ALSA-2025:7494

Source
https://errata.almalinux.org/10/ALSA-2025-7494.html
Import Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2025:7494.json
JSON Data
https://api.osv.dev/v1/vulns/ALSA-2025:7494
Related
Published
2025-05-13T00:00:00Z
Modified
2025-07-02T12:36:19Z
Summary
Moderate: tomcat9 security update
Details

Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participatory environment and released under the Apache Software License version 2.0. Tomcat is intended to be a collaboration of the best-of-breed developers from around the world.

Security Fix(es):

  • tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

Affected packages

AlmaLinux:10 / tomcat9

Package

Name
tomcat9
Purl
pkg:rpm/almalinux/tomcat9

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:9.0.87-5.el10_0

AlmaLinux:10 / tomcat9-admin-webapps

Package

Name
tomcat9-admin-webapps
Purl
pkg:rpm/almalinux/tomcat9-admin-webapps

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:9.0.87-5.el10_0

AlmaLinux:10 / tomcat9-docs-webapp

Package

Name
tomcat9-docs-webapp
Purl
pkg:rpm/almalinux/tomcat9-docs-webapp

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:9.0.87-5.el10_0

AlmaLinux:10 / tomcat9-el-3.0-api

Package

Name
tomcat9-el-3.0-api
Purl
pkg:rpm/almalinux/tomcat9-el-3.0-api

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:9.0.87-5.el10_0

AlmaLinux:10 / tomcat9-jsp-2.3-api

Package

Name
tomcat9-jsp-2.3-api
Purl
pkg:rpm/almalinux/tomcat9-jsp-2.3-api

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:9.0.87-5.el10_0

AlmaLinux:10 / tomcat9-lib

Package

Name
tomcat9-lib
Purl
pkg:rpm/almalinux/tomcat9-lib

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:9.0.87-5.el10_0

AlmaLinux:10 / tomcat9-servlet-4.0-api

Package

Name
tomcat9-servlet-4.0-api
Purl
pkg:rpm/almalinux/tomcat9-servlet-4.0-api

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:9.0.87-5.el10_0

AlmaLinux:10 / tomcat9-webapps

Package

Name
tomcat9-webapps
Purl
pkg:rpm/almalinux/tomcat9-webapps

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:9.0.87-5.el10_0