From f4dac48c59fdfb2861ace5c22c990fe49d154f5b Mon Sep 17 00:00:00 2001 From: eabdullin Date: Fri, 22 Aug 2025 06:35:35 +0000 Subject: [PATCH] import OL tomcat9-9.0.87-5.el10_0.3 --- .gitignore | 2 +- .tomcat9.metadata | 1 + .../JmxRemoteLifecycleListener.patch | 0 .../java-9-start-up-parameters.conf | 0 .../rhbz-1857043.patch | 0 .../tomcat-9.0-bnd-annotation.patch | 0 .../tomcat-9.0-bootstrap-MANIFEST.MF.patch | 0 .../tomcat-9.0-catalina-policy.patch | 0 .../tomcat-9.0-digest.script | 0 .../tomcat-9.0-tomcat-users-webapp.patch | 0 .../tomcat-9.0-tool-wrapper.script | 0 tomcat-9.0.conf => SOURCES/tomcat-9.0.conf | 0 .../tomcat-9.0.logrotate | 0 .../tomcat-9.0.service | 0 .../tomcat-9.0.sysconfig | 0 .../tomcat-9.0.wrapper | 0 tomcat-functions => SOURCES/tomcat-functions | 0 .../tomcat-named.service | 0 tomcat-preamble => SOURCES/tomcat-preamble | 0 tomcat-server => SOURCES/tomcat-server | 0 tomcat9.spec => SPECS/tomcat9.spec | 20 +++++++++++++++++-- sources | 1 - 22 files changed, 20 insertions(+), 4 deletions(-) create mode 100644 .tomcat9.metadata rename JmxRemoteLifecycleListener.patch => SOURCES/JmxRemoteLifecycleListener.patch (100%) rename java-9-start-up-parameters.conf => SOURCES/java-9-start-up-parameters.conf (100%) rename rhbz-1857043.patch => SOURCES/rhbz-1857043.patch (100%) rename tomcat-9.0-bnd-annotation.patch => SOURCES/tomcat-9.0-bnd-annotation.patch (100%) rename tomcat-9.0-bootstrap-MANIFEST.MF.patch => SOURCES/tomcat-9.0-bootstrap-MANIFEST.MF.patch (100%) rename tomcat-9.0-catalina-policy.patch => SOURCES/tomcat-9.0-catalina-policy.patch (100%) rename tomcat-9.0-digest.script => SOURCES/tomcat-9.0-digest.script (100%) rename tomcat-9.0-tomcat-users-webapp.patch => SOURCES/tomcat-9.0-tomcat-users-webapp.patch (100%) rename tomcat-9.0-tool-wrapper.script => SOURCES/tomcat-9.0-tool-wrapper.script (100%) rename tomcat-9.0.conf => SOURCES/tomcat-9.0.conf (100%) rename tomcat-9.0.logrotate => SOURCES/tomcat-9.0.logrotate (100%) rename tomcat-9.0.service => SOURCES/tomcat-9.0.service (100%) rename tomcat-9.0.sysconfig => SOURCES/tomcat-9.0.sysconfig (100%) rename tomcat-9.0.wrapper => SOURCES/tomcat-9.0.wrapper (100%) rename tomcat-functions => SOURCES/tomcat-functions (100%) rename tomcat-named.service => SOURCES/tomcat-named.service (100%) rename tomcat-preamble => SOURCES/tomcat-preamble (100%) rename tomcat-server => SOURCES/tomcat-server (100%) rename tomcat9.spec => SPECS/tomcat9.spec (97%) delete mode 100644 sources diff --git a/.gitignore b/.gitignore index 54364a2..9d97386 100644 --- a/.gitignore +++ b/.gitignore @@ -1 +1 @@ -tomcat-9.0.87.redhat-00010-src.zip +SOURCES/tomcat-9.0.87.redhat-00012-src.zip diff --git a/.tomcat9.metadata b/.tomcat9.metadata new file mode 100644 index 0000000..3213092 --- /dev/null +++ b/.tomcat9.metadata @@ -0,0 +1 @@ +8b767b774d19e223f1fa9f4bb07e0db94234978a SOURCES/tomcat-9.0.87.redhat-00012-src.zip diff --git a/JmxRemoteLifecycleListener.patch b/SOURCES/JmxRemoteLifecycleListener.patch similarity index 100% rename from JmxRemoteLifecycleListener.patch rename to SOURCES/JmxRemoteLifecycleListener.patch diff --git a/java-9-start-up-parameters.conf b/SOURCES/java-9-start-up-parameters.conf similarity index 100% rename from java-9-start-up-parameters.conf rename to SOURCES/java-9-start-up-parameters.conf diff --git a/rhbz-1857043.patch b/SOURCES/rhbz-1857043.patch similarity index 100% rename from rhbz-1857043.patch rename to SOURCES/rhbz-1857043.patch diff --git a/tomcat-9.0-bnd-annotation.patch b/SOURCES/tomcat-9.0-bnd-annotation.patch similarity index 100% rename from tomcat-9.0-bnd-annotation.patch rename to SOURCES/tomcat-9.0-bnd-annotation.patch diff --git a/tomcat-9.0-bootstrap-MANIFEST.MF.patch b/SOURCES/tomcat-9.0-bootstrap-MANIFEST.MF.patch similarity index 100% rename from tomcat-9.0-bootstrap-MANIFEST.MF.patch rename to SOURCES/tomcat-9.0-bootstrap-MANIFEST.MF.patch diff --git a/tomcat-9.0-catalina-policy.patch b/SOURCES/tomcat-9.0-catalina-policy.patch similarity index 100% rename from tomcat-9.0-catalina-policy.patch rename to SOURCES/tomcat-9.0-catalina-policy.patch diff --git a/tomcat-9.0-digest.script b/SOURCES/tomcat-9.0-digest.script similarity index 100% rename from tomcat-9.0-digest.script rename to SOURCES/tomcat-9.0-digest.script diff --git a/tomcat-9.0-tomcat-users-webapp.patch b/SOURCES/tomcat-9.0-tomcat-users-webapp.patch similarity index 100% rename from tomcat-9.0-tomcat-users-webapp.patch rename to SOURCES/tomcat-9.0-tomcat-users-webapp.patch diff --git a/tomcat-9.0-tool-wrapper.script b/SOURCES/tomcat-9.0-tool-wrapper.script similarity index 100% rename from tomcat-9.0-tool-wrapper.script rename to SOURCES/tomcat-9.0-tool-wrapper.script diff --git a/tomcat-9.0.conf b/SOURCES/tomcat-9.0.conf similarity index 100% rename from tomcat-9.0.conf rename to SOURCES/tomcat-9.0.conf diff --git a/tomcat-9.0.logrotate b/SOURCES/tomcat-9.0.logrotate similarity index 100% rename from tomcat-9.0.logrotate rename to SOURCES/tomcat-9.0.logrotate diff --git a/tomcat-9.0.service b/SOURCES/tomcat-9.0.service similarity index 100% rename from tomcat-9.0.service rename to SOURCES/tomcat-9.0.service diff --git a/tomcat-9.0.sysconfig b/SOURCES/tomcat-9.0.sysconfig similarity index 100% rename from tomcat-9.0.sysconfig rename to SOURCES/tomcat-9.0.sysconfig diff --git a/tomcat-9.0.wrapper b/SOURCES/tomcat-9.0.wrapper similarity index 100% rename from tomcat-9.0.wrapper rename to SOURCES/tomcat-9.0.wrapper diff --git a/tomcat-functions b/SOURCES/tomcat-functions similarity index 100% rename from tomcat-functions rename to SOURCES/tomcat-functions diff --git a/tomcat-named.service b/SOURCES/tomcat-named.service similarity index 100% rename from tomcat-named.service rename to SOURCES/tomcat-named.service diff --git a/tomcat-preamble b/SOURCES/tomcat-preamble similarity index 100% rename from tomcat-preamble rename to SOURCES/tomcat-preamble diff --git a/tomcat-server b/SOURCES/tomcat-server similarity index 100% rename from tomcat-server rename to SOURCES/tomcat-server diff --git a/tomcat9.spec b/SPECS/tomcat9.spec similarity index 97% rename from tomcat9.spec rename to SPECS/tomcat9.spec index 052ad89..71d0e58 100644 --- a/tomcat9.spec +++ b/SPECS/tomcat9.spec @@ -32,7 +32,7 @@ %global major_version 9 %global minor_version 0 %global micro_version 87 -%global packdname tomcat-%{major_version}.%{minor_version}.%{micro_version}.redhat-00010-src +%global packdname tomcat-%{major_version}.%{minor_version}.%{micro_version}.redhat-00012-src %global servletspec 4.0 %global elspec 3.0 %global tcuid 53 @@ -53,7 +53,7 @@ Name: tomcat9 Epoch: 1 Version: %{major_version}.%{minor_version}.%{micro_version} -Release: 5%{?dist}.1 +Release: 5%{?dist}.3 Summary: Apache Servlet/JSP Engine, RI for Servlet %{servletspec}/JSP %{jspspec} API License: Apache-2.0 @@ -622,6 +622,22 @@ fi %{appdir}/ROOT %changelog +* Thu Aug 21 2025 Craig Guiller - 1:9.0.87-5.3 +- Resolves: + tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) +- Resolves: + tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) +- Resolves: + tomcat: Dos in multipart upload (CVE-2025-48988) +- Resolves: + tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) +- Resolves: + tomcat: Denial of service (CVE-2025-52434) +- Resolves: + tomcat: Denial of service (CVE-2025-52520) +- Resolves: + tomcat: Denial of service (CVE-2025-53506) + * Wed Jul 16 2025 Pooja Senthil Kumar - 1:9.0.87-5.1 - Resolves: RHEL-91765 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) diff --git a/sources b/sources deleted file mode 100644 index 7a0d3a5..0000000 --- a/sources +++ /dev/null @@ -1 +0,0 @@ -SHA512 (tomcat-9.0.87.redhat-00010-src.zip) = fd65e91c2fd11d48396692e0e88fbba8c2025ec35cbefb29b9b192c516af958ad357a1232e21abd262187d14add45b1441c34d3fa76ac40ba0866febbbfb341d