Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Oracle Linux 10: Tomcat Important Risk Update ELSA-2025-23050

oracle
Calendar Grey December 12, 2025
Oracle Linux Logo Esm H88
Oracle Linux 10 Advisory ELSA-2025-23050 important update for Tomcat addressing multiple security issues.
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

Summary

[1:10.1.36-3.1] - Resolves: RHEL-124494 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-91729 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-132527 tomcat: Denial of service (CVE-2025-61795)

Topics%20covered

Topics Covered

security advisory denial of service remote code execution important tomcat Oracle

SRPMs

http://oss.oracle.com/ol10/SRPMS-updates/tomcat-10.1.36-3.el10_1.1.src.rpm

x86_64

tomcat-10.1.36-3.el10_1.1.noarch.rpm tomcat-admin-webapps-10.1.36-3.el10_1.1.noarch.rpm tomcat-docs-webapp-10.1.36-3.el10_1.1.noarch.rpm tomcat-el-5.0-api-10.1.36-3.el10_1.1.noarch.rpm tomcat-jsp-3.1-api-10.1.36-3.el10_1.1.noarch.rpm tomcat-lib-10.1.36-3.el10_1.1.noarch.rpm tomcat-servlet-6.0-api-10.1.36-3.el10_1.1.noarch.rpm tomcat-webapps-10.1.36-3.el10_1.1.noarch.rpm

aarch64

tomcat-10.1.36-3.el10_1.1.noarch.rpm tomcat-admin-webapps-10.1.36-3.el10_1.1.noarch.rpm tomcat-docs-webapp-10.1.36-3.el10_1.1.noarch.rpm tomcat-el-5.0-api-10.1.36-3.el10_1.1.noarch.rpm tomcat-jsp-3.1-api-10.1.36-3.el10_1.1.noarch.rpm tomcat-lib-10.1.36-3.el10_1.1.noarch.rpm tomcat-servlet-6.0-api-10.1.36-3.el10_1.1.noarch.rpm tomcat-webapps-10.1.36-3.el10_1.1.noarch.rpm

Severity
important
Lowest
Low
Medium
High
Critical

Related CVEs: CVE-2025-31651 CVE-2025-55752 CVE-2025-61795

Topics%20covered

Topics Covered

security advisory denial of service remote code execution important tomcat Oracle

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here