diff --git a/9.0.86.tar.gz b/9.0.90.tar.gz
similarity index 46%
rename from 9.0.86.tar.gz
rename to 9.0.90.tar.gz
index 664b5abfe45604f91f51d6b77b58038d675e8179..d82653586554bb7ab8f4b7c9f8548511703bbc78 100644
Binary files a/9.0.86.tar.gz and b/9.0.90.tar.gz differ
diff --git a/tomcat.spec b/tomcat.spec
index cf048c326aafcb0202ddf17eeb7e1562cd3f2532..b2d54663fe783de36b4332758608c2a64913002f 100644
--- a/tomcat.spec
+++ b/tomcat.spec
@@ -3,7 +3,7 @@
 %global jspspec 2.3
 %global major_version 9
 %global minor_version 0
-%global micro_version 86
+%global micro_version 90
 %global packdname tomcat-%{version}
 %global servletspec 4.0
 %global elspec 3.0
@@ -550,6 +550,10 @@ fi
 %doc {NOTICE,RELEASE*}
 
 %changelog
+* Wed Nov 20 2024 Xulin Gao <gaoxulin@insupr.com> - 1:9.0.90-1
+- update to 9.0.90
+- fix CVE-2024-35740
+
 * Sun May 05 2024 Kaiqiang Wang <wangkaiqiang@inspur.com> - 1:9.0.86-1
 - update to 9.0.86
 - fix CVE-2024-24549