diff --git a/2021/24xxx/CVE-2021-24122.json b/2021/24xxx/CVE-2021-24122.json
index b602716826c..05bdcc3e0f3 100644
--- a/2021/24xxx/CVE-2021-24122.json
+++ b/2021/24xxx/CVE-2021-24122.json
@@ -129,6 +129,11 @@
                 "refsource": "CONFIRM",
                 "name": "https://security.netapp.com/advisory/ntap-20210212-0008/",
                 "url": "https://security.netapp.com/advisory/ntap-20210212-0008/"
+            },
+            {
+                "refsource": "MLIST",
+                "name": "[debian-lts-announce] 20210316 [SECURITY] [DLA 2596-1] tomcat8 security update",
+                "url": "https://lists.debian.org/debian-lts-announce/2021/03/msg00018.html"
             }
         ]
     },
diff --git a/2021/25xxx/CVE-2021-25122.json b/2021/25xxx/CVE-2021-25122.json
index 423d99cd6d7..f7c26a9658e 100644
--- a/2021/25xxx/CVE-2021-25122.json
+++ b/2021/25xxx/CVE-2021-25122.json
@@ -113,6 +113,11 @@
                 "refsource": "MLIST",
                 "name": "[tomcat-users] 20210305 Re: [SECURITY] CVE-2021-25122 Apache Tomcat h2c request mix-up",
                 "url": "https://lists.apache.org/thread.html/rd0463f9a5cbc02a485404c4b990f0da452e5ac5c237808edba11c947@%3Cusers.tomcat.apache.org%3E"
+            },
+            {
+                "refsource": "MLIST",
+                "name": "[debian-lts-announce] 20210316 [SECURITY] [DLA 2596-1] tomcat8 security update",
+                "url": "https://lists.debian.org/debian-lts-announce/2021/03/msg00018.html"
             }
         ]
     },
diff --git a/2021/25xxx/CVE-2021-25329.json b/2021/25xxx/CVE-2021-25329.json
index da14359c7e6..62dfd8fb58f 100644
--- a/2021/25xxx/CVE-2021-25329.json
+++ b/2021/25xxx/CVE-2021-25329.json
@@ -114,6 +114,11 @@
                 "refsource": "MLIST",
                 "name": "[oss-security] 20210301 CVE-2021-25329: Apache Tomcat Incomplete fix for CVE-2020-9484",
                 "url": "http://www.openwall.com/lists/oss-security/2021/03/01/2"
+            },
+            {
+                "refsource": "MLIST",
+                "name": "[debian-lts-announce] 20210316 [SECURITY] [DLA 2596-1] tomcat8 security update",
+                "url": "https://lists.debian.org/debian-lts-announce/2021/03/msg00018.html"
             }
         ]
     },