This advisory covers three security vulnerabilities in Apache Tomcat within Red Hat Enterprise Linux 10.0 EUS. CVE-2025-31651 involves bypassing rules in the Rewrite Valve component. CVE-2025-61795 is a denial of service vulnerability in the tomcat-catalina component. CVE-2025-55752 is a directory traversal vulnerability via rewrite functionality that may allow remote code execution. Red Hat has released updated tomcat packages (version 10.1.36-1.el10_0.3) to fix these issues. The advisory references Red Hat Bugzilla entries and provides package details for multiple architectures. No CVSS scores are provided in the advisory, but the overall impact is rated as Important by Red Hat Product Security.

Successful exploitation of these vulnerabilities could allow an attacker to bypass rewrite rules, cause denial of service conditions, or perform directory traversal potentially leading to remote code execution on affected systems running Apache Tomcat. This could compromise the availability and security of applications hosted on the affected Tomcat instances.

Red Hat has released updated tomcat packages (version 10.1.36-1.el10_0.3) for Red Hat Enterprise Linux 10.0 Extended Update Support to address these vulnerabilities. Users should apply these official updates promptly following Red Hat's guidance at https://access.redhat.com/articles/11258. No additional mitigation steps are indicated beyond applying the vendor-provided patches.