StackPatch is live — CVE patch ops for indie SaaS, $99 lifetime founder seat (50 only).See product

Back to CVE digest

Package · tomcat9-user

`tomcat9-user` CVE matrix across Linux distros

15 CVEs tracked across 3 distro releases. Showing the 15 most-recent fix records.

Ecosystems with tracked fixes

Ubuntu bionicUbuntu focalUbuntu jammy

Recent fix records

Each row links to the full per-CVE cross-distro view. Sorted most-recent first.

Ubuntu bionic

Source: Ubuntu USN

CVE-2026-41284→ fixed in9.0.16-3ubuntu0.18.04.2+esm8USN-8417-1
CVE-2026-41293→ fixed in9.0.16-3ubuntu0.18.04.2+esm8USN-8417-1
CVE-2026-42498→ fixed in9.0.16-3ubuntu0.18.04.2+esm8USN-8417-1
CVE-2026-43512→ fixed in9.0.16-3ubuntu0.18.04.2+esm8USN-8417-1
CVE-2026-43513→ fixed in9.0.16-3ubuntu0.18.04.2+esm8USN-8417-1
CVE-2026-43515→ fixed in9.0.16-3ubuntu0.18.04.2+esm8USN-8417-1

Single command to patch all of these:

sudo apt-get install --only-upgrade -y tomcat9-user

Ubuntu focal

Source: Ubuntu USN

CVE-2026-41284→ fixed in9.0.31-1ubuntu0.9+esm3USN-8417-1
CVE-2026-41293→ fixed in9.0.31-1ubuntu0.9+esm3USN-8417-1
CVE-2026-42498→ fixed in9.0.31-1ubuntu0.9+esm3USN-8417-1
CVE-2026-43512→ fixed in9.0.31-1ubuntu0.9+esm3USN-8417-1
CVE-2026-43513→ fixed in9.0.31-1ubuntu0.9+esm3USN-8417-1
CVE-2026-43515→ fixed in9.0.31-1ubuntu0.9+esm3USN-8417-1

Single command to patch all of these:

sudo apt-get install --only-upgrade -y tomcat9-user

Ubuntu jammy

Source: Ubuntu USN

CVE-2026-41284→ fixed in9.0.58-1ubuntu0.2+esm4USN-8417-1
CVE-2026-41293→ fixed in9.0.58-1ubuntu0.2+esm4USN-8417-1
CVE-2026-42498→ fixed in9.0.58-1ubuntu0.2+esm4USN-8417-1

Single command to patch all of these:

sudo apt-get install --only-upgrade -y tomcat9-user

Is YOUR tomcat9-user patched?

5-second check on your actual server. The quickscan reads your installed tomcat9-user version and matches against the same 15-CVE catalog above.

curl https://mindsparkstack.com/scan.sh | bash

Form-based quickscan Continuous monitoring ($99 lifetime)