SOLVE RHEL-150714: add patch and edit spec files

rhel-168081.patch

@@ -31,24 +31,4 @@ diff -up ./test/org/apache/catalina/realm/TestRealmBase.java ./test/org/apache/c
 
          SecurityConstraint[] constraintsDelete =
                  mapRealm.findSecurityConstraints(request, context);
-diff -up ./webapps/docs/changelog.xml.orig ./webapps/docs/changelog.xml
---- ./webapps/docs/changelog.xml.orig	2026-04-14 15:48:53.192243701 -0400
-+++ ./webapps/docs/changelog.xml	2026-04-14 15:49:48.893470762 -0400
-@@ -104,6 +104,17 @@
-   They eventually become mixed with the numbered issues (i.e., numbered
-   issues do not "pop up" wrt. others).
- -->
-+<section name="Tomcat 9.0.110-redhat (csutherl)" rtext="">
-+  <subsection name="Coyote">
-+    <changelog>
-+      <fix>
-+        <bug>69848</bug>: Fix copy/paste error that meant DELETE
-+        requests received via the AJP connector were processed as OPTIONS
-+        requests. (markt)
-+      </fix>
-+    </changelog>
-+  </subsection>
-+</section>
- <section name="Tomcat 9.0.110 (remm)" rtext="">
-   <subsection name="Catalina">
-     <changelog>
+

tomcat.spec

@@ -56,7 +56,7 @@
 Name:          tomcat
 Epoch:         1
 Version:       %{major_version}.%{minor_version}.%{micro_version}
-Release:       3%{?dist}
+Release:       4%{?dist}
 Summary:       Apache Servlet/JSP Engine, RI for Servlet %{servletspec}/JSP %{jspspec} API
 
 License:       ASL 2.0
@@ -82,6 +82,7 @@ Patch3:        %{name}-%{major_version}.%{minor_version}-catalina-policy.patch
 Patch4:        rhbz-1857043.patch
 Patch6:        %{name}-%{major_version}.%{minor_version}-bnd-annotation.patch
 Patch7:        rhel-168081.patch
+Patch8:        rhel-150714.patch
 
 BuildArch:     noarch
 
@@ -199,6 +200,7 @@ find . -type f \( -name "*.bat" -o -name "*.class" -o -name Thumbs.db -o -name "
 %patch -P4 -p0
 %patch -P6 -p0
 %patch -P7 -p1
+%patch -P8 -p1
 
 # Remove webservices naming resources as it's generally unused
 %{__rm} -rf java/org/apache/naming/factory/webservices
@@ -563,8 +565,10 @@ fi
 %defattr(0644,tomcat,tomcat,0755)
 %{appdir}/ROOT
 
-
 %changelog
+* Tue Apr 20 2026 Pietro Meloni <pmeloni@redhat.com> - 1:9.0.110-4
+- Resolves: RHEL-150714 Certificate revocation bypass due to improper OCSP response validation
+
 * Tue Apr 14 2026 Coty Sutherland <csutherl@redhat.com> - 1:9.0.110-3
 - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848)