{ "cveId": "CVE-2026-53404", "url": "https://patchblox.com/security/cve/CVE-2026-53404", "summary": "CVE-2026-53404 is fixed in 35 products on 1 platform, first by RHSA-2026:67163, released May 27, 2026. It is not reported as exploited. Patch Radar priority: High.", "title": "jws6-tomcat: Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat\u0027s rewrite valve meant that if the first c...", "description": "Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat\u0027s rewrite valve meant that if the first condition in an OR chain matched, subsequent non-OR conditions were skipped.\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through 9.0.118, from 8.5.0 through 8.5.100. Other versions that have reached end of support may also be affected.\nUsers are recommended to upgrade to version 11.0.23, 10.1.56 or 9.0.119, which fix the issue.", "published": "2026-06-29T14:16:00Z", "severity": "moderate", "cvss": 7.3, "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "epss": 0.00699, "epssPercentile": 0.53362, "priority": "High", "priorityTier": 3, "exploited": false, "vendorExploited": false, "disclosed": false, "fixes": [ { "platform": "linux", "product": "jws6-tomcat", "release": "RHEL 10", "fixedVersion": "10.1.49-15.redhat_00013.1.el10jws", "fix": "RHSA-2026:43401", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-43401", "released": "2026-07-23T13:26:10Z" }, { "platform": "linux", "product": "jws7-tomcat", "release": "RHEL 10", "fixedVersion": "11.0.21-6.redhat_00005.1.el10jws", "fix": "RHSA-2026:49951", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-49951", "released": "2026-08-06T15:14:59Z" }, { "platform": "linux", "product": "libtomcat8-embed-java", "release": "Ubuntu 18.04.6 LTS (bionic)", "fixedVersion": "8.5.39-1ubuntu1~18.04.3\u002Besm6", "fix": "libtomcat8-embed-java 8.5.39-1ubuntu1~18.04.3\u002Besm6", "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libtomcat8-embed-java-8.5.39-1ubuntu1-18.04.3-esm6", "released": "2026-07-18T12:42:57Z" }, { "platform": "linux", "product": "libtomcat8-java", "release": "Ubuntu 18.04.6 LTS (bionic)", "fixedVersion": "8.5.39-1ubuntu1~18.04.3\u002Besm6", "fix": "libtomcat8-java 8.5.39-1ubuntu1~18.04.3\u002Besm6", "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libtomcat8-java-8.5.39-1ubuntu1-18.04.3-esm6", "released": "2026-07-18T12:42:57Z" }, { "platform": "linux", "product": "tomcat", "release": "RHEL 8", "fixedVersion": "1:9.0.120-1.el8_10", "fix": "RHSA-2026:68677", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-68677", "released": "2026-09-19T18:31:30Z" }, { "platform": "linux", "product": "tomcat", "release": "RHEL 9", "fixedVersion": "1:9.0.120-2.el9_8", "fix": "RHSA-2026:68660", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-68660", "released": "2026-09-19T18:32:55Z" }, { "platform": "linux", "product": "tomcat", "release": "almalinux 8", "fixedVersion": "1:9.0.120-1.el8_10", "fix": "ALSA-2026:68677", "url": "https://patchblox.com/security/fix/linux/alsa-2026-68677", "released": "2026-09-17T00:00:00Z" }, { "platform": "linux", "product": "tomcat", "release": "almalinux 9", "fixedVersion": "1:9.0.120-2.el9_8", "fix": "ALSA-2026:68660", "url": "https://patchblox.com/security/fix/linux/alsa-2026-68660", "released": "2026-09-17T00:00:00Z" }, { "platform": "linux", "product": "tomcat", "release": "opensuse-leap 16.0", "fixedVersion": "9.0.119-160000.1.1", "fix": "OPENSUSE-SU-2026:21327-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21327-1", "released": "2026-07-13T16:24:32Z" }, { "platform": "linux", "product": "tomcat", "release": "sles 15.7", "fixedVersion": "9.0.119-150200.111.1", "fix": "SUSE-SU-2026:3088-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-3088-1", "released": "2026-07-16T17:59:44Z" }, { "platform": "linux", "product": "tomcat", "release": "sles 16.0", "fixedVersion": "9.0.119-160000.1.1", "fix": "SUSE-SU-2026:22646-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-22646-1", "released": "2026-07-13T16:29:47Z" }, { "platform": "linux", "product": "tomcat-admin-webapps", "release": "RHEL 8", "fixedVersion": "1:9.0.120-1.el8_10", "fix": "RHSA-2026:68677", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-68677", "released": "2026-09-19T18:31:30Z" }, { "platform": "linux", "product": "tomcat-admin-webapps", "release": "RHEL 9", "fixedVersion": "1:9.0.120-2.el9_8", "fix": "RHSA-2026:68660", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-68660", "released": "2026-09-19T18:32:55Z" }, { "platform": "linux", "product": "tomcat-admin-webapps", "release": "almalinux 8", "fixedVersion": "1:9.0.120-1.el8_10", "fix": "ALSA-2026:68677", "url": "https://patchblox.com/security/fix/linux/alsa-2026-68677", "released": "2026-09-17T00:00:00Z" }, { "platform": "linux", "product": "tomcat-admin-webapps", "release": "almalinux 9", "fixedVersion": "1:9.0.120-2.el9_8", "fix": "ALSA-2026:68660", "url": "https://patchblox.com/security/fix/linux/alsa-2026-68660", "released": "2026-09-17T00:00:00Z" }, { "platform": "linux", "product": "tomcat-docs-webapp", "release": "RHEL 8", "fixedVersion": "1:9.0.120-1.el8_10", "fix": "RHSA-2026:68677", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-68677", "released": "2026-09-19T18:31:30Z" }, { "platform": "linux", "product": "tomcat-docs-webapp", "release": "RHEL 9", "fixedVersion": "1:9.0.120-2.el9_8", "fix": "RHSA-2026:68660", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-68660", "released": "2026-09-19T18:32:55Z" }, { "platform": "linux", "product": "tomcat-docs-webapp", "release": "almalinux 8", "fixedVersion": "1:9.0.120-1.el8_10", "fix": "ALSA-2026:68677", "url": "https://patchblox.com/security/fix/linux/alsa-2026-68677", "released": "2026-09-17T00:00:00Z" }, { "platform": "linux", "product": "tomcat-docs-webapp", "release": "almalinux 9", "fixedVersion": "1:9.0.120-2.el9_8", "fix": "ALSA-2026:68660", "url": "https://patchblox.com/security/fix/linux/alsa-2026-68660", "released": "2026-09-17T00:00:00Z" }, { "platform": "linux", "product": "tomcat-el-3.0-api", "release": "RHEL 8", "fixedVersion": "1:9.0.120-1.el8_10", "fix": "RHSA-2026:68677", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-68677", "released": "2026-09-19T18:31:30Z" }, { "platform": "linux", "product": "tomcat-el-3.0-api", "release": "RHEL 9", "fixedVersion": "1:9.0.120-2.el9_8", "fix": "RHSA-2026:68660", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-68660", "released": "2026-09-19T18:32:55Z" }, { "platform": "linux", "product": "tomcat-el-3.0-api", "release": "almalinux 8", "fixedVersion": "1:9.0.120-1.el8_10", "fix": "ALSA-2026:68677", "url": "https://patchblox.com/security/fix/linux/alsa-2026-68677", "released": "2026-09-17T00:00:00Z" }, { "platform": "linux", "product": "tomcat-el-3.0-api", "release": "almalinux 9", "fixedVersion": "1:9.0.120-2.el9_8", "fix": "ALSA-2026:68660", "url": "https://patchblox.com/security/fix/linux/alsa-2026-68660", "released": "2026-09-17T00:00:00Z" }, { "platform": "linux", "product": "tomcat-jsp-2.3-api", "release": "RHEL 8", "fixedVersion": "1:9.0.120-1.el8_10", "fix": "RHSA-2026:68677", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-68677", "released": "2026-09-19T18:31:30Z" }, { "platform": "linux", "product": "tomcat-jsp-2.3-api", "release": "RHEL 9", "fixedVersion": "1:9.0.120-2.el9_8", "fix": "RHSA-2026:68660", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-68660", "released": "2026-09-19T18:32:55Z" }, { "platform": "linux", "product": "tomcat-jsp-2.3-api", "release": "almalinux 8", "fixedVersion": "1:9.0.120-1.el8_10", "fix": "ALSA-2026:68677", "url": "https://patchblox.com/security/fix/linux/alsa-2026-68677", "released": "2026-09-17T00:00:00Z" }, { "platform": "linux", "product": "tomcat-jsp-2.3-api", "release": "almalinux 9", "fixedVersion": "1:9.0.120-2.el9_8", "fix": "ALSA-2026:68660", "url": "https://patchblox.com/security/fix/linux/alsa-2026-68660", "released": "2026-09-17T00:00:00Z" }, { "platform": "linux", "product": "tomcat-lib", "release": "RHEL 8", "fixedVersion": "1:9.0.120-1.el8_10", "fix": "RHSA-2026:68677", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-68677", "released": "2026-09-19T18:31:30Z" }, { "platform": "linux", "product": "tomcat-lib", "release": "RHEL 9", "fixedVersion": "1:9.0.120-2.el9_8", "fix": "RHSA-2026:68660", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-68660", "released": "2026-09-19T18:32:55Z" }, { "platform": "linux", "product": "tomcat-lib", "release": "almalinux 8", "fixedVersion": "1:9.0.120-1.el8_10", "fix": "ALSA-2026:68677", "url": "https://patchblox.com/security/fix/linux/alsa-2026-68677", "released": "2026-09-17T00:00:00Z" }, { "platform": "linux", "product": "tomcat-lib", "release": "almalinux 9", "fixedVersion": "1:9.0.120-2.el9_8", "fix": "ALSA-2026:68660", "url": "https://patchblox.com/security/fix/linux/alsa-2026-68660", "released": "2026-09-17T00:00:00Z" }, { "platform": "linux", "product": "tomcat-servlet-4.0-api", "release": "RHEL 8", "fixedVersion": "1:9.0.120-1.el8_10", "fix": "RHSA-2026:68677", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-68677", "released": "2026-09-19T18:31:30Z" }, { "platform": "linux", "product": "tomcat-servlet-4.0-api", "release": "RHEL 9", "fixedVersion": "1:9.0.120-2.el9_8", "fix": "RHSA-2026:68660", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-68660", "released": "2026-09-19T18:32:55Z" }, { "platform": "linux", "product": "tomcat-servlet-4.0-api", "release": "almalinux 8", "fixedVersion": "1:9.0.120-1.el8_10", "fix": "ALSA-2026:68677", "url": "https://patchblox.com/security/fix/linux/alsa-2026-68677", "released": "2026-09-17T00:00:00Z" }, { "platform": "linux", "product": "tomcat-servlet-4.0-api", "release": "almalinux 9", "fixedVersion": "1:9.0.120-2.el9_8", "fix": "ALSA-2026:68660", "url": "https://patchblox.com/security/fix/linux/alsa-2026-68660", "released": "2026-09-17T00:00:00Z" }, { "platform": "linux", "product": "tomcat-webapps", "release": "RHEL 8", "fixedVersion": "1:9.0.120-1.el8_10", "fix": "RHSA-2026:68677", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-68677", "released": "2026-09-19T18:31:30Z" }, { "platform": "linux", "product": "tomcat-webapps", "release": "RHEL 9", "fixedVersion": "1:9.0.120-2.el9_8", "fix": "RHSA-2026:68660", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-68660", "released": "2026-09-19T18:32:55Z" }, { "platform": "linux", "product": "tomcat-webapps", "release": "almalinux 8", "fixedVersion": "1:9.0.120-1.el8_10", "fix": "ALSA-2026:68677", "url": "https://patchblox.com/security/fix/linux/alsa-2026-68677", "released": "2026-09-17T00:00:00Z" }, { "platform": "linux", "product": "tomcat-webapps", "release": "almalinux 9", "fixedVersion": "1:9.0.120-2.el9_8", "fix": "ALSA-2026:68660", "url": "https://patchblox.com/security/fix/linux/alsa-2026-68660", "released": "2026-09-17T00:00:00Z" }, { "platform": "linux", "product": "tomcat10", "release": "Debian 14", "fixedVersion": "10.1.60-1", "fix": "DEBIAN-CVE-2026-53404", "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-53404", "released": "2026-06-30T14:29:09Z" }, { "platform": "linux", "product": "tomcat10", "release": "amzn 2023", "fixedVersion": "1:10.1.57-1.amzn2023.0.1", "fix": "ALAS2023-2026-1946", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1946", "released": "2026-07-20T09:00:00Z" }, { "platform": "linux", "product": "tomcat10", "release": "opensuse-leap 16.0", "fixedVersion": "10.1.56-160000.1.1", "fix": "OPENSUSE-SU-2026:21328-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21328-1", "released": "2026-07-13T16:24:32Z" }, { "platform": "linux", "product": "tomcat10", "release": "sles 15.7", "fixedVersion": "10.1.56-150200.5.70.1", "fix": "SUSE-SU-2026:3112-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-3112-1", "released": "2026-07-17T14:20:25Z" }, { "platform": "linux", "product": "tomcat10", "release": "sles 16.0", "fixedVersion": "10.1.56-160000.1.1", "fix": "SUSE-SU-2026:22647-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-22647-1", "released": "2026-07-13T16:30:27Z" }, { "platform": "linux", "product": "tomcat10-admin-webapps", "release": "amzn 2023", "fixedVersion": "1:10.1.57-1.amzn2023.0.1", "fix": "ALAS2023-2026-1946", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1946", "released": "2026-07-20T09:00:00Z" }, { "platform": "linux", "product": "tomcat10-docs-webapp", "release": "amzn 2023", "fixedVersion": "1:10.1.57-1.amzn2023.0.1", "fix": "ALAS2023-2026-1946", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1946", "released": "2026-07-20T09:00:00Z" }, { "platform": "linux", "product": "tomcat10-el-5.0-api", "release": "amzn 2023", "fixedVersion": "1:10.1.57-1.amzn2023.0.1", "fix": "ALAS2023-2026-1946", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1946", "released": "2026-07-20T09:00:00Z" }, { "platform": "linux", "product": "tomcat10-jsp-3.1-api", "release": "amzn 2023", "fixedVersion": "1:10.1.57-1.amzn2023.0.1", "fix": "ALAS2023-2026-1946", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1946", "released": "2026-07-20T09:00:00Z" }, { "platform": "linux", "product": "tomcat10-lib", "release": "amzn 2023", "fixedVersion": "1:10.1.57-1.amzn2023.0.1", "fix": "ALAS2023-2026-1946", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1946", "released": "2026-07-20T09:00:00Z" }, { "platform": "linux", "product": "tomcat10-servlet-6.0-api", "release": "amzn 2023", "fixedVersion": "1:10.1.57-1.amzn2023.0.1", "fix": "ALAS2023-2026-1946", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1946", "released": "2026-07-20T09:00:00Z" }, { "platform": "linux", "product": "tomcat10-webapps", "release": "amzn 2023", "fixedVersion": "1:10.1.57-1.amzn2023.0.1", "fix": "ALAS2023-2026-1946", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1946", "released": "2026-07-20T09:00:00Z" }, { "platform": "linux", "product": "tomcat11", "release": "Debian 14", "fixedVersion": "11.0.24-1", "fix": "DEBIAN-CVE-2026-53404", "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-53404", "released": "2026-06-30T14:29:09Z" }, { "platform": "linux", "product": "tomcat11", "release": "opensuse-leap 16.0", "fixedVersion": "11.0.23-160000.1.1", "fix": "OPENSUSE-SU-2026:21329-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21329-1", "released": "2026-07-13T16:24:32Z" }, { "platform": "linux", "product": "tomcat11", "release": "sles 15.7", "fixedVersion": "11.0.23-150600.13.24.1", "fix": "SUSE-SU-2026:3087-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-3087-1", "released": "2026-07-16T17:56:56Z" }, { "platform": "linux", "product": "tomcat11", "release": "sles 16.0", "fixedVersion": "11.0.23-160000.1.1", "fix": "SUSE-SU-2026:22648-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-22648-1", "released": "2026-07-13T16:28:44Z" }, { "platform": "linux", "product": "tomcat8", "release": "Ubuntu 18.04.6 LTS (bionic)", "fixedVersion": "8.5.39-1ubuntu1~18.04.3\u002Besm6", "fix": "tomcat8 8.5.39-1ubuntu1~18.04.3\u002Besm6", "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-tomcat8-8.5.39-1ubuntu1-18.04.3-esm6", "released": "2026-07-18T12:42:57Z" }, { "platform": "linux", "product": "tomcat8-admin", "release": "Ubuntu 18.04.6 LTS (bionic)", "fixedVersion": "8.5.39-1ubuntu1~18.04.3\u002Besm6", "fix": "tomcat8-admin 8.5.39-1ubuntu1~18.04.3\u002Besm6", "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-tomcat8-admin-8.5.39-1ubuntu1-18.04.3-esm6", "released": "2026-07-18T12:42:57Z" }, { "platform": "linux", "product": "tomcat8-common", "release": "Ubuntu 18.04.6 LTS (bionic)", "fixedVersion": "8.5.39-1ubuntu1~18.04.3\u002Besm6", "fix": "tomcat8-common 8.5.39-1ubuntu1~18.04.3\u002Besm6", "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-tomcat8-common-8.5.39-1ubuntu1-18.04.3-esm6", "released": "2026-07-18T12:42:57Z" }, { "platform": "linux", "product": "tomcat8-docs", "release": "Ubuntu 18.04.6 LTS (bionic)", "fixedVersion": "8.5.39-1ubuntu1~18.04.3\u002Besm6", "fix": "tomcat8-docs 8.5.39-1ubuntu1~18.04.3\u002Besm6", "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-tomcat8-docs-8.5.39-1ubuntu1-18.04.3-esm6", "released": "2026-07-21T13:07:01Z" }, { "platform": "linux", "product": "tomcat8-examples", "release": "Ubuntu 18.04.6 LTS (bionic)", "fixedVersion": "8.5.39-1ubuntu1~18.04.3\u002Besm6", "fix": "tomcat8-examples 8.5.39-1ubuntu1~18.04.3\u002Besm6", "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-tomcat8-examples-8.5.39-1ubuntu1-18.04.3-esm6", "released": "2026-07-18T12:42:57Z" }, { "platform": "linux", "product": "tomcat8-user", "release": "Ubuntu 18.04.6 LTS (bionic)", "fixedVersion": "8.5.39-1ubuntu1~18.04.3\u002Besm6", "fix": "tomcat8-user 8.5.39-1ubuntu1~18.04.3\u002Besm6", "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-tomcat8-user-8.5.39-1ubuntu1-18.04.3-esm6", "released": "2026-07-18T12:42:57Z" }, { "platform": "linux", "product": "tomcat9", "release": "Debian 12.15 (bookworm)", "fixedVersion": "9.0.70-2", "fix": "DEBIAN-CVE-2026-53404", "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-53404", "released": "2026-06-30T14:29:09Z" }, { "platform": "linux", "product": "tomcat9", "release": "Debian 13.5 (trixie)", "fixedVersion": "9.0.70-2", "fix": "DEBIAN-CVE-2026-53404", "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-53404", "released": "2026-06-30T14:29:09Z" }, { "platform": "linux", "product": "tomcat9", "release": "Debian 14", "fixedVersion": "9.0.70-2", "fix": "DEBIAN-CVE-2026-53404", "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-53404", "released": "2026-06-30T14:29:09Z" }, { "platform": "linux", "product": "tomcat9", "release": "RHEL 10", "fixedVersion": "9.0.120-1.el10_0", "fix": "RHSA-2026:67163", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-67163", "released": "2026-05-27T17:40:12Z" }, { "platform": "linux", "product": "tomcat9", "release": "almalinux 10", "fixedVersion": "1:9.0.120-1.el10_2.alma.1", "fix": "ALSA-2026:68651", "url": "https://patchblox.com/security/fix/linux/alsa-2026-68651", "released": "2026-09-17T00:00:00Z" }, { "platform": "linux", "product": "tomcat9", "release": "amzn 2023", "fixedVersion": "1:9.0.120-1.amzn2023.0.1", "fix": "ALAS2023-2026-1945", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1945", "released": "2026-07-20T09:00:00Z" }, { "platform": "linux", "product": "tomcat9-admin-webapps", "release": "almalinux 10", "fixedVersion": "1:9.0.120-1.el10_2.alma.1", "fix": "ALSA-2026:68651", "url": "https://patchblox.com/security/fix/linux/alsa-2026-68651", "released": "2026-09-17T00:00:00Z" }, { "platform": "linux", "product": "tomcat9-admin-webapps", "release": "amzn 2023", "fixedVersion": "1:9.0.120-1.amzn2023.0.1", "fix": "ALAS2023-2026-1945", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1945", "released": "2026-07-20T09:00:00Z" }, { "platform": "linux", "product": "tomcat9-docs-webapp", "release": "almalinux 10", "fixedVersion": "1:9.0.120-1.el10_2.alma.1", "fix": "ALSA-2026:68651", "url": "https://patchblox.com/security/fix/linux/alsa-2026-68651", "released": "2026-09-17T00:00:00Z" }, { "platform": "linux", "product": "tomcat9-docs-webapp", "release": "amzn 2023", "fixedVersion": "1:9.0.120-1.amzn2023.0.1", "fix": "ALAS2023-2026-1945", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1945", "released": "2026-07-20T09:00:00Z" }, { "platform": "linux", "product": "tomcat9-el-3.0-api", "release": "almalinux 10", "fixedVersion": "1:9.0.120-1.el10_2.alma.1", "fix": "ALSA-2026:68651", "url": "https://patchblox.com/security/fix/linux/alsa-2026-68651", "released": "2026-09-17T00:00:00Z" }, { "platform": "linux", "product": "tomcat9-el-3.0-api", "release": "amzn 2023", "fixedVersion": "1:9.0.120-1.amzn2023.0.1", "fix": "ALAS2023-2026-1945", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1945", "released": "2026-07-20T09:00:00Z" }, { "platform": "linux", "product": "tomcat9-jsp-2.3-api", "release": "almalinux 10", "fixedVersion": "1:9.0.120-1.el10_2.alma.1", "fix": "ALSA-2026:68651", "url": "https://patchblox.com/security/fix/linux/alsa-2026-68651", "released": "2026-09-17T00:00:00Z" }, { "platform": "linux", "product": "tomcat9-jsp-2.3-api", "release": "amzn 2023", "fixedVersion": "1:9.0.120-1.amzn2023.0.1", "fix": "ALAS2023-2026-1945", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1945", "released": "2026-07-20T09:00:00Z" }, { "platform": "linux", "product": "tomcat9-lib", "release": "almalinux 10", "fixedVersion": "1:9.0.120-1.el10_2.alma.1", "fix": "ALSA-2026:68651", "url": "https://patchblox.com/security/fix/linux/alsa-2026-68651", "released": "2026-09-17T00:00:00Z" }, { "platform": "linux", "product": "tomcat9-lib", "release": "amzn 2023", "fixedVersion": "1:9.0.120-1.amzn2023.0.1", "fix": "ALAS2023-2026-1945", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1945", "released": "2026-07-20T09:00:00Z" }, { "platform": "linux", "product": "tomcat9-servlet-4.0-api", "release": "almalinux 10", "fixedVersion": "1:9.0.120-1.el10_2.alma.1", "fix": "ALSA-2026:68651", "url": "https://patchblox.com/security/fix/linux/alsa-2026-68651", "released": "2026-09-17T00:00:00Z" }, { "platform": "linux", "product": "tomcat9-servlet-4.0-api", "release": "amzn 2023", "fixedVersion": "1:9.0.120-1.amzn2023.0.1", "fix": "ALAS2023-2026-1945", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1945", "released": "2026-07-20T09:00:00Z" }, { "platform": "linux", "product": "tomcat9-webapps", "release": "almalinux 10", "fixedVersion": "1:9.0.120-1.el10_2.alma.1", "fix": "ALSA-2026:68651", "url": "https://patchblox.com/security/fix/linux/alsa-2026-68651", "released": "2026-09-17T00:00:00Z" }, { "platform": "linux", "product": "tomcat9-webapps", "release": "amzn 2023", "fixedVersion": "1:9.0.120-1.amzn2023.0.1", "fix": "ALAS2023-2026-1945", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1945", "released": "2026-07-20T09:00:00Z" } ], "noFixYet": [], "dataAsOf": "2026-11-07T18:46:35Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }