 7, 2023 |
| Linux | tomcat-jsp-2.3-api almalinux 8 | 1:9.0.62-27.el8_9 | [ALSA-2023:7065](https://patchblox.com/security/data/fix/linux/alsa-2023-7065.md) | Nov 14, 2023 |
| Linux | tomcat-jsp-2.3-api almalinux 9 | 1:9.0.62-37.el9_3 | [ALSA-2023:6570](https://patchblox.com/security/data/fix/linux/alsa-2023-6570.md) | Nov 7, 2023 |
| Linux | tomcat-jsp-2.3-api ol 8 | 1:9.0.62-27.el8_9 | [ELSA-2023-7065](https://patchblox.com/security/data/fix/linux/elsa-2023-7065.md) | Nov 17, 2023 |
| Linux | tomcat-jsp-2.3-api ol 9 | 1:9.0.62-37.el9_3 | [ELSA-2023-6570](https://patchblox.com/security/data/fix/linux/elsa-2023-6570.md) | Nov 11, 2023 |
| Linux | tomcat-lib RHEL 8 | 1:9.0.62-27.el8_9 | [RHSA-2023:7065](https://patchblox.com/security/data/fix/linux/rhsa-2023-7065.md) | Nov 14, 2023 |
| Linux | tomcat-lib RHEL 9 | 1:9.0.62-37.el9_3 | [RHSA-2023:6570](https://patchblox.com/security/data/fix/linux/rhsa-2023-6570.md) | Nov 7, 2023 |
| Linux | tomcat-lib almalinux 8 | 1:9.0.62-27.el8_9 | [ALSA-2023:7065](https://patchblox.com/security/data/fix/linux/alsa-2023-7065.md) | Nov 14, 2023 |
| Linux | tomcat-lib almalinux 9 | 1:9.0.62-37.el9_3 | [ALSA-2023:6570](https://patchblox.com/security/data/fix/linux/alsa-2023-6570.md) | Nov 7, 2023 |
| Linux | tomcat-lib ol 8 | 1:9.0.62-27.el8_9 | [ELSA-2023-7065](https://patchblox.com/security/data/fix/linux/elsa-2023-7065.md) | Nov 17, 2023 |
| Linux | tomcat-lib ol 9 | 1:9.0.62-37.el9_3 | [ELSA-2023-6570](https://patchblox.com/security/data/fix/linux/elsa-2023-6570.md) | Nov 11, 2023 |
| Linux | tomcat-servlet-4.0-api RHEL 8 | 1:9.0.62-27.el8_9 | [RHSA-2023:7065](https://patchblox.com/security/data/fix/linux/rhsa-2023-7065.md) | Nov 14, 2023 |
| Linux | tomcat-servlet-4.0-api RHEL 9 | 1:9.0.62-37.el9_3 | [RHSA-2023:6570](https://patchblox.com/security/data/fix/linux/rhsa-2023-6570.md) | Nov 7, 2023 |
| Linux | tomcat-servlet-4.0-api almalinux 8 | 1:9.0.62-27.el8_9 | [ALSA-2023:7065](https://patchblox.com/security/data/fix/linux/alsa-2023-7065.md) | Nov 14, 2023 |
| Linux | tomcat-servlet-4.0-api almalinux 9 | 1:9.0.62-37.el9_3 | [ALSA-2023:6570](https://patchblox.com/security/data/fix/linux/alsa-2023-6570.md) | Nov 7, 2023 |
| Linux | tomcat-servlet-4.0-api ol 8 | 1:9.0.62-27.el8_9 | [ELSA-2023-7065](https://patchblox.com/security/data/fix/linux/elsa-2023-7065.md) | Nov 17, 2023 |
| Linux | tomcat-servlet-4.0-api ol 9 | 1:9.0.62-37.el9_3 | [ELSA-2023-6570](https://patchblox.com/security/data/fix/linux/elsa-2023-6570.md) | Nov 11, 2023 |
| Linux | tomcat-webapps RHEL 8 | 1:9.0.62-27.el8_9 | [RHSA-2023:7065](https://patchblox.com/security/data/fix/linux/rhsa-2023-7065.md) | Nov 14, 2023 |
| Linux | tomcat-webapps RHEL 9 | 1:9.0.62-37.el9_3 | [RHSA-2023:6570](https://patchblox.com/security/data/fix/linux/rhsa-2023-6570.md) | Nov 7, 2023 |
| Linux | tomcat-webapps almalinux 8 | 1:9.0.62-27.el8_9 | [ALSA-2023:7065](https://patchblox.com/security/data/fix/linux/alsa-2023-7065.md) | Nov 14, 2023 |
| Linux | tomcat-webapps almalinux 9 | 1:9.0.62-37.el9_3 | [ALSA-2023:6570](https://patchblox.com/security/data/fix/linux/alsa-2023-6570.md) | Nov 7, 2023 |
| Linux | tomcat-webapps ol 8 | 1:9.0.62-27.el8_9 | [ELSA-2023-7065](https://patchblox.com/security/data/fix/linux/elsa-2023-7065.md) | Nov 17, 2023 |
| Linux | tomcat-webapps ol 9 | 1:9.0.62-37.el9_3 | [ELSA-2023-6570](https://patchblox.com/security/data/fix/linux/elsa-2023-6570.md) | Nov 11, 2023 |
| Linux | tomcat10 Debian 12.15 (bookworm) | 10.1.6-1 | [DEBIAN-CVE-2023-28708](https://patchblox.com/security/data/fix/linux/debian-cve-2023-28708.md) | Mar 22, 2023 |
| Linux | tomcat10 Debian 13.5 (trixie) | 10.1.6-1 | [DEBIAN-CVE-2023-28708](https://patchblox.com/security/data/fix/linux/debian-cve-2023-28708.md) | Mar 22, 2023 |
| Linux | tomcat10 Debian 14 | 10.1.6-1 | [DEBIAN-CVE-2023-28708](https://patchblox.com/security/data/fix/linux/debian-cve-2023-28708.md) | Mar 22, 2023 |
| Linux | tomcat8 Ubuntu 18.04.6 LTS (bionic) | 8.5.39-1ubuntu1~18.04.3+esm5 | [tomcat8 8.5.39-1ubuntu1~18.04.3+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-tomcat8-8.5.39-1ubuntu1-18.04.3-esm5.md) | Mar 13, 2024 |
| Linux | tomcat8-admin Ubuntu 18.04.6 LTS (bionic) | 8.5.39-1ubuntu1~18.04.3+esm5 | [tomcat8-admin 8.5.39-1ubuntu1~18.04.3+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-tomcat8-admin-8.5.39-1ubuntu1-18.04.3-esm5.md) | Mar 13, 2024 |
| Linux | tomcat8-common Ubuntu 18.04.6 LTS (bionic) | 8.5.39-1ubuntu1~18.04.3+esm5 | [tomcat8-common 8.5.39-1ubuntu1~18.04.3+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-tomcat8-common-8.5.39-1ubuntu1-18.04.3-esm5.md) | Mar 13, 2024 |
| Linux | tomcat8-docs Ubuntu 18.04.6 LTS (bionic) | 8.5.39-1ubuntu1~18.04.3+esm5 | [tomcat8-docs 8.5.39-1ubuntu1~18.04.3+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-tomcat8-docs-8.5.39-1ubuntu1-18.04.3-esm5.md) | Mar 13, 2024 |
| Linux | tomcat8-examples Ubuntu 18.04.6 LTS (bionic) | 8.5.39-1ubuntu1~18.04.3+esm5 | [tomcat8-examples 8.5.39-1ubuntu1~18.04.3+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-tomcat8-examples-8.5.39-1ubuntu1-18.04.3-esm5.md) | Mar 13, 2024 |
| Linux | tomcat8-user Ubuntu 18.04.6 LTS (bionic) | 8.5.39-1ubuntu1~18.04.3+esm5 | [tomcat8-user 8.5.39-1ubuntu1~18.04.3+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-tomcat8-user-8.5.39-1ubuntu1-18.04.3-esm5.md) | Mar 13, 2024 |
| Linux | tomcat9 Debian 12.15 (bookworm) | 9.0.70-2 | [DEBIAN-CVE-2023-28708](https://patchblox.com/security/data/fix/linux/debian-cve-2023-28708.md) | Mar 22, 2023 |
| Linux | tomcat9 Debian 13.5 (trixie) | 9.0.70-2 | [DEBIAN-CVE-2023-28708](https://patchblox.com/security/data/fix/linux/debian-cve-2023-28708.md) | Mar 22, 2023 |
| Linux | tomcat9 Debian 14 | 9.0.70-2 | [DEBIAN-CVE-2023-28708](https://patchblox.com/security/data/fix/linux/debian-cve-2023-28708.md) | Mar 22, 2023 |
| Linux | tomcat9 Ubuntu 18.04.6 LTS (bionic) | 9.0.16-3ubuntu0.18.04.2+esm4 | [tomcat9 9.0.16-3ubuntu0.18.04.2+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-tomcat9-9.0.16-3ubuntu0.18.04.2-esm4.md) | Mar 13, 2024 |
| Linux | tomcat9 Ubuntu 20.04 LTS (focal) | 9.0.31-1ubuntu0.8 | [tomcat9 9.0.31-1ubuntu0.8](https://patchblox.com/security/data/fix/linux/ubuntu-focal-tomcat9-9.0.31-1ubuntu0.8.md) | Mar 13, 2024 |
| Linux | tomcat9 Ubuntu 22.04.1 LTS (jammy) | 9.0.58-1ubuntu0.1+esm4 | [tomcat9 9.0.58-1ubuntu0.1+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-tomcat9-9.0.58-1ubuntu0.1-esm4.md) | Mar 13, 2024 |
| Linux | tomcat9 amzn 2023 | 1:9.0.71-1.amzn2023.0.2 | [ALAS2023-2023-176](https://patchblox.com/security/data/fix/linux/alas2023-2023-176.md) | Apr 27, 2023 |
| Linux | tomcat9-admin Ubuntu 18.04.6 LTS (bionic) | 9.0.16-3ubuntu0.18.04.2+esm4 | [tomcat9-admin 9.0.16-3ubuntu0.18.04.2+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-tomcat9-admin-9.0.16-3ubuntu0.18.04.2-esm4.md) | Mar 13, 2024 |
| Linux | tomcat9-admin Ubuntu 20.04 LTS (focal) | 9.0.31-1ubuntu0.8 | [tomcat9-admin 9.0.31-1ubuntu0.8](https://patchblox.com/security/data/fix/linux/ubuntu-focal-tomcat9-admin-9.0.31-1ubuntu0.8.md) | Mar 13, 2024 |
| Linux | tomcat9-admin Ubuntu 22.04.1 LTS (jammy) | 9.0.58-1ubuntu0.1+esm4 | [tomcat9-admin 9.0.58-1ubuntu0.1+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-tomcat9-admin-9.0.58-1ubuntu0.1-esm4.md) | Mar 13, 2024 |
| Linux | tomcat9-admin-webapps amzn 2023 | 1:9.0.71-1.amzn2023.0.2 | [ALAS2023-2023-176](https://patchblox.com/security/data/fix/linux/alas2023-2023-176.md) | Apr 27, 2023 |
| Linux | tomcat9-common Ubuntu 18.04.6 LTS (bionic) | 9.0.16-3ubuntu0.18.04.2+esm4 | [tomcat9-common 9.0.16-3ubuntu0.18.04.2+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-tomcat9-common-9.0.16-3ubuntu0.18.04.2-esm4.md) | Mar 13, 2024 |
| Linux | tomcat9-common Ubuntu 20.04 LTS (focal) | 9.0.31-1ubuntu0.8 | [tomcat9-common 9.0.31-1ubuntu0.8](https://patchblox.com/security/data/fix/linux/ubuntu-focal-tomcat9-common-9.0.31-1ubuntu0.8.md) | Mar 13, 2024 |
| Linux | tomcat9-common Ubuntu 22.04.1 LTS (jammy) | 9.0.58-1ubuntu0.1+esm4 | [tomcat9-common 9.0.58-1ubuntu0.1+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-tomcat9-common-9.0.58-1ubuntu0.1-esm4.md) | Mar 13, 2024 |
| Linux | tomcat9-docs Ubuntu 18.04.6 LTS (bionic) | 9.0.16-3ubuntu0.18.04.2+esm4 | [tomcat9-docs 9.0.16-3ubuntu0.18.04.2+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-tomcat9-docs-9.0.16-3ubuntu0.18.04.2-esm4.md) | Mar 13, 2024 |
| Linux | tomcat9-docs Ubuntu 20.04 LTS (focal) | 9.0.31-1ubuntu0.8 | [tomcat9-docs 9.0.31-1ubuntu0.8](https://patchblox.com/security/data/fix/linux/ubuntu-focal-tomcat9-docs-9.0.31-1ubuntu0.8.md) | Mar 13, 2024 |
| Linux | tomcat9-docs Ubuntu 22.04.1 LTS (jammy) | 9.0.58-1ubuntu0.1+esm4 | [tomcat9-docs 9.0.58-1ubuntu0.1+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-tomcat9-docs-9.0.58-1ubuntu0.1-esm4.md) | Mar 13, 2024 |
| Linux | tomcat9-docs-webapp amzn 2023 | 1:9.0.71-1.amzn2023.0.2 | [ALAS2023-2023-176](https://patchblox.com/security/data/fix/linux/alas2023-2023-176.md) | Apr 27, 2023 |
| Linux | tomcat9-el-3.0-api amzn 2023 | 1:9.0.71-1.amzn2023.0.2 | [ALAS2023-2023-176](https://patchblox.com/security/data/fix/linux/alas2023-2023-176.md) | Apr 27, 2023 |
| Linux | tomcat9-examples Ubuntu 18.04.6 LTS (bionic) | 9.0.16-3ubuntu0.18.04.2+esm4 | [tomcat9-examples 9.0.16-3ubuntu0.18.04.2+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-tomcat9-examples-9.0.16-3ubuntu0.18.04.2-esm4.md) | Mar 13, 2024 |
| Linux | tomcat9-examples Ubuntu 20.04 LTS (focal) | 9.0.31-1ubuntu0.8 | [tomcat9-examples 9.0.31-1ubuntu0.8](https://patchblox.com/security/data/fix/linux/ubuntu-focal-tomcat9-examples-9.0.31-1ubuntu0.8.md) | Mar 13, 2024 |
| Linux | tomcat9-examples Ubuntu 22.04.1 LTS (jammy) | 9.0.58-1ubuntu0.1+esm4 | [tomcat9-examples 9.0.58-1ubuntu0.1+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-tomcat9-examples-9.0.58-1ubuntu0.1-esm4.md) | Mar 13, 2024 |
| Linux | tomcat9-jsp-2.3-api amzn 2023 | 1:9.0.71-1.amzn2023.0.2 | [ALAS2023-2023-176](https://patchblox.com/security/data/fix/linux/alas2023-2023-176.md) | Apr 27, 2023 |
| Linux | tomcat9-lib amzn 2023 | 1:9.0.71-1.amzn2023.0.2 | [ALAS2023-2023-176](https://patchblox.com/security/data/fix/linux/alas2023-2023-176.md) | Apr 27, 2023 |
| Linux | tomcat9-servlet-4.0-api amzn 2023 | 1:9.0.71-1.amzn2023.0.2 | [ALAS2023-2023-176](https://patchblox.com/security/data/fix/linux/alas2023-2023-176.md) | Apr 27, 2023 |
| Linux | tomcat9-user Ubuntu 18.04.6 LTS (bionic) | 9.0.16-3ubuntu0.18.04.2+esm4 | [tomcat9-user 9.0.16-3ubuntu0.18.04.2+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-tomcat9-user-9.0.16-3ubuntu0.18.04.2-esm4.md) | Mar 13, 2024 |
| Linux | tomcat9-user Ubuntu 20.04 LTS (focal) | 9.0.31-1ubuntu0.8 | [tomcat9-user 9.0.31-1ubuntu0.8](https://patchblox.com/security/data/fix/linux/ubuntu-focal-tomcat9-user-9.0.31-1ubuntu0.8.md) | Mar 13, 2024 |
| Linux | tomcat9-user Ubuntu 22.04.1 LTS (jammy) | 9.0.58-1ubuntu0.1+esm4 | [tomcat9-user 9.0.58-1ubuntu0.1+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-tomcat9-user-9.0.58-1ubuntu0.1-esm4.md) | Mar 13, 2024 |
| Linux | tomcat9-webapps amzn 2023 | 1:9.0.71-1.amzn2023.0.2 | [ALAS2023-2023-176](https://patchblox.com/security/data/fix/linux/alas2023-2023-176.md) | Apr 27, 2023 |

---

Data as of 2026-11-08T06:59:42Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.