This Red Hat security advisory addresses two vulnerabilities in Apache Tomcat: CVE-2024-34750, which concerns improper handling of exceptional conditions, and CVE-2024-38286, a denial of service vulnerability. The advisory covers Red Hat Enterprise Linux 9.2 Extended Update Support and related variants across multiple architectures (x86_64, s390x, ppc64le, aarch64). The fixed Tomcat package version is 9.0.87-1.el9_2.2. The advisory does not provide CVSS scores but classifies the impact as Important. The update resolves the issues by correcting the exceptional condition handling and mitigating the denial of service vulnerability.

The vulnerabilities could lead to improper handling of exceptional conditions and denial of service in Apache Tomcat running on affected Red Hat Enterprise Linux 9.2 systems. The advisory classifies the security impact as Important, indicating a significant risk to affected systems if unpatched. No known exploits in the wild are reported at this time.

Red Hat has released an official security update for Apache Tomcat in Red Hat Enterprise Linux 9.2 Extended Update Support and related variants. Users should apply the Tomcat update to version 9.0.87-1.el9_2.2 or later as provided by Red Hat to remediate these vulnerabilities. For detailed update instructions, refer to Red Hat's guidance at https://access.redhat.com/articles/11258. No additional mitigation steps are indicated by the vendor.