Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Oracle Linux 10: ELSA-2025-23052 Tomcat9 Important RCE Issues

oracle
Calendar Grey December 11, 2025
Oracle Linux Logo Esm H88
Oracle Linux 10 security advisory ELSA-2025-23052 details important Tomcat9 updates for potential RCE issues.
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

Summary

[1:9.0.87-8.1] - Resolves: RHEL-124497 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-91732 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)

Topics%20covered

Topics Covered

security advisory remote code execution directory traversal important Oracle Linux tomcat9

SRPMs

http://oss.oracle.com/ol10/SRPMS-updates/tomcat9-9.0.87-8.el10_1.1.src.rpm

x86_64

tomcat9-9.0.87-8.el10_1.1.noarch.rpm tomcat9-admin-webapps-9.0.87-8.el10_1.1.noarch.rpm tomcat9-docs-webapp-9.0.87-8.el10_1.1.noarch.rpm tomcat9-el-3.0-api-9.0.87-8.el10_1.1.noarch.rpm tomcat9-jsp-2.3-api-9.0.87-8.el10_1.1.noarch.rpm tomcat9-lib-9.0.87-8.el10_1.1.noarch.rpm tomcat9-servlet-4.0-api-9.0.87-8.el10_1.1.noarch.rpm tomcat9-webapps-9.0.87-8.el10_1.1.noarch.rpm

aarch64

tomcat9-9.0.87-8.el10_1.1.noarch.rpm tomcat9-admin-webapps-9.0.87-8.el10_1.1.noarch.rpm tomcat9-docs-webapp-9.0.87-8.el10_1.1.noarch.rpm tomcat9-el-3.0-api-9.0.87-8.el10_1.1.noarch.rpm tomcat9-jsp-2.3-api-9.0.87-8.el10_1.1.noarch.rpm tomcat9-lib-9.0.87-8.el10_1.1.noarch.rpm tomcat9-servlet-4.0-api-9.0.87-8.el10_1.1.noarch.rpm tomcat9-webapps-9.0.87-8.el10_1.1.noarch.rpm

Severity
important
Lowest
Low
Medium
High
Critical

Related CVEs: CVE-2025-31651 CVE-2025-55752

Topics%20covered

Topics Covered

security advisory remote code execution directory traversal important Oracle Linux tomcat9

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here