# Critical Photon OS Security Update

## Summary

Advisory Id     : PHSA-2026-5.0-91-1006

Type            : Security

Severity        : ['Critical']

Issue date      : 2026-09-18

Affected Release: 5.0-91

## Details

Updates of ['apache-tomcat10', 'apache-tomcat9'] packages of Photon OS have been released.
## Affected Packages

### Critical

apache-tomcat10 - ['[CVE-2026-59084](https://nvd.nist.gov/vuln/detail/CVE-2026-59084)', '[CVE-2026-53434](https://nvd.nist.gov/vuln/detail/CVE-2026-53434)', '[CVE-2026-59083](https://nvd.nist.gov/vuln/detail/CVE-2026-59083)']

apache-tomcat9 - ['[CVE-2026-59084](https://nvd.nist.gov/vuln/detail/CVE-2026-59084)', '[CVE-2026-53434](https://nvd.nist.gov/vuln/detail/CVE-2026-53434)', '[CVE-2026-59083](https://nvd.nist.gov/vuln/detail/CVE-2026-59083)']

## Solution

Update the affected packages (tdnf update package)

## Updated Packages Information

apache-tomcat10-10.1.60-1.ph5.noarch.rpm | size : 11M , sha256 : a033f9bcd7350b8220673dc4c9dd31a573e1838708c2d5da235eddf4720f2357 , build time : Fri, 18 Sep 2026 17:45:02 UTC

apache-tomcat10-webapps-10.1.60-1.ph5.noarch.rpm | size : 96K , sha256 : 71b96820c15cf82ffc0fe8b59a69a1c449572ecbff4446394007c24f352facdd , build time : Fri, 18 Sep 2026 17:45:02 UTC

apache-tomcat9-9.0.122-1.ph5.noarch.rpm | size : 9.2M , sha256 : beeaed52790cdc4fb442e63221c664a8d1ea27cfabdaaddd9856ba24a8fcde38 , build time : Fri, 18 Sep 2026 17:45:06 UTC

apache-tomcat9-webapps-9.0.122-1.ph5.noarch.rpm | size : 96K , sha256 : d5b70017accd8804cd6477a6f9fbd9a6d8513ebccdb3a9254ce9f9d9240ba1ef , build time : Fri, 18 Sep 2026 17:45:06 UTC