diff --git a/9.0.106.tar.gz b/9.0.107.tar.gz
similarity index 49%
rename from 9.0.106.tar.gz
rename to 9.0.107.tar.gz
index 995a348541fc518ab61839c8f67cb1b44d123fb0..21a2c0e5f2e1dc401e29de589a8c262629f9b7af 100644
Binary files a/9.0.106.tar.gz and b/9.0.107.tar.gz differ
diff --git a/tomcat.spec b/tomcat.spec
index d697cf5a6df02d2c22f2e3958f2618abe11b6bad..c8e1d05a4c512199fd0e075bfde486f59abf53ec 100644
--- a/tomcat.spec
+++ b/tomcat.spec
@@ -3,7 +3,7 @@
 %global jspspec 2.3
 %global major_version 9
 %global minor_version 0
-%global micro_version 106
+%global micro_version 107
 %global packdname tomcat-%{version}
 %global servletspec 4.0
 %global elspec 3.0
@@ -520,6 +520,9 @@ fi
 %doc {NOTICE,RELEASE*}
 
 %changelog
+* Fri Jul 18 2025 zjl02254423 <zjl02254423@libaba-inc.com> -1:9.0.107-1
+- update to 9.0.107 to fix CVE-2025-52434,CVE-2025-52520,CVE-2025-53506
+
 * Wed Jun 18 2025 zjl02254423 <zjl02254423@libaba-inc.com> -1:9.0.106-1
 - update to 9.0.106 to fix CVE-2025-49125/CVE-2025-48988