Commit Graph

7 Commits

Author SHA1 Message Date
Coty Sutherland
f5d3a1825f Resolves: RHEL-148687 Update to Apache Tomcat 9.0.110 for PQC support, and switched to compiling with Java 25
* Add java-25-headless to the BuildRequires & Requires lists & set JAVA_HOME to java-25 to always use it for compiling with java-25
* Add build-with-java-25.patch that replaces the  attribute with explicit  and  attributes in javac tasks to support building with Java 25 JDK while generating appropriate bytecode versions. This enables the build to use Java 25 APIs while producing different bytecode targets, required for PQC support via FFM in Tomcat 9.0.110.
* Drop the JmxRemoteLifecycleListener patch is it's no longer necessary
* Use tar.gz instead of zip for the sources due to line ending issues
* Add rm for commons-daemon.jar from bin
2026-02-18 07:33:35 -05:00
Adam Krajcik
eb8ee63e74 Fix CVE-2025-55752 and CVE-2025-31651
Resolves: RHEL-124496 - tomcat: Directory traversal via rewrite with possible RCE
Resolves: RHEL-132559 - tomcat: Bypass of rules in Rewrite Valve
2026-02-04 04:50:59 +01:00
Adam Krajcik
ab17886acb Fix CVE-20225-48989
Resolves: RHEL-102186 - tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames
2025-08-21 21:22:57 +02:00
Adam Krajcik
851a855628 Fix multiple CVES
Resolves: RHEL-108485 - CVE-2025-48976
Resolves: RHEL-108493 - CVE-2025-48988
Resolves: RHEL-108501 - CVE-2025-49125
Resolves: RHEL-108509 - CVE-2025-52434
Resolves: RHEL-108522 - CVE-2025-52520
Resolves: RHEL-108517 - CVE-2025-53506
2025-08-21 15:14:26 +02:00
Adam Krajcik
56a8925bc9 Fix CVE-2025-31650 and CVE-2024-56337
Resolves: RHEL-91750 - tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE
Resolves: RHEL-94960 - tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation
2025-07-21 18:13:38 +02:00
Adam Krajcik
916ab516bb Fix CVE-2025-24813
Resolves: RHEL-82927 - tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT
2025-04-14 07:30:27 +02:00
Adam Krajcik
c2b793848e Initial commit on c10s
Resolves: RHEL-69841
Resolves: RHEL-71701
2025-01-29 15:04:40 +01:00