diff --git a/pom.xml b/pom.xml
index 5bfe50a64fa..3df6fc20633 100644
--- a/pom.xml
+++ b/pom.xml
@@ -128,7 +128,7 @@
 
     <jaxb.version>2.2.7</jaxb.version>
 
-    <tomcat.version>7.0.109-TT.10</tomcat.version>
+    <tomcat.version>7.0.109-TT.11</tomcat.version>
 
     <cxf.version>2.6.17-TT.10</cxf.version>
     <!--2.6.4 requires wss4j 1.6.8-->
diff --git a/tomee/apache-tomee/src/main/resources/META-INF/release_notes/RELEASE-NOTES-EAP-1.7.x b/tomee/apache-tomee/src/main/resources/META-INF/release_notes/RELEASE-NOTES-EAP-1.7.x
index e3bbbc70ccc..56b47bc5ade 100644
--- a/tomee/apache-tomee/src/main/resources/META-INF/release_notes/RELEASE-NOTES-EAP-1.7.x
+++ b/tomee/apache-tomee/src/main/resources/META-INF/release_notes/RELEASE-NOTES-EAP-1.7.x
@@ -1,4 +1,7 @@
-= TomEE EAP 1.7.6-TT.41
+= TomEE EAP 1.7.6-TT.42
+
+=== Changes in TomEE EAP 1.7.6-TT.42
+* Update to Tomcat 7.0.109-TT.11 to mitigate CVE-2024-38286
 
 === Changes in TomEE EAP 1.7.6-TT.41
 * Update to Santuario xmlsec 1.5.9-TT.2 to mitigate CVE-2023-44483