diff --git a/9.0.105.tar.gz b/9.0.106.tar.gz
similarity index 49%
rename from 9.0.105.tar.gz
rename to 9.0.106.tar.gz
index e13569355c5e121343c1c4e994851bf0add15b48..995a348541fc518ab61839c8f67cb1b44d123fb0 100644
Binary files a/9.0.105.tar.gz and b/9.0.106.tar.gz differ
diff --git a/tomcat.spec b/tomcat.spec
index 61f5250f8cdeb2ba682f8f481f35ade5ca7dd1e1..d697cf5a6df02d2c22f2e3958f2618abe11b6bad 100644
--- a/tomcat.spec
+++ b/tomcat.spec
@@ -3,7 +3,7 @@
 %global jspspec 2.3
 %global major_version 9
 %global minor_version 0
-%global micro_version 105
+%global micro_version 106
 %global packdname tomcat-%{version}
 %global servletspec 4.0
 %global elspec 3.0
@@ -520,6 +520,9 @@ fi
 %doc {NOTICE,RELEASE*}
 
 %changelog
+* Wed Jun 18 2025 zjl02254423 <zjl02254423@libaba-inc.com> -1:9.0.106-1
+- update to 9.0.106 to fix CVE-2025-49125/CVE-2025-48988
+
 * Tue Jun 10 2025 wh02252983 <wh02252983@alibaba-inc.com> - 1:9.0.105-1
 - update to 9.0.105
 - Fix CVE-2025-46701