Red Hat Security Advisory: tomcat security update

Fixed packages 8

Vulnerabilities 3

• Critical 9.8
  CVE-2025-31651 Public exploit

  Apache Tomcat: Bypass of rules in Rewrite Valve

  Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. For a subset of unlikely rewrite rule configurations, it was possible for a specially crafted request to bypass some rewrite rules. If those rewrite rules effectivel…

  Apache Software Foundation Apache Tomcat thingsboard-tb-node thingsboard-tb-mqtt-transport Debian Ubuntu Wolfi Maven
  Apr 28, 2025
• High 7.5
  CVE-2025-55752 Public exploit EPSS 64%

  Apache Tomcat: Directory traversal via rewrite with possible RCE if PUT is enabled

  Relative Path Traversal vulnerability in Apache Tomcat. The fix for bug 60013 introduced a regression where the rewritten URL was normalized before it was decoded. This introduced the possibility that, for rewrite rules that rewrite query parameters to the UR…

  Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat tomcat8 Debian Ubuntu Maven
  Oct 27, 2025
• Medium 5.3
  CVE-2025-61795

  Apache Tomcat: Delayed cleaning of multi-part upload temporary files may lead to DoS

  Improper Resource Shutdown or Release vulnerability in Apache Tomcat. If an error occurred (including exceeding limits) during the processing of a multipart upload, temporary copies of the uploaded parts written to disc were not cleaned up immediately but lef…

  Apache Software Foundation Apache Tomcat thingsboard-tb-node thingsboard-tb-mqtt-transport Debian Ubuntu Wolfi Maven
  Oct 27, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2362782
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2406588
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2406591
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23051.json
• report
  https://access.redhat.com/security/cve/CVE-2025-31651
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-31651
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-31651
• article
  https://lists.apache.org/list.html?announce@tomcat.apache.org
• report
  https://access.redhat.com/security/cve/CVE-2025-55752
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-55752
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-55752
• article
  https://github.com/apache/tomcat/commit/fec06c610ed7466b401e29cc567a58aee5ed826a
• article
  https://lists.apache.org/thread/n05kjcwyj1s45ovs8ll1qrrojhfb1tog
• report
  https://access.redhat.com/security/cve/CVE-2025-61795
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-61795
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-61795
• article
  https://github.com/apache/tomcat/commit/1cdf5f730ede75a0759492f179ac21ca4ff68e06
• article
  https://lists.apache.org/thread/wm9mx8brmx9g4zpywm06ryrtvd3160pp