CVE-2025-24813: fixed versions by distro
Every tracked distribution release and image, with the package version that counts as fixed and the vendor's own page.
- Overall
- Partly fixed
- Severity
High8.6CVSS v3.1Red Hat
- Last checked
Ubuntu
| Release | Package | Fixed version | State | Verified | Source |
|---|---|---|---|---|---|
| 25.04(plucky) | tomcat9 | 9.0.70-2ubuntu1.25.04.1 | Fixed | USN-7525-2 | |
| 24.04 LTS(noble) | tomcat10 | 10.1.16-1ubuntu0.1~esm1 | Fixed | USN-7525-1 | |
| 26.10(stonking) | tomcat11 | No fixed version published yet | Not affectedVendor statement | Source | |
| 26.10(stonking) | tomcat9 | 9.0.70-2ubuntu2 | Fixed | Source | |
| 20.04 LTS(focal) | tomcat9 | 9.0.31-1ubuntu0.9+esm1 | Fixed | USN-7525-1 | |
| 18.04 LTS(bionic) | tomcat9 | 9.0.16-3ubuntu0.18.04.2+esm6 | Fixed | USN-7525-1 | |
| 24.04 LTS(noble) | tomcat9 | 9.0.70-2ubuntu0.1+esm1 | Fixed | USN-7525-2 | |
| 25.10(questing) | tomcat9 | 9.0.70-2ubuntu2 | Fixed | Source | |
| 26.04 LTS(resolute) | tomcat10 | No fixed version published yet | Not affectedVendor statement | Source | |
| 25.04(plucky) | tomcat10 | No fixed version published yet | Not affectedVendor statement | Source | |
| 26.04 LTS(resolute) | tomcat9 | 9.0.70-2ubuntu2 | Fixed | Source | |
| 25.10(questing) | tomcat11 | No fixed version published yet | Not affectedVendor statement | Source | |
| 26.10(stonking) | tomcat10 | No fixed version published yet | Not affectedVendor statement | Source | |
| 22.04 LTS(jammy) | tomcat9 | 9.0.58-1ubuntu0.2+esm2 | Fixed | USN-7525-1 | |
| 26.04 LTS(resolute) | tomcat11 | No fixed version published yet | Not affectedVendor statement | Source | |
| 25.10(questing) | tomcat10 | No fixed version published yet | Not affectedVendor statement | Source |
Debian
| Release | Package | Fixed version | State | Verified | Source |
|---|---|---|---|---|---|
| 12(bookworm) security (LTS team) | tomcat9 | 9.0.70-2 | Fixed | Source | |
| 13(trixie) security | tomcat10 | 10.1.35-1 | Fixed | Source | |
| forky(testing) | tomcat9 | 9.0.70-2 | Fixed | Source | |
| sid(unstable) | tomcat9 | 9.0.70-2 | Fixed | Source | |
| 12(bookworm) security (LTS team) | tomcat10 | 10.1.34-0+deb12u2 | Fixed | Source | |
| 13(trixie) security | tomcat9 | 9.0.70-2 | Fixed | Source | |
| sid(unstable) | tomcat10 | 10.1.35-1 | Fixed | Source | |
| forky(testing) | tomcat10 | 10.1.35-1 | Fixed | Source |
Red Hat Enterprise Linux
| Release | Package | Fixed version | State | Verified | Source |
|---|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | tomcat | 1:10.1.36-1.el10_0 | Fixed | RHSA-2025:7497 | |
| Red Hat Enterprise Linux 8 | tomcat | 1:9.0.87-1.el8_10.3 | Fixed | RHSA-2025:3683 | |
| Red Hat Enterprise Linux 10 | tomcat9 | 1:9.0.87-5.el10_0 | Fixed | RHSA-2025:7494 | |
| Red Hat Enterprise Linux 7 | tomcat | No fixed version published yet | Not affectedVendor statement | Source | |
| Red Hat Enterprise Linux 9 | tomcat | 1:9.0.87-2.el9_5.1 | Fixed | RHSA-2025:3645 |