# CVE-2026-24734: jws6-tomcat: Improper Input Validation vulnerability in Apache Tomcat Native, Apache Tomcat. When using an OCSP responder, Tomcat...

CVE-2026-24734 is fixed in 30 products on 1 platform, first by RHSA-2026:5611, released February 17, 2026. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2026-24734
- Priority: High
- CVSS: 7.5 (important)
- EPSS: 0.0058
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Feb 17, 2026

## Description

Improper Input Validation vulnerability in Apache Tomcat Native, Apache Tomcat. When using an OCSP responder, Tomcat Native (and Tomcat's FFM port of the Tomcat Native code) did not complete verification or freshness checks on the OCSP response which could allow certificate revocation to be bypassed. This issue affects Apache Tomcat Native:  from 1.3.0 through 1.3.4, from 2.0.0 through 2.0.11; Apache Tomcat: from 11.0.0-M1 through 11.0.17, from 10.1.0-M7 through 10.1.51, from 9.0.83 through 9.0.114. The following versions were EOL at the time the CVE was created but are  known to be affected: from 1.1.23 through 1.1.34, from 1.2.0 through 1.2.39. Older EOL versions are not affected. Apache Tomcat Native users are recommended to upgrade to versions 1.3.5 or later or 2.0.12 or later, which fix the issue. Apache Tomcat users are recommended to upgrade to versions 11.0.18 or later, 10.1.52 or later or 9.0.115 or later which fix the issue.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | jws6-tomcat RHEL 10 | 10.1.49-9.redhat_00007.1.el10jws | [RHSA-2026:5611](https://patchblox.com/security/data/fix/linux/rhsa-2026-5611.md) | Feb 17, 2026 |
| Linux | jws6-tomcat-native RHEL 10 | 1.3.6-1.redhat_1.el10jws | [RHSA-2026:5611](https://patchblox.com/security/data/fix/linux/rhsa-2026-5611.md) | Feb 17, 2026 |
| Linux | tomcat RHEL 10 | 10.1.49-1.el10_2.1 | [RHSA-2026:19054](https://patchblox.com/security/data/fix/linux/rhsa-2026-19054.md) | Feb 17, 2026 |
| Linux | tomcat RHEL 9 | 1:9.0.117-1.el9_8 | [RHSA-2026:26323](https://patchblox.com/security/data/fix/linux/rhsa-2026-26323.md) | Jun 24, 2026 |
| Linux | tomcat almalinux 10 | 1:10.1.49-1.el10_2.1.alma.1 | [ALSA-2026:19054](https://patchblox.com/security/data/fix/linux/alsa-2026-19054.md) | May 19, 2026 |
| Linux | tomcat almalinux 9 | 1:9.0.117-1.el9_8 | [ALSA-2026:26323](https://patchblox.com/security/data/fix/linux/alsa-2026-26323.md) | Jun 16, 2026 |
| Linux | tomcat ol 10 | 1:10.1.49-1.el10_2.1 | [ELSA-2026-19054](https://patchblox.com/security/data/fix/linux/elsa-2026-19054.md) | Jul 8, 2026 |
| Linux | tomcat ol 9 | 1:9.0.117-1.el9_8 | [ELSA-2026-26323](https://patchblox.com/security/data/fix/linux/elsa-2026-26323.md) | Jun 23, 2026 |
| Linux | tomcat opensuse-leap 15.6 | 9.0.115-150200.102.1 | [SUSE-SU-2026:0932-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0932-1.md) | Mar 19, 2026 |
| Linux | tomcat opensuse-leap 16.0 | 9.0.115-160000.1.1 | [OPENSUSE-SU-2026:20350-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20350-1.md) | Mar 12, 2026 |
| Linux | tomcat rocky 10 | 1:10.1.49-1.el10_2.1 | [RLSA-2026:19054](https://patchblox.com/security/data/fix/linux/rlsa-2026-19054.md) | May 29, 2026 |
| Linux | tomcat rocky 9 | 1:9.0.117-1.el9_8 | [RLSA-2026:26323](https://patchblox.com/security/data/fix/linux/rlsa-2026-26323.md) | Jun 17, 2026 |
| Linux | tomcat sles 15.6 | 9.0.115-150200.102.1 | [SUSE-SU-2026:0932-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0932-1.md) | Mar 19, 2026 |
| Linux | tomcat sles 15.7 | 9.0.115-150200.102.1 | [SUSE-SU-2026:0932-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0932-1.md) | Mar 19, 2026 |
| Linux | tomcat-admin-webapps RHEL 9 | 1:9.0.117-1.el9_8 | [RHSA-2026:26323](https://patchblox.com/security/data/fix/linux/rhsa-2026-26323.md) | Jun 24, 2026 |
| Linux | tomcat-admin-webapps almalinux 10 | 1:10.1.49-1.el10_2.1.alma.1 | [ALSA-2026:19054](https://patchblox.com/security/data/fix/linux/alsa-2026-19054.md) | May 19, 2026 |
| Linux | tomcat-admin-webapps almalinux 9 | 1:9.0.117-1.el9_8 | [ALSA-2026:26323](https://patchblox.com/security/data/fix/linux/alsa-2026-26323.md) | Jun 16, 2026 |
| Linux | tomcat-admin-webapps ol 10 | 1:10.1.49-1.el10_2.1 | [ELSA-2026-19054](https://patchblox.com/security/data/fix/linux/elsa-2026-19054.md) | Jul 8, 2026 |
| Linux | tomcat-admin-webapps ol 9 | 1:9.0.117-1.el9_8 | [ELSA-2026-26323](https://patchblox.com/security/data/fix/linux/elsa-2026-26323.md) | Jun 23, 2026 |
| Linux | tomcat-docs-webapp RHEL 9 | 1:9.0.117-1.el9_8 | [RHSA-2026:26323](https://patchblox.com/security/data/fix/linux/rhsa-2026-26323.md) | Jun 24, 2026 |
| Linux | tomcat-docs-webapp almalinux 10 | 1:10.1.49-1.el10_2.1.alma.1 | [ALSA-2026:19054](https://patchblox.com/security/data/fix/linux/alsa-2026-19054.md) | May 19, 2026 |
| Linux | tomcat-docs-webapp almalinux 9 | 1:9.0.117-1.el9_8 | [ALSA-2026:26323](https://patchblox.com/security/data/fix/linux/alsa-2026-26323.md) | Jun 16, 2026 |
| Linux | tomcat-docs-webapp ol 10 | 1:10.1.49-1.el10_2.1 | [ELSA-2026-19054](https://patchblox.com/security/data/fix/linux/elsa-2026-19054.md) | Jul 8, 2026 |
| Linux | tomcat-docs-webapp ol 9 | 1:9.0.117-1.el9_8 | [ELSA-2026-26323](https://patchblox.com/security/data/fix/linux/elsa-2026-26323.md) | Jun 23, 2026 |
| Linux | tomcat-el-3.0-api RHEL 9 | 1:9.0.117-1.el9_8 | [RHSA-2026:26323](https://patchblox.com/security/data/fix/linux/rhsa-2026-26323.md) | Jun 24, 2026 |
| Linux | tomcat-el-3.0-api almalinux 9 | 1:9.0.117-1.el9_8 | [ALSA-2026:26323](https://patchblox.com/security/data/fix/linux/alsa-2026-26323.md) | Jun 16, 2026 |
| Linux | tomcat-el-3.0-api ol 9 | 1:9.0.117-1.el9_8 | [ELSA-2026-26323](https://patchblox.com/security/data/fix/linux/elsa-2026-26323.md) | Jun 23, 2026 |
| Linux | tomcat-el-5.0-api almalinux 10 | 1:10.1.49-1.el10_2.1.alma.1 | [ALSA-2026:19054](https://patchblox.com/security/data/fix/linux/alsa-2026-19054.md) | May 19, 2026 |
| Linux | tomcat-el-5.0-api ol 10 | 1:10.1.49-1.el10_2.1 | [ELSA-2026-19054](https://patchblox.com/security/data/fix/linux/elsa-2026-19054.md) | Jul 8, 2026 |
| Linux | tomcat-jsp-2.3-api RHEL 9 | 1:9.0.117-1.el9_8 | [RHSA-2026:26323](https://patchblox.com/security/data/fix/linux/rhsa-2026-26323.md) | Jun 24, 2026 |
| Linux | tomcat-jsp-2.3-api almalinux 9 | 1:9.0.117-1.el9_8 | [ALSA-2026:26323](https://patchblox.com/security/data/fix/linux/alsa-2026-26323.md) | Jun 16, 2026 |
| Linux | tomcat-jsp-2.3-api ol 9 | 1:9.0.117-1.el9_8 | [ELSA-2026-26323](https://patchblox.com/security/data/fix/linux/elsa-2026-26323.md) | Jun 23, 2026 |
| Linux | tomcat-jsp-3.1-api almalinux 10 | 1:10.1.49-1.el10_2.1.alma.1 | [ALSA-2026:19054](https://patchblox.com/security/data/fix/linux/alsa-2026-19054.md) | May 19, 2026 |
| Linux | tomcat-jsp-3.1-api ol 10 | 1:10.1.49-1.el10_2.1 | [ELSA-2026-19054](https://patchblox.com/security/data/fix/linux/elsa-2026-19054.md) | Jul 8, 2026 |
| Linux | tomcat-lib RHEL 9 | 1:9.0.117-1.el9_8 | [RHSA-2026:26323](https://patchblox.com/security/data/fix/linux/rhsa-2026-26323.md) | Jun 24, 2026 |
| Linux | tomcat-lib almalinux 10 | 1:10.1.49-1.el10_2.1.alma.1 | [ALSA-2026:19054](https://patchblox.com/security/data/fix/linux/alsa-2026-19054.md) | May 19, 2026 |
| Linux | tomcat-lib almalinux 9 | 1:9.0.117-1.el9_8 | [ALSA-2026:26323](https://patchblox.com/security/data/fix/linux/alsa-2026-26323.md) | Jun 16, 2026 |
| Linux | tomcat-lib ol 10 | 1:10.1.49-1.el10_2.1 | [ELSA-2026-19054](https://patchblox.com/security/data/fix/linux/elsa-2026-19054.md) | Jul 8, 2026 |
| Linux | tomcat-lib ol 9 | 1:9.0.117-1.el9_8 | [ELSA-2026-26323](https://patchblox.com/security/data/fix/linux/elsa-2026-26323.md) | Jun 23, 2026 |
| Linux | tomcat-servlet-4.0-api RHEL 9 | 1:9.0.117-1.el9_8 | [RHSA-2026:26323](https://patchblox.com/security/data/fix/linux/rhsa-2026-26323.md) | Jun 24, 2026 |
| Linux | tomcat-servlet-4.0-api almalinux 9 | 1:9.0.117-1.el9_8 | [ALSA-2026:26323](https://patchblox.com/security/data/fix/linux/alsa-2026-26323.md) | Jun 16, 2026 |
| Linux | tomcat-servlet-4.0-api ol 9 | 1:9.0.117-1.el9_8 | [ELSA-2026-26323](https://patchblox.com/security/data/fix/linux/elsa-2026-26323.md) | Jun 23, 2026 |
| Linux | tomcat-servlet-6.0-api almalinux 10 | 1:10.1.49-1.el10_2.1.alma.1 | [ALSA-2026:19054](https://patchblox.com/security/data/fix/linux/alsa-2026-19054.md) | May 19, 2026 |
| Linux | tomcat-servlet-6.0-api ol 10 | 1:10.1.49-1.el10_2.1 | [ELSA-2026-19054](https://patchblox.com/security/data/fix/linux/elsa-2026-19054.md) | Jul 8, 2026 |
| Linux | tomcat-webapps RHEL 9 | 1:9.0.117-1.el9_8 | [RHSA-2026:26323](https://patchblox.com/security/data/fix/linux/rhsa-2026-26323.md) | Jun 24, 2026 |
| Linux | tomcat-webapps almalinux 10 | 1:10.1.49-1.el10_2.1.alma.1 | [ALSA-2026:19054](https://patchblox.com/security/data/fix/linux/alsa-2026-19054.md) | May 19, 2026 |
| Linux | tomcat-webapps almalinux 9 | 1:9.0.117-1.el9_8 | [ALSA-2026:26323](https://patchblox.com/security/data/fix/linux/alsa-2026-26323.md) | Jun 16, 2026 |
| Linux | tomcat-webapps ol 10 | 1:10.1.49-1.el10_2.1 | [ELSA-2026-19054](https://patchblox.com/security/data/fix/linux/elsa-2026-19054.md) | Jul 8, 2026 |
| Linux | tomcat-webapps ol 9 | 1:9.0.117-1.el9_8 | [ELSA-2026-26323](https://patchblox.com/security/data/fix/linux/elsa-2026-26323.md) | Jun 23, 2026 |
| Linux | tomcat10 Debian 12.15 (bookworm) | 10.1.52-1~deb12u1 | [DEBIAN-CVE-2026-24734](https://patchblox.com/security/data/fix/linux/debian-cve-2026-24734.md) | Feb 17, 2026 |
| Linux | tomcat10 Debian 13.5 (trixie) | 10.1.52-1~deb13u1 | [DEBIAN-CVE-2026-24734](https://patchblox.com/security/data/fix/linux/debian-cve-2026-24734.md) | Feb 17, 2026 |
| Linux | tomcat10 Debian 14 | 10.1.52-1 | [DEBIAN-CVE-2026-24734](https://patchblox.com/security/data/fix/linux/debian-cve-2026-24734.md) | Feb 17, 2026 |
| Linux | tomcat10 amzn 2023 | 1:10.1.52-1.amzn2023.0.1 | [ALAS2023-2026-1497](https://patchblox.com/security/data/fix/linux/alas2023-2026-1497.md) | Mar 16, 2026 |
| Linux | tomcat10 opensuse-leap 15.6 | 10.1.52-150200.5.61.1 | [SUSE-SU-2026:0890-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0890-1.md) | Mar 13, 2026 |
| Linux | tomcat10 opensuse-leap 16.0 | 10.1.52-160000.1.1 | [OPENSUSE-SU-2026:20444-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20444-1.md) | Mar 30, 2026 |
| Linux | tomcat10 sles 15.6 | 10.1.52-150200.5.61.1 | [SUSE-SU-2026:0890-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0890-1.md) | Mar 13, 2026 |
| Linux | tomcat10 sles 15.7 | 10.1.52-150200.5.61.1 | [SUSE-SU-2026:0890-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0890-1.md) | Mar 13, 2026 |
| Linux | tomcat10 sles 16.0 | 10.1.52-160000.1.1 | [SUSE-SU-2026:20982-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20982-1.md) | Mar 30, 2026 |
| Linux | tomcat10-admin-webapps amzn 2023 | 1:10.1.52-1.amzn2023.0.1 | [ALAS2023-2026-1497](https://patchblox.com/security/data/fix/linux/alas2023-2026-1497.md) | Mar 16, 2026 |
| Linux | tomcat10-docs-webapp amzn 2023 | 1:10.1.52-1.amzn2023.0.1 | [ALAS2023-2026-1497](https://patchblox.com/security/data/fix/linux/alas2023-2026-1497.md) | Mar 16, 2026 |
| Linux | tomcat10-el-5.0-api amzn 2023 | 1:10.1.52-1.amzn2023.0.1 | [ALAS2023-2026-1497](https://patchblox.com/security/data/fix/linux/alas2023-2026-1497.md) | Mar 16, 2026 |
| Linux | tomcat10-jsp-3.1-api amzn 2023 | 1:10.1.52-1.amzn2023.0.1 | [ALAS2023-2026-1497](https://patchblox.com/security/data/fix/linux/alas2023-2026-1497.md) | Mar 16, 2026 |
| Linux | tomcat10-lib amzn 2023 | 1:10.1.52-1.amzn2023.0.1 | [ALAS2023-2026-1497](https://patchblox.com/security/data/fix/linux/alas2023-2026-1497.md) | Mar 16, 2026 |
| Linux | tomcat10-servlet-6.0-api amzn 2023 | 1:10.1.52-1.amzn2023.0.1 | [ALAS2023-2026-1497](https://patchblox.com/security/data/fix/linux/alas2023-2026-1497.md) | Mar 16, 2026 |
| Linux | tomcat10-webapps amzn 2023 | 1:10.1.52-1.amzn2023.0.1 | [ALAS2023-2026-1497](https://patchblox.com/security/data/fix/linux/alas2023-2026-1497.md) | Mar 16, 2026 |
| Linux | tomcat11 Debian 13.5 (trixie) | 11.0.22-1~deb13u1 | [DEBIAN-CVE-2026-24734](https://patchblox.com/security/data/fix/linux/debian-cve-2026-24734.md) | Feb 17, 2026 |
| Linux | tomcat11 Debian 14 | 11.0.18-1 | [DEBIAN-CVE-2026-24734](https://patchblox.com/security/data/fix/linux/debian-cve-2026-24734.md) | Feb 17, 2026 |
| Linux | tomcat11 opensuse-leap 15.6 | 11.0.18-150600.13.15.1 | [SUSE-SU-2026:0877-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0877-1.md) | Mar 12, 2026 |
| Linux | tomcat11 opensuse-leap 16.0 | 11.0.18-160000.1.1 | [OPENSUSE-SU-2026:20414-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20414-1.md) | Mar 24, 2026 |
| Linux | tomcat11 sles 15.6 | 11.0.18-150600.13.15.1 | [SUSE-SU-2026:0877-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0877-1.md) | Mar 12, 2026 |
| Linux | tomcat11 sles 15.7 | 11.0.18-150600.13.15.1 | [SUSE-SU-2026:0877-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0877-1.md) | Mar 12, 2026 |
| Linux | tomcat11 sles 16.0 | 11.0.18-160000.1.1 | [SUSE-SU-2026:20926-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20926-1.md) | Mar 24, 2026 |
| Linux | tomcat9 Debian 12.15 (bookworm) | 9.0.70-2 | [DEBIAN-CVE-2026-24734](https://patchblox.com/security/data/fix/linux/debian-cve-2026-24734.md) | Feb 17, 2026 |
| Linux | tomcat9 Debian 13.5 (trixie) | 9.0.70-2 | [DEBIAN-CVE-2026-24734](https://patchblox.com/security/data/fix/linux/debian-cve-2026-24734.md) | Feb 17, 2026 |
| Linux | tomcat9 Debian 14 | 9.0.70-2 | [DEBIAN-CVE-2026-24734](https://patchblox.com/security/data/fix/linux/debian-cve-2026-24734.md) | Feb 17, 2026 |
| Linux | tomcat9 RHEL 10 | 9.0.117-1.el10_2 | [RHSA-2026:25341](https://patchblox.com/security/data/fix/linux/rhsa-2026-25341.md) | Apr 9, 2026 |
| Linux | tomcat9 almalinux 10 | 1:9.0.117-2.el10_2.alma.1 | [ALSA-2026:36790](https://patchblox.com/security/data/fix/linux/alsa-2026-36790.md) | Jul 8, 2026 |
| Linux | tomcat9 amzn 2023 | 1:9.0.115-1.amzn2023.0.1 | [ALAS2023-2026-1496](https://patchblox.com/security/data/fix/linux/alas2023-2026-1496.md) | Mar 16, 2026 |
| Linux | tomcat9 ol 10 | 1:9.0.117-2.el10_2 | [ELSA-2026-25341](https://patchblox.com/security/data/fix/linux/elsa-2026-25341.md) | Jul 23, 2026 |
| Linux | tomcat9 rocky 10 | 1:9.0.117-1.el10_2 | [RLSA-2026:25341](https://patchblox.com/security/data/fix/linux/rlsa-2026-25341.md) | Sep 28, 2026 |
| Linux | tomcat9-admin-webapps almalinux 10 | 1:9.0.117-2.el10_2.alma.1 | [ALSA-2026:36790](https://patchblox.com/security/data/fix/linux/alsa-2026-36790.md) | Jul 8, 2026 |
| Linux | tomcat9-admin-webapps amzn 2023 | 1:9.0.115-1.amzn2023.0.1 | [ALAS2023-2026-1496](https://patchblox.com/security/data/fix/linux/alas2023-2026-1496.md) | Mar 16, 2026 |
| Linux | tomcat9-admin-webapps ol 10 | 1:9.0.117-2.el10_2 | [ELSA-2026-25341](https://patchblox.com/security/data/fix/linux/elsa-2026-25341.md) | Jul 23, 2026 |
| Linux | tomcat9-docs-webapp almalinux 10 | 1:9.0.117-2.el10_2.alma.1 | [ALSA-2026:36790](https://patchblox.com/security/data/fix/linux/alsa-2026-36790.md) | Jul 8, 2026 |
| Linux | tomcat9-docs-webapp amzn 2023 | 1:9.0.115-1.amzn2023.0.1 | [ALAS2023-2026-1496](https://patchblox.com/security/data/fix/linux/alas2023-2026-1496.md) | Mar 16, 2026 |
| Linux | tomcat9-docs-webapp ol 10 | 1:9.0.117-2.el10_2 | [ELSA-2026-25341](https://patchblox.com/security/data/fix/linux/elsa-2026-25341.md) | Jul 23, 2026 |
| Linux | tomcat9-el-3.0-api almalinux 10 | 1:9.0.117-2.el10_2.alma.1 | [ALSA-2026:36790](https://patchblox.com/security/data/fix/linux/alsa-2026-36790.md) | Jul 8, 2026 |
| Linux | tomcat9-el-3.0-api amzn 2023 | 1:9.0.115-1.amzn2023.0.1 | [ALAS2023-2026-1496](https://patchblox.com/security/data/fix/linux/alas2023-2026-1496.md) | Mar 16, 2026 |
| Linux | tomcat9-el-3.0-api ol 10 | 1:9.0.117-2.el10_2 | [ELSA-2026-25341](https://patchblox.com/security/data/fix/linux/elsa-2026-25341.md) | Jul 23, 2026 |
| Linux | tomcat9-jsp-2.3-api almalinux 10 | 1:9.0.117-2.el10_2.alma.1 | [ALSA-2026:36790](https://patchblox.com/security/data/fix/linux/alsa-2026-36790.md) | Jul 8, 2026 |
| Linux | tomcat9-jsp-2.3-api amzn 2023 | 1:9.0.115-1.amzn2023.0.1 | [ALAS2023-2026-1496](https://patchblox.com/security/data/fix/linux/alas2023-2026-1496.md) | Mar 16, 2026 |
| Linux | tomcat9-jsp-2.3-api ol 10 | 1:9.0.117-2.el10_2 | [ELSA-2026-25341](https://patchblox.com/security/data/fix/linux/elsa-2026-25341.md) | Jul 23, 2026 |
| Linux | tomcat9-lib almalinux 10 | 1:9.0.117-2.el10_2.alma.1 | [ALSA-2026:36790](https://patchblox.com/security/data/fix/linux/alsa-2026-36790.md) | Jul 8, 2026 |
| Linux | tomcat9-lib amzn 2023 | 1:9.0.115-1.amzn2023.0.1 | [ALAS2023-2026-1496](https://patchblox.com/security/data/fix/linux/alas2023-2026-1496.md) | Mar 16, 2026 |
| Linux | tomcat9-lib ol 10 | 1:9.0.117-2.el10_2 | [ELSA-2026-25341](https://patchblox.com/security/data/fix/linux/elsa-2026-25341.md) | Jul 23, 2026 |
| Linux | tomcat9-servlet-4.0-api almalinux 10 | 1:9.0.117-2.el10_2.alma.1 | [ALSA-2026:36790](https://patchblox.com/security/data/fix/linux/alsa-2026-36790.md) | Jul 8, 2026 |
| Linux | tomcat9-servlet-4.0-api amzn 2023 | 1:9.0.115-1.amzn2023.0.1 | [ALAS2023-2026-1496](https://patchblox.com/security/data/fix/linux/alas2023-2026-1496.md) | Mar 16, 2026 |
| Linux | tomcat9-servlet-4.0-api ol 10 | 1:9.0.117-2.el10_2 | [ELSA-2026-25341](https://patchblox.com/security/data/fix/linux/elsa-2026-25341.md) | Jul 23, 2026 |
| Linux | tomcat9-webapps almalinux 10 | 1:9.0.117-2.el10_2.alma.1 | [ALSA-2026:36790](https://patchblox.com/security/data/fix/linux/alsa-2026-36790.md) | Jul 8, 2026 |
| Linux | tomcat9-webapps amzn 2023 | 1:9.0.115-1.amzn2023.0.1 | [ALAS2023-2026-1496](https://patchblox.com/security/data/fix/linux/alas2023-2026-1496.md) | Mar 16, 2026 |
| Linux | tomcat9-webapps ol 10 | 1:9.0.117-2.el10_2 | [ELSA-2026-25341](https://patchblox.com/security/data/fix/linux/elsa-2026-25341.md) | Jul 23, 2026 |

---

Data as of 2026-11-08T06:59:42Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.