From f6c12d8aed38834f871a57dd2700e7ab2cb0e9c9 Mon Sep 17 00:00:00 2001 From: eabdullin Date: Thu, 11 Dec 2025 07:48:19 +0000 Subject: [PATCH] import OL tomcat9-9.0.87-8.el10_1.1 --- .gitignore | 2 +- .tomcat9.metadata | 1 - ....patch => JmxRemoteLifecycleListener.patch | 0 ...rs.conf => java-9-start-up-parameters.conf | 0 .../rhbz-1857043.patch => rhbz-1857043.patch | 0 sources | 1 + ...n.patch => tomcat-9.0-bnd-annotation.patch | 0 ... => tomcat-9.0-bootstrap-MANIFEST.MF.patch | 0 ....patch => tomcat-9.0-catalina-policy.patch | 0 ...-digest.script => tomcat-9.0-digest.script | 0 ...ch => tomcat-9.0-tomcat-users-webapp.patch | 0 ...r.script => tomcat-9.0-tool-wrapper.script | 0 SOURCES/tomcat-9.0.conf => tomcat-9.0.conf | 0 ...mcat-9.0.logrotate => tomcat-9.0.logrotate | 0 .../tomcat-9.0.service => tomcat-9.0.service | 0 ...mcat-9.0.sysconfig => tomcat-9.0.sysconfig | 0 .../tomcat-9.0.wrapper => tomcat-9.0.wrapper | 0 SOURCES/tomcat-functions => tomcat-functions | 0 ...mcat-named.service => tomcat-named.service | 0 SOURCES/tomcat-preamble => tomcat-preamble | 0 SOURCES/tomcat-server => tomcat-server | 0 SPECS/tomcat9.spec => tomcat9.spec | 34 ++++++++++++------- 22 files changed, 23 insertions(+), 15 deletions(-) delete mode 100644 .tomcat9.metadata rename SOURCES/JmxRemoteLifecycleListener.patch => JmxRemoteLifecycleListener.patch (100%) rename SOURCES/java-9-start-up-parameters.conf => java-9-start-up-parameters.conf (100%) rename SOURCES/rhbz-1857043.patch => rhbz-1857043.patch (100%) create mode 100644 sources rename SOURCES/tomcat-9.0-bnd-annotation.patch => tomcat-9.0-bnd-annotation.patch (100%) rename SOURCES/tomcat-9.0-bootstrap-MANIFEST.MF.patch => tomcat-9.0-bootstrap-MANIFEST.MF.patch (100%) rename SOURCES/tomcat-9.0-catalina-policy.patch => tomcat-9.0-catalina-policy.patch (100%) rename SOURCES/tomcat-9.0-digest.script => tomcat-9.0-digest.script (100%) rename SOURCES/tomcat-9.0-tomcat-users-webapp.patch => tomcat-9.0-tomcat-users-webapp.patch (100%) rename SOURCES/tomcat-9.0-tool-wrapper.script => tomcat-9.0-tool-wrapper.script (100%) rename SOURCES/tomcat-9.0.conf => tomcat-9.0.conf (100%) rename SOURCES/tomcat-9.0.logrotate => tomcat-9.0.logrotate (100%) rename SOURCES/tomcat-9.0.service => tomcat-9.0.service (100%) rename SOURCES/tomcat-9.0.sysconfig => tomcat-9.0.sysconfig (100%) rename SOURCES/tomcat-9.0.wrapper => tomcat-9.0.wrapper (100%) rename SOURCES/tomcat-functions => tomcat-functions (100%) rename SOURCES/tomcat-named.service => tomcat-named.service (100%) rename SOURCES/tomcat-preamble => tomcat-preamble (100%) rename SOURCES/tomcat-server => tomcat-server (100%) rename SPECS/tomcat9.spec => tomcat9.spec (97%) diff --git a/.gitignore b/.gitignore index 9d97386..b36b0ca 100644 --- a/.gitignore +++ b/.gitignore @@ -1 +1 @@ -SOURCES/tomcat-9.0.87.redhat-00012-src.zip +tomcat-9.0.87.redhat-00013-src.zip diff --git a/.tomcat9.metadata b/.tomcat9.metadata deleted file mode 100644 index 3213092..0000000 --- a/.tomcat9.metadata +++ /dev/null @@ -1 +0,0 @@ -8b767b774d19e223f1fa9f4bb07e0db94234978a SOURCES/tomcat-9.0.87.redhat-00012-src.zip diff --git a/SOURCES/JmxRemoteLifecycleListener.patch b/JmxRemoteLifecycleListener.patch similarity index 100% rename from SOURCES/JmxRemoteLifecycleListener.patch rename to JmxRemoteLifecycleListener.patch diff --git a/SOURCES/java-9-start-up-parameters.conf b/java-9-start-up-parameters.conf similarity index 100% rename from SOURCES/java-9-start-up-parameters.conf rename to java-9-start-up-parameters.conf diff --git a/SOURCES/rhbz-1857043.patch b/rhbz-1857043.patch similarity index 100% rename from SOURCES/rhbz-1857043.patch rename to rhbz-1857043.patch diff --git a/sources b/sources new file mode 100644 index 0000000..d789131 --- /dev/null +++ b/sources @@ -0,0 +1 @@ +SHA512 (tomcat-9.0.87.redhat-00013-src.zip) = 1049d86d4bbdfd251a3f0cc72840cb6535a5637a76becaec8cb9c6532430dabaefd007af285fa1ac8d6a2a70f1d0378f6a1e908f7e7c5aff7c2bbedcd521cc9d diff --git a/SOURCES/tomcat-9.0-bnd-annotation.patch b/tomcat-9.0-bnd-annotation.patch similarity index 100% rename from SOURCES/tomcat-9.0-bnd-annotation.patch rename to tomcat-9.0-bnd-annotation.patch diff --git a/SOURCES/tomcat-9.0-bootstrap-MANIFEST.MF.patch b/tomcat-9.0-bootstrap-MANIFEST.MF.patch similarity index 100% rename from SOURCES/tomcat-9.0-bootstrap-MANIFEST.MF.patch rename to tomcat-9.0-bootstrap-MANIFEST.MF.patch diff --git a/SOURCES/tomcat-9.0-catalina-policy.patch b/tomcat-9.0-catalina-policy.patch similarity index 100% rename from SOURCES/tomcat-9.0-catalina-policy.patch rename to tomcat-9.0-catalina-policy.patch diff --git a/SOURCES/tomcat-9.0-digest.script b/tomcat-9.0-digest.script similarity index 100% rename from SOURCES/tomcat-9.0-digest.script rename to tomcat-9.0-digest.script diff --git a/SOURCES/tomcat-9.0-tomcat-users-webapp.patch b/tomcat-9.0-tomcat-users-webapp.patch similarity index 100% rename from SOURCES/tomcat-9.0-tomcat-users-webapp.patch rename to tomcat-9.0-tomcat-users-webapp.patch diff --git a/SOURCES/tomcat-9.0-tool-wrapper.script b/tomcat-9.0-tool-wrapper.script similarity index 100% rename from SOURCES/tomcat-9.0-tool-wrapper.script rename to tomcat-9.0-tool-wrapper.script diff --git a/SOURCES/tomcat-9.0.conf b/tomcat-9.0.conf similarity index 100% rename from SOURCES/tomcat-9.0.conf rename to tomcat-9.0.conf diff --git a/SOURCES/tomcat-9.0.logrotate b/tomcat-9.0.logrotate similarity index 100% rename from SOURCES/tomcat-9.0.logrotate rename to tomcat-9.0.logrotate diff --git a/SOURCES/tomcat-9.0.service b/tomcat-9.0.service similarity index 100% rename from SOURCES/tomcat-9.0.service rename to tomcat-9.0.service diff --git a/SOURCES/tomcat-9.0.sysconfig b/tomcat-9.0.sysconfig similarity index 100% rename from SOURCES/tomcat-9.0.sysconfig rename to tomcat-9.0.sysconfig diff --git a/SOURCES/tomcat-9.0.wrapper b/tomcat-9.0.wrapper similarity index 100% rename from SOURCES/tomcat-9.0.wrapper rename to tomcat-9.0.wrapper diff --git a/SOURCES/tomcat-functions b/tomcat-functions similarity index 100% rename from SOURCES/tomcat-functions rename to tomcat-functions diff --git a/SOURCES/tomcat-named.service b/tomcat-named.service similarity index 100% rename from SOURCES/tomcat-named.service rename to tomcat-named.service diff --git a/SOURCES/tomcat-preamble b/tomcat-preamble similarity index 100% rename from SOURCES/tomcat-preamble rename to tomcat-preamble diff --git a/SOURCES/tomcat-server b/tomcat-server similarity index 100% rename from SOURCES/tomcat-server rename to tomcat-server diff --git a/SPECS/tomcat9.spec b/tomcat9.spec similarity index 97% rename from SPECS/tomcat9.spec rename to tomcat9.spec index 71d0e58..53846fe 100644 --- a/SPECS/tomcat9.spec +++ b/tomcat9.spec @@ -32,7 +32,7 @@ %global major_version 9 %global minor_version 0 %global micro_version 87 -%global packdname tomcat-%{major_version}.%{minor_version}.%{micro_version}.redhat-00012-src +%global packdname tomcat-%{major_version}.%{minor_version}.%{micro_version}.redhat-00013-src %global servletspec 4.0 %global elspec 3.0 %global tcuid 53 @@ -53,7 +53,7 @@ Name: tomcat9 Epoch: 1 Version: %{major_version}.%{minor_version}.%{micro_version} -Release: 5%{?dist}.3 +Release: 8%{?dist}.1 Summary: Apache Servlet/JSP Engine, RI for Servlet %{servletspec}/JSP %{jspspec} API License: Apache-2.0 @@ -622,26 +622,34 @@ fi %{appdir}/ROOT %changelog -* Thu Aug 21 2025 Craig Guiller - 1:9.0.87-5.3 -- Resolves: +* Thu Nov 27 2025 Adam Krajcik - 1:9.0.87-8.el10_1.1 +- Resolves: RHEL-124497 + tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) +- Resolves: RHEL-91732 + tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) + +* Mon Aug 18 2025 Adam Krajcik - 1:9.0.87-8 +- Resolves: RHEL-102186 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) -- Resolves: + +* Wed Aug 13 2025 Adam Krajcik - 1:9.0.87-7 +- Resolves: RHEL-108485 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) -- Resolves: +- Resolves: RHEL-108493 tomcat: Dos in multipart upload (CVE-2025-48988) -- Resolves: +- Resolves: RHEL-108501 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) -- Resolves: +- Resolves: RHEL-108509 tomcat: Denial of service (CVE-2025-52434) -- Resolves: +- Resolves: RHEL-108522 tomcat: Denial of service (CVE-2025-52520) -- Resolves: +- Resolves: RHEL-108517 tomcat: Denial of service (CVE-2025-53506) -* Wed Jul 16 2025 Pooja Senthil Kumar - 1:9.0.87-5.1 -- Resolves: RHEL-91765 +* Mon May 26 2025 Adam Krajcik - 1:9.0.87-5.el10_0.1 +- Resolves: RHEL-91750 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) -- Resolves: RHEL-71981 +- Resolves: RHEL-94960 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) * Mon Apr 14 2025 Adam Krajcik - 1:9.0.87-5