MGASA-2025-0223
- Source
- https://advisories.mageia.org/MGASA-2025-0223.html
- Import Source
- https://advisories.mageia.org/MGASA-2025-0223.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/MGASA-2025-0223
- Related
- Published
- 2025-09-02T15:16:35Z
- Modified
- 2025-09-02T14:32:35Z
- Summary
- Updated tomcat packages fix vulnerabilities
- Details
-
APR/Native Connector crash leading to DoS. (CVE-2025-52434) DoS via integer overflow in multipart file upload. (CVE-2025-52520) DoS via excessive h2 streams at connection start. (CVE-2025-53506) H2 DoS - Made You Reset. (CVE-2025-48989)
- References
-
- https://advisories.mageia.org/MGASA-2025-0223.html
- https://bugs.mageia.org/show_bug.cgi?id=34465
- https://www.openwall.com/lists/oss-security/2025/07/10/11
- https://www.openwall.com/lists/oss-security/2025/07/10/12
- https://www.openwall.com/lists/oss-security/2025/07/10/13
- https://www.openwall.com/lists/oss-security/2025/08/13/2
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:9 / tomcat
Package
- Name
- tomcat
- Purl
- pkg:rpm/mageia/tomcat?arch=source&distro=mageia-9