diff --git a/bitnami/tomcat/9.0/debian-11/Dockerfile b/bitnami/tomcat/9.0/debian-11/Dockerfile
index 6952ad7cad92..c0f469d6f6a5 100644
--- a/bitnami/tomcat/9.0/debian-11/Dockerfile
+++ b/bitnami/tomcat/9.0/debian-11/Dockerfile
@@ -8,10 +8,10 @@ ARG TARGETARCH
 
 LABEL com.vmware.cp.artifact.flavor="sha256:1e1b4657a77f0d47e9220f0c37b9bf7802581b93214fff7d1bd2364c8bf22e8e" \
       org.opencontainers.image.base.name="docker.io/bitnami/minideb:bullseye" \
-      org.opencontainers.image.created="2024-01-10T19:03:22Z" \
+      org.opencontainers.image.created="2024-01-22T11:11:00Z" \
       org.opencontainers.image.description="Application packaged by VMware, Inc" \
       org.opencontainers.image.licenses="Apache-2.0" \
-      org.opencontainers.image.ref.name="9.0.85-debian-11-r0" \
+      org.opencontainers.image.ref.name="9.0.85-debian-11-r1" \
       org.opencontainers.image.title="tomcat" \
       org.opencontainers.image.vendor="VMware, Inc." \
       org.opencontainers.image.version="9.0.85"
@@ -27,9 +27,9 @@ SHELL ["/bin/bash", "-o", "errexit", "-o", "nounset", "-o", "pipefail", "-c"]
 RUN install_packages ca-certificates curl libssl1.1 procps xmlstarlet zlib1g
 RUN mkdir -p /tmp/bitnami/pkg/cache/ ; cd /tmp/bitnami/pkg/cache/ ; \
     COMPONENTS=( \
-      "java-17.0.9-11-6-linux-${OS_ARCH}-debian-11" \
-      "tomcat-9.0.85-0-linux-${OS_ARCH}-debian-11" \
       "render-template-1.0.6-5-linux-${OS_ARCH}-debian-11" \
+      "java-17.0.10-13-0-linux-${OS_ARCH}-debian-11" \
+      "tomcat-9.0.85-0-linux-${OS_ARCH}-debian-11" \
     ) ; \
     for COMPONENT in "${COMPONENTS[@]}"; do \
       if [ ! -f "${COMPONENT}.tar.gz" ]; then \
@@ -44,6 +44,7 @@ RUN apt-get autoremove --purge -y curl && \
     apt-get update && apt-get upgrade -y && \
     apt-get clean && rm -rf /var/lib/apt/lists /var/cache/apt/archives
 RUN chmod g+rwX /opt/bitnami
+RUN find / -perm /6000 -type f -exec chmod a-s {} \; || true
 
 COPY rootfs /
 RUN /opt/bitnami/scripts/java/postunpack.sh
@@ -51,7 +52,7 @@ RUN /opt/bitnami/scripts/tomcat/postunpack.sh
 ENV APP_VERSION="9.0.85" \
     BITNAMI_APP_NAME="tomcat" \
     JAVA_HOME="/opt/bitnami/java" \
-    PATH="/opt/bitnami/java/bin:/opt/bitnami/tomcat/bin:/opt/bitnami/common/bin:$PATH"
+    PATH="/opt/bitnami/common/bin:/opt/bitnami/java/bin:/opt/bitnami/tomcat/bin:$PATH"
 
 EXPOSE 8009 8080
 
diff --git a/bitnami/tomcat/9.0/debian-11/prebuildfs/opt/bitnami/.bitnami_components.json b/bitnami/tomcat/9.0/debian-11/prebuildfs/opt/bitnami/.bitnami_components.json
index abed16863c4b..0972de4075ec 100644
--- a/bitnami/tomcat/9.0/debian-11/prebuildfs/opt/bitnami/.bitnami_components.json
+++ b/bitnami/tomcat/9.0/debian-11/prebuildfs/opt/bitnami/.bitnami_components.json
@@ -3,7 +3,7 @@
         "arch": "amd64",
         "distro": "debian-11",
         "type": "NAMI",
-        "version": "17.0.9-11-6"
+        "version": "17.0.10-13-0"
     },
     "render-template": {
         "arch": "amd64",