2025-09-26
ALT-BU-2025-12400-1
Branch sisyphus_riscv64 update bulletin.
Package tomcat updated to version 9.0.109-alt1 for branch sisyphus_riscv64.
Closed vulnerabilities
Published: 2025-05-29
BDU:2025-09899
Уязвимость обработчика HTTP2 сервера приложений Apache Tomcat, позволяющая нарушителю вызвать отказ в обслуживании
Severity: HIGH (7.5)
Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Severity: HIGH (7.8)
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
References:
Published: 2025-08-13
Modified: 2025-08-18
Modified: 2025-08-18
CVE-2025-48989
Improper Resource Shutdown or Release vulnerability in Apache Tomcat made Tomcat vulnerable to the made you reset attack. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.9, from 10.1.0-M1 through 10.1.43 and from 9.0.0.M1 through 9.0.107. Older, EOL versions may also be affected. Users are recommended to upgrade to one of versions 11.0.10, 10.1.44 or 9.0.108 which fix the issue.
Severity: HIGH (7.5)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References:
Package make-initrd updated to version 2.55.1-alt0.port.4 for branch sisyphus_riscv64.
Closed bugs
cpio: command not found