Red Hat Security Advisory: tomcat9 security update

Fixed packages 8

Vulnerabilities 7

• Critical 9.6
  CVE-2025-55754 EPSS 10%

  Apache Tomcat: console manipulation via escape sequences in log messages

  Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. Tomcat did not escape ANSI escape sequences in log messages. If Tomcat was running in a console on a Windows operating system, and the console supported ANSI escape …

  Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat tomcat9 Debian Ubuntu Maven
  Oct 27, 2025
• High 8.6
  CVE-2024-38286

  Apache Tomcat: Denial of Service

  Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M20, from 10.1.0-M1 through 10.1.24, from 9.0.13 through 9.0.89. The following versions were EOL at the time t…

  Apache Software Foundation Apache Tomcat tomcat9 tomcat8 Debian Ubuntu Maven
  Nov 7, 2024
• High 7.5
  CVE-2024-34750

  Apache Tomcat: HTTP/2 excess header handling DoS

  Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache Tomcat. When processing an HTTP/2 stream, Tomcat did not handle some cases of excessive HTTP headers correctly. This led to a miscounting of active HTTP/2 s…

  Apache Software Foundation Apache Tomcat thingsboard-tb-mqtt-transport tomcat9 Debian Ubuntu Wolfi Maven
  Jul 3, 2024
• High 7.3
  CVE-2025-46701 Public exploit

  Apache Tomcat: Security constraint bypass for CGI scripts

  Improper Handling of Case Sensitivity vulnerability in Apache Tomcat's GCI servlet allows security constraint bypass of security constraints that apply to the pathInfo component of a URI mapped to the CGI servlet. This issue affects Apache Tomcat: from 11.0.0…

  Apache Software Foundation Apache Tomcat thingsboard-tb-node thingsboard-tb-mqtt-transport Debian Ubuntu Wolfi Maven
  May 29, 2025
• High 7.3
  CVE-2026-55957 Public exploit

  Apache Tomcat: Authentication bypass with JNDIRealm and GSSAPI authenticated bind

  Missing Critical Step in Authentication vulnerability in Apache Tomcat when the JNDIRealm was configured to authenticate binds using GSSAPI allowed attackers to authenticate without provided the correct password. This issue affects Apache Tomcat: from 11.0.0-…

  Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat tomcat8 Debian Ubuntu Maven
  Jun 29, 2026
• Medium 6.5
  CVE-2025-55668 Public exploit

  Apache Tomcat: session fixation via rewrite valve

  Session Fixation vulnerability in Apache Tomcat via rewrite valve. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1 through 10.1.41, from 9.0.0.M1 through 9.0.105. Older, EOL versions may also be affected. Users are recommended …

  Apache Software Foundation Apache Tomcat tomcat8 tomcat9 Debian Ubuntu Maven
  Aug 13, 2025
• Medium 5.3
  CVE-2025-61795

  Apache Tomcat: Delayed cleaning of multi-part upload temporary files may lead to DoS

  Improper Resource Shutdown or Release vulnerability in Apache Tomcat. If an error occurred (including exceeding limits) during the processing of a multipart upload, temporary copies of the uploaded parts written to disc were not cleaned up immediately but lef…

  Apache Software Foundation Apache Tomcat thingsboard-tb-node thingsboard-tb-mqtt-transport Debian Ubuntu Wolfi Maven
  Oct 27, 2025

References

• article
  https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/10.2_release_notes/index
• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2369253
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2388226
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2406590
• article
  https://issues.redhat.com/browse/RHEL-148687
• article
  https://issues.redhat.com/browse/RHEL-158962
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_18536.json
• report
  https://access.redhat.com/security/cve/CVE-2024-34750
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2295651
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-34750
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-34750
• article
  https://lists.apache.org/thread/4kqf0bc9gxymjc2x7v3p7dvplnl77y8l
• report
  https://access.redhat.com/security/cve/CVE-2024-38286
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2314686
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-38286
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-38286
• article
  https://lists.apache.org/thread/wms60cvbsz3fpbz9psxtfx8r41jl6d4s
• report
  https://access.redhat.com/security/cve/CVE-2025-46701
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-46701
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-46701
• article
  https://lists.apache.org/thread/xhqqk9w5q45srcdqhogdk04lhdscv30j
• report
  https://access.redhat.com/security/cve/CVE-2025-55668
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-55668
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-55668
• article
  https://github.com/apache/tomcat/commit/8621e4c6ba2c916a41eb34cb0f781171ead33fb6
• article
  https://github.com/apache/tomcat/commit/90306d971bb8b8393336d893644124fb2ca11d21
• article
  https://github.com/apache/tomcat/commit/9c3673ba04009377cb0c81ccb6cf5078aec1aa95
• article
  https://lists.apache.org/thread/v6bknr96rl7l1qxkl1c03v0qdvbbqs47
• report
  https://access.redhat.com/security/cve/CVE-2025-55754
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-55754
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-55754
• article
  https://github.com/apache/tomcat/commit/5a3db092982c0c58d4855304167ee757fe5e79bb
• article
  https://lists.apache.org/thread/j7w54hqbkfcn0xb9xy0wnx8w5nymcbqd
• report
  https://access.redhat.com/security/cve/CVE-2025-61795
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2406588
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-61795
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-61795
• article
  https://github.com/apache/tomcat/commit/1cdf5f730ede75a0759492f179ac21ca4ff68e06