diff --git a/9.0.86.tar.gz b/9.0.96.tar.gz
similarity index 45%
rename from 9.0.86.tar.gz
rename to 9.0.96.tar.gz
index 664b5abfe45604f91f51d6b77b58038d675e8179..fbe5ba2168c1383f68c5d6fa1b8b9492da630041 100644
Binary files a/9.0.86.tar.gz and b/9.0.96.tar.gz differ
diff --git a/rhbz-1857043.patch b/rhbz-1857043.patch
index dd74c3bf5c0cc4eacebee98b816457bf0850c0fa..65680f03c1bf10f82fd018e66998b12d35613f2c 100644
--- a/rhbz-1857043.patch
+++ b/rhbz-1857043.patch
@@ -58,7 +58,7 @@ diff -up ./build.xml.orig ./build.xml
  
      <!-- Bootstrap JAR File -->
      <jarIt jarfile="${bootstrap.jar}"
-@@ -1075,61 +1075,61 @@
+@@ -1167,68 +1167,68 @@
      <jarIt jarfile="${tomcat-util.jar}"
        filesDir="${tomcat.classes}"
        filesId="files.tomcat-util"
@@ -90,6 +90,14 @@ diff -up ./build.xml.orig ./build.xml
        filesDir="${tomcat.classes}"
        filesId="files.tomcat-coyote"
 -      addOSGi="true" />
++      addOSGi="false" />
+ 
+     <!-- OpenSSL FFM - Coyote -->
+     <jarIt jarfile="${tomcat-coyote-ffm.jar}"
+       filesDir="${tomcat.classes}"
+       filesId="files.tomcat-coyote-ffm"
+       manifest="${tomcat.manifests}/tomcat-coyote-ffm.jar.manifest"
+-      addOSGi="true" />
 +      addOSGi="false" />
  
      <!-- WebSocket implementation JAR File -->
diff --git a/tomcat.spec b/tomcat.spec
index cf048c326aafcb0202ddf17eeb7e1562cd3f2532..29bbcd5cda312e95c1fb47cc32c00970e6152ed2 100644
--- a/tomcat.spec
+++ b/tomcat.spec
@@ -3,7 +3,7 @@
 %global jspspec 2.3
 %global major_version 9
 %global minor_version 0
-%global micro_version 86
+%global micro_version 96
 %global packdname tomcat-%{version}
 %global servletspec 4.0
 %global elspec 3.0
@@ -550,6 +550,14 @@ fi
 %doc {NOTICE,RELEASE*}
 
 %changelog
+* Wed Dec 18 2024 yangxinyu <yangxinyu@nfschina.com> - 1:9.0.96-1
+- update to 9.0.96
+- fix CVE-2024-52316
+
+* Fri Nov 08 2024 Xulin Gao <gaoxulin@inspur.com> - 1:9.0.90-1
+- update to 9.0.90
+- fix CVE-2024-35740
+
 * Sun May 05 2024 Kaiqiang Wang <wangkaiqiang@inspur.com> - 1:9.0.86-1
 - update to 9.0.86
 - fix CVE-2024-24549