CVE-2026-43512 · cross-distro fix matrix

CVE-2026-43512: It was discovered that Tomcat incorrectly handled digest

Affects 5 Linux releases across 50 (distro × package) combinations. First disclosed: 2026-05-12.

CVSS v3:CRITICAL · 9.8(NVD-published)

Fix per ecosystem

Each block below is a distro release where CVE-2026-43512 has a known fix. Run the listed command on that distro to remediate.

Ubuntu trusty

Source: Ubuntu USN

tomcat6→ fixed in6.0.39-1ubuntu0.1+esm3USN-8383-1
```
sudo apt-get install --only-upgrade -y tomcat6
```
tomcat7→ fixed in7.0.52-1ubuntu0.16+esm2USN-8383-1
```
sudo apt-get install --only-upgrade -y tomcat7
```
libservlet2.4-java→ fixed in6.0.39-1ubuntu0.1+esm3USN-8383-1
```
sudo apt-get install --only-upgrade -y libservlet2.4-java
```
libservlet2.5-java→ fixed in6.0.39-1ubuntu0.1+esm3USN-8383-1
```
sudo apt-get install --only-upgrade -y libservlet2.5-java
```
libservlet2.5-java-doc→ fixed in6.0.39-1ubuntu0.1+esm3USN-8383-1
```
sudo apt-get install --only-upgrade -y libservlet2.5-java-doc
```
libservlet3.0-java→ fixed in7.0.52-1ubuntu0.16+esm2USN-8383-1
```
sudo apt-get install --only-upgrade -y libservlet3.0-java
```
libservlet3.0-java-doc→ fixed in7.0.52-1ubuntu0.16+esm2USN-8383-1
```
sudo apt-get install --only-upgrade -y libservlet3.0-java-doc
```
libtomcat6-java→ fixed in6.0.39-1ubuntu0.1+esm3USN-8383-1
```
sudo apt-get install --only-upgrade -y libtomcat6-java
```
libtomcat7-java→ fixed in7.0.52-1ubuntu0.16+esm2USN-8383-1
```
sudo apt-get install --only-upgrade -y libtomcat7-java
```
tomcat6-admin→ fixed in6.0.39-1ubuntu0.1+esm3USN-8383-1
```
sudo apt-get install --only-upgrade -y tomcat6-admin
```
tomcat6-common→ fixed in6.0.39-1ubuntu0.1+esm3USN-8383-1
```
sudo apt-get install --only-upgrade -y tomcat6-common
```
tomcat6-docs→ fixed in6.0.39-1ubuntu0.1+esm3USN-8383-1
```
sudo apt-get install --only-upgrade -y tomcat6-docs
```
tomcat6-examples→ fixed in6.0.39-1ubuntu0.1+esm3USN-8383-1
```
sudo apt-get install --only-upgrade -y tomcat6-examples
```
tomcat6-extras→ fixed in6.0.39-1ubuntu0.1+esm3USN-8383-1
```
sudo apt-get install --only-upgrade -y tomcat6-extras
```
tomcat6-user→ fixed in6.0.39-1ubuntu0.1+esm3USN-8383-1
```
sudo apt-get install --only-upgrade -y tomcat6-user
```
tomcat7-admin→ fixed in7.0.52-1ubuntu0.16+esm2USN-8383-1
```
sudo apt-get install --only-upgrade -y tomcat7-admin
```
tomcat7-common→ fixed in7.0.52-1ubuntu0.16+esm2USN-8383-1
```
sudo apt-get install --only-upgrade -y tomcat7-common
```
tomcat7-docs→ fixed in7.0.52-1ubuntu0.16+esm2USN-8383-1
```
sudo apt-get install --only-upgrade -y tomcat7-docs
```
tomcat7-examples→ fixed in7.0.52-1ubuntu0.16+esm2USN-8383-1
```
sudo apt-get install --only-upgrade -y tomcat7-examples
```
tomcat7-user→ fixed in7.0.52-1ubuntu0.16+esm2USN-8383-1
```
sudo apt-get install --only-upgrade -y tomcat7-user
```

Ubuntu xenial

Source: Ubuntu USN

tomcat7→ fixed in7.0.68-1ubuntu0.4+esm4USN-8383-1
```
sudo apt-get install --only-upgrade -y tomcat7
```
libservlet3.0-java→ fixed in7.0.68-1ubuntu0.4+esm4USN-8383-1
```
sudo apt-get install --only-upgrade -y libservlet3.0-java
```
libservlet3.0-java-doc→ fixed in7.0.68-1ubuntu0.4+esm4USN-8383-1
```
sudo apt-get install --only-upgrade -y libservlet3.0-java-doc
```
libtomcat7-java→ fixed in7.0.68-1ubuntu0.4+esm4USN-8383-1
```
sudo apt-get install --only-upgrade -y libtomcat7-java
```
tomcat7-admin→ fixed in7.0.68-1ubuntu0.4+esm4USN-8383-1
```
sudo apt-get install --only-upgrade -y tomcat7-admin
```
tomcat7-common→ fixed in7.0.68-1ubuntu0.4+esm4USN-8383-1
```
sudo apt-get install --only-upgrade -y tomcat7-common
```
tomcat7-docs→ fixed in7.0.68-1ubuntu0.4+esm4USN-8383-1
```
sudo apt-get install --only-upgrade -y tomcat7-docs
```
tomcat7-examples→ fixed in7.0.68-1ubuntu0.4+esm4USN-8383-1
```
sudo apt-get install --only-upgrade -y tomcat7-examples
```
tomcat7-user→ fixed in7.0.68-1ubuntu0.4+esm4USN-8383-1
```
sudo apt-get install --only-upgrade -y tomcat7-user
```

Ubuntu bionic

Source: Ubuntu USN

tomcat9→ fixed in9.0.16-3ubuntu0.18.04.2+esm8USN-8417-1
```
sudo apt-get install --only-upgrade -y tomcat9
```
libtomcat9-embed-java→ fixed in9.0.16-3ubuntu0.18.04.2+esm8USN-8417-1
```
sudo apt-get install --only-upgrade -y libtomcat9-embed-java
```
libtomcat9-java→ fixed in9.0.16-3ubuntu0.18.04.2+esm8USN-8417-1
```
sudo apt-get install --only-upgrade -y libtomcat9-java
```
tomcat9-admin→ fixed in9.0.16-3ubuntu0.18.04.2+esm8USN-8417-1
```
sudo apt-get install --only-upgrade -y tomcat9-admin
```
tomcat9-common→ fixed in9.0.16-3ubuntu0.18.04.2+esm8USN-8417-1
```
sudo apt-get install --only-upgrade -y tomcat9-common
```
tomcat9-docs→ fixed in9.0.16-3ubuntu0.18.04.2+esm8USN-8417-1
```
sudo apt-get install --only-upgrade -y tomcat9-docs
```
tomcat9-examples→ fixed in9.0.16-3ubuntu0.18.04.2+esm8USN-8417-1
```
sudo apt-get install --only-upgrade -y tomcat9-examples
```
tomcat9-user→ fixed in9.0.16-3ubuntu0.18.04.2+esm8USN-8417-1
```
sudo apt-get install --only-upgrade -y tomcat9-user
```

Ubuntu focal

Source: Ubuntu USN

tomcat9→ fixed in9.0.31-1ubuntu0.9+esm3USN-8417-1
```
sudo apt-get install --only-upgrade -y tomcat9
```
libtomcat9-embed-java→ fixed in9.0.31-1ubuntu0.9+esm3USN-8417-1
```
sudo apt-get install --only-upgrade -y libtomcat9-embed-java
```
libtomcat9-java→ fixed in9.0.31-1ubuntu0.9+esm3USN-8417-1
```
sudo apt-get install --only-upgrade -y libtomcat9-java
```
tomcat9-admin→ fixed in9.0.31-1ubuntu0.9+esm3USN-8417-1
```
sudo apt-get install --only-upgrade -y tomcat9-admin
```
tomcat9-common→ fixed in9.0.31-1ubuntu0.9+esm3USN-8417-1
```
sudo apt-get install --only-upgrade -y tomcat9-common
```
tomcat9-docs→ fixed in9.0.31-1ubuntu0.9+esm3USN-8417-1
```
sudo apt-get install --only-upgrade -y tomcat9-docs
```
tomcat9-examples→ fixed in9.0.31-1ubuntu0.9+esm3USN-8417-1
```
sudo apt-get install --only-upgrade -y tomcat9-examples
```
tomcat9-user→ fixed in9.0.31-1ubuntu0.9+esm3USN-8417-1
```
sudo apt-get install --only-upgrade -y tomcat9-user
```

Ubuntu jammy

Source: Ubuntu USN

tomcat9→ fixed in9.0.58-1ubuntu0.2+esm4USN-8417-1
```
sudo apt-get install --only-upgrade -y tomcat9
```
libtomcat9-embed-java→ fixed in9.0.58-1ubuntu0.2+esm4USN-8417-1
```
sudo apt-get install --only-upgrade -y libtomcat9-embed-java
```
libtomcat9-java→ fixed in9.0.58-1ubuntu0.2+esm4USN-8417-1
```
sudo apt-get install --only-upgrade -y libtomcat9-java
```
tomcat9-admin→ fixed in9.0.58-1ubuntu0.2+esm4USN-8417-1
```
sudo apt-get install --only-upgrade -y tomcat9-admin
```
tomcat9-common→ fixed in9.0.58-1ubuntu0.2+esm4USN-8417-1
```
sudo apt-get install --only-upgrade -y tomcat9-common
```

Are YOU affected by CVE-2026-43512?

5-second check on your actual server. Reads /etc/os-release, uname -r, and the distro's package manager; matches against this same cross-source index live.

curl https://mindsparkstack.com/scan.sh | bash

Form-based quickscan View on NVD

Continuous monitoring beats manual checking

CVE-2026-43512dropped silently in your distro's update channel. Every new CVE is the same story. StackPatch runs the matcher hourly against all 5 sources and emails the exact remediation when something new applies to one of your servers. From $9/mo, 14-day free trial, cancel anytime.

See StackPatch (from $9/mo)