RHSA-2025:11333: CVEs fixed (Red Hat)
RHSA-2025:11333 fixes 2 tracked CVEs. Affected systems and fixed versions.
- CVE-2025-31650 HIGH 7.5 UPGRADE Improper Input Validation vulnerability in Apache Tomcat
- CVE-2024-56337 CRITICAL 9.8 UPGRADE MITIGATE Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache Tomcat. This issue affects Apache T
Applies to
- RHEL 8 · fixed in tomcat-9.0.87-1.el8_10.4