StackPatch is live — CVE patch ops for indie SaaS, $99 lifetime founder seat (50 only).See product

Back to CVE digest

Package · tomcat9-common

`tomcat9-common` CVE matrix across Linux distros

18 CVEs tracked across 3 distro releases. Showing the 18 most-recent fix records.

Ecosystems with tracked fixes

Ubuntu bionicUbuntu focalUbuntu jammy

Recent fix records

Each row links to the full per-CVE cross-distro view. Sorted most-recent first.

Ubuntu bionic

Source: Ubuntu USN

CVE-2026-41284→ fixed in9.0.16-3ubuntu0.18.04.2+esm8USN-8417-1
CVE-2026-41293→ fixed in9.0.16-3ubuntu0.18.04.2+esm8USN-8417-1
CVE-2026-42498→ fixed in9.0.16-3ubuntu0.18.04.2+esm8USN-8417-1
CVE-2026-43512→ fixed in9.0.16-3ubuntu0.18.04.2+esm8USN-8417-1
CVE-2026-43513→ fixed in9.0.16-3ubuntu0.18.04.2+esm8USN-8417-1
CVE-2026-43515→ fixed in9.0.16-3ubuntu0.18.04.2+esm8USN-8417-1

Single command to patch all of these:

sudo apt-get install --only-upgrade -y tomcat9-common

Ubuntu focal

Source: Ubuntu USN

CVE-2026-41284→ fixed in9.0.31-1ubuntu0.9+esm3USN-8417-1
CVE-2026-41293→ fixed in9.0.31-1ubuntu0.9+esm3USN-8417-1
CVE-2026-42498→ fixed in9.0.31-1ubuntu0.9+esm3USN-8417-1
CVE-2026-43512→ fixed in9.0.31-1ubuntu0.9+esm3USN-8417-1
CVE-2026-43513→ fixed in9.0.31-1ubuntu0.9+esm3USN-8417-1
CVE-2026-43515→ fixed in9.0.31-1ubuntu0.9+esm3USN-8417-1

Single command to patch all of these:

sudo apt-get install --only-upgrade -y tomcat9-common

Ubuntu jammy

Source: Ubuntu USN

CVE-2026-41284→ fixed in9.0.58-1ubuntu0.2+esm4USN-8417-1
CVE-2026-41293→ fixed in9.0.58-1ubuntu0.2+esm4USN-8417-1
CVE-2026-42498→ fixed in9.0.58-1ubuntu0.2+esm4USN-8417-1
CVE-2026-43512→ fixed in9.0.58-1ubuntu0.2+esm4USN-8417-1
CVE-2026-43513→ fixed in9.0.58-1ubuntu0.2+esm4USN-8417-1
CVE-2026-43515→ fixed in9.0.58-1ubuntu0.2+esm4USN-8417-1

Single command to patch all of these:

sudo apt-get install --only-upgrade -y tomcat9-common

Is YOUR tomcat9-common patched?

5-second check on your actual server. The quickscan reads your installed tomcat9-common version and matches against the same 18-CVE catalog above.

curl https://mindsparkstack.com/scan.sh | bash

Form-based quickscan Continuous monitoring ($99 lifetime)