{ "cveId": "CVE-2026-34486", "url": "https://patchblox.com/security/cve/CVE-2026-34486", "summary": "CVE-2026-34486 is fixed in 22 products on 1 platform, first by RHSA-2026:36787, released April 9, 2026. It is being exploited: CISA added it to the Known Exploited Vulnerabilities catalog on August 4, 2026. Patch Radar priority: Patch now.", "title": "tomcat: Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the\u00A0fix for CVE-2026-29146 allowing the by...", "description": "Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the\u00A0fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor.\nThis issue affects Apache Tomcat: 11.0.20, 10.1.53, 9.0.116.\nUsers are recommended to upgrade to version 11.0.21, 10.1.54 or 9.0.117, which fix the issue.", "published": "2026-04-09T19:35:35Z", "severity": "important", "cvss": 7.5, "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.98503, "epssPercentile": 0.9992, "priority": "Patch now", "priorityTier": 1, "exploited": true, "vendorExploited": false, "disclosed": false, "kev": { "added": "2026-08-04T00:00:00Z", "due": "2026-08-07T00:00:00Z", "ransomware": false, "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201CForensics Triage Requirements\u201D (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset\u0027s internet exposure and ensuring adherence to BOD 26-04 patching guidelines." }, "fixes": [ { "platform": "linux", "product": "jws7-tomcat", "release": "RHEL 10", "fixedVersion": "11.0.21-5.redhat_00004.1.el10jws", "fix": "RHSA-2026:39188", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-39188", "released": "2026-07-18T12:44:55Z" }, { "platform": "linux", "product": "tomcat", "release": "RHEL 10", "fixedVersion": "10.1.36-2.el10_0", "fix": "RHSA-2026:36787", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-36787", "released": "2026-04-09T19:35:35Z" }, { "platform": "linux", "product": "tomcat", "release": "RHEL 8", "fixedVersion": "1:9.0.87-2.el8_10", "fix": "RHSA-2026:37137", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-37137", "released": "2026-07-10T15:54:44Z" }, { "platform": "linux", "product": "tomcat", "release": "RHEL 9", "fixedVersion": "1:9.0.117-2.el9_8", "fix": "RHSA-2026:36879", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-36879", "released": "2026-07-09T15:47:08Z" }, { "platform": "linux", "product": "tomcat", "release": "almalinux 10", "fixedVersion": "1:10.1.49-3.el10_2.alma.1", "fix": "ALSA-2026:36788", "url": "https://patchblox.com/security/fix/linux/alsa-2026-36788", "released": "2026-07-08T00:00:00Z" }, { "platform": "linux", "product": "tomcat", "release": "almalinux 8", "fixedVersion": "1:9.0.87-2.el8_10", "fix": "ALSA-2026:37137", "url": "https://patchblox.com/security/fix/linux/alsa-2026-37137", "released": "2026-07-09T00:00:00Z" }, { "platform": "linux", "product": "tomcat", "release": "almalinux 9", "fixedVersion": "1:9.0.117-2.el9_8", "fix": "ALSA-2026:36879", "url": "https://patchblox.com/security/fix/linux/alsa-2026-36879", "released": "2026-07-08T00:00:00Z" }, { "platform": "linux", "product": "tomcat", "release": "ol 10", "fixedVersion": "1:10.1.49-3.el10_2", "fix": "ELSA-2026-36788", "url": "https://patchblox.com/security/fix/linux/elsa-2026-36788", "released": "2026-07-16T00:00:00Z" }, { "platform": "linux", "product": "tomcat", "release": "ol 8", "fixedVersion": "1:9.0.87-2.el8_10", "fix": "ELSA-2026-37137", "url": "https://patchblox.com/security/fix/linux/elsa-2026-37137", "released": "2026-07-09T00:00:00Z" }, { "platform": "linux", "product": "tomcat", "release": "ol 9", "fixedVersion": "1:9.0.117-2.el9_8", "fix": "ELSA-2026-36879", "url": "https://patchblox.com/security/fix/linux/elsa-2026-36879", "released": "2026-07-08T00:00:00Z" }, { "platform": "linux", "product": "tomcat", "release": "opensuse-leap 16.0", "fixedVersion": "9.0.117-160000.1.1", "fix": "OPENSUSE-SU-2026:20611-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20611-1", "released": "2026-04-22T10:52:21Z" }, { "platform": "linux", "product": "tomcat", "release": "rocky 10", "fixedVersion": "1:10.1.49-3.el10_2", "fix": "RLSA-2026:36788", "url": "https://patchblox.com/security/fix/linux/rlsa-2026-36788", "released": "2026-07-10T12:05:34Z" }, { "platform": "linux", "product": "tomcat", "release": "rocky 8", "fixedVersion": "1:9.0.87-2.el8_10", "fix": "RLSA-2026:37137", "url": "https://patchblox.com/security/fix/linux/rlsa-2026-37137", "released": "2026-07-10T06:00:28Z" }, { "platform": "linux", "product": "tomcat", "release": "rocky 9", "fixedVersion": "1:9.0.117-2.el9_8", "fix": "RLSA-2026:36879", "url": "https://patchblox.com/security/fix/linux/rlsa-2026-36879", "released": "2026-07-10T12:03:38Z" }, { "platform": "linux", "product": "tomcat", "release": "sles 15.6", "fixedVersion": "9.0.117-150200.105.1", "fix": "SUSE-SU-2026:1604-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-1604-1", "released": "2026-04-24T11:48:42Z" }, { "platform": "linux", "product": "tomcat", "release": "sles 15.7", "fixedVersion": "9.0.117-150200.105.1", "fix": "SUSE-SU-2026:1604-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-1604-1", "released": "2026-04-24T11:48:42Z" }, { "platform": "linux", "product": "tomcat-admin-webapps", "release": "RHEL 8", "fixedVersion": "1:9.0.87-2.el8_10", "fix": "RHSA-2026:37137", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-37137", "released": "2026-07-10T15:54:44Z" }, { "platform": "linux", "product": "tomcat-admin-webapps", "release": "RHEL 9", "fixedVersion": "1:9.0.117-2.el9_8", "fix": "RHSA-2026:36879", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-36879", "released": "2026-07-09T15:47:08Z" }, { "platform": "linux", "product": "tomcat-admin-webapps", "release": "almalinux 10", "fixedVersion": "1:10.1.49-3.el10_2.alma.1", "fix": "ALSA-2026:36788", "url": "https://patchblox.com/security/fix/linux/alsa-2026-36788", "released": "2026-07-08T00:00:00Z" }, { "platform": "linux", "product": "tomcat-admin-webapps", "release": "almalinux 8", "fixedVersion": "1:9.0.87-2.el8_10", "fix": "ALSA-2026:37137", "url": "https://patchblox.com/security/fix/linux/alsa-2026-37137", "released": "2026-07-09T00:00:00Z" }, { "platform": "linux", "product": "tomcat-admin-webapps", "release": "almalinux 9", "fixedVersion": "1:9.0.117-2.el9_8", "fix": "ALSA-2026:36879", "url": "https://patchblox.com/security/fix/linux/alsa-2026-36879", "released": "2026-07-08T00:00:00Z" }, { "platform": "linux", "product": "tomcat-admin-webapps", "release": "ol 10", "fixedVersion": "1:10.1.49-3.el10_2", "fix": "ELSA-2026-36788", "url": "https://patchblox.com/security/fix/linux/elsa-2026-36788", "released": "2026-07-16T00:00:00Z" }, { "platform": "linux", "product": "tomcat-admin-webapps", "release": "ol 8", "fixedVersion": "1:9.0.87-2.el8_10", "fix": "ELSA-2026-37137", "url": "https://patchblox.com/security/fix/linux/elsa-2026-37137", "released": "2026-07-09T00:00:00Z" }, { "platform": "linux", "product": "tomcat-admin-webapps", "release": "ol 9", "fixedVersion": "1:9.0.117-2.el9_8", "fix": "ELSA-2026-36879", "url": "https://patchblox.com/security/fix/linux/elsa-2026-36879", "released": "2026-07-08T00:00:00Z" }, { "platform": "linux", "product": "tomcat-docs-webapp", "release": "RHEL 8", "fixedVersion": "1:9.0.87-2.el8_10", "fix": "RHSA-2026:37137", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-37137", "released": "2026-07-10T15:54:44Z" }, { "platform": "linux", "product": "tomcat-docs-webapp", "release": "RHEL 9", "fixedVersion": "1:9.0.117-2.el9_8", "fix": "RHSA-2026:36879", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-36879", "released": "2026-07-09T15:47:08Z" }, { "platform": "linux", "product": "tomcat-docs-webapp", "release": "almalinux 10", "fixedVersion": "1:10.1.49-3.el10_2.alma.1", "fix": "ALSA-2026:36788", "url": "https://patchblox.com/security/fix/linux/alsa-2026-36788", "released": "2026-07-08T00:00:00Z" }, { "platform": "linux", "product": "tomcat-docs-webapp", "release": "almalinux 8", "fixedVersion": "1:9.0.87-2.el8_10", "fix": "ALSA-2026:37137", "url": "https://patchblox.com/security/fix/linux/alsa-2026-37137", "released": "2026-07-09T00:00:00Z" }, { "platform": "linux", "product": "tomcat-docs-webapp", "release": "almalinux 9", "fixedVersion": "1:9.0.117-2.el9_8", "fix": "ALSA-2026:36879", "url": "https://patchblox.com/security/fix/linux/alsa-2026-36879", "released": "2026-07-08T00:00:00Z" }, { "platform": "linux", "product": "tomcat-docs-webapp", "release": "ol 10", "fixedVersion": "1:10.1.49-3.el10_2", "fix": "ELSA-2026-36788", "url": "https://patchblox.com/security/fix/linux/elsa-2026-36788", "released": "2026-07-16T00:00:00Z" }, { "platform": "linux", "product": "tomcat-docs-webapp", "release": "ol 8", "fixedVersion": "1:9.0.87-2.el8_10", "fix": "ELSA-2026-37137", "url": "https://patchblox.com/security/fix/linux/elsa-2026-37137", "released": "2026-07-09T00:00:00Z" }, { "platform": "linux", "product": "tomcat-docs-webapp", "release": "ol 9", "fixedVersion": "1:9.0.117-2.el9_8", "fix": "ELSA-2026-36879", "url": "https://patchblox.com/security/fix/linux/elsa-2026-36879", "released": "2026-07-08T00:00:00Z" }, { "platform": "linux", "product": "tomcat-el-3.0-api", "release": "RHEL 8", "fixedVersion": "1:9.0.87-2.el8_10", "fix": "RHSA-2026:37137", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-37137", "released": "2026-07-10T15:54:44Z" }, { "platform": "linux", "product": "tomcat-el-3.0-api", "release": "RHEL 9", "fixedVersion": "1:9.0.117-2.el9_8", "fix": "RHSA-2026:36879", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-36879", "released": "2026-07-09T15:47:08Z" }, { "platform": "linux", "product": "tomcat-el-3.0-api", "release": "almalinux 8", "fixedVersion": "1:9.0.87-2.el8_10", "fix": "ALSA-2026:37137", "url": "https://patchblox.com/security/fix/linux/alsa-2026-37137", "released": "2026-07-09T00:00:00Z" }, { "platform": "linux", "product": "tomcat-el-3.0-api", "release": "almalinux 9", "fixedVersion": "1:9.0.117-2.el9_8", "fix": "ALSA-2026:36879", "url": "https://patchblox.com/security/fix/linux/alsa-2026-36879", "released": "2026-07-08T00:00:00Z" }, { "platform": "linux", "product": "tomcat-el-3.0-api", "release": "ol 8", "fixedVersion": "1:9.0.87-2.el8_10", "fix": "ELSA-2026-37137", "url": "https://patchblox.com/security/fix/linux/elsa-2026-37137", "released": "2026-07-09T00:00:00Z" }, { "platform": "linux", "product": "tomcat-el-3.0-api", "release": "ol 9", "fixedVersion": "1:9.0.117-2.el9_8", "fix": "ELSA-2026-36879", "url": "https://patchblox.com/security/fix/linux/elsa-2026-36879", "released": "2026-07-08T00:00:00Z" }, { "platform": "linux", "product": "tomcat-el-5.0-api", "release": "almalinux 10", "fixedVersion": "1:10.1.49-3.el10_2.alma.1", "fix": "ALSA-2026:36788", "url": "https://patchblox.com/security/fix/linux/alsa-2026-36788", "released": "2026-07-08T00:00:00Z" }, { "platform": "linux", "product": "tomcat-el-5.0-api", "release": "ol 10", "fixedVersion": "1:10.1.49-3.el10_2", "fix": "ELSA-2026-36788", "url": "https://patchblox.com/security/fix/linux/elsa-2026-36788", "released": "2026-07-16T00:00:00Z" }, { "platform": "linux", "product": "tomcat-jsp-2.3-api", "release": "RHEL 8", "fixedVersion": "1:9.0.87-2.el8_10", "fix": "RHSA-2026:37137", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-37137", "released": "2026-07-10T15:54:44Z" }, { "platform": "linux", "product": "tomcat-jsp-2.3-api", "release": "RHEL 9", "fixedVersion": "1:9.0.117-2.el9_8", "fix": "RHSA-2026:36879", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-36879", "released": "2026-07-09T15:47:08Z" }, { "platform": "linux", "product": "tomcat-jsp-2.3-api", "release": "almalinux 8", "fixedVersion": "1:9.0.87-2.el8_10", "fix": "ALSA-2026:37137", "url": "https://patchblox.com/security/fix/linux/alsa-2026-37137", "released": "2026-07-09T00:00:00Z" }, { "platform": "linux", "product": "tomcat-jsp-2.3-api", "release": "almalinux 9", "fixedVersion": "1:9.0.117-2.el9_8", "fix": "ALSA-2026:36879", "url": "https://patchblox.com/security/fix/linux/alsa-2026-36879", "released": "2026-07-08T00:00:00Z" }, { "platform": "linux", "product": "tomcat-jsp-2.3-api", "release": "ol 8", "fixedVersion": "1:9.0.87-2.el8_10", "fix": "ELSA-2026-37137", "url": "https://patchblox.com/security/fix/linux/elsa-2026-37137", "released": "2026-07-09T00:00:00Z" }, { "platform": "linux", "product": "tomcat-jsp-2.3-api", "release": "ol 9", "fixedVersion": "1:9.0.117-2.el9_8", "fix": "ELSA-2026-36879", "url": "https://patchblox.com/security/fix/linux/elsa-2026-36879", "released": "2026-07-08T00:00:00Z" }, { "platform": "linux", "product": "tomcat-jsp-3.1-api", "release": "almalinux 10", "fixedVersion": "1:10.1.49-3.el10_2.alma.1", "fix": "ALSA-2026:36788", "url": "https://patchblox.com/security/fix/linux/alsa-2026-36788", "released": "2026-07-08T00:00:00Z" }, { "platform": "linux", "product": "tomcat-jsp-3.1-api", "release": "ol 10", "fixedVersion": "1:10.1.49-3.el10_2", "fix": "ELSA-2026-36788", "url": "https://patchblox.com/security/fix/linux/elsa-2026-36788", "released": "2026-07-16T00:00:00Z" }, { "platform": "linux", "product": "tomcat-lib", "release": "RHEL 8", "fixedVersion": "1:9.0.87-2.el8_10", "fix": "RHSA-2026:37137", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-37137", "released": "2026-07-10T15:54:44Z" }, { "platform": "linux", "product": "tomcat-lib", "release": "RHEL 9", "fixedVersion": "1:9.0.117-2.el9_8", "fix": "RHSA-2026:36879", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-36879", "released": "2026-07-09T15:47:08Z" }, { "platform": "linux", "product": "tomcat-lib", "release": "almalinux 10", "fixedVersion": "1:10.1.49-3.el10_2.alma.1", "fix": "ALSA-2026:36788", "url": "https://patchblox.com/security/fix/linux/alsa-2026-36788", "released": "2026-07-08T00:00:00Z" }, { "platform": "linux", "product": "tomcat-lib", "release": "almalinux 8", "fixedVersion": "1:9.0.87-2.el8_10", "fix": "ALSA-2026:37137", "url": "https://patchblox.com/security/fix/linux/alsa-2026-37137", "released": "2026-07-09T00:00:00Z" }, { "platform": "linux", "product": "tomcat-lib", "release": "almalinux 9", "fixedVersion": "1:9.0.117-2.el9_8", "fix": "ALSA-2026:36879", "url": "https://patchblox.com/security/fix/linux/alsa-2026-36879", "released": "2026-07-08T00:00:00Z" }, { "platform": "linux", "product": "tomcat-lib", "release": "ol 10", "fixedVersion": "1:10.1.49-3.el10_2", "fix": "ELSA-2026-36788", "url": "https://patchblox.com/security/fix/linux/elsa-2026-36788", "released": "2026-07-16T00:00:00Z" }, { "platform": "linux", "product": "tomcat-lib", "release": "ol 8", "fixedVersion": "1:9.0.87-2.el8_10", "fix": "ELSA-2026-37137", "url": "https://patchblox.com/security/fix/linux/elsa-2026-37137", "released": "2026-07-09T00:00:00Z" }, { "platform": "linux", "product": "tomcat-lib", "release": "ol 9", "fixedVersion": "1:9.0.117-2.el9_8", "fix": "ELSA-2026-36879", "url": "https://patchblox.com/security/fix/linux/elsa-2026-36879", "released": "2026-07-08T00:00:00Z" }, { "platform": "linux", "product": "tomcat-servlet-4.0-api", "release": "RHEL 8", "fixedVersion": "1:9.0.87-2.el8_10", "fix": "RHSA-2026:37137", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-37137", "released": "2026-07-10T15:54:44Z" }, { "platform": "linux", "product": "tomcat-servlet-4.0-api", "release": "RHEL 9", "fixedVersion": "1:9.0.117-2.el9_8", "fix": "RHSA-2026:36879", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-36879", "released": "2026-07-09T15:47:08Z" }, { "platform": "linux", "product": "tomcat-servlet-4.0-api", "release": "almalinux 8", "fixedVersion": "1:9.0.87-2.el8_10", "fix": "ALSA-2026:37137", "url": "https://patchblox.com/security/fix/linux/alsa-2026-37137", "released": "2026-07-09T00:00:00Z" }, { "platform": "linux", "product": "tomcat-servlet-4.0-api", "release": "almalinux 9", "fixedVersion": "1:9.0.117-2.el9_8", "fix": "ALSA-2026:36879", "url": "https://patchblox.com/security/fix/linux/alsa-2026-36879", "released": "2026-07-08T00:00:00Z" }, { "platform": "linux", "product": "tomcat-servlet-4.0-api", "release": "ol 8", "fixedVersion": "1:9.0.87-2.el8_10", "fix": "ELSA-2026-37137", "url": "https://patchblox.com/security/fix/linux/elsa-2026-37137", "released": "2026-07-09T00:00:00Z" }, { "platform": "linux", "product": "tomcat-servlet-4.0-api", "release": "ol 9", "fixedVersion": "1:9.0.117-2.el9_8", "fix": "ELSA-2026-36879", "url": "https://patchblox.com/security/fix/linux/elsa-2026-36879", "released": "2026-07-08T00:00:00Z" }, { "platform": "linux", "product": "tomcat-servlet-6.0-api", "release": "almalinux 10", "fixedVersion": "1:10.1.49-3.el10_2.alma.1", "fix": "ALSA-2026:36788", "url": "https://patchblox.com/security/fix/linux/alsa-2026-36788", "released": "2026-07-08T00:00:00Z" }, { "platform": "linux", "product": "tomcat-servlet-6.0-api", "release": "ol 10", "fixedVersion": "1:10.1.49-3.el10_2", "fix": "ELSA-2026-36788", "url": "https://patchblox.com/security/fix/linux/elsa-2026-36788", "released": "2026-07-16T00:00:00Z" }, { "platform": "linux", "product": "tomcat-webapps", "release": "RHEL 8", "fixedVersion": "1:9.0.87-2.el8_10", "fix": "RHSA-2026:37137", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-37137", "released": "2026-07-10T15:54:44Z" }, { "platform": "linux", "product": "tomcat-webapps", "release": "RHEL 9", "fixedVersion": "1:9.0.117-2.el9_8", "fix": "RHSA-2026:36879", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-36879", "released": "2026-07-09T15:47:08Z" }, { "platform": "linux", "product": "tomcat-webapps", "release": "almalinux 10", "fixedVersion": "1:10.1.49-3.el10_2.alma.1", "fix": "ALSA-2026:36788", "url": "https://patchblox.com/security/fix/linux/alsa-2026-36788", "released": "2026-07-08T00:00:00Z" }, { "platform": "linux", "product": "tomcat-webapps", "release": "almalinux 8", "fixedVersion": "1:9.0.87-2.el8_10", "fix": "ALSA-2026:37137", "url": "https://patchblox.com/security/fix/linux/alsa-2026-37137", "released": "2026-07-09T00:00:00Z" }, { "platform": "linux", "product": "tomcat-webapps", "release": "almalinux 9", "fixedVersion": "1:9.0.117-2.el9_8", "fix": "ALSA-2026:36879", "url": "https://patchblox.com/security/fix/linux/alsa-2026-36879", "released": "2026-07-08T00:00:00Z" }, { "platform": "linux", "product": "tomcat-webapps", "release": "ol 10", "fixedVersion": "1:10.1.49-3.el10_2", "fix": "ELSA-2026-36788", "url": "https://patchblox.com/security/fix/linux/elsa-2026-36788", "released": "2026-07-16T00:00:00Z" }, { "platform": "linux", "product": "tomcat-webapps", "release": "ol 8", "fixedVersion": "1:9.0.87-2.el8_10", "fix": "ELSA-2026-37137", "url": "https://patchblox.com/security/fix/linux/elsa-2026-37137", "released": "2026-07-09T00:00:00Z" }, { "platform": "linux", "product": "tomcat-webapps", "release": "ol 9", "fixedVersion": "1:9.0.117-2.el9_8", "fix": "ELSA-2026-36879", "url": "https://patchblox.com/security/fix/linux/elsa-2026-36879", "released": "2026-07-08T00:00:00Z" }, { "platform": "linux", "product": "tomcat10", "release": "opensuse-leap 16.0", "fixedVersion": "10.1.54-160000.1.1", "fix": "OPENSUSE-SU-2026:20612-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20612-1", "released": "2026-04-22T10:52:21Z" }, { "platform": "linux", "product": "tomcat10", "release": "sles 15.6", "fixedVersion": "10.1.54-150200.5.64.1", "fix": "SUSE-SU-2026:1603-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-1603-1", "released": "2026-04-24T11:47:20Z" }, { "platform": "linux", "product": "tomcat10", "release": "sles 15.7", "fixedVersion": "10.1.54-150200.5.64.1", "fix": "SUSE-SU-2026:1603-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-1603-1", "released": "2026-04-24T11:47:20Z" }, { "platform": "linux", "product": "tomcat11", "release": "opensuse-leap 16.0", "fixedVersion": "11.0.21-160000.1.1", "fix": "OPENSUSE-SU-2026:20595-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20595-1", "released": "2026-04-21T11:43:18Z" }, { "platform": "linux", "product": "tomcat11", "release": "sles 15.6", "fixedVersion": "11.0.21-150600.13.18.1", "fix": "SUSE-SU-2026:1558-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-1558-1", "released": "2026-04-22T16:24:40Z" }, { "platform": "linux", "product": "tomcat11", "release": "sles 15.7", "fixedVersion": "11.0.21-150600.13.18.1", "fix": "SUSE-SU-2026:1558-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-1558-1", "released": "2026-04-22T16:24:40Z" }, { "platform": "linux", "product": "tomcat9", "release": "RHEL 10", "fixedVersion": "9.0.87-6.el10_0", "fix": "RHSA-2026:36789", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-36789", "released": "2026-04-09T19:35:35Z" }, { "platform": "linux", "product": "tomcat9", "release": "almalinux 10", "fixedVersion": "1:9.0.117-2.el10_2.alma.1", "fix": "ALSA-2026:36790", "url": "https://patchblox.com/security/fix/linux/alsa-2026-36790", "released": "2026-07-08T00:00:00Z" }, { "platform": "linux", "product": "tomcat9", "release": "ol 10", "fixedVersion": "1:9.0.117-2.el10_2", "fix": "ELSA-2026-36790", "url": "https://patchblox.com/security/fix/linux/elsa-2026-36790", "released": "2026-07-16T00:00:00Z" }, { "platform": "linux", "product": "tomcat9", "release": "rocky 10", "fixedVersion": "1:9.0.117-2.el10_2", "fix": "RLSA-2026:36790", "url": "https://patchblox.com/security/fix/linux/rlsa-2026-36790", "released": "2026-07-10T12:05:34Z" }, { "platform": "linux", "product": "tomcat9-admin-webapps", "release": "almalinux 10", "fixedVersion": "1:9.0.117-2.el10_2.alma.1", "fix": "ALSA-2026:36790", "url": "https://patchblox.com/security/fix/linux/alsa-2026-36790", "released": "2026-07-08T00:00:00Z" }, { "platform": "linux", "product": "tomcat9-admin-webapps", "release": "ol 10", "fixedVersion": "1:9.0.117-2.el10_2", "fix": "ELSA-2026-36790", "url": "https://patchblox.com/security/fix/linux/elsa-2026-36790", "released": "2026-07-16T00:00:00Z" }, { "platform": "linux", "product": "tomcat9-docs-webapp", "release": "almalinux 10", "fixedVersion": "1:9.0.117-2.el10_2.alma.1", "fix": "ALSA-2026:36790", "url": "https://patchblox.com/security/fix/linux/alsa-2026-36790", "released": "2026-07-08T00:00:00Z" }, { "platform": "linux", "product": "tomcat9-docs-webapp", "release": "ol 10", "fixedVersion": "1:9.0.117-2.el10_2", "fix": "ELSA-2026-36790", "url": "https://patchblox.com/security/fix/linux/elsa-2026-36790", "released": "2026-07-16T00:00:00Z" }, { "platform": "linux", "product": "tomcat9-el-3.0-api", "release": "almalinux 10", "fixedVersion": "1:9.0.117-2.el10_2.alma.1", "fix": "ALSA-2026:36790", "url": "https://patchblox.com/security/fix/linux/alsa-2026-36790", "released": "2026-07-08T00:00:00Z" }, { "platform": "linux", "product": "tomcat9-el-3.0-api", "release": "ol 10", "fixedVersion": "1:9.0.117-2.el10_2", "fix": "ELSA-2026-36790", "url": "https://patchblox.com/security/fix/linux/elsa-2026-36790", "released": "2026-07-16T00:00:00Z" }, { "platform": "linux", "product": "tomcat9-jsp-2.3-api", "release": "almalinux 10", "fixedVersion": "1:9.0.117-2.el10_2.alma.1", "fix": "ALSA-2026:36790", "url": "https://patchblox.com/security/fix/linux/alsa-2026-36790", "released": "2026-07-08T00:00:00Z" }, { "platform": "linux", "product": "tomcat9-jsp-2.3-api", "release": "ol 10", "fixedVersion": "1:9.0.117-2.el10_2", "fix": "ELSA-2026-36790", "url": "https://patchblox.com/security/fix/linux/elsa-2026-36790", "released": "2026-07-16T00:00:00Z" }, { "platform": "linux", "product": "tomcat9-lib", "release": "almalinux 10", "fixedVersion": "1:9.0.117-2.el10_2.alma.1", "fix": "ALSA-2026:36790", "url": "https://patchblox.com/security/fix/linux/alsa-2026-36790", "released": "2026-07-08T00:00:00Z" }, { "platform": "linux", "product": "tomcat9-lib", "release": "ol 10", "fixedVersion": "1:9.0.117-2.el10_2", "fix": "ELSA-2026-36790", "url": "https://patchblox.com/security/fix/linux/elsa-2026-36790", "released": "2026-07-16T00:00:00Z" }, { "platform": "linux", "product": "tomcat9-servlet-4.0-api", "release": "almalinux 10", "fixedVersion": "1:9.0.117-2.el10_2.alma.1", "fix": "ALSA-2026:36790", "url": "https://patchblox.com/security/fix/linux/alsa-2026-36790", "released": "2026-07-08T00:00:00Z" }, { "platform": "linux", "product": "tomcat9-servlet-4.0-api", "release": "ol 10", "fixedVersion": "1:9.0.117-2.el10_2", "fix": "ELSA-2026-36790", "url": "https://patchblox.com/security/fix/linux/elsa-2026-36790", "released": "2026-07-16T00:00:00Z" }, { "platform": "linux", "product": "tomcat9-webapps", "release": "almalinux 10", "fixedVersion": "1:9.0.117-2.el10_2.alma.1", "fix": "ALSA-2026:36790", "url": "https://patchblox.com/security/fix/linux/alsa-2026-36790", "released": "2026-07-08T00:00:00Z" }, { "platform": "linux", "product": "tomcat9-webapps", "release": "ol 10", "fixedVersion": "1:9.0.117-2.el10_2", "fix": "ELSA-2026-36790", "url": "https://patchblox.com/security/fix/linux/elsa-2026-36790", "released": "2026-07-16T00:00:00Z" } ], "noFixYet": [], "dataAsOf": "2026-11-09T01:18:40Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }