diff --git a/.gitignore b/.gitignore
index 36661cc..816e937 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1 @@
-SOURCES/tomcat-9.0.62.redhat-00018-src.zip
+SOURCES/tomcat-9.0.87.redhat-00003-src.zip
diff --git a/.tomcat.metadata b/.tomcat.metadata
index d04ed8b..1e59de5 100644
--- a/.tomcat.metadata
+++ b/.tomcat.metadata
@@ -1 +1 @@
-5becf21ed1eb5c031c31d5f295ce499234e98f82 SOURCES/tomcat-9.0.62.redhat-00018-src.zip
+4e1552026d103c3310c1bd678ac8fe7bab597e4b SOURCES/tomcat-9.0.87.redhat-00003-src.zip
diff --git a/SOURCES/fix-malformed-dtd.patch b/SOURCES/fix-malformed-dtd.patch
deleted file mode 100644
index f5f7546..0000000
--- a/SOURCES/fix-malformed-dtd.patch
+++ /dev/null
@@ -1,8 +0,0 @@
-diff -up ./java/org/apache/tomcat/util/modeler/mbeans-descriptors.dtd.orig ./java/org/apache/tomcat/util/modeler/mbeans-descriptors.dtd
---- ./java/org/apache/tomcat/util/modeler/mbeans-descriptors.dtd.orig	2023-02-07 14:11:25.294179017 -0500
-+++ ./java/org/apache/tomcat/util/modeler/mbeans-descriptors.dtd	2023-02-07 14:11:28.629196705 -0500
-@@ -1,4 +1,3 @@
--<?xml version="1.0" encoding="UTF-8"?>
- <!--
-   Licensed to the Apache Software Foundation (ASF) under one or more
-   contributor license agreements.  See the NOTICE file distributed with
diff --git a/SOURCES/remove-bnd-annotation.patch b/SOURCES/remove-bnd-annotation.patch
index 48b34ed..cc40651 100644
--- a/SOURCES/remove-bnd-annotation.patch
+++ b/SOURCES/remove-bnd-annotation.patch
@@ -2,7 +2,7 @@ diff --git a/build.xml b/build.xml
 index 5a0be1b..2131211 100644
 --- a/build.xml
 +++ b/build.xml
-@@ -3062,7 +3062,7 @@ skip.installer property in build.properties" />
+@@ -3296,7 +3296,7 @@ asf.ldap.username=${release.asfusername}
  
    <target name="download-compile"
            description="Download components necessary to compile"
@@ -15,7 +15,7 @@ diff --git a/java/org/apache/el/ExpressionFactoryImpl.java b/java/org/apache/el/
 index a6faeb6..5afbda7 100644
 --- a/java/org/apache/el/ExpressionFactoryImpl.java
 +++ b/java/org/apache/el/ExpressionFactoryImpl.java
-@@ -33,7 +33,7 @@ import org.apache.el.util.MessageFactory;
+@@ -34,7 +34,7 @@ import org.apache.el.util.MessageFactory;
   *
   * @author Jacob Hookom [jacob@hookom.net]
   */
@@ -23,7 +23,7 @@ index a6faeb6..5afbda7 100644
 +//@aQute.bnd.annotation.spi.ServiceProvider(value=ExpressionFactory.class)
  public class ExpressionFactoryImpl extends ExpressionFactory {
  
-     @Override
+     static {
 diff --git a/java/org/apache/juli/logging/LogFactory.java b/java/org/apache/juli/logging/LogFactory.java
 index 56c805a..bd6eb0d 100644
 --- a/java/org/apache/juli/logging/LogFactory.java
@@ -41,8 +41,8 @@ index 56c805a..bd6eb0d 100644
   * @author Costin Manolache
   * @author Richard A. Sitze
   */
--@ServiceConsumer(value=org.apache.juli.logging.Log.class)
-+//@ServiceConsumer(value=org.apache.juli.logging.Log.class)
+-@ServiceConsumer(value=Log.class)
++//@ServiceConsumer(value=Log.class)
  public class LogFactory {
  
      private static final LogFactory singleton = new LogFactory();
@@ -54,8 +54,8 @@ index 3cb8873..7bc50f6 100644
  import javax.websocket.ContainerProvider;
  import javax.websocket.WebSocketContainer;
  
--@aQute.bnd.annotation.spi.ServiceProvider(value=ContainerProvider.class)
-+//@aQute.bnd.annotation.spi.ServiceProvider(value=ContainerProvider.class)
+-@aQute.bnd.annotation.spi.ServiceProvider(value = ContainerProvider.class)
++//@aQute.bnd.annotation.spi.ServiceProvider(value = ContainerProvider.class)
  public class WsContainerProvider extends ContainerProvider {
  
      @Override
@@ -67,8 +67,8 @@ index 5c385ed..2e4e82e 100644
  import javax.websocket.server.HandshakeRequest;
  import javax.websocket.server.ServerEndpointConfig;
  
--@aQute.bnd.annotation.spi.ServiceProvider(value=ServerEndpointConfig.Configurator.class)
-+//@aQute.bnd.annotation.spi.ServiceProvider(value=ServerEndpointConfig.Configurator.class)
- public class DefaultServerEndpointConfigurator
-         extends ServerEndpointConfig.Configurator {
+-@aQute.bnd.annotation.spi.ServiceProvider(value = ServerEndpointConfig.Configurator.class)
++//@aQute.bnd.annotation.spi.ServiceProvider(value = ServerEndpointConfig.Configurator.class)
+ public class DefaultServerEndpointConfigurator extends ServerEndpointConfig.Configurator {
  
+     @Override
diff --git a/SOURCES/tomcat-build.patch b/SOURCES/tomcat-build.patch
index 49c63ff..608a785 100644
--- a/SOURCES/tomcat-build.patch
+++ b/SOURCES/tomcat-build.patch
@@ -1,12 +1,11 @@
-diff -up ./res/bnd/build-defaults.bnd.orig ./res/bnd/build-defaults.bnd
---- ./res/bnd/build-defaults.bnd.orig	2020-07-13 13:47:01.229077747 -0400
-+++ ./res/bnd/build-defaults.bnd	2020-07-13 13:47:12.923095618 -0400
+--- ./res/bnd/build-defaults.bnd.orig	2024-05-01 11:07:38.804582327 +0300
++++ ./res/bnd/build-defaults.bnd	2024-05-01 11:17:08.857295279 +0300
 @@ -13,7 +13,7 @@
  # See the License for the specific language governing permissions and
  # limitations under the License.
-
+ 
 -Bundle-Version: ${version_cleanup;${version}}
 +Bundle-Version: ${version}
-
+ Bundle-License: https://www.apache.org/licenses/LICENSE-2.0.txt
+ 
  Specification-Title: Apache Tomcat
- Specification-Version: ${version.major.minor}
diff --git a/SPECS/tomcat.spec b/SPECS/tomcat.spec
index 07c436c..68e9356 100644
--- a/SPECS/tomcat.spec
+++ b/SPECS/tomcat.spec
@@ -31,8 +31,8 @@
 %global jspspec 2.3
 %global major_version 9
 %global minor_version 0
-%global micro_version 62
-%global packdname  %{name}-%{major_version}.%{minor_version}.%{micro_version}.redhat-00018-src
+%global micro_version 87
+%global packdname  %{name}-%{major_version}.%{minor_version}.%{micro_version}.redhat-00003-src
 %global servletspec 4.0
 %global elspec 3.0
 %global tcuid 53
@@ -56,7 +56,7 @@
 Name:          tomcat
 Epoch:         1
 Version:       %{major_version}.%{minor_version}.%{micro_version}
-Release:       30%{?dist}
+Release:       1%{?dist}.1.alma.1
 Summary:       Apache Servlet/JSP Engine, RI for Servlet %{servletspec}/JSP %{jspspec} API
 
 License:       ASL 2.0
@@ -83,7 +83,6 @@ Patch4:        rhbz-1857043.patch
 # remove bnd dependency which version is too low on rhel8
 Patch6:        remove-bnd-annotation.patch
 Patch7:        JmxRemoteLifecycleListener.patch
-Patch8:        fix-malformed-dtd.patch
 
 BuildArch:     noarch
 
@@ -198,7 +197,6 @@ find . -type f \( -name "*.bat" -o -name "*.class" -o -name Thumbs.db -o -name "
 %patch -P4 -p0
 %patch -P6 -p1
 %patch -P7 -p1
-%patch -P8 -p1
 
 # Remove webservices naming resources as it's generally unused
 %{__rm} -rf java/org/apache/naming/factory/webservices
@@ -558,6 +556,9 @@ fi
 
 
 %changelog
+* Thu Jun 06 2024 Eduard Abdullin <eabdullin@redhat.com> - 1:9.0.87-1.el8_10.1.alma.1
+- Update to 9.0.87
+
 * Fri Jan 19 2024 Hui Wang <huwang@redhat.com> - 1:9.0.62-30
 - Resolves: RHEL-6971