[ol7_latest] tomcat-el-2.2-api-7.0.76-9.el7_6.noarch

Expression Language 2.2.

Changelog (Show File list) (Show related packages)

• Tue Feb 12 2019 Coty Sutherland <csutherl@redhat.com> 0:7.0.76-9

  - Resolves: rhbz#1641873 CVE-2018-11784 tomcat: Open redirect in default servlet

• Fri Oct 12 2018 Coty Sutherland <csutherl@redhat.com> 0:7.0.76-8

  - Resolves: rhbz#1608607 CVE-2018-1336 tomcat: A bug in the UTF 8 decoder can lead to DoS

• Tue Jul 24 2018 Jean-Frederic Clere <jclere@redhat.com> 0:7.0.76-7

  - Resolves: rhbz#1602060 Deadlock occurs while sending to a closing session

• Wed Nov 08 2017 Coty Sutherland <csutherl@redhat.com> 0:7.0.76-6

  - Related: rhbz#1505762 Remove erroneous useradd

• Tue Nov 07 2017 Coty Sutherland <csutherl@redhat.com> 0:7.0.76-5

  - Resolves: rhbz#1485453 man page uid and gid mismatch for service accounts
  - Resolves: rhbz#1505762 Problem to start tomcat with a user whose group has a name different to the user

• Mon Nov 06 2017 Coty Sutherland <csutherl@redhat.com> 0:7.0.76-3

  - Resolves: rhbz#1498343 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
  - Resolves: rhbz#1495655 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
  - Resolves: rhbz#1470597 CVE-2017-5647 Add follow up revision

• Thu Jun 08 2017 Coty Sutherland <csutherl@redhat.com> 0:7.0.76-2

  - Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
  - Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used

• Wed Mar 29 2017 Coty Sutherland <csutherl@redhat.com> - 0:7.0.76-1

  - Resolves: rhbz#1414895 Rebase tomcat to the current release

• Thu Aug 25 2016 Coty Sutherland <csutherl@redhat.com> - 0:7.0.69-10

  - Related: rhbz#1368122

• Tue Aug 23 2016 Coty Sutherland <csutherl@redhat.com> - 0:7.0.69-9

  - Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
  - Resolves: rhbz#1368122