diff --git a/pom.xml b/pom.xml
index effc1c893a8..999a7f5d127 100644
--- a/pom.xml
+++ b/pom.xml
@@ -132,7 +132,7 @@
     <version.shrinkwrap.descriptor>2.0.0</version.shrinkwrap.descriptor>
     <version.shrinkwrap.shrinkwrap>1.2.6</version.shrinkwrap.shrinkwrap>
 
-    <tomcat.version>8.5.100-TT.3</tomcat.version>
+    <tomcat.version>8.5.100-TT.4</tomcat.version>
 
     <cxf.version>3.1.19-TT.10</cxf.version>
     <version.shrinkwrap.shrinkwrap>1.2.6</version.shrinkwrap.shrinkwrap>
diff --git a/tomee/apache-tomee/src/main/resources/META-INF/release_notes/RELEASE-NOTES-EAP-7.0.x b/tomee/apache-tomee/src/main/resources/META-INF/release_notes/RELEASE-NOTES-EAP-7.0.x
index d1ec2012a49..27f8164c4e8 100644
--- a/tomee/apache-tomee/src/main/resources/META-INF/release_notes/RELEASE-NOTES-EAP-7.0.x
+++ b/tomee/apache-tomee/src/main/resources/META-INF/release_notes/RELEASE-NOTES-EAP-7.0.x
@@ -1,7 +1,8 @@
 = TomEE EAP 7.1.5-TT.28
 
 === Changes in TomEE EAP 7.1.5-TT.28
-Update Geronimo Javamail to mitigate CVE-2024-21742
+* Update Geronimo Javamail to mitigate CVE-2024-21742
+* Update to Tomcat 8.5.100-TT.4 to mitigate CVE-2024-52316
 
 
 === Changes in TomEE EAP 7.1.5-TT.27