Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 9 enterprise_linux:9::appstream | tomcat | 1:9.0.87-6.el9_7.1 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | tomcat-admin-webapps | 1:9.0.87-6.el9_7.1 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | tomcat-docs-webapp | 1:9.0.87-6.el9_7.1 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | tomcat-el-3.0-api | 1:9.0.87-6.el9_7.1 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | tomcat-jsp-2.3-api | 1:9.0.87-6.el9_7.1 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | tomcat-lib | 1:9.0.87-6.el9_7.1 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | tomcat-servlet-4.0-api | 1:9.0.87-6.el9_7.1 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | tomcat-webapps | 1:9.0.87-6.el9_7.1 |
Vulnerabilities 2
-
Critical 9.8CVE-2025-31651 Public exploit
Apache Tomcat: Bypass of rules in Rewrite Valve
Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. For a subset of unlikely rewrite rule configurations, it was possible for a specially crafted request to bypass some rewrite rules. If those rewrite rules effectivel…
-
High 7.5
Apache Tomcat: Directory traversal via rewrite with possible RCE if PUT is enabled
Relative Path Traversal vulnerability in Apache Tomcat. The fix for bug 60013 introduced a regression where the rewritten URL was normalized before it was decoded. This introduced the possibility that, for rewrite rules that rewrite query parameters to the UR…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2362782
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2406591
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23049.json
-
report
https://access.redhat.com/security/cve/CVE-2025-31651
-
advisory
https://www.cve.org/CVERecord?id=CVE-2025-31651
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-31651
-
article
https://lists.apache.org/list.html?announce@tomcat.apache.org
-
report
https://access.redhat.com/security/cve/CVE-2025-55752
-
advisory
https://www.cve.org/CVERecord?id=CVE-2025-55752
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-55752
-
article
https://github.com/apache/tomcat/commit/fec06c610ed7466b401e29cc567a58aee5ed826a
-
article
https://lists.apache.org/thread/n05kjcwyj1s45ovs8ll1qrrojhfb1tog