No description
Find a file
pmeloni 3da56ba493 Resolves: RHEL-192813 tomcat: HTTP/2 request headers not validated (CVE-2026-41293)
Resolves: RHEL-192651 tomcat: Improper Input Validation vulnerability due to incomplete fix (CVE-2026-32990)
Resolves: RHEL-219557 tomcat: Security constraint bypass via improper URL encoding in rewrite valve (CVE-2026-59083)
Resolves: RHEL-219575 tomcat: Insufficient documentation for EncryptInterceptor may lead to insecure configurations (CVE-2026-59084)
Resolves: RHEL-238196 tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication (CVE-2026-42498)
Resolves: RHEL-238216 tomcat: Improper Handling of Case Sensitivity in LockOutRealm (CVE-2026-43513)
Resolves: RHEL-238254 tomcat: Improper Authorization allows security bypass (CVE-2026-43515)
Resolves: RHEL-238289 tomcat: Authentication bypass via digest authentication (CVE-2026-43512)
2026-09-04 16:10:29 +02:00
.fmf Add gating 2025-01-31 13:58:13 +01:00
plans Add gating 2025-01-31 13:58:13 +01:00
.gitignore SOLVES RHEL-150720 tomcat9: Apache Tomcat: Certificate revocation bypass due to improper OCSP response validation 2026-04-22 15:43:07 +02:00
build-with-java-25.patch Resolves: RHEL-148687 Update to Apache Tomcat 9.0.110 for PQC support, and switched to compiling with Java 25 2026-02-18 07:33:35 -05:00
ci.fmf Add gating 2025-01-31 13:58:13 +01:00
gating.yaml Add gating 2025-01-31 13:58:13 +01:00
java-9-start-up-parameters.conf Initial commit on c10s 2025-01-29 15:04:40 +01:00
rhbz-1857043.patch Resolves: RHEL-148687 Update to Apache Tomcat 9.0.110 for PQC support, and switched to compiling with Java 25 2026-02-18 07:33:35 -05:00
sources Resolves: RHEL-192813 tomcat: HTTP/2 request headers not validated (CVE-2026-41293) 2026-09-04 16:10:29 +02:00
tomcat-9.0-bnd-annotation.patch Initial commit on c10s 2025-01-29 15:04:40 +01:00
tomcat-9.0-bootstrap-MANIFEST.MF.patch Initial commit on c10s 2025-01-29 15:04:40 +01:00
tomcat-9.0-catalina-policy.patch Initial commit on c10s 2025-01-29 15:04:40 +01:00
tomcat-9.0-digest.script Initial commit on c10s 2025-01-29 15:04:40 +01:00
tomcat-9.0-tomcat-users-webapp.patch Initial commit on c10s 2025-01-29 15:04:40 +01:00
tomcat-9.0-tool-wrapper.script Initial commit on c10s 2025-01-29 15:04:40 +01:00
tomcat-9.0.conf Initial commit on c10s 2025-01-29 15:04:40 +01:00
tomcat-9.0.logrotate Initial commit on c10s 2025-01-29 15:04:40 +01:00
tomcat-9.0.service Initial commit on c10s 2025-01-29 15:04:40 +01:00
tomcat-9.0.sysconfig Initial commit on c10s 2025-01-29 15:04:40 +01:00
tomcat-9.0.wrapper Initial commit on c10s 2025-01-29 15:04:40 +01:00
tomcat-functions Initial commit on c10s 2025-01-29 15:04:40 +01:00
tomcat-named.service Initial commit on c10s 2025-01-29 15:04:40 +01:00
tomcat-preamble Initial commit on c10s 2025-01-29 15:04:40 +01:00
tomcat-server Fix CVE-2025-31650 and CVE-2024-56337 2025-07-21 18:13:38 +02:00
tomcat9.spec Resolves: RHEL-192813 tomcat: HTTP/2 request headers not validated (CVE-2026-41293) 2026-09-04 16:10:29 +02:00