Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
Apache Tomcat 9 Security Update for Linux
published 3 months ago
Summary
Apache Tomcat 9 for Linux has received security updates to protect against potential attacks. This update also includes bug fixes and enhancements to improve the overall stability and performance of the software. It's recommended to update your Apache Tomcat 9 installation to the latest version to ensure you have the latest security patches and features.
What to do
- Update redhat tomcat9 to version 1:9.0.117-2.el10_2.
- Update redhat tomcat9-admin-webapps to version 1:9.0.117-2.el10_2.
- Update redhat tomcat9-docs-webapp to version 1:9.0.117-2.el10_2.
- Update redhat tomcat9-el-3.0-api to version 1:9.0.117-2.el10_2.
- Update redhat tomcat9-jsp-2.3-api to version 1:9.0.117-2.el10_2.
- Update redhat tomcat9-lib to version 1:9.0.117-2.el10_2.
- Update redhat tomcat9-servlet-4.0-api to version 1:9.0.117-2.el10_2.
- Update redhat tomcat9-webapps to version 1:9.0.117-2.el10_2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:enterprise_linux:10.2 | redhat | tomcat9 |
< 1:9.0.117-2.el10_2 Fix: upgrade to 1:9.0.117-2.el10_2
|
| Red Hat:enterprise_linux:10.2 | redhat | tomcat9-admin-webapps |
< 1:9.0.117-2.el10_2 Fix: upgrade to 1:9.0.117-2.el10_2
|
| Red Hat:enterprise_linux:10.2 | redhat | tomcat9-docs-webapp |
< 1:9.0.117-2.el10_2 Fix: upgrade to 1:9.0.117-2.el10_2
|
| Red Hat:enterprise_linux:10.2 | redhat | tomcat9-el-3.0-api |
< 1:9.0.117-2.el10_2 Fix: upgrade to 1:9.0.117-2.el10_2
|
| Red Hat:enterprise_linux:10.2 | redhat | tomcat9-jsp-2.3-api |
< 1:9.0.117-2.el10_2 Fix: upgrade to 1:9.0.117-2.el10_2
|
| Red Hat:enterprise_linux:10.2 | redhat | tomcat9-lib |
< 1:9.0.117-2.el10_2 Fix: upgrade to 1:9.0.117-2.el10_2
|
| Red Hat:enterprise_linux:10.2 | redhat | tomcat9-servlet-4.0-api |
< 1:9.0.117-2.el10_2 Fix: upgrade to 1:9.0.117-2.el10_2
|
| Red Hat:enterprise_linux:10.2 | redhat | tomcat9-webapps |
< 1:9.0.117-2.el10_2 Fix: upgrade to 1:9.0.117-2.el10_2
|
Original advisory text
Red Hat Security Advisory: tomcat9 security, bug fix, and enhancement update
References
- https://access.redhat.com/errata/RHSA-2026:36790 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#important Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2457020 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2457027 Third Party Advisory
- https://issues.redhat.com/browse/RHEL-185571 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36790.... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-29146 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-29146 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-29146 Vendor Advisory
- https://lists.apache.org/thread/lzt04z2pb3dc5tk85obn80xygw3z1p0w Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-34486 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-34486 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-34486 Vendor Advisory
- https://lists.apache.org/thread/9510k5p5zdvt9pkkgtyp85mvwxo2qrly Third Party Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published9 Jul 2026
Updated15 Jul 2026
First seen15 Jul 2026
Sources
RHSA-2026:36790 · OSV
Track software like this
Free during beta