RHSA-2025:11332: CVEs fixed (Red Hat)

RHSA-2025:11332 fixes 3 tracked CVEs. Affected systems and fixed versions.

• CVE-2025-31650 HIGH 7.5 UPGRADE Improper Input Validation vulnerability in Apache Tomcat
• CVE-2024-56337 CRITICAL 9.8 UPGRADE MITIGATE Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache Tomcat. This issue affects Apache T
• CVE-2024-50379 CRITICAL 9.8 UPGRADE MITIGATE Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability during JSP compilation in Apache Tomcat permit

Applies to

• RHEL 10 · fixed in tomcat9-9.0.87-5.el10_0.1

← Back to latest CVEs