# CVE-2025-24813: libtomcat9-java: Path Equivalence: 'file.Name' (Internal Dot) leading to Remote CodeExecution and/or Information disclosure and/or mal...

CVE-2025-24813 is fixed in 41 products on 1 platform, first by libtomcat10-embed-java 10.1.16-1ubuntu0.1~esm1, released March 10, 2025. It is being exploited: CISA added it to the Known Exploited Vulnerabilities catalog on April 1, 2025. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/cve/CVE-2025-24813
- Priority: Patch now
- CVSS: 9.8 (High)
- EPSS: 0.9994
- CISA KEV: listed Apr 1, 2025, federal due date Apr 22, 2025
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Mar 10, 2025

## Description

Path Equivalence: 'file.Name' (Internal Dot) leading to Remote CodeExecution and/or Information disclosure and/or malicious content added touploaded files via write enabled Default Servlet in Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.2, from10.1.0-M1 through 10.1.34, from 9.0.0.M1 through 9.0.98.The following versions were EOL at the time the CVE was created but areknown to be affected: 8.5.0 though 8.5.100. Other, older, EOL versionsmay also be affected.If all of the following were true, a malicious user was able to viewsecurity sensitive files and/or inject content into those files:- writes enabled for the default servlet (disabled by default)- support for partial PUT (enabled by default)- a target URL for security sensitive uploads that was a sub-directory of atarget URL for public uploads- attacker knowledge of the names of security sensitive filesbeing uploaded- the security sensitive files also being uploaded via partial PUTIf all of the following were true, a malicious user was able toperform remote code execution:- writes enabled for the default servlet (disabled by default)- support for partial PUT (enabled by default)- application was using Tomcat's file based session persistence withthe default storage location- application included a library that may be leveraged in a deserializationattackUsers are recommended to upgrade to version 11.0.3, 10.1.35 or 9.0.99,which fixes the issue.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | libtomcat10-embed-java Ubuntu 24.04.5 LTS (noble) | 10.1.16-1ubuntu0.1~esm1 | [libtomcat10-embed-java 10.1.16-1ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libtomcat10-embed-java-10.1.16-1ubuntu0.1-esm1.md) | Mar 10, 2025 |
| Linux | libtomcat10-java Ubuntu 24.04.5 LTS (noble) | 10.1.16-1ubuntu0.1~esm1 | [libtomcat10-java 10.1.16-1ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libtomcat10-java-10.1.16-1ubuntu0.1-esm1.md) | Mar 10, 2025 |
| Linux | libtomcat9-embed-java Ubuntu 18.04.6 LTS (bionic) | 9.0.16-3ubuntu0.18.04.2+esm6 | [libtomcat9-embed-java 9.0.16-3ubuntu0.18.04.2+esm6](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libtomcat9-embed-java-9.0.16-3ubuntu0.18.04.2-esm6.md) | Mar 10, 2025 |
| Linux | libtomcat9-embed-java Ubuntu 20.04 LTS (focal) | 9.0.31-1ubuntu0.9+esm1 | [libtomcat9-embed-java 9.0.31-1ubuntu0.9+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libtomcat9-embed-java-9.0.31-1ubuntu0.9-esm1.md) | Mar 10, 2025 |
| Linux | libtomcat9-embed-java Ubuntu 22.04.1 LTS (jammy) | 9.0.58-1ubuntu0.2+esm2 | [libtomcat9-embed-java 9.0.58-1ubuntu0.2+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libtomcat9-embed-java-9.0.58-1ubuntu0.2-esm2.md) | Mar 10, 2025 |
| Linux | libtomcat9-java Ubuntu 18.04.6 LTS (bionic) | 9.0.16-3ubuntu0.18.04.2+esm6 | [libtomcat9-java 9.0.16-3ubuntu0.18.04.2+esm6](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libtomcat9-java-9.0.16-3ubuntu0.18.04.2-esm6.md) | Mar 10, 2025 |
| Linux | libtomcat9-java Ubuntu 20.04 LTS (focal) | 9.0.31-1ubuntu0.9+esm1 | [libtomcat9-java 9.0.31-1ubuntu0.9+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libtomcat9-java-9.0.31-1ubuntu0.9-esm1.md) | Mar 10, 2025 |
| Linux | libtomcat9-java Ubuntu 22.04.1 LTS (jammy) | 9.0.58-1ubuntu0.2+esm2 | [libtomcat9-java 9.0.58-1ubuntu0.2+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libtomcat9-java-9.0.58-1ubuntu0.2-esm2.md) | Mar 10, 2025 |
| Linux | libtomcat9-java Ubuntu 24.04.5 LTS (noble) | 9.0.70-2ubuntu0.1+esm1 | [libtomcat9-java 9.0.70-2ubuntu0.1+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libtomcat9-java-9.0.70-2ubuntu0.1-esm1.md) | Mar 10, 2025 |
| Linux | libtomcat9-java Ubuntu 24.10 (oracular) | 9.0.70-2ubuntu1.24.10.1 | [libtomcat9-java 9.0.70-2ubuntu1.24.10.1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libtomcat9-java-9.0.70-2ubuntu1.24.10.1.md) | Jan 16, 2026 |
| Linux | libtomcat9-java Ubuntu 25.04 (plucky) | 9.0.70-2ubuntu1.25.04.1 | [libtomcat9-java 9.0.70-2ubuntu1.25.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libtomcat9-java-9.0.70-2ubuntu1.25.04.1.md) | Jan 16, 2026 |
| Linux | libtomcat9-java Ubuntu 25.10 (questing) | 9.0.70-2ubuntu2 | [libtomcat9-java 9.0.70-2ubuntu2](https://patchblox.com/security/data/fix/linux/ubuntu-questing-libtomcat9-java-9.0.70-2ubuntu2.md) | Mar 10, 2025 |
| Linux | tomcat RHEL 10 | 10.1.36-1.el10_0 | [RHSA-2025:7497](https://patchblox.com/security/data/fix/linux/rhsa-2025-7497.md) | Mar 10, 2025 |
| Linux | tomcat RHEL 8 | 1:9.0.87-1.el8_10.3 | [RHSA-2025:3683](https://patchblox.com/security/data/fix/linux/rhsa-2025-3683.md) | Apr 8, 2025 |
| Linux | tomcat RHEL 9 | 1:9.0.87-2.el9_5.1 | [RHSA-2025:3645](https://patchblox.com/security/data/fix/linux/rhsa-2025-3645.md) | Apr 7, 2025 |
| Linux | tomcat almalinux 10 | 1:10.1.36-1.el10_0 | [ALSA-2025:7497](https://patchblox.com/security/data/fix/linux/alsa-2025-7497.md) | May 13, 2025 |
| Linux | tomcat almalinux 8 | 1:9.0.87-1.el8_10.3 | [ALSA-2025:3683](https://patchblox.com/security/data/fix/linux/alsa-2025-3683.md) | Apr 8, 2025 |
| Linux | tomcat almalinux 9 | 1:9.0.87-2.el9_5.1 | [ALSA-2025:3645](https://patchblox.com/security/data/fix/linux/alsa-2025-3645.md) | Apr 7, 2025 |
| Linux | tomcat ol 10 | 1:10.1.36-1.el10_0 | [ELSA-2025-7497](https://patchblox.com/security/data/fix/linux/elsa-2025-7497.md) | Jun 27, 2025 |
| Linux | tomcat ol 8 | 1:9.0.87-1.el8_10.3 | [ELSA-2025-3683](https://patchblox.com/security/data/fix/linux/elsa-2025-3683.md) | Apr 8, 2025 |
| Linux | tomcat ol 9 | 1:9.0.87-2.el9_5.1 | [ELSA-2025-3645](https://patchblox.com/security/data/fix/linux/elsa-2025-3645.md) | Apr 7, 2025 |
| Linux | tomcat opensuse-leap 15.6 | 9.0.102-150200.78.1 | [SUSE-SU-2025:1126-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-1126-1.md) | Apr 3, 2025 |
| Linux | tomcat rocky 10 | 1:10.1.36-1.el10_0 | [RLSA-2025:7497](https://patchblox.com/security/data/fix/linux/rlsa-2025-7497.md) | Oct 3, 2025 |
| Linux | tomcat rocky 8 | 1:9.0.87-1.el8_10.3 | [RLSA-2025:3683](https://patchblox.com/security/data/fix/linux/rlsa-2025-3683.md) | Jul 29, 2025 |
| Linux | tomcat rocky 9 | 1:9.0.87-2.el9_5.1 | [RLSA-2025:3645](https://patchblox.com/security/data/fix/linux/rlsa-2025-3645.md) | Jul 29, 2025 |
| Linux | tomcat sles 15.6 | 9.0.102-150200.78.1 | [SUSE-SU-2025:1126-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-1126-1.md) | Apr 3, 2025 |
| Linux | tomcat-admin-webapps RHEL 8 | 1:9.0.87-1.el8_10.3 | [RHSA-2025:3683](https://patchblox.com/security/data/fix/linux/rhsa-2025-3683.md) | Apr 8, 2025 |
| Linux | tomcat-admin-webapps RHEL 9 | 1:9.0.87-2.el9_5.1 | [RHSA-2025:3645](https://patchblox.com/security/data/fix/linux/rhsa-2025-3645.md) | Apr 7, 2025 |
| Linux | tomcat-admin-webapps almalinux 10 | 1:10.1.36-1.el10_0 | [ALSA-2025:7497](https://patchblox.com/security/data/fix/linux/alsa-2025-7497.md) | May 13, 2025 |
| Linux | tomcat-admin-webapps almalinux 8 | 1:9.0.87-1.el8_10.3 | [ALSA-2025:3683](https://patchblox.com/security/data/fix/linux/alsa-2025-3683.md) | Apr 8, 2025 |
| Linux | tomcat-admin-webapps almalinux 9 | 1:9.0.87-2.el9_5.1 | [ALSA-2025:3645](https://patchblox.com/security/data/fix/linux/alsa-2025-3645.md) | Apr 7, 2025 |
| Linux | tomcat-admin-webapps ol 10 | 1:10.1.36-1.el10_0 | [ELSA-2025-7497](https://patchblox.com/security/data/fix/linux/elsa-2025-7497.md) | Jun 27, 2025 |
| Linux | tomcat-admin-webapps ol 8 | 1:9.0.87-1.el8_10.3 | [ELSA-2025-3683](https://patchblox.com/security/data/fix/linux/elsa-2025-3683.md) | Apr 8, 2025 |
| Linux | tomcat-admin-webapps ol 9 | 1:9.0.87-2.el9_5.1 | [ELSA-2025-3645](https://patchblox.com/security/data/fix/linux/elsa-2025-3645.md) | Apr 7, 2025 |
| Linux | tomcat-docs-webapp RHEL 8 | 1:9.0.87-1.el8_10.3 | [RHSA-2025:3683](https://patchblox.com/security/data/fix/linux/rhsa-2025-3683.md) | Apr 8, 2025 |
| Linux | tomcat-docs-webapp RHEL 9 | 1:9.0.87-2.el9_5.1 | [RHSA-2025:3645](https://patchblox.com/security/data/fix/linux/rhsa-2025-3645.md) | Apr 7, 2025 |
| Linux | tomcat-docs-webapp almalinux 10 | 1:10.1.36-1.el10_0 | [ALSA-2025:7497](https://patchblox.com/security/data/fix/linux/alsa-2025-7497.md) | May 13, 2025 |
| Linux | tomcat-docs-webapp almalinux 8 | 1:9.0.87-1.el8_10.3 | [ALSA-2025:3683](https://patchblox.com/security/data/fix/linux/alsa-2025-3683.md) | Apr 8, 2025 |
| Linux | tomcat-docs-webapp almalinux 9 | 1:9.0.87-2.el9_5.1 | [ALSA-2025:3645](https://patchblox.com/security/data/fix/linux/alsa-2025-3645.md) | Apr 7, 2025 |
| Linux | tomcat-docs-webapp ol 10 | 1:10.1.36-1.el10_0 | [ELSA-2025-7497](https://patchblox.com/security/data/fix/linux/elsa-2025-7497.md) | Jun 27, 2025 |
| Linux | tomcat-docs-webapp ol 8 | 1:9.0.87-1.el8_10.3 | [ELSA-2025-3683](https://patchblox.com/security/data/fix/linux/elsa-2025-3683.md) | Apr 8, 2025 |
| Linux | tomcat-docs-webapp ol 9 | 1:9.0.87-2.el9_5.1 | [ELSA-2025-3645](https://patchblox.com/security/data/fix/linux/elsa-2025-3645.md) | Apr 7, 2025 |
| Linux | tomcat-el-3.0-api RHEL 8 | 1:9.0.87-1.el8_10.3 | [RHSA-2025:3683](https://patchblox.com/security/data/fix/linux/rhsa-2025-3683.md) | Apr 8, 2025 |
| Linux | tomcat-el-3.0-api RHEL 9 | 1:9.0.87-2.el9_5.1 | [RHSA-2025:3645](https://patchblox.com/security/data/fix/linux/rhsa-2025-3645.md) | Apr 7, 2025 |
| Linux | tomcat-el-3.0-api almalinux 8 | 1:9.0.87-1.el8_10.3 | [ALSA-2025:3683](https://patchblox.com/security/data/fix/linux/alsa-2025-3683.md) | Apr 8, 2025 |
| Linux | tomcat-el-3.0-api almalinux 9 | 1:9.0.87-2.el9_5.1 | [ALSA-2025:3645](https://patchblox.com/security/data/fix/linux/alsa-2025-3645.md) | Apr 7, 2025 |
| Linux | tomcat-el-3.0-api ol 8 | 1:9.0.87-1.el8_10.3 | [ELSA-2025-3683](https://patchblox.com/security/data/fix/linux/elsa-2025-3683.md) | Apr 8, 2025 |
| Linux | tomcat-el-3.0-api ol 9 | 1:9.0.87-2.el9_5.1 | [ELSA-2025-3645](https://patchblox.com/security/data/fix/linux/elsa-2025-3645.md) | Apr 7, 2025 |
| Linux | tomcat-el-5.0-api almalinux 10 | 1:10.1.36-1.el10_0 | [ALSA-2025:7497](https://patchblox.com/security/data/fix/linux/alsa-2025-7497.md) | May 13, 2025 |
| Linux | tomcat-el-5.0-api ol 10 | 1:10.1.36-1.el10_0 | [ELSA-2025-7497](https://patchblox.com/security/data/fix/linux/elsa-2025-7497.md) | Jun 27, 2025 |
| Linux | tomcat-jsp-2.3-api RHEL 8 | 1:9.0.87-1.el8_10.3 | [RHSA-2025:3683](https://patchblox.com/security/data/fix/linux/rhsa-2025-3683.md) | Apr 8, 2025 |
| Linux | tomcat-jsp-2.3-api RHEL 9 | 1:9.0.87-2.el9_5.1 | [RHSA-2025:3645](https://patchblox.com/security/data/fix/linux/rhsa-2025-3645.md) | Apr 7, 2025 |
| Linux | tomcat-jsp-2.3-api almalinux 8 | 1:9.0.87-1.el8_10.3 | [ALSA-2025:3683](https://patchblox.com/security/data/fix/linux/alsa-2025-3683.md) | Apr 8, 2025 |
| Linux | tomcat-jsp-2.3-api almalinux 9 | 1:9.0.87-2.el9_5.1 | [ALSA-2025:3645](https://patchblox.com/security/data/fix/linux/alsa-2025-3645.md) | Apr 7, 2025 |
| Linux | tomcat-jsp-2.3-api ol 8 | 1:9.0.87-1.el8_10.3 | [ELSA-2025-3683](https://patchblox.com/security/data/fix/linux/elsa-2025-3683.md) | Apr 8, 2025 |
| Linux | tomcat-jsp-2.3-api ol 9 | 1:9.0.87-2.el9_5.1 | [ELSA-2025-3645](https://patchblox.com/security/data/fix/linux/elsa-2025-3645.md) | Apr 7, 2025 |
| Linux | tomcat-jsp-3.1-api almalinux 10 | 1:10.1.36-1.el10_0 | [ALSA-2025:7497](https://patchblox.com/security/data/fix/linux/alsa-2025-7497.md) | May 13, 2025 |
| Linux | tomcat-jsp-3.1-api ol 10 | 1:10.1.36-1.el10_0 | [ELSA-2025-7497](https://patchblox.com/security/data/fix/linux/elsa-2025-7497.md) | Jun 27, 2025 |
| Linux | tomcat-lib RHEL 8 | 1:9.0.87-1.el8_10.3 | [RHSA-2025:3683](https://patchblox.com/security/data/fix/linux/rhsa-2025-3683.md) | Apr 8, 2025 |
| Linux | tomcat-lib RHEL 9 | 1:9.0.87-2.el9_5.1 | [RHSA-2025:3645](https://patchblox.com/security/data/fix/linux/rhsa-2025-3645.md) | Apr 7, 2025 |
| Linux | tomcat-lib almalinux 10 | 1:10.1.36-1.el10_0 | [ALSA-2025:7497](https://patchblox.com/security/data/fix/linux/alsa-2025-7497.md) | May 13, 2025 |
| Linux | tomcat-lib almalinux 8 | 1:9.0.87-1.el8_10.3 | [ALSA-2025:3683](https://patchblox.com/security/data/fix/linux/alsa-2025-3683.md) | Apr 8, 2025 |
| Linux | tomcat-lib almalinux 9 | 1:9.0.87-2.el9_5.1 | [ALSA-2025:3645](https://patchblox.com/security/data/fix/linux/alsa-2025-3645.md) | Apr 7, 2025 |
| Linux | tomcat-lib ol 10 | 1:10.1.36-1.el10_0 | [ELSA-2025-7497](https://patchblox.com/security/data/fix/linux/elsa-2025-7497.md) | Jun 27, 2025 |
| Linux | tomcat-lib ol 8 | 1:9.0.87-1.el8_10.3 | [ELSA-2025-3683](https://patchblox.com/security/data/fix/linux/elsa-2025-3683.md) | Apr 8, 2025 |
| Linux | tomcat-lib ol 9 | 1:9.0.87-2.el9_5.1 | [ELSA-2025-3645](https://patchblox.com/security/data/fix/linux/elsa-2025-3645.md) | Apr 7, 2025 |
| Linux | tomcat-servlet-4.0-api RHEL 8 | 1:9.0.87-1.el8_10.3 | [RHSA-2025:3683](https://patchblox.com/security/data/fix/linux/rhsa-2025-3683.md) | Apr 8, 2025 |
| Linux | tomcat-servlet-4.0-api RHEL 9 | 1:9.0.87-2.el9_5.1 | [RHSA-2025:3645](https://patchblox.com/security/data/fix/linux/rhsa-2025-3645.md) | Apr 7, 2025 |
| Linux | tomcat-servlet-4.0-api almalinux 8 | 1:9.0.87-1.el8_10.3 | [ALSA-2025:3683](https://patchblox.com/security/data/fix/linux/alsa-2025-3683.md) | Apr 8, 2025 |
| Linux | tomcat-servlet-4.0-api almalinux 9 | 1:9.0.87-2.el9_5.1 | [ALSA-2025:3645](https://patchblox.com/security/data/fix/linux/alsa-2025-3645.md) | Apr 7, 2025 |
| Linux | tomcat-servlet-4.0-api ol 8 | 1:9.0.87-1.el8_10.3 | [ELSA-2025-3683](https://patchblox.com/security/data/fix/linux/elsa-2025-3683.md) | Apr 8, 2025 |
| Linux | tomcat-servlet-4.0-api ol 9 | 1:9.0.87-2.el9_5.1 | [ELSA-2025-3645](https://patchblox.com/security/data/fix/linux/elsa-2025-3645.md) | Apr 7, 2025 |
| Linux | tomcat-servlet-6.0-api almalinux 10 | 1:10.1.36-1.el10_0 | [ALSA-2025:7497](https://patchblox.com/security/data/fix/linux/alsa-2025-7497.md) | May 13, 2025 |
| Linux | tomcat-servlet-6.0-api ol 10 | 1:10.1.36-1.el10_0 | [ELSA-2025-7497](https://patchblox.com/security/data/fix/linux/elsa-2025-7497.md) | Jun 27, 2025 |
| Linux | tomcat-webapps RHEL 8 | 1:9.0.87-1.el8_10.3 | [RHSA-2025:3683](https://patchblox.com/security/data/fix/linux/rhsa-2025-3683.md) | Apr 8, 2025 |
| Linux | tomcat-webapps RHEL 9 | 1:9.0.87-2.el9_5.1 | [RHSA-2025:3645](https://patchblox.com/security/data/fix/linux/rhsa-2025-3645.md) | Apr 7, 2025 |
| Linux | tomcat-webapps almalinux 10 | 1:10.1.36-1.el10_0 | [ALSA-2025:7497](https://patchblox.com/security/data/fix/linux/alsa-2025-7497.md) | May 13, 2025 |
| Linux | tomcat-webapps almalinux 8 | 1:9.0.87-1.el8_10.3 | [ALSA-2025:3683](https://patchblox.com/security/data/fix/linux/alsa-2025-3683.md) | Apr 8, 2025 |
| Linux | tomcat-webapps almalinux 9 | 1:9.0.87-2.el9_5.1 | [ALSA-2025:3645](https://patchblox.com/security/data/fix/linux/alsa-2025-3645.md) | Apr 7, 2025 |
| Linux | tomcat-webapps ol 10 | 1:10.1.36-1.el10_0 | [ELSA-2025-7497](https://patchblox.com/security/data/fix/linux/elsa-2025-7497.md) | Jun 27, 2025 |
| Linux | tomcat-webapps ol 8 | 1:9.0.87-1.el8_10.3 | [ELSA-2025-3683](https://patchblox.com/security/data/fix/linux/elsa-2025-3683.md) | Apr 8, 2025 |
| Linux | tomcat-webapps ol 9 | 1:9.0.87-2.el9_5.1 | [ELSA-2025-3645](https://patchblox.com/security/data/fix/linux/elsa-2025-3645.md) | Apr 7, 2025 |
| Linux | tomcat10 Debian 12.15 (bookworm) | 10.1.34-0+deb12u2 | [DSA-5893-1](https://patchblox.com/security/data/fix/linux/dsa-5893-1.md) | Apr 5, 2025 |
| Linux | tomcat10 Debian 13.5 (trixie) | 10.1.35-1 | [DEBIAN-CVE-2025-24813](https://patchblox.com/security/data/fix/linux/debian-cve-2025-24813.md) | Mar 10, 2025 |
| Linux | tomcat10 Debian 14 | 10.1.35-1 | [DEBIAN-CVE-2025-24813](https://patchblox.com/security/data/fix/linux/debian-cve-2025-24813.md) | Mar 10, 2025 |
| Linux | tomcat10 Ubuntu 24.04.5 LTS (noble) | 10.1.16-1ubuntu0.1~esm1 | [tomcat10 10.1.16-1ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-tomcat10-10.1.16-1ubuntu0.1-esm1.md) | Mar 10, 2025 |
| Linux | tomcat10 amzn 2023 | 1:10.1.39-1.amzn2023.0.1 | [ALAS2023-2025-910](https://patchblox.com/security/data/fix/linux/alas2023-2025-910.md) | Mar 26, 2025 |
| Linux | tomcat10 opensuse-leap 15.6 | 10.1.39-150200.5.36.1 | [SUSE-SU-2025:1024-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-1024-1.md) | Mar 26, 2025 |
| Linux | tomcat10 sles 15.6 | 10.1.39-150200.5.36.1 | [SUSE-SU-2025:1024-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-1024-1.md) | Mar 26, 2025 |
| Linux | tomcat10-admin Ubuntu 24.04.5 LTS (noble) | 10.1.16-1ubuntu0.1~esm1 | [tomcat10-admin 10.1.16-1ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-tomcat10-admin-10.1.16-1ubuntu0.1-esm1.md) | Mar 10, 2025 |
| Linux | tomcat10-admin-webapps amzn 2023 | 1:10.1.39-1.amzn2023.0.1 | [ALAS2023-2025-910](https://patchblox.com/security/data/fix/linux/alas2023-2025-910.md) | Mar 26, 2025 |
| Linux | tomcat10-common Ubuntu 24.04.5 LTS (noble) | 10.1.16-1ubuntu0.1~esm1 | [tomcat10-common 10.1.16-1ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-tomcat10-common-10.1.16-1ubuntu0.1-esm1.md) | Mar 10, 2025 |
| Linux | tomcat10-docs Ubuntu 24.04.5 LTS (noble) | 10.1.16-1ubuntu0.1~esm1 | [tomcat10-docs 10.1.16-1ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-tomcat10-docs-10.1.16-1ubuntu0.1-esm1.md) | Mar 10, 2025 |
| Linux | tomcat10-docs-webapp amzn 2023 | 1:10.1.39-1.amzn2023.0.1 | [ALAS2023-2025-910](https://patchblox.com/security/data/fix/linux/alas2023-2025-910.md) | Mar 26, 2025 |
| Linux | tomcat10-el-5.0-api amzn 2023 | 1:10.1.39-1.amzn2023.0.1 | [ALAS2023-2025-910](https://patchblox.com/security/data/fix/linux/alas2023-2025-910.md) | Mar 26, 2025 |
| Linux | tomcat10-examples Ubuntu 24.04.5 LTS (noble) | 10.1.16-1ubuntu0.1~esm1 | [tomcat10-examples 10.1.16-1ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-tomcat10-examples-10.1.16-1ubuntu0.1-esm1.md) | Mar 10, 2025 |
| Linux | tomcat10-jsp-3.1-api amzn 2023 | 1:10.1.39-1.amzn2023.0.1 | [ALAS2023-2025-910](https://patchblox.com/security/data/fix/linux/alas2023-2025-910.md) | Mar 26, 2025 |
| Linux | tomcat10-lib amzn 2023 | 1:10.1.39-1.amzn2023.0.1 | [ALAS2023-2025-910](https://patchblox.com/security/data/fix/linux/alas2023-2025-910.md) | Mar 26, 2025 |
| Linux | tomcat10-servlet-6.0-api amzn 2023 | 1:10.1.39-1.amzn2023.0.1 | [ALAS2023-2025-910](https://patchblox.com/security/data/fix/linux/alas2023-2025-910.md) | Mar 26, 2025 |
| Linux | tomcat10-user Ubuntu 24.04.5 LTS (noble) | 10.1.16-1ubuntu0.1~esm1 | [tomcat10-user 10.1.16-1ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-tomcat10-user-10.1.16-1ubuntu0.1-esm1.md) | Mar 10, 2025 |
| Linux | tomcat10-webapps amzn 2023 | 1:10.1.39-1.amzn2023.0.1 | [ALAS2023-2025-910](https://patchblox.com/security/data/fix/linux/alas2023-2025-910.md) | Mar 26, 2025 |
| Linux | tomcat9 Debian 11.6 (bullseye) | 9.0.43-2~deb11u12 | [DLA-4108-1](https://patchblox.com/security/data/fix/linux/dla-4108-1.md) | Apr 1, 2025 |
| Linux | tomcat9 Debian 12.15 (bookworm) | 9.0.70-2 | [DEBIAN-CVE-2025-24813](https://patchblox.com/security/data/fix/linux/debian-cve-2025-24813.md) | Mar 10, 2025 |
| Linux | tomcat9 Debian 13.5 (trixie) | 9.0.70-2 | [DEBIAN-CVE-2025-24813](https://patchblox.com/security/data/fix/linux/debian-cve-2025-24813.md) | Mar 10, 2025 |
| Linux | tomcat9 Debian 14 | 9.0.70-2 | [DEBIAN-CVE-2025-24813](https://patchblox.com/security/data/fix/linux/debian-cve-2025-24813.md) | Mar 10, 2025 |
| Linux | tomcat9 RHEL 10 | 9.0.87-5.el10_0 | [RHSA-2025:7494](https://patchblox.com/security/data/fix/linux/rhsa-2025-7494.md) | Mar 10, 2025 |
| Linux | tomcat9 Ubuntu 18.04.6 LTS (bionic) | 9.0.16-3ubuntu0.18.04.2+esm6 | [tomcat9 9.0.16-3ubuntu0.18.04.2+esm6](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-tomcat9-9.0.16-3ubuntu0.18.04.2-esm6.md) | Mar 10, 2025 |
| Linux | tomcat9 Ubuntu 20.04 LTS (focal) | 9.0.31-1ubuntu0.9+esm1 | [tomcat9 9.0.31-1ubuntu0.9+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-tomcat9-9.0.31-1ubuntu0.9-esm1.md) | Mar 10, 2025 |
| Linux | tomcat9 Ubuntu 22.04.1 LTS (jammy) | 9.0.58-1ubuntu0.2+esm2 | [tomcat9 9.0.58-1ubuntu0.2+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-tomcat9-9.0.58-1ubuntu0.2-esm2.md) | Mar 10, 2025 |
| Linux | tomcat9 almalinux 10 | 1:9.0.87-5.el10_0 | [ALSA-2025:7494](https://patchblox.com/security/data/fix/linux/alsa-2025-7494.md) | May 13, 2025 |
| Linux | tomcat9 amzn 2023 | 1:9.0.102-1.amzn2023.0.1 | [ALAS2023-2025-911](https://patchblox.com/security/data/fix/linux/alas2023-2025-911.md) | Mar 26, 2025 |
| Linux | tomcat9 ol 10 | 1:9.0.87-5.el10_0 | [ELSA-2025-7494](https://patchblox.com/security/data/fix/linux/elsa-2025-7494.md) | Jun 27, 2025 |
| Linux | tomcat9 rocky 10 | 1:9.0.87-5.el10_0 | [RLSA-2025:7494](https://patchblox.com/security/data/fix/linux/rlsa-2025-7494.md) | Oct 3, 2025 |
| Linux | tomcat9-admin Ubuntu 18.04.6 LTS (bionic) | 9.0.16-3ubuntu0.18.04.2+esm6 | [tomcat9-admin 9.0.16-3ubuntu0.18.04.2+esm6](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-tomcat9-admin-9.0.16-3ubuntu0.18.04.2-esm6.md) | Mar 10, 2025 |
| Linux | tomcat9-admin Ubuntu 20.04 LTS (focal) | 9.0.31-1ubuntu0.9+esm1 | [tomcat9-admin 9.0.31-1ubuntu0.9+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-tomcat9-admin-9.0.31-1ubuntu0.9-esm1.md) | Mar 10, 2025 |
| Linux | tomcat9-admin Ubuntu 22.04.1 LTS (jammy) | 9.0.58-1ubuntu0.2+esm2 | [tomcat9-admin 9.0.58-1ubuntu0.2+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-tomcat9-admin-9.0.58-1ubuntu0.2-esm2.md) | Mar 10, 2025 |
| Linux | tomcat9-admin-webapps almalinux 10 | 1:9.0.87-5.el10_0 | [ALSA-2025:7494](https://patchblox.com/security/data/fix/linux/alsa-2025-7494.md) | May 13, 2025 |
| Linux | tomcat9-admin-webapps amzn 2023 | 1:9.0.102-1.amzn2023.0.1 | [ALAS2023-2025-911](https://patchblox.com/security/data/fix/linux/alas2023-2025-911.md) | Mar 26, 2025 |
| Linux | tomcat9-admin-webapps ol 10 | 1:9.0.87-5.el10_0 | [ELSA-2025-7494](https://patchblox.com/security/data/fix/linux/elsa-2025-7494.md) | Jun 27, 2025 |
| Linux | tomcat9-common Ubuntu 18.04.6 LTS (bionic) | 9.0.16-3ubuntu0.18.04.2+esm6 | [tomcat9-common 9.0.16-3ubuntu0.18.04.2+esm6](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-tomcat9-common-9.0.16-3ubuntu0.18.04.2-esm6.md) | Mar 10, 2025 |
| Linux | tomcat9-common Ubuntu 20.04 LTS (focal) | 9.0.31-1ubuntu0.9+esm1 | [tomcat9-common 9.0.31-1ubuntu0.9+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-tomcat9-common-9.0.31-1ubuntu0.9-esm1.md) | Mar 10, 2025 |
| Linux | tomcat9-common Ubuntu 22.04.1 LTS (jammy) | 9.0.58-1ubuntu0.2+esm2 | [tomcat9-common 9.0.58-1ubuntu0.2+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-tomcat9-common-9.0.58-1ubuntu0.2-esm2.md) | Mar 10, 2025 |
| Linux | tomcat9-docs Ubuntu 18.04.6 LTS (bionic) | 9.0.16-3ubuntu0.18.04.2+esm6 | [tomcat9-docs 9.0.16-3ubuntu0.18.04.2+esm6](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-tomcat9-docs-9.0.16-3ubuntu0.18.04.2-esm6.md) | Mar 10, 2025 |
| Linux | tomcat9-docs Ubuntu 20.04 LTS (focal) | 9.0.31-1ubuntu0.9+esm1 | [tomcat9-docs 9.0.31-1ubuntu0.9+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-tomcat9-docs-9.0.31-1ubuntu0.9-esm1.md) | Mar 10, 2025 |
| Linux | tomcat9-docs Ubuntu 22.04.1 LTS (jammy) | 9.0.58-1ubuntu0.2+esm2 | [tomcat9-docs 9.0.58-1ubuntu0.2+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-tomcat9-docs-9.0.58-1ubuntu0.2-esm2.md) | Mar 10, 2025 |
| Linux | tomcat9-docs-webapp almalinux 10 | 1:9.0.87-5.el10_0 | [ALSA-2025:7494](https://patchblox.com/security/data/fix/linux/alsa-2025-7494.md) | May 13, 2025 |
| Linux | tomcat9-docs-webapp amzn 2023 | 1:9.0.102-1.amzn2023.0.1 | [ALAS2023-2025-911](https://patchblox.com/security/data/fix/linux/alas2023-2025-911.md) | Mar 26, 2025 |
| Linux | tomcat9-docs-webapp ol 10 | 1:9.0.87-5.el10_0 | [ELSA-2025-7494](https://patchblox.com/security/data/fix/linux/elsa-2025-7494.md) | Jun 27, 2025 |
| Linux | tomcat9-el-3.0-api almalinux 10 | 1:9.0.87-5.el10_0 | [ALSA-2025:7494](https://patchblox.com/security/data/fix/linux/alsa-2025-7494.md) | May 13, 2025 |
| Linux | tomcat9-el-3.0-api amzn 2023 | 1:9.0.102-1.amzn2023.0.1 | [ALAS2023-2025-911](https://patchblox.com/security/data/fix/linux/alas2023-2025-911.md) | Mar 26, 2025 |
| Linux | tomcat9-el-3.0-api ol 10 | 1:9.0.87-5.el10_0 | [ELSA-2025-7494](https://patchblox.com/security/data/fix/linux/elsa-2025-7494.md) | Jun 27, 2025 |
| Linux | tomcat9-examples Ubuntu 18.04.6 LTS (bionic) | 9.0.16-3ubuntu0.18.04.2+esm6 | [tomcat9-examples 9.0.16-3ubuntu0.18.04.2+esm6](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-tomcat9-examples-9.0.16-3ubuntu0.18.04.2-esm6.md) | Mar 10, 2025 |
| Linux | tomcat9-examples Ubuntu 20.04 LTS (focal) | 9.0.31-1ubuntu0.9+esm1 | [tomcat9-examples 9.0.31-1ubuntu0.9+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-tomcat9-examples-9.0.31-1ubuntu0.9-esm1.md) | Mar 10, 2025 |
| Linux | tomcat9-examples Ubuntu 22.04.1 LTS (jammy) | 9.0.58-1ubuntu0.2+esm2 | [tomcat9-examples 9.0.58-1ubuntu0.2+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-tomcat9-examples-9.0.58-1ubuntu0.2-esm2.md) | Mar 10, 2025 |
| Linux | tomcat9-jsp-2.3-api almalinux 10 | 1:9.0.87-5.el10_0 | [ALSA-2025:7494](https://patchblox.com/security/data/fix/linux/alsa-2025-7494.md) | May 13, 2025 |
| Linux | tomcat9-jsp-2.3-api amzn 2023 | 1:9.0.102-1.amzn2023.0.1 | [ALAS2023-2025-911](https://patchblox.com/security/data/fix/linux/alas2023-2025-911.md) | Mar 26, 2025 |
| Linux | tomcat9-jsp-2.3-api ol 10 | 1:9.0.87-5.el10_0 | [ELSA-2025-7494](https://patchblox.com/security/data/fix/linux/elsa-2025-7494.md) | Jun 27, 2025 |
| Linux | tomcat9-lib almalinux 10 | 1:9.0.87-5.el10_0 | [ALSA-2025:7494](https://patchblox.com/security/data/fix/linux/alsa-2025-7494.md) | May 13, 2025 |
| Linux | tomcat9-lib amzn 2023 | 1:9.0.102-1.amzn2023.0.1 | [ALAS2023-2025-911](https://patchblox.com/security/data/fix/linux/alas2023-2025-911.md) | Mar 26, 2025 |
| Linux | tomcat9-lib ol 10 | 1:9.0.87-5.el10_0 | [ELSA-2025-7494](https://patchblox.com/security/data/fix/linux/elsa-2025-7494.md) | Jun 27, 2025 |
| Linux | tomcat9-servlet-4.0-api almalinux 10 | 1:9.0.87-5.el10_0 | [ALSA-2025:7494](https://patchblox.com/security/data/fix/linux/alsa-2025-7494.md) | May 13, 2025 |
| Linux | tomcat9-servlet-4.0-api amzn 2023 | 1:9.0.102-1.amzn2023.0.1 | [ALAS2023-2025-911](https://patchblox.com/security/data/fix/linux/alas2023-2025-911.md) | Mar 26, 2025 |
| Linux | tomcat9-servlet-4.0-api ol 10 | 1:9.0.87-5.el10_0 | [ELSA-2025-7494](https://patchblox.com/security/data/fix/linux/elsa-2025-7494.md) | Jun 27, 2025 |
| Linux | tomcat9-user Ubuntu 18.04.6 LTS (bionic) | 9.0.16-3ubuntu0.18.04.2+esm6 | [tomcat9-user 9.0.16-3ubuntu0.18.04.2+esm6](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-tomcat9-user-9.0.16-3ubuntu0.18.04.2-esm6.md) | Mar 10, 2025 |
| Linux | tomcat9-user Ubuntu 20.04 LTS (focal) | 9.0.31-1ubuntu0.9+esm1 | [tomcat9-user 9.0.31-1ubuntu0.9+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-tomcat9-user-9.0.31-1ubuntu0.9-esm1.md) | Mar 10, 2025 |
| Linux | tomcat9-user Ubuntu 22.04.1 LTS (jammy) | 9.0.58-1ubuntu0.2+esm2 | [tomcat9-user 9.0.58-1ubuntu0.2+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-tomcat9-user-9.0.58-1ubuntu0.2-esm2.md) | Mar 10, 2025 |
| Linux | tomcat9-webapps almalinux 10 | 1:9.0.87-5.el10_0 | [ALSA-2025:7494](https://patchblox.com/security/data/fix/linux/alsa-2025-7494.md) | May 13, 2025 |
| Linux | tomcat9-webapps amzn 2023 | 1:9.0.102-1.amzn2023.0.1 | [ALAS2023-2025-911](https://patchblox.com/security/data/fix/linux/alas2023-2025-911.md) | Mar 26, 2025 |
| Linux | tomcat9-webapps ol 10 | 1:9.0.87-5.el10_0 | [ELSA-2025-7494](https://patchblox.com/security/data/fix/linux/elsa-2025-7494.md) | Jun 27, 2025 |

---

Data as of 2026-11-08T00:53:09Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.