Skip to content

CVE-2023-44487: fixed versions by distro

Every tracked distribution release and image, with the package version that counts as fixed and the vendor's own page.

Last checked 23 Oct 2026 16:36 UTCLast changed 27 Oct 2026 05:47 UTC

Overall: Partly fixed
Severity: High7.5CVSS v3.1Red Hat
Last checked: 23 Oct 2026 16:36 UTC

Check your version

Debian

8 of 8 fixed

Debian
Release	Package	Fixed version	State	Verified	Source
12(bookworm) security (LTS team)	tomcat10	10.1.6-1+deb12u1	Fixed	27 Oct 2026 04:30 UTC	Source
sid(unstable)	tomcat10	10.1.14-1	Fixed	27 Oct 2026 04:30 UTC	Source
forky(testing)	tomcat10	10.1.14-1	Fixed	27 Oct 2026 04:30 UTC	Source
12(bookworm) security (LTS team)	tomcat9	9.0.70-2	Fixed	27 Oct 2026 04:30 UTC	Source
forky(testing)	tomcat9	9.0.70-2	Fixed	27 Oct 2026 04:30 UTC	Source
sid(unstable)	tomcat9	9.0.70-2	Fixed	27 Oct 2026 04:30 UTC	Source
13(trixie) security	tomcat10	10.1.14-1	Fixed	27 Oct 2026 04:30 UTC	Source
13(trixie) security	tomcat9	9.0.70-2	Fixed	27 Oct 2026 04:30 UTC	Source

Ubuntu

13 of 13 fixed

Ubuntu
Release	Package	Fixed version	State	Verified	Source
26.10(stonking)	tomcat10	No fixed version published yet	Not affectedVendor statement	26 Oct 2026 05:09 UTC	Source
26.04 LTS(resolute)	tomcat9	No fixed version published yet	Not affectedVendor statement	26 Oct 2026 05:09 UTC	Source
25.04(plucky)	tomcat10	No fixed version published yet	Not affectedVendor statement	26 Oct 2026 05:09 UTC	Source
25.10(questing)	tomcat9	No fixed version published yet	Not affectedVendor statement	26 Oct 2026 05:09 UTC	Source
24.04 LTS(noble)	tomcat9	No fixed version published yet	Not affectedVendor statement	26 Oct 2026 05:09 UTC	Source
18.04 LTS(bionic)	tomcat9	9.0.16-3ubuntu0.18.04.2+esm5	Fixed	26 Oct 2026 05:09 UTC	USN-7410-1
26.04 LTS(resolute)	tomcat10	No fixed version published yet	Not affectedVendor statement	26 Oct 2026 05:09 UTC	Source
25.04(plucky)	tomcat9	No fixed version published yet	Not affectedVendor statement	26 Oct 2026 05:09 UTC	Source
20.04 LTS(focal)	tomcat9	9.0.31-1ubuntu0.9	Fixed	26 Oct 2026 05:09 UTC	USN-7410-1
26.10(stonking)	tomcat9	No fixed version published yet	Not affectedVendor statement	26 Oct 2026 05:09 UTC	Source
25.10(questing)	tomcat10	No fixed version published yet	Not affectedVendor statement	26 Oct 2026 05:09 UTC	Source
22.04 LTS(jammy)	tomcat9	9.0.58-1ubuntu0.2	Fixed	26 Oct 2026 05:09 UTC	USN-7410-1
24.04 LTS(noble)	tomcat10	No fixed version published yet	Not affectedVendor statement	26 Oct 2026 05:09 UTC	Source

Red Hat Enterprise Linux

4 of 4 fixed

Red Hat Enterprise Linux
Release	Package	Fixed version	State	Verified	Source
Red Hat Enterprise Linux 10	tomcat	1:10.1.36-1.el10_0	Fixed	27 Oct 2026 05:40 UTC	RHSA-2025:7497
Red Hat Enterprise Linux 7	tomcat	No fixed version published yet	Not affectedVendor statement	27 Oct 2026 05:40 UTC	Source
Red Hat Enterprise Linux 9	tomcat	1:9.0.62-11.el9_2.3	Fixed	27 Oct 2026 05:40 UTC	RHSA-2023:5929
Red Hat Enterprise Linux 8	tomcat	1:9.0.62-5.el8_8.2	Fixed	27 Oct 2026 05:40 UTC	RHSA-2023:5928