Oracle Errata System
Oracle Linux
5.11
2025-12-11T02:21:49
ELSA-2025-23049: tomcat security update (IMPORTANT)
Oracle Linux 9
[1:9.0.87-6.1]
- Resolves: RHEL-124518
tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)
- Resolves: RHEL-91753
tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)
IMPORTANT
Copyright 2025 Oracle, Inc.
CVE-2025-31651
CVE-2025-55752
cpe:/a:oracle:linux:9::appstream
tomcat-jsp-2.3-api
tomcat
oraclelinux-release
tomcat-servlet-4.0-api
tomcat-admin-webapps
tomcat-webapps
tomcat-lib
tomcat-docs-webapp
tomcat-el-3.0-api
bc4d06a08d8b756f
^9
aarch64
1:9.0.87-6.el9_7.1
x86_64