RHSA-2025:3645: CVEs fixed (Red Hat)

RHSA-2025:3645 fixes 2 tracked CVEs. Affected systems and fixed versions.

• CVE-2025-24813 CRITICAL 9.8 EXPLOITED UPGRADE MITIGATE Apache Tomcat Path Equivalence Vulnerability
• CVE-2024-50379 CRITICAL 9.8 UPGRADE MITIGATE Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability during JSP compilation in Apache Tomcat permit

Applies to

• RHEL 9 · fixed in tomcat-9.0.87-2.el9_5.1

← Back to latest CVEs