rpms/tomcat9
6
0
Fork 0
Code Issues Pull Requests Releases Activity

Compare commits

base: rpms:c10
Branches Tags
rpms:c10s
rpms:c10
rpms:imports/c10/tomcat9-9.0.87-8.el10_1.1
rpms:imports/c10/tomcat9-9.0.87-5.el10_0.3
rpms:imports/c10s/tomcat9-9.0.87-8.el10
rpms:imports/c10s/tomcat9-9.0.87-7.el10
rpms:imports/c10s/tomcat9-9.0.87-6.el10
rpms:imports/c10/tomcat9-9.0.87-5.el10_0_0.1
rpms:imports/c10/tomcat9-9.0.87-5.el10_0
rpms:imports/c10s/tomcat9-9.0.87-5.el10
rpms:imports/c10s/tomcat9-9.0.87-4.el10
..
compare: rpms:c10s
Branches Tags
rpms:c10
rpms:c10s
rpms:imports/c10/tomcat9-9.0.87-8.el10_1.1
rpms:imports/c10/tomcat9-9.0.87-5.el10_0.3
rpms:imports/c10s/tomcat9-9.0.87-8.el10
rpms:imports/c10s/tomcat9-9.0.87-7.el10
rpms:imports/c10s/tomcat9-9.0.87-6.el10
rpms:imports/c10/tomcat9-9.0.87-5.el10_0_0.1
rpms:imports/c10/tomcat9-9.0.87-5.el10_0
rpms:imports/c10s/tomcat9-9.0.87-5.el10
rpms:imports/c10s/tomcat9-9.0.87-4.el10

3 Commits
c10 ... c10s

Author SHA1 Message Date
Adam Krajcik
ab17886acb Fix CVE-20225-48989 
Resolves: RHEL-102186 - tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames
 2025-08-21 21:22:57 +02:00
Adam Krajcik
851a855628 Fix multiple CVES 
Resolves: RHEL-108485 - CVE-2025-48976
Resolves: RHEL-108493 - CVE-2025-48988
Resolves: RHEL-108501 - CVE-2025-49125
Resolves: RHEL-108509 - CVE-2025-52434
Resolves: RHEL-108522 - CVE-2025-52520
Resolves: RHEL-108517 - CVE-2025-53506
 2025-08-21 15:14:26 +02:00
Adam Krajcik
56a8925bc9 Fix CVE-2025-31650 and CVE-2024-56337 
Resolves: RHEL-91750 - tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE
Resolves: RHEL-94960 - tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation
 2025-07-21 18:13:38 +02:00
8 changed files with 37 additions and 10 deletions
Show Stats Expand all files Collapse all files

1
.fmf/version Normal file
View File

@ -0,0 +1 @@
1

7
.gitignore vendored
View File

@ -1 +1,6 @@
tomcat-9.0.87.redhat-00013-src.zip
/tomcat-9.0.87.redhat-00005-src.zip
/tomcat-9.0.87.redhat-00006-src.zip
/tomcat-9.0.87.redhat-00008-src.zip
/tomcat-9.0.87.redhat-00010-src.zip
/tomcat-9.0.87.redhat-00011-src.zip
/tomcat-9.0.87.redhat-00012-src.zip

1
ci.fmf Normal file
View File

@ -0,0 +1 @@
resultsdb-testcase: separate

6
gating.yaml Normal file
View File

@ -0,0 +1,6 @@
--- !Policy
product_versions:
- rhel-10
decision_context: osci_compose_gate
rules:
- !PassingTestCaseRule {test_case_name: osci.brew-build./plans/tier1-internal.functional}

9
plans/smoke.fmf Normal file
View File

@ -0,0 +1,9 @@
summary: Basic smoke test
prepare:
- name: packages
how: install
package:
- tomcat9
execute:
how: tmt
script: which tomcat

11
plans/tier1-internal.fmf Normal file
View File

@ -0,0 +1,11 @@
summary: Internal Tier1 beakerlib tests.
discover:
- name: rhel
how: fmf
url: git://pkgs.devel.redhat.com/tests/tomcat9
filter: 'tier: 1'
execute:
how: tmt
adjust:
enabled: false
when: distro == centos-stream-10

2
sources
View File

@ -1 +1 @@
SHA512 (tomcat-9.0.87.redhat-00013-src.zip) = 1049d86d4bbdfd251a3f0cc72840cb6535a5637a76becaec8cb9c6532430dabaefd007af285fa1ac8d6a2a70f1d0378f6a1e908f7e7c5aff7c2bbedcd521cc9d
SHA512 (tomcat-9.0.87.redhat-00012-src.zip) = 09c490294696114a2fd1c0680db96c969a331d070d1855ae4814bea5d57f9e891d6576b4acae56f53864280e53c3e6983c2b1a11861b0b0f52c021048482c696

10
tomcat9.spec
View File

@ -32,7 +32,7 @@
%global major_version 9
%global minor_version 0
%global micro_version 87
%global packdname tomcat-%{major_version}.%{minor_version}.%{micro_version}.redhat-00013-src
%global packdname tomcat-%{major_version}.%{minor_version}.%{micro_version}.redhat-00012-src
%global servletspec 4.0
%global elspec 3.0
%global tcuid 53
@ -53,7 +53,7 @@
Name: tomcat9
Epoch: 1
Version: %{major_version}.%{minor_version}.%{micro_version}
Release: 8%{?dist}.1
Release: 8%{?dist}
Summary: Apache Servlet/JSP Engine, RI for Servlet %{servletspec}/JSP %{jspspec} API
License: Apache-2.0
@ -622,12 +622,6 @@ fi
%{appdir}/ROOT
%changelog
* Thu Nov 27 2025 Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-8.el10_1.1
- Resolves: RHEL-124497
tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)
- Resolves: RHEL-91732
tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)
* Mon Aug 18 2025 Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-8
- Resolves: RHEL-102186
tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989)