diff --git a/9.0.84.tar.gz b/9.0.86.tar.gz
similarity index 46%
rename from 9.0.84.tar.gz
rename to 9.0.86.tar.gz
index b7cc054e4e28111ca614c83df913cb06e480a08a..664b5abfe45604f91f51d6b77b58038d675e8179 100644
Binary files a/9.0.84.tar.gz and b/9.0.86.tar.gz differ
diff --git a/tomcat.spec b/tomcat.spec
index e2aa164cc9861a41e9176786bc2f0a62dc0b8356..cf048c326aafcb0202ddf17eeb7e1562cd3f2532 100644
--- a/tomcat.spec
+++ b/tomcat.spec
@@ -3,7 +3,7 @@
 %global jspspec 2.3
 %global major_version 9
 %global minor_version 0
-%global micro_version 84
+%global micro_version 86
 %global packdname tomcat-%{version}
 %global servletspec 4.0
 %global elspec 3.0
@@ -550,6 +550,10 @@ fi
 %doc {NOTICE,RELEASE*}
 
 %changelog
+* Sun May 05 2024 Kaiqiang Wang <wangkaiqiang@inspur.com> - 1:9.0.86-1
+- update to 9.0.86
+- fix CVE-2024-24549
+
 * Wed Dec 13 2023 Funda Wang <fundawang@yeah.net> - 1:9.0.84-1
 - New version 9.0.84