Linux
tomcat9-jsp-2.3-api security updates
Patch Radar has 37 security fixes for tomcat9-jsp-2.3-api, closing 75 CVEs, 3 of which are being exploited. The newest security fix is ALAS2023-2026-3166 (1:9.0.122-1.amzn2023.0.1), released November 7, 2026.
3 exploited CVEs
Latest version
n/a
Release date not known
Security fixes
37
On record in Patch Radar
CVEs
75
Closed by those fixes
Exploited
3
Vendor report or CISA KEV
Security fixes, newest first
| Priority | Fix | Release | Fixed in | CVEs | Exploited | Released |
|---|---|---|---|---|---|---|
| Urgent | ALAS2023-2026-3166 | amzn 2023 | 1:9.0.122-1.amzn2023.0.1 | 12 | Nov 7, 2026 | |
| Urgent | ELSA-2026-68651 | ol 10 | 1:9.0.120-1.el10_2 | 8 | Sep 18, 2026 | |
| Urgent | ALSA-2026:68651 | almalinux 10 | 1:9.0.120-1.el10_2.alma.1 | 16 | Sep 17, 2026 | |
| High | ELSA-2026-25341 | ol 10 | 1:9.0.117-2.el10_2 | 1 | Jul 23, 2026 | |
| High | ELSA-2026-18536 | ol 10 | 1:9.0.117-2.el10_2 | 3 | Jul 21, 2026 | |
| Urgent | ALAS2023-2026-1945 | amzn 2023 | 1:9.0.120-1.amzn2023.0.1 | 8 | Jul 20, 2026 | |
| Patch now | ELSA-2026-36790 | ol 10 | 1:9.0.117-2.el10_2 | 2 | 1 | Jul 16, 2026 |
| Patch now | ALSA-2026:36790 | almalinux 10 | 1:9.0.117-2.el10_2.alma.1 | 12 | 1 | Jul 8, 2026 |
| High | ALAS2023-2026-1770 | amzn 2023 | 1:9.0.118-1.amzn2023.0.1 | 7 | May 25, 2026 | |
| High | ALAS2023-2026-1672 | amzn 2023 | 1:9.0.117-1.amzn2023.0.1 | 9 | May 11, 2026 | |
| High | ALAS2023-2026-1496 | amzn 2023 | 1:9.0.115-1.amzn2023.0.1 | 3 | Mar 16, 2026 | |
| High | ALSA-2025:23052 | almalinux 10 | 1:9.0.87-8.el10_1.1 | 2 | Dec 10, 2025 | |
| High | ELSA-2025-23052 | ol 10 | 1:9.0.87-8.el10_1.1 | 2 | Dec 10, 2025 | |
| High | ALAS2023-2025-1281 | amzn 2023 | 1:9.0.111-1.amzn2023.0.1 | 2 | Nov 10, 2025 | |
| High | ALAS2023-2025-1167 | amzn 2023 | 1:9.0.108-1.amzn2023.0.1 | 1 | Aug 26, 2025 | |
| High | ELSA-2025-14178 | ol 10 | 1:9.0.87-5.el10_0.3 | 7 | Aug 21, 2025 | |
| High | ALSA-2025:14178 | almalinux 10 | 1:9.0.87-5.el10_0.3 | 7 | Aug 20, 2025 | |
| High | ALAS2023-2025-1094 | amzn 2023 | 1:9.0.107-1.amzn2023.0.1 | 3 | Jul 21, 2025 | |
| High | ELSA-2025-11332 | ol 10 | 1:9.0.87-5.el10_0.1 | 2 | Jul 17, 2025 | |
| High | ALSA-2025:11332 | almalinux 10 | 1:9.0.87-5.el10_0.1 | 3 | Jul 16, 2025 | |
| High | ALAS2023-2025-1065 | amzn 2023 | 1:9.0.106-1.amzn2023.0.1 | 4 | Jul 3, 2025 | |
| Patch now | ELSA-2025-7494 | ol 10 | 1:9.0.87-5.el10_0 | 1 | 1 | Jun 27, 2025 |
| High | ALAS2023-2025-1030 | amzn 2023 | 1:9.0.105-1.amzn2023.0.1 | 1 | Jun 18, 2025 | |
| Patch now | ALSA-2025:7494 | almalinux 10 | 1:9.0.87-5.el10_0 | 1 | 1 | May 13, 2025 |
| High | ALAS2023-2025-964 | amzn 2023 | 1:9.0.104-1.amzn2023.0.1 | 2 | May 7, 2025 | |
| Patch now | ALAS2023-2025-911 | amzn 2023 | 1:9.0.102-1.amzn2023.0.1 | 2 | 1 | Mar 26, 2025 |
| High | ALAS2023-2025-813 | amzn 2023 | 1:9.0.98-1.amzn2023.0.1 | 4 | Jan 21, 2025 | |
| High | ALAS2023-2024-661 | amzn 2023 | 1:9.0.90-1.amzn2023.0.2 | 1 | Jul 18, 2024 | |
| High | ALAS2023-2024-577 | amzn 2023 | 1:9.0.87-1.amzn2023.0.2 | 2 | Mar 27, 2024 | |
| High | ALAS2023-2024-471 | amzn 2023 | 1:9.0.82-1.amzn2023.0.2 | 1 | Jan 3, 2024 | |
| Routine | ALAS2023-2023-415 | amzn 2023 | 1:9.0.82-1.amzn2023.0.1 | 2 | Oct 30, 2023 | |
| Patch now | ALAS2023-2023-390 | amzn 2023 | 1:9.0.71-1.amzn2023.0.6 | 1 | 1 | Oct 16, 2023 |
| Routine | ALAS2023-2023-365 | amzn 2023 | 1:9.0.71-1.amzn2023.0.5 | 1 | Sep 27, 2023 | |
| High | ALAS2023-2023-238 | amzn 2023 | 1:9.0.71-1.amzn2023.0.3 | 1 | Jul 5, 2023 | |
| High | ALAS2023-2023-176 | amzn 2023 | 1:9.0.71-1.amzn2023.0.2 | 3 | Apr 27, 2023 | |
| High | ALAS2023-2023-140 | amzn 2023 | 1:9.0.71-1.amzn2023.0.1 | 1 | Mar 20, 2023 | |
| High | ALAS2023-2023-059 | amzn 2023 | 1:9.0.64-1.amzn2023.0.2 | 2 | Feb 17, 2023 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.