RHSA-2025:7497: CVEs fixed (Red Hat)
RHSA-2025:7497 fixes 3 tracked CVEs. Affected systems and fixed versions.
- CVE-2025-24813 CRITICAL 9.8 EXPLOITED UPGRADE MITIGATE Apache Tomcat Path Equivalence Vulnerability
- CVE-2024-56337 CRITICAL 9.8 UPGRADE MITIGATE Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache Tomcat. This issue affects Apache T
- CVE-2024-52316 CRITICAL 9.8 UPGRADE MITIGATE Unchecked Error Condition vulnerability in Apache Tomcat
Applies to
- RHEL 10 · fixed in tomcat-10.1.36-1.el10_0