rpms/tomcat
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Forgot to add changelog entires for the CVEs

Browse Source
This commit is contained in:
Coty Sutherland 2018-03-16 11:27:50 -04:00
parent b14bf8b1a5
commit 70272203ee
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
tomcat.spec
View File

@ -703,6 +703,8 @@ fi
%changelog
* Thu Mar 15 2018 Coty Sutherland <csutherl@redhat.com> - 1:8.5.29-1
- Update to 8.5.29
- Resolves: rhbz#1548290 CVE-2018-1304 tomcat: Incorrect handling of empty string URL in security constraints can lead to unitended exposure of resources
- Resolves: rhbz#1548284 CVE-2018-1305 tomcat: Late application of security constraints can lead to resource exposure for unauthorised users
* Fri Feb 09 2018 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 1:8.0.49-2
- Escape macros in %%changelog