[ol7_optional_latest] tomcat-jsvc-7.0.76-9.el7.noarch

Name:	tomcat-jsvc
Version:	7.0.76
Release:	9.el7
Architecture:	noarch
Group:	System Environment/Daemons
Size:	647
License:	ASL 2.0
RPM:	tomcat-jsvc-7.0.76-9.el7.noarch.rpm
Source RPM:	tomcat-7.0.76-9.el7.src.rpm
Build Date:	Mon Jun 24 2019
Build Host:	jenkins-10-147-72-125-c378a97c-f6a9-49ef-a4ef-41c03e4851ae.appad1iad.osdevelopmeniad.oraclevcn.com
Vendor:	Oracle America
URL:	http://tomcat.apache.org/
Summary:	Apache jsvc wrapper for Apache Tomcat as separate service
Description:	Systemd service and wrapper scripts to start tomcat with jsvc, which allows tomcat to perform some privileged operations (e.g. bind to a port < 1024) and then switch identity to a non-privileged user.

Changelog (Show File list) (Show related packages)

Tue Feb 12 2019 Coty Sutherland <csutherl@redhat.com> 0:7.0.76-9

- Resolves: rhbz#1641873 CVE-2018-11784 tomcat: Open redirect in default servlet
- Resolves: rhbz#1552375 CVE-2018-1304 tomcat: Incorrect handling of empty string URL in security constraints can lead to unintended exposure of resources
- Resolves: rhbz#1552374 CVE-2018-1305 tomcat: Late application of security constraints can lead to resource exposure for unauthorised users
- Resolves: rhbz#1590182 CVE-2018-8014 tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins
- Resolves: rhbz#1608609 CVE-2018-8034 tomcat: host name verification missing in WebSocket client
- Resolves: rhbz#1588703 Backport of Negative maxCookieCount value causes exception for Tomcat
- Resolves: rhbz#1472950 shutdown_wait option is not working for Tomcat
- Resolves: rhbz#1455483 Add support for characters "<" and ">" to the possible whitelist values

Fri Oct 12 2018 Coty Sutherland <csutherl@redhat.com> 0:7.0.76-8

- Resolves: rhbz#1608607 CVE-2018-1336 tomcat: A bug in the UTF 8 decoder can lead to DoS

Tue Jul 24 2018 Jean-Frederic Clere <jclere@redhat.com> 0:7.0.76-7

- Resolves: rhbz#1602060 Deadlock occurs while sending to a closing session

Wed Nov 08 2017 Coty Sutherland <csutherl@redhat.com> 0:7.0.76-6
```
- Related: rhbz#1505762 Remove erroneous useradd
```

Tue Nov 07 2017 Coty Sutherland <csutherl@redhat.com> 0:7.0.76-5

- Resolves: rhbz#1485453 man page uid and gid mismatch for service accounts
- Resolves: rhbz#1505762 Problem to start tomcat with a user whose group has a name different to the user

Mon Nov 06 2017 Coty Sutherland <csutherl@redhat.com> 0:7.0.76-3

- Resolves: rhbz#1498343 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495655 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470597 CVE-2017-5647 Add follow up revision

Thu Jun 08 2017 Coty Sutherland <csutherl@redhat.com> 0:7.0.76-2

- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used

Wed Mar 29 2017 Coty Sutherland <csutherl@redhat.com> - 0:7.0.76-1
```
- Resolves: rhbz#1414895 Rebase tomcat to the current release
```
Thu Aug 25 2016 Coty Sutherland <csutherl@redhat.com> - 0:7.0.69-10
```
- Related: rhbz#1368122
```

Tue Aug 23 2016 Coty Sutherland <csutherl@redhat.com> - 0:7.0.69-9

- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122