Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 583
Alerts This Week
Warning Icon 1 583

Mageia 9: MGASA-2025-0191 critical: tomcat DoS and resource bypass

mageia
Calendar Grey June 25, 2025
Scroller Mageia
Mageia has issued critical security updates for tomcat to fix vulnerabilities that could result in Denial of Service and unauthorized system access. Secure your systems!
FileUpload large number of parts with headers DoS

Summary

FileUpload large number of parts with headers DoS. (CVE-2025-48988) Security constraint bypass for pre/post-resources. (CVE-2025-49125)

References

- https://bugs.mageia.org/show_bug.cgi?id=34376

- https://www.openwall.com/lists/oss-security/2025/06/16/1

- https://www.openwall.com/lists/oss-security/2025/06/16/2

- https://www.cve.org/CVERecord?id=CVE-2025-48988

- https://www.cve.org/CVERecord?id=CVE-2025-49125

Topics%20covered

Topics Covered

security advisory denial of service critical application resource access mageia

Resolution

SRPMS

- 9/core/tomcat-9.0.106-1.mga9

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 25 Jun 2025
URL: https://advisories.mageia.org/MGASA-2025-0191.html
Type: security
CVE: CVE-2025-48988, CVE-2025-49125

Topics%20covered

Topics Covered

security advisory denial of service critical application resource access mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.