2024-01-17 15:32:35 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jan 17 14:20:25 UTC 2024 - Michele Bussolotto <michele.bussolotto@suse.com>
|
|
|
|
|
|
|
|
|
|
- Fixed CVEs:
|
|
|
|
|
* CVE-2023-46589: Apache Tomcat: HTTP request smuggling due to
|
|
|
|
|
incorrect headers parsing (bsc#1217649)
|
|
|
|
|
- Added patches:
|
|
|
|
|
* tomcat-9-CVE-2023-46589.patch
|
|
|
|
|
|
2024-01-16 09:40:50 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Jan 12 13:18:52 UTC 2024 - Michele Bussolotto <michele.bussolotto@suse.com>
|
|
|
|
|
|
|
|
|
|
- Fix server.xml permission (bsc#1217768, bsc#1217402)
|
|
|
|
|
- remove serverxmltool and use xsltproc
|
|
|
|
|
|
2023-11-27 09:18:24 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Nov 23 12:32:49 UTC 2023 - Ricardo Mestre <ricardo.mestre@suse.com>
|
|
|
|
|
|
|
|
|
|
- replace prep setup and patches macro with autosetup
|
|
|
|
|
|
2023-10-13 13:20:11 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Oct 13 11:12:07 UTC 2023 - Fridrich Strba <fstrba@suse.com>
|
|
|
|
|
|
|
|
|
|
- Update to Tomcat 9.0.82
|
2023-10-30 11:54:18 +01:00
|
|
|
* Fixed CVEs:
|
|
|
|
|
+ CVE-2023-45648: Improve trailer header parsing (bsc#1216118)
|
|
|
|
|
+ CVE-2023-42794: FileUpload: remove tmp files to avoid DoS
|
|
|
|
|
on Windows (bsc#1216120)
|
|
|
|
|
+ CVE-2023-42795: Improve handling of failures during recycle()
|
|
|
|
|
methods (bsc#1216119)
|
2023-10-13 13:20:11 +02:00
|
|
|
* Catalina
|
|
|
|
|
+ Add: 65770: Provide a lifecycle listener that will
|
|
|
|
|
automatically reload TLS configurations a set time before the
|
|
|
|
|
certificate is due to expire. This is intended to be used with
|
|
|
|
|
third-party tools that regularly renew TLS certificates.
|
|
|
|
|
+ Fix: Fix handling of an error reading a context descriptor on
|
|
|
|
|
deployment.
|
|
|
|
|
+ Fix: Fix rewrite rule qsd (query string discard) being ignored
|
|
|
|
|
if qsa was also use, while it should instead take precedence.
|
|
|
|
|
+ Fix: 67472: Send fewer CORS-related headers when CORS is not
|
|
|
|
|
actually being engaged.
|
|
|
|
|
+ Add: Improve handling of failures within recycle() methods.
|
|
|
|
|
* Coyote
|
|
|
|
|
+ Fix: 67670: Fix regression with HTTP compression after code
|
|
|
|
|
refactoring.
|
|
|
|
|
+ Fix: 67198: Ensure that the AJP connector attribute
|
|
|
|
|
tomcatAuthorization takes precedence over the
|
|
|
|
|
tomcatAuthentication attribute when processing an auth_type
|
|
|
|
|
attribute received from a proxy server.
|
|
|
|
|
+ Fix: 67235: Fix a NullPointerException when an AsyncListener
|
|
|
|
|
handles an error with a dispatch rather than a complete.
|
|
|
|
|
+ Fix: When an error occurs during asynchronous processing,
|
|
|
|
|
ensure that the error handling process is only triggered once
|
|
|
|
|
per asynchronous cycle.
|
|
|
|
|
+ Fix: Fix logic issue trying to match no argument method in
|
|
|
|
|
IntropectionUtil.
|
|
|
|
|
+ Fix: Improve thread safety around readNotify and writeNotify
|
|
|
|
|
in the NIO2 endpoint.
|
|
|
|
|
+ Fix: Avoid rare thread safety issue accessing message digest
|
|
|
|
|
map.
|
|
|
|
|
+ Fix: Improve statistics collection for upgraded connections
|
|
|
|
|
under load.
|
|
|
|
|
+ Fix: Align validation of HTTP trailer fields with standard
|
|
|
|
|
fields.
|
|
|
|
|
+ Fix: Improvements to HTTP/2 overhead protection (bsc#1216182,
|
|
|
|
|
CVE-2023-44487)
|
|
|
|
|
* jdbc-pool
|
|
|
|
|
+ Fix: 67664: Correct a regression in the clean-up of
|
|
|
|
|
unnecessary use of fully qualified class names in 9.0.81
|
|
|
|
|
that broke the jdbc-pool.
|
|
|
|
|
* Jasper
|
|
|
|
|
+ Fix: 67080: Improve performance of EL expressions in JSPs that
|
|
|
|
|
use implicit objects
|
|
|
|
|
|
2023-09-21 22:06:00 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Sep 21 16:41:56 UTC 2023 - Fridrich Strba <fstrba@suse.com>
|
|
|
|
|
|
|
|
|
|
- Update to Tomcat 9.0.80
|
|
|
|
|
* Catalina
|
|
|
|
|
+ Add RateLimitFilter which can be used to mitigate DoS and
|
|
|
|
|
Brute Force attacks
|
|
|
|
|
+ Move the management of the utility executor from the
|
|
|
|
|
init()/destroy() methods of components to the start()/stop()
|
|
|
|
|
methods.
|
|
|
|
|
+ Add org.apache.catalina.core.StandardVirtualThreadExecutor,
|
|
|
|
|
a virtual thread based executor that may be used with one or
|
|
|
|
|
more Connectors to process requests received by those
|
|
|
|
|
Connectors using virtual threads. This Executor requires a
|
|
|
|
|
minimum Java version of Java 21.
|
|
|
|
|
+ 66513: Add a per session Semaphore to the PersistentValve that
|
|
|
|
|
ensures that, within a single Tomcat instance, there is no
|
|
|
|
|
more than one concurrent request per session. Also expand the
|
|
|
|
|
debug logging to include whether a request bypasses the Valve
|
|
|
|
|
and the reason if a request fails to obtain the per session
|
|
|
|
|
Semaphore.
|
|
|
|
|
+ 66609: Ensure that the default servlet correctly escapes file
|
|
|
|
|
names in directory listings when using XML output.
|
|
|
|
|
+ 66618: Add a numeric last modified field to the XML directory
|
|
|
|
|
listings produced by the default servlet to enable sorting in
|
|
|
|
|
the XSLT.
|
|
|
|
|
+ 66621: Attempts to lock a collection with WebDAV may
|
|
|
|
|
incorrectly fail if a child collection has an expired lock.
|
|
|
|
|
+ 66622: Deprecate the xssProtectionEnabled setting from the
|
|
|
|
|
HttpHeaderSecurityFilter and change the default value to false
|
|
|
|
|
as support for the associated HTTP header has been removed
|
|
|
|
|
from all major browsers.
|
|
|
|
|
+ 59232: Add org.apache.catalina.core.ContextNamingInfoListener,
|
|
|
|
|
a listener which creates context naming information
|
|
|
|
|
environment entries.
|
|
|
|
|
+ 66665: Add
|
|
|
|
|
org.apache.catalina.core.PropertiesRoleMappingListener, a
|
|
|
|
|
listener which populates the context's role mapping from a
|
|
|
|
|
properties file.
|
|
|
|
|
+ Fix an edge case where intra-web application symlinks would be
|
|
|
|
|
followed if the web applications were deliberately crafted to
|
|
|
|
|
allow it even when allowLinking was set to false.
|
|
|
|
|
+ Add utility config file resource lookup on Context to allow
|
|
|
|
|
looking up resources from the webapp (prefixed with webapp:)
|
|
|
|
|
and make the resource lookup API more visible.
|
|
|
|
|
+ Fix potential database connection leaks in
|
|
|
|
|
DataSourceUserDatabase identified by Coverity Scan.
|
|
|
|
|
+ Make parsing of ExtendedAccessLogValve patterns more robust.
|
|
|
|
|
+ Fix failure trying to persist configuration for an internal
|
|
|
|
|
credential handler.
|
|
|
|
|
+ 66680: When serializing a session during the session
|
|
|
|
|
presistence process, do not log a warning that null Principals
|
|
|
|
|
are not serializable.
|
|
|
|
|
+ Catch NamingException in JNDIRealm#getPrincipal. It is used in
|
|
|
|
|
Java up to 17 to signal closed connections.
|
|
|
|
|
+ 66822: Use the same naming format in log messages for
|
|
|
|
|
Connector instances as the associated ProtocolHandler instance.
|
|
|
|
|
+ The parts count should also lower the actual maxParameterCount
|
|
|
|
|
used for parsing parameters if parts are parsed first.
|
|
|
|
|
+ If an application or library sets both a non-500 error code
|
|
|
|
|
and the javax.servlet.error.exception request attribute, use
|
|
|
|
|
the provided error code during error page processing rather
|
|
|
|
|
than assuming an error code of 500.
|
|
|
|
|
+ Update code comments and Tomcat output to use MiB for
|
|
|
|
|
1024 * 1024 bytes and KiB for 1024 bytes rather than
|
|
|
|
|
MB and kB.
|
|
|
|
|
+ Avoid protocol relative redirects in FORM authentication
|
|
|
|
|
(CVE-2023-41080, bsc#1214666).
|
|
|
|
|
* Coyote
|
|
|
|
|
+ Update the HTTP/2 implementation to use the prioritization
|
|
|
|
|
scheme defined in RFC 9218 rather than the one defined in
|
|
|
|
|
RFC 7540.
|
|
|
|
|
+ 66602: not sending WINDOW_UPDATE when dataLength is ZERO on
|
|
|
|
|
call SwallowedDataFramePayload.
|
|
|
|
|
+ 66627: Restore the documented behaviour of
|
|
|
|
|
MessageBytes.getType() that it returns the type of the
|
|
|
|
|
original content rather than reflecting the most recent
|
|
|
|
|
conversion.
|
|
|
|
|
+ 66635: Correct certificate logging on start-up so it
|
|
|
|
|
differentiates between keystore based keys/certificates and
|
|
|
|
|
PEM file based keys/certificates and logs the relevant
|
|
|
|
|
information for each.
|
|
|
|
|
+ Refactor blocking reads and writes for the NIO connector to
|
|
|
|
|
remove code paths that could allow a notification from the
|
|
|
|
|
Poller to be missed resuting in a timeout rather than the
|
|
|
|
|
expected read or write.
|
|
|
|
|
+ Refactor waiting for an HTTP/2 stream or connection window
|
|
|
|
|
update to handle spurious wake-ups during the wait.
|
|
|
|
|
+ Correct a regression introduced in 9.0.78 and use the correct
|
|
|
|
|
constant when constructing the default value for the
|
|
|
|
|
certificateKeystoreFile attribute of an
|
|
|
|
|
SSLHostConfigCertificate instance.
|
|
|
|
|
+ Refactor HTTP/2 implementation to reduce pinning when using
|
|
|
|
|
virtual threads.
|
|
|
|
|
+ Pass through ciphers referring to an OpenSSL profile, such as
|
|
|
|
|
PROFILE=SYSTEM instead of producing an error trying to parse
|
|
|
|
|
it.
|
|
|
|
|
+ 66841: Ensure that AsyncListener.onError() is called after an
|
|
|
|
|
error during asynchronous processing with HTTP/2.
|
|
|
|
|
+ 66842: When using asynchronous I/O (the default for NIO and
|
|
|
|
|
NIO2), include DATA frames when calculating the HTTP/2
|
|
|
|
|
overhead count to ensure that connections are not prematurely
|
|
|
|
|
terminated.
|
|
|
|
|
+ Correct a race condition that could cause spurious RST
|
|
|
|
|
messages to be sent after the response had been written to an
|
|
|
|
|
HTTP/2 stream.
|
|
|
|
|
* WebSocket
|
|
|
|
|
+ 66548: Expand the validation of the value of the
|
|
|
|
|
Sec-Websocket-Key header in the HTTP upgrade request that
|
|
|
|
|
initiates a WebSocket connection. The value is not decoded but
|
|
|
|
|
it is checked for the correct length and that only valid
|
|
|
|
|
characters from the base64 alphabet are used.
|
|
|
|
|
+ Improve handling of error conditions for the WebSocket server,
|
|
|
|
|
particularly during Tomcat shutdown.
|
|
|
|
|
+ Correct a regression in the fix for 66574 that meant the
|
|
|
|
|
WebSocket session could return false for onOpen() before the
|
|
|
|
|
onClose() event had been completed.
|
|
|
|
|
+ 66681: Fix a NullPointerException when flushing batched
|
|
|
|
|
messages with compression enabled using permessage-deflate.
|
|
|
|
|
* Web applications
|
|
|
|
|
+ Documentation. Expand the security guidance to cover the
|
|
|
|
|
embedded use case and add notes on the uses made of the
|
|
|
|
|
java.io.tmpdir system property.
|
|
|
|
|
+ 66662: Documentation. Fix a typo in the name of the algorithms
|
|
|
|
|
attribute in the configuration section for the Digest
|
|
|
|
|
authentication value.
|
|
|
|
|
+ Documentation. Update documentation to use MiB for
|
|
|
|
|
1024 * 1024 bytes and KiB for 1024 bytes rather than
|
|
|
|
|
MB and kB.
|
|
|
|
|
* jdbc-pool
|
|
|
|
|
+ Fix the releaseIdleCounter does not increment when testAllIdle
|
|
|
|
|
releases them.
|
|
|
|
|
+ Fix the ConnectionState state will be inconsistent with actual
|
|
|
|
|
state on the connection when an exception occurs while
|
|
|
|
|
writing.
|
|
|
|
|
* Other
|
|
|
|
|
+ Update to Commons Daemon 1.3.4.
|
|
|
|
|
+ Improvements to French translations.
|
|
|
|
|
+ Update Checkstyle to 10.12.0.
|
|
|
|
|
+ Update the packaged version of the Apache Tomcat Native
|
|
|
|
|
Library to 1.2.37 to pick up the Windows binaries built with
|
|
|
|
|
with OpenSSL 1.1.1u.
|
|
|
|
|
+ Include the Windows specific binary distributions in the files
|
|
|
|
|
uploaded to Maven Central.
|
|
|
|
|
+ Improvements to French translations.
|
|
|
|
|
+ Improvements to Japanese translations.
|
|
|
|
|
+ Update UnboundID to 6.0.9.
|
|
|
|
|
+ Update Checkstyle to 10.12.1.
|
|
|
|
|
+ Update BND to 6.4.1.
|
|
|
|
|
+ Update JSign to 5.0.
|
|
|
|
|
+ Correct properties for JSign dependency.
|
|
|
|
|
+ Align documentation for maxParameterCount to match hard-coded
|
|
|
|
|
defaults.
|
|
|
|
|
+ Update NSIS to 3.0.9.
|
|
|
|
|
+ Update Checkstyle to 10.12.2.
|
|
|
|
|
+ Improvements to French translations.
|
|
|
|
|
+ Improvements to Japanese translations.
|
|
|
|
|
+ 66829: Fix quoting so users can use the _RUNJAVA environment
|
|
|
|
|
variable as intended on Windows when the path to the Java
|
|
|
|
|
executable contains spaces.
|
|
|
|
|
+ Update Tomcat Native to 1.2.38 to pick up Windows binaries
|
|
|
|
|
built with OpenSSL 1.1.1v.
|
|
|
|
|
+ Improvements to Chinese translations.
|
|
|
|
|
+ Improvements to French translations.
|
|
|
|
|
+ Improvements to Japanese translations
|
|
|
|
|
- Removed patch:
|
|
|
|
|
* tomcat-9.0.75-CVE-2023-41080.patch
|
|
|
|
|
+ integrated in this version
|
|
|
|
|
|
2023-09-21 16:49:07 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Sep 21 13:19:54 UTC 2023 - Michele Bussolotto <michele.bussolotto@suse.com>
|
|
|
|
|
|
|
|
|
|
- Fixed CVEs:
|
|
|
|
|
* CVE-2023-41080: Avoid protocol relative redirects in FORM authentication. (bsc#1214666)
|
|
|
|
|
- Added patches:
|
|
|
|
|
* tomcat-9.0.75-CVE-2023-41080.patch
|
|
|
|
|
|
2023-09-18 08:12:05 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Sep 18 06:03:34 UTC 2023 - Fridrich Strba <fstrba@suse.com>
|
|
|
|
|
|
|
|
|
|
- Modified patch:
|
|
|
|
|
* tomcat-9.0-osgi-build.patch
|
|
|
|
|
+ make it more robust to change in number of artifacts in bnd
|
|
|
|
|
+ do not enumerate jars, just take all jars from the aqute-bnd
|
|
|
|
|
directory into the classpath
|
|
|
|
|
|
2023-09-12 13:22:53 +02:00
|
|
|
-------------------------------------------------------------------
|
2023-09-12 13:30:53 +02:00
|
|
|
Tue Sep 12 11:30:29 UTC 2023 - Fridrich Strba <fstrba@suse.com>
|
2023-09-12 13:22:53 +02:00
|
|
|
|
2023-09-12 13:30:53 +02:00
|
|
|
- Require(pre) shadow because groupadd is needed early
|
2023-09-12 13:22:53 +02:00
|
|
|
|
2023-05-23 06:40:11 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue May 23 04:25:45 UTC 2023 - Fridrich Strba <fstrba@suse.com>
|
|
|
|
|
|
|
|
|
|
- Update to Tomcat 9.0.75.
|
|
|
|
|
* See changelog at
|
|
|
|
|
https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.75_(markt)
|
|
|
|
|
* Fixes:
|
|
|
|
|
+ bsc#1211608, CVE-2023-28709
|
|
|
|
|
+ bsc#1208513, CVE-2023-24998 (previous incomplete fix)
|
|
|
|
|
- Remove patches:
|
|
|
|
|
* tomcat-9.0-CVE-2021-30640.patch
|
|
|
|
|
* tomcat-9.0-CVE-2021-33037.patch
|
|
|
|
|
* tomcat-9.0-CVE-2021-41079.patch
|
|
|
|
|
* tomcat-9.0-CVE-2022-23181.patch
|
|
|
|
|
* tomcat-9.0-NPE-JNDIRealm.patch
|
|
|
|
|
* tomcat-9.0-hardening_getResources.patch
|
|
|
|
|
* tomcat-9.0.43-CVE-2021-43980.patch
|
|
|
|
|
* tomcat-9.0.43-CVE-2022-42252.patch
|
|
|
|
|
* tomcat-9.0.43-CVE-2022-45143.patch
|
|
|
|
|
* tomcat-9.0.43-CVE-2023-24998.patch
|
|
|
|
|
* tomcat-9.0.43-CVE-2023-28708.patch
|
|
|
|
|
+ integrated in this version
|
|
|
|
|
* tomcat-9.0.43-java8compat.patch
|
|
|
|
|
+ problem with Java 8 compatibility solved in this version
|
|
|
|
|
- Modified patch:
|
|
|
|
|
* tomcat-9.0.31-secretRequired-default.patch
|
|
|
|
|
-> tomcat-9.0.75-secretRequired-default.patch
|
|
|
|
|
+ rediffed to changed context
|
|
|
|
|
* tomcat-9.0-javadoc.patch
|
|
|
|
|
+ drop integrated hunks
|
|
|
|
|
* tomcat-9.0-osgi-build.patch
|
|
|
|
|
+ fix to work with current version
|
|
|
|
|
- Added patch:
|
|
|
|
|
* tomcat-9.0-jdt.patch
|
|
|
|
|
+ fix build against our ecj
|
|
|
|
|
|
2023-04-07 10:08:28 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Apr 7 07:56:31 UTC 2023 - Michele Bussolotto <michele.bussolotto@suse.com>
|
|
|
|
|
|
|
|
|
|
- Fixed CVEs:
|
|
|
|
|
* CVE-2022-45143: JsonErrorReportValve: add escape for type, message or description (bsc#1206840)
|
|
|
|
|
- Added patches:
|
|
|
|
|
* tomcat-9.0.43-CVE-2022-45143.patch
|
|
|
|
|
|
2023-03-28 12:01:54 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Mar 23 08:06:31 UTC 2023 - Michele Bussolotto <michele.bussolotto@suse.com>
|
|
|
|
|
|
|
|
|
|
- Fixed CVEs:
|
|
|
|
|
* CVE-2023-28708: tomcat: not including the secure attribute
|
|
|
|
|
causes information disclosure (bsc#1209622)
|
|
|
|
|
- Added patches:
|
|
|
|
|
* tomcat-9.0.43-CVE-2023-28708.patch
|
|
|
|
|
|
2023-03-03 06:35:10 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Feb 28 11:14:24 UTC 2023 - Michele Bussolotto <michele.bussolotto@suse.com>
|
|
|
|
|
|
|
|
|
|
- Fixed CVEs:
|
|
|
|
|
* CVE-2023-24998: tomcat,tomcat6: FileUpload DoS with excessive parts (bsc#1208513)
|
|
|
|
|
- Added patches:
|
|
|
|
|
* tomcat-9.0.43-CVE-2023-24998.patch
|
|
|
|
|
|
2023-01-17 13:37:11 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Dec 23 08:20:55 UTC 2022 - Michele Bussolotto <michele.bussolotto@suse.com>
|
|
|
|
|
|
|
|
|
|
- set logrotate for localhost.log, manager.log, host-manager.log and localhost_access_log.txt
|
|
|
|
|
- use logrotate for catalina.out
|
|
|
|
|
* update tomcat-serverxml-tool and spec to configure server.xml
|
|
|
|
|
- Added patch:
|
|
|
|
|
* tomcat-9.0-logrotate_everything.patch
|
|
|
|
|
* tomcat-serverxml-tool.tar.gz
|
|
|
|
|
- Removed:
|
|
|
|
|
* tomcat-serverxml-tool-1.0.tar.gz
|
|
|
|
|
|
2022-12-02 09:23:58 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Nov 29 14:46:26 UTC 2022 - Michele Bussolotto <michele.bussolotto@suse.com>
|
|
|
|
|
|
|
|
|
|
- Use catalina.out for logging (bsc#1205647)
|
|
|
|
|
- Added patches:
|
|
|
|
|
* tomcat-9.0-fix_catalina.patch
|
|
|
|
|
|
2022-11-21 13:28:39 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Nov 21 07:42:34 UTC 2022 - Michele Bussolotto <michele.bussolotto@suse.com>
|
|
|
|
|
|
|
|
|
|
- Fixed CVEs:
|
|
|
|
|
* CVE-2022-42252: reject invalid content-length requests. (bsc#1204918)
|
|
|
|
|
- Added patches:
|
|
|
|
|
* tomcat-9.0.43-CVE-2022-42252.patch
|
|
|
|
|
|
2022-11-22 07:28:25 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Oct 20 15:58:40 UTC 2022 - Michele Bussolotto <michele.bussolotto@suse.com>
|
|
|
|
|
|
|
|
|
|
- Fixed CVEs:
|
|
|
|
|
* CVE-2021-43980: Improve the recycling of Processor objects to make it more robust. (bsc#1203868)
|
|
|
|
|
- Added patches:
|
|
|
|
|
* tomcat-9.0.43-CVE-2021-43980.patch
|
|
|
|
|
|
2022-07-13 15:43:12 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jul 13 13:41:43 UTC 2022 - Fridrich Strba <fstrba@suse.com>
|
|
|
|
|
|
|
|
|
|
- Do not hardcode /usr/libexec but use %%_libexecdir during the
|
|
|
|
|
build
|
|
|
|
|
* Fixes for platforms, where /usr/libexec and %%_libexecdir are
|
|
|
|
|
different
|
|
|
|
|
|
2022-07-08 08:29:53 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Jul 7 15:35:34 UTC 2022 - Fridrich Strba <fstrba@suse.com>
|
|
|
|
|
|
|
|
|
|
- Fix bsc#1201081 by building with release=8 all files that can be
|
|
|
|
|
built this way. The one file remaining, build it with source=8 and
|
|
|
|
|
target=8
|
|
|
|
|
- Modified patch:
|
|
|
|
|
* tomcat-9.0.43-java8compat.patch
|
|
|
|
|
+ Do not cast ByteBuffer to Buffer to call the Java 8 compatible
|
|
|
|
|
methods. Build with release=8 instead
|
|
|
|
|
|
2022-04-07 19:49:31 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Apr 7 08:48:46 UTC 2022 - Michele Bussolotto <michele.bussolotto@suse.com>
|
|
|
|
|
|
|
|
|
|
- Security hardening. Deprecate getResources() and always return null. (bsc#1198136)
|
|
|
|
|
- Added patch: tomcat-9.0-hardening_getResources.patch
|
|
|
|
|
|
2022-02-23 12:59:03 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Feb 23 11:57:30 UTC 2022 - Fridrich Strba <fstrba@suse.com>
|
|
|
|
|
|
|
|
|
|
- Remove dependency on log4j/reload4j completely (bsc#1196137)
|
|
|
|
|
|
2022-02-22 20:00:44 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Feb 22 19:00:25 UTC 2022 - Fridrich Strba <fstrba@suse.com>
|
|
|
|
|
|
|
|
|
|
- Do not build against the log4j12 packages, use the new reload4j
|
|
|
|
|
|
2022-01-28 15:25:17 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Jan 28 14:01:40 UTC 2022 - Michele Bussolotto <michele.bussolotto@suse.com>
|
|
|
|
|
|
|
|
|
|
- Fixed CVEs:
|
|
|
|
|
* CVE-2022-23181: Make calculation of session storage location more robust (bsc#1195255)
|
|
|
|
|
- Added patches:
|
|
|
|
|
* tomcat-9.0-CVE-2022-23181.patch
|
|
|
|
|
|
2022-01-14 06:24:24 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jan 10 16:16:16 UTC 2022 - olaf@aepfle.de
|
|
|
|
|
|
|
|
|
|
- remove instance units from post scripts, they can not be reloaded
|
|
|
|
|
|
2021-12-12 09:13:13 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Dec 10 11:20:54 UTC 2021 - Michele Bussolotto <michele.bussolotto@suse.com>
|
|
|
|
|
|
|
|
|
|
- Fix NPE in JNDIRealm, when userRoleAttribute is not set (bsc#1193569)
|
|
|
|
|
- Added patch:
|
|
|
|
|
* tomcat-9.0-NPE-JNDIRealm.patch
|
|
|
|
|
|
2021-11-10 07:56:56 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Nov 10 06:51:24 UTC 2021 - Fridrich Strba <fstrba@suse.com>
|
|
|
|
|
|
|
|
|
|
- Modified patch:
|
|
|
|
|
* tomcat-9.0-osgi-build.patch
|
|
|
|
|
+ account for biz.aQute.bnd.ant artifact in aqute-bnd >= 5.2.0
|
|
|
|
|
|
2021-11-10 09:18:07 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Oct 29 11:15:32 UTC 2021 - Michele Bussolotto <michele.bussolotto@suse.com>
|
|
|
|
|
|
|
|
|
|
- Fixed CVEs:
|
|
|
|
|
* CVE-2021-30640: Escape parameters in JNDI Realm queries (bsc#1188279)
|
|
|
|
|
* CVE-2021-33037: Process T-E header from both HTTP 1.0 and HTTP 1.1. clients (bsc#1188278)
|
|
|
|
|
- Added patches:
|
|
|
|
|
* tomcat-9.0-CVE-2021-30640.patch
|
|
|
|
|
* tomcat-9.0-CVE-2021-33037.patch
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Oct 28 08:33:07 UTC 2021 - Michele Bussolotto <michele.bussolotto@suse.com>
|
|
|
|
|
|
|
|
|
|
- Fixed CVEs:
|
|
|
|
|
* CVE-2021-41079: Validate incoming TLS packet (bsc#1190558)
|
|
|
|
|
- Added patches:
|
|
|
|
|
* tomcat-9.0-CVE-2021-41079.patch
|
|
|
|
|
|
2021-10-19 07:08:40 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Oct 18 21:42:48 UTC 2021 - Marcel Witte <wittemar@googlemail.com>
|
|
|
|
|
|
|
|
|
|
- Update to Tomcat 9.0.43. See changelog at
|
|
|
|
|
https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.43_(markt)
|
|
|
|
|
- Removed Patches because fixed upstream now:
|
|
|
|
|
* tomcat-9.0-CVE-2021-25122.patch
|
|
|
|
|
* tomcat-9.0-CVE-2021-25329.patch
|
2021-10-19 11:36:28 +02:00
|
|
|
- Rebased patch:
|
|
|
|
|
tomcat-9.0.39-java8compat.patch -> tomcat-9.0.43-java8compat.patch
|
2021-10-19 07:08:40 +02:00
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Oct 18 18:26:39 UTC 2021 - Marcel Witte <wittemar@googlemail.com>
|
|
|
|
|
|
|
|
|
|
- Update to Tomcat 9.0.41. See changelog at
|
|
|
|
|
https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.41_(markt)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Oct 18 13:05:17 UTC 2021 - Marcel Witte <wittemar@googlemail.com>
|
|
|
|
|
|
|
|
|
|
- Update to Tomcat 9.0.40. See changelog at
|
|
|
|
|
https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.40_(markt)
|
|
|
|
|
- Removed Patches because fixed upstream now:
|
|
|
|
|
* tomcat-9.0-CVE-2020-17527.patch
|
|
|
|
|
* tomcat-9.0-CVE-2021-24122.patch
|
|
|
|
|
|
2021-03-23 12:26:59 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Mar 22 13:11:34 UTC 2021 - Abid Mehmood <amehmood@suse.com>
|
|
|
|
|
|
|
|
|
|
- Fixed CVEs:
|
|
|
|
|
* CVE-2021-25122: Apache Tomcat h2c request mix-up (bsc#1182912)
|
|
|
|
|
* CVE-2021-25329: Complete fix for CVE-2020-9484 (bsc#1182909)
|
|
|
|
|
- Added patches:
|
|
|
|
|
* tomcat-9.0-CVE-2021-25122.patch
|
|
|
|
|
* tomcat-9.0-CVE-2021-25329.patch
|
|
|
|
|
|
2021-03-18 07:13:13 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Mar 17 16:16:52 UTC 2021 - Abid Mehmood <amehmood@suse.com>
|
|
|
|
|
|
|
|
|
|
- Log if file access is blocked due to symlinks: CVE-2021-24122 (bsc#1180947)
|
|
|
|
|
- Added patch:
|
2021-03-19 06:27:29 +01:00
|
|
|
* tomcat-9.0-CVE-2021-24122.patch
|
2021-03-18 07:13:13 +01:00
|
|
|
|
2021-10-18 08:37:59 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Mar 15 21:42:07 UTC 2021 - Marcel Witte <wittemar@googlemail.com>
|
|
|
|
|
|
|
|
|
|
- Update to Tomcat 9.0.39. See changelog at
|
|
|
|
|
https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.39_(markt)
|
|
|
|
|
- Rebased patches:
|
2021-10-19 11:36:28 +02:00
|
|
|
* tomcat-9.0.38-java8compat.patch -> tomcat-9.0.39-java8compat.patch
|
2021-10-18 08:37:59 +02:00
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Mar 15 14:57:39 UTC 2021 - Marcel Witte <wittemar@googlemail.com>
|
|
|
|
|
|
|
|
|
|
- Update to Tomcat 9.0.38. See changelog at
|
|
|
|
|
https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.38_(markt)
|
|
|
|
|
- Rebased patches:
|
2021-10-19 11:36:28 +02:00
|
|
|
* tomcat-9.0.37-java8compat.patch -> tomcat-9.0.38-java8compat.patch
|
2021-10-18 08:37:59 +02:00
|
|
|
- Removed tomcat-9.0-CVE-2020-13943.patch because that fix is upstream now
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Feb 22 08:56:03 UTC 2021 - Marcel Witte <wittemar@googlemail.com>
|
|
|
|
|
|
|
|
|
|
- Update to Tomcat 9.0.37. See changelog at
|
|
|
|
|
https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.37_(markt)
|
2022-05-23 19:08:25 +02:00
|
|
|
- Fixed CVEs:
|
|
|
|
|
* CVE-2020-13934 (bsc#1174121)
|
|
|
|
|
* CVE-2020-13935 (bsc#1174117)
|
2021-10-18 08:37:59 +02:00
|
|
|
- Rebased patches:
|
|
|
|
|
* tomcat-9.0-osgi-build.patch
|
2021-10-19 11:36:28 +02:00
|
|
|
* tomcat-9.0.31-java8compat.patch -> tomcat-9.0.37-java8compat.patch
|
2021-10-18 08:37:59 +02:00
|
|
|
|
2021-01-12 11:57:31 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Dec 16 12:17:22 UTC 2020 - Abid Mehmood <amehmood@suse.com>
|
|
|
|
|
|
|
|
|
|
- Fix HTTP/2 request header mix-up: CVE-2020-17527 (bsc#1179602)
|
|
|
|
|
- Added patch:
|
|
|
|
|
* tomcat-9.0-CVE-2020-17527.patch
|
|
|
|
|
|
2020-11-03 14:23:42 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Nov 3 10:08:03 UTC 2020 - Matei Albu <malbu@suse.com>
|
|
|
|
|
|
|
|
|
|
- Add source url for tomcat-serverxml-tool
|
|
|
|
|
- Fix typo in tomcat-webapps %postun that caused /examples
|
|
|
|
|
context to remain in server.xml when package was removed
|
|
|
|
|
- Remove tomcat-9.0.init and /usr/lib/tmpfiles.d/tomcat.conf from
|
|
|
|
|
package. They're not used anymore becuse of systemd (bsc#1178396)
|
|
|
|
|
|
2020-11-02 17:37:37 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Oct 30 17:05:52 UTC 2020 - Matei Albu <malbu@suse.com>
|
|
|
|
|
|
|
|
|
|
- Fix tomcat-servlet-4_0-api package alternatives to use
|
|
|
|
|
/usr/share/java/servlet.jar instead of /usr/share/java/tomcat-servlet.jar.
|
|
|
|
|
Keep /usr/share/java/tomcat-servlet.jar symlink for compatibility.
|
|
|
|
|
(bsc#1092163)
|
|
|
|
|
- Change default file ownership in tomcat-webapps from
|
|
|
|
|
tomcat:tomcat to root:tomcat
|
|
|
|
|
|
2020-10-14 10:54:21 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Oct 13 11:23:32 UTC 2020 - Matei Albu <malbu@suse.com>
|
|
|
|
|
|
|
|
|
|
- Fix CVE-2020-13943 (bsc#1177582)
|
|
|
|
|
- Added patch:
|
|
|
|
|
* tomcat-9.0-CVE-2020-13943.patch
|
|
|
|
|
- Change /usr/lib/tomcat to /usr/libexec/tomcat in startup
|
|
|
|
|
scripts (bsc#1177601)
|
|
|
|
|
|
2020-11-03 16:34:19 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Oct 13 10:47:39 UTC 2020 - Jan Engelhardt <jengelh@inai.de>
|
|
|
|
|
|
|
|
|
|
- Replace old specfile constructs. Remove support for SUSE 11.x.
|
|
|
|
|
- Drop %systemd_requires, which is considered a no-op.
|
|
|
|
|
- Trim redundant license mention from description.
|
|
|
|
|
- Make documentation noarch.
|
|
|
|
|
- Do not suppress errors from useradd.
|
|
|
|
|
|
2020-08-26 08:05:55 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Aug 26 06:04:58 UTC 2020 - Fridrich Strba <fstrba@suse.com>
|
|
|
|
|
|
|
|
|
|
- Avoid hardcoding /usr/lib as libexecdir
|
|
|
|
|
|
2020-07-30 23:16:33 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jul 29 20:48:14 UTC 2020 - Matei Albu <malbu@suse.com>
|
|
|
|
|
|
|
|
|
|
- Don't give write permissions for the tomcat group on files and
|
|
|
|
|
directories where it's not needed (bsc#1172562)
|
|
|
|
|
- Change tomcat.pid location from /var/run to /run (bsc#1173103)
|
|
|
|
|
- Use the /sbin/nologin shell when creating the tomcat user
|
|
|
|
|
- Use %tmpfiles_create macro in %post instead of calling
|
|
|
|
|
systemd-tmpfiles directly
|
|
|
|
|
|
2020-06-26 10:05:25 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Jun 26 08:03:01 UTC 2020 - Fridrich Strba <fstrba@suse.com>
|
|
|
|
|
|
|
|
|
|
- Update to Tomcat 9.0.36. See changelog at
|
|
|
|
|
https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.36_(markt)
|
|
|
|
|
- Fixed CVEs:
|
|
|
|
|
CVE-2020-11996 (bsc#1173389)
|
|
|
|
|
|
2020-05-27 11:06:23 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue May 26 14:58:13 UTC 2020 - Matei Albu <malbu@suse.com>
|
|
|
|
|
|
|
|
|
|
- Update to Tomcat 9.0.35. See changelog at
|
|
|
|
|
https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.35_(markt)
|
|
|
|
|
- Fixed CVEs:
|
|
|
|
|
- CVE-2020-9484 (bsc#1171928)
|
|
|
|
|
- Rebased patches:
|
|
|
|
|
* tomcat-9.0-javadoc.patch
|
|
|
|
|
* tomcat-9.0-osgi-build.patch
|
|
|
|
|
* tomcat-9.0.31-java8compat.patch
|
|
|
|
|
|
2020-04-14 09:06:57 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Apr 10 15:43:59 UTC 2020 - Javier Llorente <javier@opensuse.org>
|
|
|
|
|
|
|
|
|
|
- Update to Tomcat 9.0.34. See changelog at
|
|
|
|
|
https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.34_(markt)
|
|
|
|
|
- Notable changes:
|
|
|
|
|
* Add support for default values when using ${...} property
|
|
|
|
|
replacement in configuration files. Based on a pull request
|
|
|
|
|
provided by Bernd Bohmann.
|
|
|
|
|
* When configuring an HTTP Connector, warn if the encoding
|
|
|
|
|
specified for URIEncoding is not a superset of US-ASCII as
|
|
|
|
|
required by RFC 7230.
|
|
|
|
|
* Replace the system property
|
|
|
|
|
org.apache.tomcat.util.buf.UDecoder.ALLOW_ENCODED_SLASH with
|
|
|
|
|
the Connector attribute encodedSolidusHandling that adds an
|
|
|
|
|
additional option to pass the %2f sequence through to the
|
|
|
|
|
application without decoding it in addition to rejecting such
|
|
|
|
|
sequences and decoding such sequences.
|
|
|
|
|
|
2020-03-30 14:36:04 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Mar 30 11:13:09 UTC 2020 - Matei Albu <malbu@suse.com>
|
|
|
|
|
|
|
|
|
|
- Update to Tomcat 9.0.33. See changelog at
|
|
|
|
|
http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.33_(markt)
|
|
|
|
|
- Notable fix: corrected a regression in the improvements to HTTP
|
|
|
|
|
header parsing (bsc#1167438)
|
|
|
|
|
- Rebased patches:
|
|
|
|
|
* tomcat-9.0-javadoc.patch
|
|
|
|
|
* tomcat-9.0-osgi-build.patch
|
|
|
|
|
* tomcat-9.0.31-java8compat.patch
|
|
|
|
|
|
2020-02-28 12:40:32 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Feb 28 10:15:08 UTC 2020 - Matei Albu <malbu@suse.com>
|
|
|
|
|
|
|
|
|
|
- Change default value of AJP connector secretRequired to false
|
|
|
|
|
- Added patch:
|
|
|
|
|
* tomcat-9.0.31-secretRequired-default.patch
|
|
|
|
|
|
2020-02-25 14:35:13 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Feb 25 13:24:14 UTC 2020 - Fridrich Strba <fstrba@suse.com>
|
|
|
|
|
|
|
|
|
|
- Update to Tomcat 9.0.31. See changelog at
|
|
|
|
|
http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.30_(markt)
|
|
|
|
|
- Fixed CVEs:
|
|
|
|
|
* CVE-2019-17569 (bsc#1164825)
|
2020-02-26 06:56:48 +01:00
|
|
|
* CVE-2020-1935 (bsc#1164860)
|
2020-02-25 14:35:13 +01:00
|
|
|
* CVE-2020-1938 (bsc#1164692)
|
|
|
|
|
- Modified patch
|
|
|
|
|
* tomcat-9.0.30-java8compat.patch
|
|
|
|
|
-> tomcat-9.0.31-java8compat.patch
|
|
|
|
|
+ Adapt to changed context
|
|
|
|
|
|
2020-01-29 17:51:19 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jan 29 16:49:29 UTC 2020 - Matei Albu <malbu@suse.com>
|
|
|
|
|
|
|
|
|
|
- Modified patch:
|
|
|
|
|
* tomcat-9.0.30-java8compat.patch
|
|
|
|
|
+ add missing casts (bsc#1162081)
|
|
|
|
|
|
2020-01-20 14:50:27 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jan 20 13:36:39 UTC 2020 - Fridrich Strba <fstrba@suse.com>
|
|
|
|
|
|
|
|
|
|
- Change back the build to build with any Java >= 1.8
|
|
|
|
|
- Added patch:
|
|
|
|
|
* tomcat-9.0.30-java8compat.patch
|
|
|
|
|
+ Cast java.nio.ByteBuffer and java.nio.CharBuffer to
|
|
|
|
|
java.nio.Buffer in order to avoid calling Java 9+ APIs
|
|
|
|
|
(functions with co-variant return types)
|
|
|
|
|
- Renamed patch:
|
|
|
|
|
* tomcat-9.0-disable-osgi-build.patch
|
|
|
|
|
-> tomcat-9.0-osgi-build.patch
|
|
|
|
|
+ Do not disable, but fix OSGi build since we have now
|
|
|
|
|
aqute-bnd
|
|
|
|
|
|
2020-01-17 17:11:57 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Jan 17 14:26:15 UTC 2020 - Matei Albu <malbu@suse.com>
|
|
|
|
|
|
|
|
|
|
- Change build to always use Java 1.8 (bsc#1161025).
|
|
|
|
|
|
2020-01-08 08:19:26 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Dec 27 10:22:58 UTC 2019 - Matei Albu <malbu@suse.com>
|
|
|
|
|
|
|
|
|
|
- Update to Tomcat 9.0.30. See changelog at
|
|
|
|
|
http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.30_(markt)
|
|
|
|
|
- Fixed CVEs:
|
2020-01-08 12:40:53 +01:00
|
|
|
- CVE-2019-0221 (bsc#1136085)
|
|
|
|
|
- CVE-2019-10072 (bsc#1139924)
|
2020-01-08 08:19:26 +01:00
|
|
|
- CVE-2019-12418 (bsc#1159723)
|
|
|
|
|
- CVE-2019-17563 (bsc#1159729)
|
2020-01-08 08:21:02 +01:00
|
|
|
- Removed patch:
|
|
|
|
|
* tomcat-9.0-JDTCompiler-java.patch
|
|
|
|
|
+ It was not applied
|
2020-01-08 08:19:26 +01:00
|
|
|
|
2019-11-18 10:16:11 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Nov 18 09:13:10 UTC 2019 - Fridrich Strba <fstrba@suse.com>
|
|
|
|
|
|
|
|
|
|
- Update to Tomcat 9.0.27. See changelog at
|
|
|
|
|
http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.27_(markt)
|
|
|
|
|
- Uset aqute-bnd to generate OSGi manifest, since we have that
|
|
|
|
|
package now in openSUSE:Factory
|
|
|
|
|
- Removed patch:
|
|
|
|
|
* tomcat-9.0-disable-osgi-build.patch
|
|
|
|
|
+ not needed
|
|
|
|
|
|
2019-11-16 00:26:24 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Nov 15 23:25:47 UTC 2019 - Fridrich Strba <fstrba@suse.com>
|
|
|
|
|
|
|
|
|
|
- Add maven pom files for tomcat-jni and tomcat-jaspic-api
|
|
|
|
|
|
2019-10-04 15:33:33 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Oct 4 13:32:51 UTC 2019 - Fridrich Strba <fstrba@suse.com>
|
|
|
|
|
|
|
|
|
|
- Distribute the pom file also for tomcat-util-scan artifact
|
|
|
|
|
|
2019-10-01 14:29:47 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Oct 1 12:29:16 UTC 2019 - Fridrich Strba <fstrba@suse.com>
|
|
|
|
|
|
|
|
|
|
- Build against compatibility log4j12 package
|
|
|
|
|
|
2019-09-25 14:19:17 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Sep 25 12:18:29 UTC 2019 - Fridrich Strba <fstrba@suse.com>
|
|
|
|
|
|
|
|
|
|
- Adapt to the new ecj directory layout
|
|
|
|
|
|
2019-06-12 17:18:05 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jun 12 14:50:12 UTC 2019 - Dominique Leuenberger <dimstar@opensuse.org>
|
|
|
|
|
|
|
|
|
|
- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
|
|
|
|
|
shortcut the build queues by allowing usage of systemd-mini
|
|
|
|
|
|
2019-05-21 17:07:37 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon May 20 20:40:08 UTC 2019 - Matei <malbu@suse.com>
|
|
|
|
|
|
|
|
|
|
- Update to Tomcat 9.0.20. See changelog at
|
|
|
|
|
http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.20_(markt)
|
|
|
|
|
- increase maximum number of threads and open files for tomcat (bsc#1111966)
|
|
|
|
|
|
2019-04-15 15:54:16 +02:00
|
|
|
-------------------------------------------------------------------
|
2019-04-22 21:57:57 +02:00
|
|
|
Mon Apr 22 17:01:17 UTC 2019 - malbu@suse.com
|
|
|
|
|
|
|
|
|
|
- Update to Tomcat 9.0.19. See changelog at
|
|
|
|
|
http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.19_(markt)
|
|
|
|
|
Notable packaging changes:
|
|
|
|
|
- File /usr/share/java/tomcat/catalina-jmx-remote.jar was removed.
|
|
|
|
|
The classes contained in this jar were merged into
|
|
|
|
|
/usr/share/java/tomcat/catalina.jar.
|
|
|
|
|
- Fixed CVEs:
|
|
|
|
|
- CVE-2019-0199 (bsc#1131055)
|
|
|
|
|
- Rebased patch:
|
|
|
|
|
- tomcat-9.0-JDTCompiler-java.patch
|
|
|
|
|
- tomcat-9.0-javadoc.patch
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2019-04-15 15:54:16 +02:00
|
|
|
Mon Apr 15 13:53:30 UTC 2019 - Fridrich Strba <fstrba@suse.com>
|
|
|
|
|
|
|
|
|
|
- Build classpath directly with the geronimo jars instead of with
|
|
|
|
|
symlinks to them
|
|
|
|
|
|
2019-02-21 11:44:05 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Feb 19 17:22:16 UTC 2019 - malbu@suse.com
|
|
|
|
|
|
|
|
|
|
- Don't overwrite changes made to server.xml contexts when updating
|
2019-02-21 12:17:26 +01:00
|
|
|
bundled webapps.
|
2019-02-21 11:44:05 +01:00
|
|
|
|
2019-02-18 17:00:05 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Feb 18 15:55:12 UTC 2019 - malbu@suse.com
|
|
|
|
|
|
|
|
|
|
- Set javac target to 1.8 when building docs samples and serverxmltool
|
|
|
|
|
|
2019-02-04 16:45:17 +01:00
|
|
|
-------------------------------------------------------------------
|
2019-02-05 19:26:47 +01:00
|
|
|
Tue Feb 5 09:50:35 UTC 2019 - malbu@suse.com
|
|
|
|
|
|
|
|
|
|
- Move webapps bundled with Tomcat to /usr/share/tomcat/tomcat-webapps
|
|
|
|
|
(bsc#1092341). Affected packages:
|
|
|
|
|
- tomcat-webapps
|
|
|
|
|
- tomcat-admin-webapps
|
|
|
|
|
- tomcat-docs-webapp
|
|
|
|
|
- Remove %doc directive from tomcat-docs-webapps files section so that
|
|
|
|
|
zypper installs files even if rpm.install.excludedocs is set to yes.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2019-02-04 16:45:17 +01:00
|
|
|
Mon Feb 4 15:35:43 UTC 2019 - malbu@suse.com
|
|
|
|
|
|
|
|
|
|
- Require Java 1.8 or later (bsc#1123407)
|
|
|
|
|
|
2019-01-26 09:09:06 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat Jan 26 08:07:36 UTC 2019 - Fridrich Strba <fstrba@suse.com>
|
|
|
|
|
|
|
|
|
|
- Clean up OSGi manifest injection
|
|
|
|
|
- Put embed maven metadata into embed subpackage
|
|
|
|
|
- Use the .mfiles* lists generated by %%add_maven_depmap macro
|
|
|
|
|
|
2019-01-16 18:15:30 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jan 16 17:05:36 UTC 2019 - malbu@suse.com
|
|
|
|
|
|
|
|
|
|
- Fix tomcat-tool-wrapper classpath error (bsc#1120745)
|
|
|
|
|
|
2019-01-11 17:11:31 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Jan 11 15:46:43 UTC 2019 - malbu@suse.com
|
|
|
|
|
|
|
|
|
|
- Fix tomcat-digest classpath error (bsc#1120745)
|
|
|
|
|
|
2018-12-05 09:10:56 +01:00
|
|
|
-------------------------------------------------------------------
|
2019-01-09 10:10:53 +01:00
|
|
|
Sat Dec 29 10:08:17 UTC 2018 - ecsos@opensuse.org
|
|
|
|
|
|
|
|
|
|
- Update to Tomcat 9.0.14. See changelog at
|
|
|
|
|
http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.14_(markt)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2018-12-05 09:10:56 +01:00
|
|
|
Wed Dec 5 08:05:30 UTC 2018 - Fridrich Strba <fstrba@suse.com>
|
|
|
|
|
|
|
|
|
|
- Add pom files for tomcat-jdbc and tomcat-dbcp
|
2018-12-05 10:37:03 +01:00
|
|
|
- Add org.eclipse.jetty.orbit* aliases to correspondant artifacts
|
2018-12-05 09:10:56 +01:00
|
|
|
|
2018-11-13 10:38:54 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Nov 09 07:16:23 UTC 2018 - sean@suspend.net
|
|
|
|
|
|
|
|
|
|
- Update to Tomcat 9.0.13. See changelog at
|
|
|
|
|
http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.13_(markt)
|
|
|
|
|
|
Accepting request 642919 from home:mateialbu:branches:Java:packages
- Update to Tomcat 9.0.12. See changelog at
http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.12_(markt)
- Fixed CVEs:
- CVE-2018-11784 (bsc#1110850)
- Rebased patches:
- tomcat-9.0-disable-osgi-build.patch
- tomcat-9.0-javadoc.patch
- tomcat-9.0-sle.catalina.policy.patch
- tomcat-9.0-tomcat-users-webapp.patch
- Declare following files to config(noreplace) to prevent override
access rights:
- host-manager/META-INF/context.xml
- manager/META-INF/context.xml
- Empty tomcat-9.0.sysconfig to avoid overwriting of customer's
configuration during update (bsc#1067720)
- Update to Tomcat 9.0.10. See changelog at
http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.10_(markt)
- Fixed CVEs:
- CVE-2018-1336 (bsc#1102400)
- CVE-2018-8014 (bsc#1093697)
- CVE-2018-8034 (bsc#1102379)
- CVE-2018-8037 (bsc#1102410)
- Rebased patch tomcat-9.0-JDTCompiler-java.patch
- Added patch tomcat-9.0-disable-osgi-build.patch to disable adding
OSGi metadata to JAR files
- Update to Tomcat 9.0.5. See changelog at
http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.5_(markt)
- Modified patch:
* tomcat-9.0-javadoc.patch
+ Don't append to javadoc --add-modules since we are building
with source=8
+ Avoid accessing Internet URLs from build environment
- Update to Tomcat 9.0.2:
* Major update for tomcat8 from tomcat9
* For full changelog please read upstream changes at:
+ http://tomcat.apache.org/tomcat-9.0-doc/changelog.html
* Rename all tomcat-8.0-* files to tomcat-9.0-*
- Changed patches:
* Deleted: tomcat-8.0-bootstrap-MANIFEST.MF.patch
* Deleted: tomcat-8.0-sle.catalina.policy.patch
* Deleted: tomcat-8.0-tomcat-users-webapp.patch
* Deleted: tomcat-8.0.33-JDTCompiler-java.patch
* Deleted: tomcat-8.0.44-javadoc.patch
* Deleted: tomcat-8.0.9-property-build.windows.patch
* Added: tomcat-9.0-JDTCompiler-java.patch
* Added: tomcat-9.0-bootstrap-MANIFEST.MF.patch
* Added: tomcat-9.0-javadoc.patch
* Added: tomcat-9.0-sle.catalina.policy.patch
* Added: tomcat-9.0-tomcat-users-webapp.patch
- Renamed subpackage tomcat-3_1-api to tomcat-4_0-api
to reflect the new Servlet API version.
- Commented out JAVA_HOME in /etc/tomcat/tomcat.conf
- Added "tomcat-" prefix to lib symlinks under
/usr/share/java to avoid file conflicts with servletapi5
and geronimo-specs
- Fixed wrong %ghost file paths for alternatives symlinks
- Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468)
- Build with JDK 8 to fix runtime errors when running with JDK 7
and 8
- Fix tomcat-digest classpath error (bsc#977410)
- Fix packaged /etc/alternatives symlinks for api libs that caused
rpm -V to report link mismatch (bsc#1019016)
- update to 8.0.47
http://tomcat.apache.org/tomcat-8.0-doc/changelog.html
* Fixed CVE:
- CVE-2017-12617
- rebase tomcat-8.0-sle.catalina.policy.patch
- Added patch:
* tomcat-8.0.44-javadoc.patch
- generate documentation with the same source level as class
files
- fixes build with jdk9
- Version update to 8.0.44:
http://tomcat.apache.org/tomcat-8.0-doc/changelog.html
* Fixed CVE:
- CVE-2017-5664 (bsc#1042910)
- New build dependency: javapackages-local
- Version update to 8.0.43:
* Another bugfix release, for full details see:
http://tomcat.apache.org/tomcat-8.0-doc/changelog.html
* Fixed CVEs:
- CVE-2017-5647 (bnc#1033448)
- CVE-2017-5648 (bnc#1033447)
- CVE-2016-8745
- Renamed and rebased patches:
* tomcat-7.0-sle.catalina.policy.patch -> tomcat-8.0-sle.catalina.policy.patch
- Enable optional setenv.sh script. See section
"(3.4) Using the "setenv" script (optional, recommended)" in
http://tomcat.apache.org/tomcat-8.0-doc/RUNNING.txt
(bnc#1002662)
- Fix file conflicts when upgrading from SLES 12 to SLES 12 SP1 (bnc#1023412).
Added explicit obsoletes for tomcat-el-2_2-api, tomcat-jsp-2_2-api,
tomcat-servlet-3_0-api
- update to 8.0.39: (boo#1003911)
* Improve handling of I/O errors with async processing
* Fail earlier on invalid HTTP request
- includes changes from 8.0.38:
* Refactoring the non-container thread Async complete()/dispatch()
handling to remove the possibility of deadlock
* Improved UTF-8 handling for the RewriteValve
- includes changes from 8.0.37:
* Treat paths used to obtain a request dispatcher as encoded
(configurable)
* Various jdbc-pool fixes
- drop tomcat-8.0.36-jar-scanner-loop.patch, upstream
- Switch to commons-dbcp2 fate#321029
- Backport fix for inifinite loop in the jar scanner for 8.0.36. (bnc#993862)
Added: tomcat-8.0.36-jar-scanner-loop.patch
- Version update to 8.0.36:
* Another bugfix release for the 8.0 series. Full details:
http://tomcat.apache.org/tomcat-8.0-doc/changelog.html#Tomcat_8.0.36_(markt)
- CVE fixed by the version update:
- CVE-2016-3092 (bnc#986359)
- Fixed a deployment error in the examples webapp by changing the context.xml format to the new one
introduced by Tomcat 8. See http://tomcat.apache.org/migration-8.html#Web_application_resources
- fix maven fragments paths to build in multiple distribution
versions
- Version update to 8.0.33:
* Another bugfix release for 8.0 series, full details:
http://tomcat.apache.org/tomcat-8.0-doc/changelog.html#Tomcat_8.0.33_(markt)
- Rebase tomcat-8.0-tomcat-users-webapp.patch
- Rebase tomcat-7.0.53-JDTCompiler-java.patch
to tomcat-8.0.33-JDTCompiler-java.patch
- Fix fixme for the prereq preamble value
- It seems systemd prints error on adding the @ services to macros
so do not do that
- package was partly merged with the scripts used in the
Fedora distribution
- support running multiple tomcat instances on the same server
(fate#317783)
- add catalina-jmx-remote.jar (fate#318403)
- remove sysvinit support: systemd is required
- update changes file for CVE information
- Fixed CVEs:
- CVE-2015-5346 (bnc#967814) in 8.0.32
- CVE-2015-5351 (bnc#967812) in 8.0.32
- CVE-2016-0706 (bnc#967815) in 8.0.32
- CVE-2016-0714 (bnc#967964) in 8.0.32
- CVE-2016-0763 (bnc#967966) in 8.0.32
- CVE-2015-5345 (bnc#967965) in 8.0.30
- CVE-2015-5174 (bnc#967967) in 8.0.27
- Version update to 8.0.32:
* Another bugfix release for 8.0 series, full details:
http://tomcat.apache.org/tomcat-8.0-doc/changelog.html#Tomcat_8.0.32_(markt)
- Rebase patch:
* tomcat-8.0.9-property-build.windows.patch
- update to Tomcat 8.0.28
* Multiple fixes, read upstream changelog at:
https://tomcat.apache.org/tomcat-8.0-doc/changelog.html#Tomcat_8.0.28_(markt)
- Some whitespace cleanups
- Remove pointless conflicts on provide/obsolete symbols
- Version bump to 8.0.23 fate#318913:
* Multiple testfixes all around, read upstream changelog at:
http://tomcat.apache.org/tomcat-8.0-doc/changelog.html#Tomcat_8.0.23_(markt)
- Fix previous commit. Fix one rpmlint warning
- Drop gpg verification from spec, it is done by obs
- Fix build with new jpackage-tools
- update to Tomcat 8.0.18:
* Major update for tomcat8 from tomcat7
* For full changelog please read upstream changes at:
+ http://tomcat.apache.org/tomcat-8.0-doc/changelog.html
* Rename all tomcat-7.0-* files to tomcat-8.0-*
* Update keyring file
- Update windows patch to apply again:
* Deleted: tomcat-7.0.52-property-build.windows.patch
* Added: tomcat-8.0.9-property-build.windows.patch
* Added:tomcat-8.0-tomcat-users-webapp.patch
* Deleted: tomcat-7.0-tomcat-users-webapp.patch
* Added: tomcat-8.0-bootstrap-MANIFEST.MF.patch
* Deleted: tomcat-7.0-bootstrap-MANIFEST.MF.patch
- Version 1.1.30 or higher is required for APR listener (bnc#914725)
- SLE12 has different path for the "rm" command than older versions.
To avoid possible clashes, the entire coreutils must be provided.
(bnc#894292)
- Fixed Security Manager policies, which makes unable properly
run webapps by default. (bnc#891264)
Added: tomcat-7.0-sle.catalina.policy.patch
- Missing security manager policy file prevents Tomcat to start
with systemd. (bnc#890995)
- Tomcat 7.0.55 requires ecj 4.4.0
- include the tomcat websocket implementation (tomcat7-websocket)
- Update to 7.0.55
* Update to the Eclipse JDT Compiler 4.4
* Better error handling when the error occurs after the response
has been committed
* Various improvements to the Mapper including fixing some
concurrency bugs
* See http://tomcat.apache.org/tomcat-7.0-doc/changelog.html
- build tomcat-embed as a subpackage
- Drop two unused defines
- touch the alternatives files to avoid build errors
in older versions
- Do not define default defattr as it is pointless.
- One file here was not supposed to be ghost.
- Fix once more the alternatives.
- Add path to rm command.
- Silence loads of warnings by rpmlintrc
- Cleanup with spec-cleaner and format few things a bit.
- Remove few deps not really needed for sle11.
- Drop unused files obs.bl and local.lb
- Drop unused collections-tomcat-build.xml
- Version bump to 7.0.54:
* bugfix update
* See http://tomcat.apache.org/tomcat-7.0-doc/changelog.html
- Update to 7.0.53
* bugfix release
* Update the Eclipse JDT compiler to enable full Java 8 support in JSPs.
* See http://tomcat.apache.org/tomcat-7.0-doc/changelog.html
- Patch for Bug 56373
* See https://issues.apache.org/bugzilla/show_bug.cgi?id=56373
* tomcat-7.0.53-JDTCompiler-java.patch
- Rename tomcat-7.0.2-property-build.windows.patch to
tomcat-7.0.52-property-build.windows.patch
- remove saxon build requirement for sles
- disable bytecode check for sles
- remove unknown option from fillup_only macro
- wrap systemd %pre[un]/%post[un] in conditional
- specify required ant version
- Update to 7.0.52
* bugfix release
* Fix CVE-2014-0050, a DoS vulnerability related to multi-part processing
- Update to 7.0.50
* bugfix release
- Add missing commons-pool-tomcat5 symlink (bnc#847505c#13)
- Update to 7.0.47
* bugfix release
* backport of JSR-356 Java WebSocket 1.0
* package tomcat now requires java7 at lease
- Updated tomcat.keyring to reflect the fact new release is signed by
Violeta Georgieva / D63011C7
see http://osdir.com/ml/dev-tomcat.apache.org/2013-10/msg00849.html
- Add tomcat-dbcp.jar (bnc#847505) back into tomcat lib dir
- Install tomcat-coyote.jar as well
- Remove pointless scriplets
- Move from jpackage-utils to javapackage-tools
- drop a dependency on unecessary -tomcat5 packages
- use commons-dbcp.jar for build
- add missing commons-pool.jar to libdir
- add _constraints to not schedule build on some build machines
workaround for bnc#832762
- Add missing 'su root tomcat' line to logrotate. See also
https://bugzilla.redhat.com/show_bug.cgi?id=790334
- call chown --no-dereference in init script
(bnc#822177#c7/prevents CVE-2013-1976)
- update to 7.0.42 (bugfix release)
see http://tomcat.apache.org/tomcat-7.0-doc/changelog.html
- fix file list to be compatible for new rpm
- update to 7.0.39 (bugfix release)
- install only systemd unit files on openSUSE 12.1+
* and call proper code when init script still exists
- add a proper scripplets for -jsvc subpackage
- don't use catalina.out, systemd redirects stderr/stdout to syslog
- don't use and recommends logrotate
- package /etc/ant.d properly, mark only catalina-ant as a config file
- Fix tomcat init scripts generating malformed classpath
(http://youtrack.jetbrains.com/issue/JT-18545)
bnc#804992
- update to 7.0.35 (bugfix release)
require ecj >= 4.2.1, like upstream do
- make gpg-offline work distros after 12.2
- Ensure tomcat stdout/stderr output ends up in catalina.out
- Recommend libtcnative-1-0 >= 1.1.24
- /etc/init.d/tomcate init script fixes:
* Include /usr/bin and /usr/sbin in the PATH
* Fix logic for cleaning the work directories
* Fix typo (log_success_msg lsb function name)
* Fix typo (reload message)
- Require log4j
- Require gpg-offline on 12.2+
- Verify GPG signature.
- update to 7.0.33 (bugfix release)
- update to 7.0.30 (bugfix release)
* SSI and CGI disabled by default
- fix bnc#779538: change the working dir to $CATALINA_BASE
- document the CATALINA_BASE and CATALINA_HOME in tomcat.conf better
- fix rpmlintrc file
- fix bnc#771802 - systemd support is broken
* change type froking to simple as it does not make a sense run java in a
background to emulate that
* remove the need of nested wrappers, so /usr/sbin/tomcat-sysd now relies on
systemd features like User/EnvironmentFile
* workaround the 143 exit code in Stop phase - return 0 in this case
* merge the jsvc into tomcat-sysd code, the -jsvc-sysd is a symlink
* properly use jsvc with pid file to start and stop
- update to 7.0.26 (bugfix release)
- rename package to tomcat in order to emphasise a fact, there is only one
major release of tomcat maintained in distribution
- add manifest files and systemd support (thanks Fedora)
- create tomcat-jsvc package
- update to 7.0.26 (bugfix release)
- fix bnc#747771 - don't use /var/lock/subsys
sync tomcat7 init with tomcat6
- update to 7.0.25 (bugfix release)
- update to 7.0.22 (bugfix release)
- wrote changes and prepare for inclusion to openSUSE distribution
- fix bnc#726307
/etc/tomcat7 is writtable for tomcat group
- update to version 7.0.21
- update to version 7.0.16 (bugfix update)
- add rpmlintrc, digest, init and wrapper scripts and config file
- build require geronimo apis and wsdl4j
- disable webservices in javadoc target
- initial packaging of tomcat7 7.0.6
OBS-URL: https://build.opensuse.org/request/show/642919
OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat?expand=0&rev=131
2018-10-18 13:15:17 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Oct 18 08:12:41 UTC 2018 - malbu@suse.com
|
|
|
|
|
|
|
|
|
|
- Update to Tomcat 9.0.12. See changelog at
|
|
|
|
|
http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.12_(markt)
|
|
|
|
|
- Fixed CVEs:
|
|
|
|
|
- CVE-2018-11784 (bsc#1110850)
|
|
|
|
|
- Rebased patches:
|
|
|
|
|
- tomcat-9.0-disable-osgi-build.patch
|
|
|
|
|
- tomcat-9.0-javadoc.patch
|
|
|
|
|
- tomcat-9.0-sle.catalina.policy.patch
|
|
|
|
|
- tomcat-9.0-tomcat-users-webapp.patch
|
|
|
|
|
|
2018-10-02 16:07:34 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Sep 11 10:34:02 UTC 2018 - ecsos@opensuse.org
|
|
|
|
|
|
|
|
|
|
- Declare following files to config(noreplace) to prevent override
|
Accepting request 642919 from home:mateialbu:branches:Java:packages
- Update to Tomcat 9.0.12. See changelog at
http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.12_(markt)
- Fixed CVEs:
- CVE-2018-11784 (bsc#1110850)
- Rebased patches:
- tomcat-9.0-disable-osgi-build.patch
- tomcat-9.0-javadoc.patch
- tomcat-9.0-sle.catalina.policy.patch
- tomcat-9.0-tomcat-users-webapp.patch
- Declare following files to config(noreplace) to prevent override
access rights:
- host-manager/META-INF/context.xml
- manager/META-INF/context.xml
- Empty tomcat-9.0.sysconfig to avoid overwriting of customer's
configuration during update (bsc#1067720)
- Update to Tomcat 9.0.10. See changelog at
http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.10_(markt)
- Fixed CVEs:
- CVE-2018-1336 (bsc#1102400)
- CVE-2018-8014 (bsc#1093697)
- CVE-2018-8034 (bsc#1102379)
- CVE-2018-8037 (bsc#1102410)
- Rebased patch tomcat-9.0-JDTCompiler-java.patch
- Added patch tomcat-9.0-disable-osgi-build.patch to disable adding
OSGi metadata to JAR files
- Update to Tomcat 9.0.5. See changelog at
http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.5_(markt)
- Modified patch:
* tomcat-9.0-javadoc.patch
+ Don't append to javadoc --add-modules since we are building
with source=8
+ Avoid accessing Internet URLs from build environment
- Update to Tomcat 9.0.2:
* Major update for tomcat8 from tomcat9
* For full changelog please read upstream changes at:
+ http://tomcat.apache.org/tomcat-9.0-doc/changelog.html
* Rename all tomcat-8.0-* files to tomcat-9.0-*
- Changed patches:
* Deleted: tomcat-8.0-bootstrap-MANIFEST.MF.patch
* Deleted: tomcat-8.0-sle.catalina.policy.patch
* Deleted: tomcat-8.0-tomcat-users-webapp.patch
* Deleted: tomcat-8.0.33-JDTCompiler-java.patch
* Deleted: tomcat-8.0.44-javadoc.patch
* Deleted: tomcat-8.0.9-property-build.windows.patch
* Added: tomcat-9.0-JDTCompiler-java.patch
* Added: tomcat-9.0-bootstrap-MANIFEST.MF.patch
* Added: tomcat-9.0-javadoc.patch
* Added: tomcat-9.0-sle.catalina.policy.patch
* Added: tomcat-9.0-tomcat-users-webapp.patch
- Renamed subpackage tomcat-3_1-api to tomcat-4_0-api
to reflect the new Servlet API version.
- Commented out JAVA_HOME in /etc/tomcat/tomcat.conf
- Added "tomcat-" prefix to lib symlinks under
/usr/share/java to avoid file conflicts with servletapi5
and geronimo-specs
- Fixed wrong %ghost file paths for alternatives symlinks
- Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468)
- Build with JDK 8 to fix runtime errors when running with JDK 7
and 8
- Fix tomcat-digest classpath error (bsc#977410)
- Fix packaged /etc/alternatives symlinks for api libs that caused
rpm -V to report link mismatch (bsc#1019016)
- update to 8.0.47
http://tomcat.apache.org/tomcat-8.0-doc/changelog.html
* Fixed CVE:
- CVE-2017-12617
- rebase tomcat-8.0-sle.catalina.policy.patch
- Added patch:
* tomcat-8.0.44-javadoc.patch
- generate documentation with the same source level as class
files
- fixes build with jdk9
- Version update to 8.0.44:
http://tomcat.apache.org/tomcat-8.0-doc/changelog.html
* Fixed CVE:
- CVE-2017-5664 (bsc#1042910)
- New build dependency: javapackages-local
- Version update to 8.0.43:
* Another bugfix release, for full details see:
http://tomcat.apache.org/tomcat-8.0-doc/changelog.html
* Fixed CVEs:
- CVE-2017-5647 (bnc#1033448)
- CVE-2017-5648 (bnc#1033447)
- CVE-2016-8745
- Renamed and rebased patches:
* tomcat-7.0-sle.catalina.policy.patch -> tomcat-8.0-sle.catalina.policy.patch
- Enable optional setenv.sh script. See section
"(3.4) Using the "setenv" script (optional, recommended)" in
http://tomcat.apache.org/tomcat-8.0-doc/RUNNING.txt
(bnc#1002662)
- Fix file conflicts when upgrading from SLES 12 to SLES 12 SP1 (bnc#1023412).
Added explicit obsoletes for tomcat-el-2_2-api, tomcat-jsp-2_2-api,
tomcat-servlet-3_0-api
- update to 8.0.39: (boo#1003911)
* Improve handling of I/O errors with async processing
* Fail earlier on invalid HTTP request
- includes changes from 8.0.38:
* Refactoring the non-container thread Async complete()/dispatch()
handling to remove the possibility of deadlock
* Improved UTF-8 handling for the RewriteValve
- includes changes from 8.0.37:
* Treat paths used to obtain a request dispatcher as encoded
(configurable)
* Various jdbc-pool fixes
- drop tomcat-8.0.36-jar-scanner-loop.patch, upstream
- Switch to commons-dbcp2 fate#321029
- Backport fix for inifinite loop in the jar scanner for 8.0.36. (bnc#993862)
Added: tomcat-8.0.36-jar-scanner-loop.patch
- Version update to 8.0.36:
* Another bugfix release for the 8.0 series. Full details:
http://tomcat.apache.org/tomcat-8.0-doc/changelog.html#Tomcat_8.0.36_(markt)
- CVE fixed by the version update:
- CVE-2016-3092 (bnc#986359)
- Fixed a deployment error in the examples webapp by changing the context.xml format to the new one
introduced by Tomcat 8. See http://tomcat.apache.org/migration-8.html#Web_application_resources
- fix maven fragments paths to build in multiple distribution
versions
- Version update to 8.0.33:
* Another bugfix release for 8.0 series, full details:
http://tomcat.apache.org/tomcat-8.0-doc/changelog.html#Tomcat_8.0.33_(markt)
- Rebase tomcat-8.0-tomcat-users-webapp.patch
- Rebase tomcat-7.0.53-JDTCompiler-java.patch
to tomcat-8.0.33-JDTCompiler-java.patch
- Fix fixme for the prereq preamble value
- It seems systemd prints error on adding the @ services to macros
so do not do that
- package was partly merged with the scripts used in the
Fedora distribution
- support running multiple tomcat instances on the same server
(fate#317783)
- add catalina-jmx-remote.jar (fate#318403)
- remove sysvinit support: systemd is required
- update changes file for CVE information
- Fixed CVEs:
- CVE-2015-5346 (bnc#967814) in 8.0.32
- CVE-2015-5351 (bnc#967812) in 8.0.32
- CVE-2016-0706 (bnc#967815) in 8.0.32
- CVE-2016-0714 (bnc#967964) in 8.0.32
- CVE-2016-0763 (bnc#967966) in 8.0.32
- CVE-2015-5345 (bnc#967965) in 8.0.30
- CVE-2015-5174 (bnc#967967) in 8.0.27
- Version update to 8.0.32:
* Another bugfix release for 8.0 series, full details:
http://tomcat.apache.org/tomcat-8.0-doc/changelog.html#Tomcat_8.0.32_(markt)
- Rebase patch:
* tomcat-8.0.9-property-build.windows.patch
- update to Tomcat 8.0.28
* Multiple fixes, read upstream changelog at:
https://tomcat.apache.org/tomcat-8.0-doc/changelog.html#Tomcat_8.0.28_(markt)
- Some whitespace cleanups
- Remove pointless conflicts on provide/obsolete symbols
- Version bump to 8.0.23 fate#318913:
* Multiple testfixes all around, read upstream changelog at:
http://tomcat.apache.org/tomcat-8.0-doc/changelog.html#Tomcat_8.0.23_(markt)
- Fix previous commit. Fix one rpmlint warning
- Drop gpg verification from spec, it is done by obs
- Fix build with new jpackage-tools
- update to Tomcat 8.0.18:
* Major update for tomcat8 from tomcat7
* For full changelog please read upstream changes at:
+ http://tomcat.apache.org/tomcat-8.0-doc/changelog.html
* Rename all tomcat-7.0-* files to tomcat-8.0-*
* Update keyring file
- Update windows patch to apply again:
* Deleted: tomcat-7.0.52-property-build.windows.patch
* Added: tomcat-8.0.9-property-build.windows.patch
* Added:tomcat-8.0-tomcat-users-webapp.patch
* Deleted: tomcat-7.0-tomcat-users-webapp.patch
* Added: tomcat-8.0-bootstrap-MANIFEST.MF.patch
* Deleted: tomcat-7.0-bootstrap-MANIFEST.MF.patch
- Version 1.1.30 or higher is required for APR listener (bnc#914725)
- SLE12 has different path for the "rm" command than older versions.
To avoid possible clashes, the entire coreutils must be provided.
(bnc#894292)
- Fixed Security Manager policies, which makes unable properly
run webapps by default. (bnc#891264)
Added: tomcat-7.0-sle.catalina.policy.patch
- Missing security manager policy file prevents Tomcat to start
with systemd. (bnc#890995)
- Tomcat 7.0.55 requires ecj 4.4.0
- include the tomcat websocket implementation (tomcat7-websocket)
- Update to 7.0.55
* Update to the Eclipse JDT Compiler 4.4
* Better error handling when the error occurs after the response
has been committed
* Various improvements to the Mapper including fixing some
concurrency bugs
* See http://tomcat.apache.org/tomcat-7.0-doc/changelog.html
- build tomcat-embed as a subpackage
- Drop two unused defines
- touch the alternatives files to avoid build errors
in older versions
- Do not define default defattr as it is pointless.
- One file here was not supposed to be ghost.
- Fix once more the alternatives.
- Add path to rm command.
- Silence loads of warnings by rpmlintrc
- Cleanup with spec-cleaner and format few things a bit.
- Remove few deps not really needed for sle11.
- Drop unused files obs.bl and local.lb
- Drop unused collections-tomcat-build.xml
- Version bump to 7.0.54:
* bugfix update
* See http://tomcat.apache.org/tomcat-7.0-doc/changelog.html
- Update to 7.0.53
* bugfix release
* Update the Eclipse JDT compiler to enable full Java 8 support in JSPs.
* See http://tomcat.apache.org/tomcat-7.0-doc/changelog.html
- Patch for Bug 56373
* See https://issues.apache.org/bugzilla/show_bug.cgi?id=56373
* tomcat-7.0.53-JDTCompiler-java.patch
- Rename tomcat-7.0.2-property-build.windows.patch to
tomcat-7.0.52-property-build.windows.patch
- remove saxon build requirement for sles
- disable bytecode check for sles
- remove unknown option from fillup_only macro
- wrap systemd %pre[un]/%post[un] in conditional
- specify required ant version
- Update to 7.0.52
* bugfix release
* Fix CVE-2014-0050, a DoS vulnerability related to multi-part processing
- Update to 7.0.50
* bugfix release
- Add missing commons-pool-tomcat5 symlink (bnc#847505c#13)
- Update to 7.0.47
* bugfix release
* backport of JSR-356 Java WebSocket 1.0
* package tomcat now requires java7 at lease
- Updated tomcat.keyring to reflect the fact new release is signed by
Violeta Georgieva / D63011C7
see http://osdir.com/ml/dev-tomcat.apache.org/2013-10/msg00849.html
- Add tomcat-dbcp.jar (bnc#847505) back into tomcat lib dir
- Install tomcat-coyote.jar as well
- Remove pointless scriplets
- Move from jpackage-utils to javapackage-tools
- drop a dependency on unecessary -tomcat5 packages
- use commons-dbcp.jar for build
- add missing commons-pool.jar to libdir
- add _constraints to not schedule build on some build machines
workaround for bnc#832762
- Add missing 'su root tomcat' line to logrotate. See also
https://bugzilla.redhat.com/show_bug.cgi?id=790334
- call chown --no-dereference in init script
(bnc#822177#c7/prevents CVE-2013-1976)
- update to 7.0.42 (bugfix release)
see http://tomcat.apache.org/tomcat-7.0-doc/changelog.html
- fix file list to be compatible for new rpm
- update to 7.0.39 (bugfix release)
- install only systemd unit files on openSUSE 12.1+
* and call proper code when init script still exists
- add a proper scripplets for -jsvc subpackage
- don't use catalina.out, systemd redirects stderr/stdout to syslog
- don't use and recommends logrotate
- package /etc/ant.d properly, mark only catalina-ant as a config file
- Fix tomcat init scripts generating malformed classpath
(http://youtrack.jetbrains.com/issue/JT-18545)
bnc#804992
- update to 7.0.35 (bugfix release)
require ecj >= 4.2.1, like upstream do
- make gpg-offline work distros after 12.2
- Ensure tomcat stdout/stderr output ends up in catalina.out
- Recommend libtcnative-1-0 >= 1.1.24
- /etc/init.d/tomcate init script fixes:
* Include /usr/bin and /usr/sbin in the PATH
* Fix logic for cleaning the work directories
* Fix typo (log_success_msg lsb function name)
* Fix typo (reload message)
- Require log4j
- Require gpg-offline on 12.2+
- Verify GPG signature.
- update to 7.0.33 (bugfix release)
- update to 7.0.30 (bugfix release)
* SSI and CGI disabled by default
- fix bnc#779538: change the working dir to $CATALINA_BASE
- document the CATALINA_BASE and CATALINA_HOME in tomcat.conf better
- fix rpmlintrc file
- fix bnc#771802 - systemd support is broken
* change type froking to simple as it does not make a sense run java in a
background to emulate that
* remove the need of nested wrappers, so /usr/sbin/tomcat-sysd now relies on
systemd features like User/EnvironmentFile
* workaround the 143 exit code in Stop phase - return 0 in this case
* merge the jsvc into tomcat-sysd code, the -jsvc-sysd is a symlink
* properly use jsvc with pid file to start and stop
- update to 7.0.26 (bugfix release)
- rename package to tomcat in order to emphasise a fact, there is only one
major release of tomcat maintained in distribution
- add manifest files and systemd support (thanks Fedora)
- create tomcat-jsvc package
- update to 7.0.26 (bugfix release)
- fix bnc#747771 - don't use /var/lock/subsys
sync tomcat7 init with tomcat6
- update to 7.0.25 (bugfix release)
- update to 7.0.22 (bugfix release)
- wrote changes and prepare for inclusion to openSUSE distribution
- fix bnc#726307
/etc/tomcat7 is writtable for tomcat group
- update to version 7.0.21
- update to version 7.0.16 (bugfix update)
- add rpmlintrc, digest, init and wrapper scripts and config file
- build require geronimo apis and wsdl4j
- disable webservices in javadoc target
- initial packaging of tomcat7 7.0.6
OBS-URL: https://build.opensuse.org/request/show/642919
OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat?expand=0&rev=131
2018-10-18 13:15:17 +02:00
|
|
|
access rights:
|
2018-10-02 16:07:34 +02:00
|
|
|
- host-manager/META-INF/context.xml
|
|
|
|
|
- manager/META-INF/context.xml
|
|
|
|
|
|
2018-08-27 00:23:16 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sun Aug 26 22:01:07 UTC 2018 - malbu@suse.com
|
|
|
|
|
|
|
|
|
|
- Empty tomcat-9.0.sysconfig to avoid overwriting of customer's
|
|
|
|
|
configuration during update (bsc#1067720)
|
|
|
|
|
|
2018-08-16 15:14:11 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Aug 16 14:13:23 UTC 2018 - malbu@suse.com
|
|
|
|
|
|
|
|
|
|
- Update to Tomcat 9.0.10. See changelog at
|
|
|
|
|
http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.10_(markt)
|
|
|
|
|
- Fixed CVEs:
|
|
|
|
|
- CVE-2018-1336 (bsc#1102400)
|
|
|
|
|
- CVE-2018-8014 (bsc#1093697)
|
|
|
|
|
- CVE-2018-8034 (bsc#1102379)
|
|
|
|
|
- CVE-2018-8037 (bsc#1102410)
|
|
|
|
|
- Rebased patch tomcat-9.0-JDTCompiler-java.patch
|
|
|
|
|
- Added patch tomcat-9.0-disable-osgi-build.patch to disable adding
|
|
|
|
|
OSGi metadata to JAR files
|
|
|
|
|
|
2018-01-17 10:40:12 +01:00
|
|
|
-------------------------------------------------------------------
|
2018-02-16 17:47:38 +01:00
|
|
|
Wed Feb 16 16:38:14 UTC 2018 - malbu@suse.de
|
|
|
|
|
|
2018-07-16 10:57:56 +02:00
|
|
|
- Update to Tomcat 9.0.5. See changelog at
|
|
|
|
|
http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.5_(markt)
|
2018-02-16 17:47:38 +01:00
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2018-01-17 10:40:12 +01:00
|
|
|
Wed Jan 17 09:34:14 UTC 2018 - fstrba@suse.com
|
|
|
|
|
|
|
|
|
|
- Modified patch:
|
|
|
|
|
* tomcat-9.0-javadoc.patch
|
|
|
|
|
+ Don't append to javadoc --add-modules since we are building
|
|
|
|
|
with source=8
|
|
|
|
|
+ Avoid accessing Internet URLs from build environment
|
|
|
|
|
|
2017-12-03 00:45:46 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Dec 1 21:46:18 UTC 2017 - malbu@suse.com
|
|
|
|
|
|
|
|
|
|
- Update to Tomcat 9.0.2:
|
|
|
|
|
* Major update for tomcat8 from tomcat9
|
|
|
|
|
* For full changelog please read upstream changes at:
|
|
|
|
|
+ http://tomcat.apache.org/tomcat-9.0-doc/changelog.html
|
|
|
|
|
* Rename all tomcat-8.0-* files to tomcat-9.0-*
|
|
|
|
|
- Changed patches:
|
|
|
|
|
* Deleted: tomcat-8.0-bootstrap-MANIFEST.MF.patch
|
|
|
|
|
* Deleted: tomcat-8.0-sle.catalina.policy.patch
|
|
|
|
|
* Deleted: tomcat-8.0-tomcat-users-webapp.patch
|
|
|
|
|
* Deleted: tomcat-8.0.33-JDTCompiler-java.patch
|
|
|
|
|
* Deleted: tomcat-8.0.44-javadoc.patch
|
|
|
|
|
* Deleted: tomcat-8.0.9-property-build.windows.patch
|
|
|
|
|
* Added: tomcat-9.0-JDTCompiler-java.patch
|
|
|
|
|
* Added: tomcat-9.0-bootstrap-MANIFEST.MF.patch
|
|
|
|
|
* Added: tomcat-9.0-javadoc.patch
|
|
|
|
|
* Added: tomcat-9.0-sle.catalina.policy.patch
|
|
|
|
|
* Added: tomcat-9.0-tomcat-users-webapp.patch
|
|
|
|
|
- Renamed subpackage tomcat-3_1-api to tomcat-4_0-api
|
2017-12-04 11:14:09 +01:00
|
|
|
to reflect the new Servlet API version.
|
2017-12-03 00:45:46 +01:00
|
|
|
- Commented out JAVA_HOME in /etc/tomcat/tomcat.conf
|
Accepting request 548119 from home:mateialbu:branches:Java:packages
- Update to Tomcat 9.0.2:
* Major update for tomcat8 from tomcat9
* For full changelog please read upstream changes at:
+ http://tomcat.apache.org/tomcat-9.0-doc/changelog.html
* Rename all tomcat-8.0-* files to tomcat-9.0-*
- Changed patches:
* Deleted: tomcat-8.0-bootstrap-MANIFEST.MF.patch
* Deleted: tomcat-8.0-sle.catalina.policy.patch
* Deleted: tomcat-8.0-tomcat-users-webapp.patch
* Deleted: tomcat-8.0.33-JDTCompiler-java.patch
* Deleted: tomcat-8.0.44-javadoc.patch
* Deleted: tomcat-8.0.9-property-build.windows.patch
* Added: tomcat-9.0-JDTCompiler-java.patch
* Added: tomcat-9.0-bootstrap-MANIFEST.MF.patch
* Added: tomcat-9.0-javadoc.patch
* Added: tomcat-9.0-sle.catalina.policy.patch
* Added: tomcat-9.0-tomcat-users-webapp.patch
- Renamed subpackage tomcat-3_1-api to tomcat-4_0-api
to reflect the new Servlet API version.
- Commented out JAVA_HOME in /etc/tomcat/tomcat.conf
- Added "tomcat-" prefix to lib symlinks under
/usr/share/java to avoid file conflicts with servletapi5
and geronimo-specs
- Fixed wrong %ghost file paths for alternatives symlinks
- Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468)
- Build with JDK 8 to fix runtime errors when running with JDK 7
and 8
- Fix tomcat-digest classpath error (bsc#977410)
- Fix packaged /etc/alternatives symlinks for api libs that caused
rpm -V to report link mismatch (bsc#1019016)
- update to 8.0.47
http://tomcat.apache.org/tomcat-8.0-doc/changelog.html
* Fixed CVE:
- CVE-2017-12617
- rebase tomcat-8.0-sle.catalina.policy.patch
- Added patch:
* tomcat-8.0.44-javadoc.patch
- generate documentation with the same source level as class
files
- fixes build with jdk9
- Version update to 8.0.44:
http://tomcat.apache.org/tomcat-8.0-doc/changelog.html
* Fixed CVE:
- CVE-2017-5664 (bsc#1042910)
- New build dependency: javapackages-local
- Version update to 8.0.43: * Another bugfix release, for full details see:
http://tomcat.apache.org/tomcat-8.0-doc/changelog.html
* Fixed CVEs:
- CVE-2017-5647 (bnc#1033448)
- CVE-2017-5648 (bnc#1033447)
- CVE-2016-8745
- Renamed and rebased patches:
* tomcat-7.0-sle.catalina.policy.patch -> tomcat-8.0-sle.catalina.policy.patch
- Enable optional setenv.sh script. See section
"(3.4) Using the "setenv" script (optional, recommended)" in
http://tomcat.apache.org/tomcat-8.0-doc/RUNNING.txt
(bnc#1002662)
- Fix file conflicts when upgrading from SLES 12 to SLES 12 SP1 (bnc#1023412).
Added explicit obsoletes for tomcat-el-2_2-api, tomcat-jsp-2_2-api,
tomcat-servlet-3_0-api
- update to 8.0.39: (boo#1003911)
* Improve handling of I/O errors with async processing
* Fail earlier on invalid HTTP request
- includes changes from 8.0.38:
* Refactoring the non-container thread Async complete()/dispatch()
handling to remove the possibility of deadlock
* Improved UTF-8 handling for the RewriteValve
- includes changes from 8.0.37:
* Treat paths used to obtain a request dispatcher as encoded
(configurable)
* Various jdbc-pool fixes
- drop tomcat-8.0.36-jar-scanner-loop.patch, upstream
- Switch to commons-dbcp2 fate#321029
- Backport fix for inifinite loop in the jar scanner for 8.0.36. (bnc#993862)
Added: tomcat-8.0.36-jar-scanner-loop.patch
- Version update to 8.0.36:
* Another bugfix release for the 8.0 series. Full details:
http://tomcat.apache.org/tomcat-8.0-doc/changelog.html#Tomcat_8.0.36_(markt)
- CVE fixed by the version update:
- CVE-2016-3092 (bnc#986359)
- Fixed a deployment error in the examples webapp by changing the context.xml format to the new one
introduced by Tomcat 8. See http://tomcat.apache.org/migration-8.html#Web_application_resources
- fix maven fragments paths to build in multiple distribution
versions
- Version update to 8.0.33:
* Another bugfix release for 8.0 series, full details:
http://tomcat.apache.org/tomcat-8.0-doc/changelog.html#Tomcat_8.0.33_(markt)
- Rebase tomcat-8.0-tomcat-users-webapp.patch
- Rebase tomcat-7.0.53-JDTCompiler-java.patch
to tomcat-8.0.33-JDTCompiler-java.patch
- Fix fixme for the prereq preamble value
- It seems systemd prints error on adding the @ services to macros
so do not do that
- package was partly merged with the scripts used in the
Fedora distribution
- support running multiple tomcat instances on the same server
(fate#317783)
- add catalina-jmx-remote.jar (fate#318403)
- remove sysvinit support: systemd is required
- update changes file for CVE information
- Fixed CVEs:
- CVE-2015-5346 (bnc#967814) in 8.0.32
- CVE-2015-5351 (bnc#967812) in 8.0.32
- CVE-2016-0706 (bnc#967815) in 8.0.32
- CVE-2016-0714 (bnc#967964) in 8.0.32
- CVE-2016-0763 (bnc#967966) in 8.0.32
- CVE-2015-5345 (bnc#967965) in 8.0.30
- CVE-2015-5174 (bnc#967967) in 8.0.27
- Version update to 8.0.32:
* Another bugfix release for 8.0 series, full details:
http://tomcat.apache.org/tomcat-8.0-doc/changelog.html#Tomcat_8.0.32_(markt)
- Rebase patch:
* tomcat-8.0.9-property-build.windows.patch
- update to Tomcat 8.0.28
* Multiple fixes, read upstream changelog at:
https://tomcat.apache.org/tomcat-8.0-doc/changelog.html#Tomcat_8.0.28_(markt)
- Some whitespace cleanups
- Remove pointless conflicts on provide/obsolete symbols
- Version bump to 8.0.23 fate#318913:
* Multiple testfixes all around, read upstream changelog at:
http://tomcat.apache.org/tomcat-8.0-doc/changelog.html#Tomcat_8.0.23_(markt)
- Fix previous commit. Fix one rpmlint warning
- Drop gpg verification from spec, it is done by obs
- Fix build with new jpackage-tools
- update to Tomcat 8.0.18:
* Major update for tomcat8 from tomcat7
* For full changelog please read upstream changes at:
+ http://tomcat.apache.org/tomcat-8.0-doc/changelog.html
* Rename all tomcat-7.0-* files to tomcat-8.0-*
* Update keyring file
- Update windows patch to apply again:
* Deleted: tomcat-7.0.52-property-build.windows.patch
* Added: tomcat-8.0.9-property-build.windows.patch
* Added:tomcat-8.0-tomcat-users-webapp.patch
* Deleted: tomcat-7.0-tomcat-users-webapp.patch
* Added: tomcat-8.0-bootstrap-MANIFEST.MF.patch
* Deleted: tomcat-7.0-bootstrap-MANIFEST.MF.patch
- Version 1.1.30 or higher is required for APR listener (bnc#914725)
- SLE12 has different path for the "rm" command than older versions.
To avoid possible clashes, the entire coreutils must be provided.
(bnc#894292)
- Fixed Security Manager policies, which makes unable properly
run webapps by default. (bnc#891264)
Added: tomcat-7.0-sle.catalina.policy.patch
- Missing security manager policy file prevents Tomcat to start
with systemd. (bnc#890995)
- Tomcat 7.0.55 requires ecj 4.4.0
- include the tomcat websocket implementation (tomcat7-websocket)
- Update to 7.0.55
* Update to the Eclipse JDT Compiler 4.4
* Better error handling when the error occurs after the response
has been committed
* Various improvements to the Mapper including fixing some
concurrency bugs
* See http://tomcat.apache.org/tomcat-7.0-doc/changelog.html
- build tomcat-embed as a subpackage
- Drop two unused defines
- touch the alternatives files to avoid build errors
in older versions
- Do not define default defattr as it is pointless.
- One file here was not supposed to be ghost.
- Fix once more the alternatives.
- Add path to rm command.
- Silence loads of warnings by rpmlintrc
- Cleanup with spec-cleaner and format few things a bit.
- Remove few deps not really needed for sle11.
- Drop unused files obs.bl and local.lb
- Drop unused collections-tomcat-build.xml
- Version bump to 7.0.54:
* bugfix update
* See http://tomcat.apache.org/tomcat-7.0-doc/changelog.html
- Update to 7.0.53
* bugfix release
* Update the Eclipse JDT compiler to enable full Java 8 support in JSPs.
* See http://tomcat.apache.org/tomcat-7.0-doc/changelog.html
- Patch for Bug 56373
* See https://issues.apache.org/bugzilla/show_bug.cgi?id=56373
* tomcat-7.0.53-JDTCompiler-java.patch
- Rename tomcat-7.0.2-property-build.windows.patch to
tomcat-7.0.52-property-build.windows.patch
- remove saxon build requirement for sles
- disable bytecode check for sles
- remove unknown option from fillup_only macro
- wrap systemd %pre[un]/%post[un] in conditional
- specify required ant version
- Update to 7.0.52
* bugfix release
* Fix CVE-2014-0050, a DoS vulnerability related to multi-part processing
- Update to 7.0.50
* bugfix release
- Add missing commons-pool-tomcat5 symlink (bnc#847505c#13)
- Update to 7.0.47
* bugfix release
* backport of JSR-356 Java WebSocket 1.0
* package tomcat now requires java7 at lease
- Updated tomcat.keyring to reflect the fact new release is signed by
Violeta Georgieva / D63011C7
see http://osdir.com/ml/dev-tomcat.apache.org/2013-10/msg00849.html
- Add tomcat-dbcp.jar (bnc#847505) back into tomcat lib dir
- Install tomcat-coyote.jar as well
- Remove pointless scriplets
- Move from jpackage-utils to javapackage-tools
- drop a dependency on unecessary -tomcat5 packages
- use commons-dbcp.jar for build
- add missing commons-pool.jar to libdir
- add _constraints to not schedule build on some build machines
workaround for bnc#832762
- Add missing 'su root tomcat' line to logrotate. See also
https://bugzilla.redhat.com/show_bug.cgi?id=790334
- call chown --no-dereference in init script
(bnc#822177#c7/prevents CVE-2013-1976)
- update to 7.0.42 (bugfix release)
see http://tomcat.apache.org/tomcat-7.0-doc/changelog.html
- fix file list to be compatible for new rpm
- update to 7.0.39 (bugfix release)
- install only systemd unit files on openSUSE 12.1+
* and call proper code when init script still exists
- add a proper scripplets for -jsvc subpackage
- don't use catalina.out, systemd redirects stderr/stdout to syslog
- don't use and recommends logrotate
- package /etc/ant.d properly, mark only catalina-ant as a config file
- Fix tomcat init scripts generating malformed classpath
(http://youtrack.jetbrains.com/issue/JT-18545)
bnc#804992
- update to 7.0.35 (bugfix release)
require ecj >= 4.2.1, like upstream do
- make gpg-offline work distros after 12.2
- Ensure tomcat stdout/stderr output ends up in catalina.out
- Recommend libtcnative-1-0 >= 1.1.24
- /etc/init.d/tomcate init script fixes:
* Include /usr/bin and /usr/sbin in the PATH
* Fix logic for cleaning the work directories
* Fix typo (log_success_msg lsb function name)
* Fix typo (reload message)
- Require log4j
- Require gpg-offline on 12.2+
- Verify GPG signature.
- update to 7.0.33 (bugfix release)
- update to 7.0.30 (bugfix release)
* SSI and CGI disabled by default
- fix bnc#779538: change the working dir to $CATALINA_BASE
- document the CATALINA_BASE and CATALINA_HOME in tomcat.conf better
- fix rpmlintrc file
- fix bnc#771802 - systemd support is broken
* change type froking to simple as it does not make a sense run java in a
background to emulate that
* remove the need of nested wrappers, so /usr/sbin/tomcat-sysd now relies on
systemd features like User/EnvironmentFile
* workaround the 143 exit code in Stop phase - return 0 in this case
* merge the jsvc into tomcat-sysd code, the -jsvc-sysd is a symlink
* properly use jsvc with pid file to start and stop
- update to 7.0.26 (bugfix release)
- rename package to tomcat in order to emphasise a fact, there is only one
major release of tomcat maintained in distribution
- add manifest files and systemd support (thanks Fedora)
- create tomcat-jsvc package
- update to 7.0.26 (bugfix release)
- fix bnc#747771 - don't use /var/lock/subsys
sync tomcat7 init with tomcat6
- update to 7.0.25 (bugfix release)
- update to 7.0.22 (bugfix release)
- wrote changes and prepare for inclusion to openSUSE distribution
- fix bnc#726307
/etc/tomcat7 is writtable for tomcat group
- update to version 7.0.21
- update to version 7.0.16 (bugfix update)
- add rpmlintrc, digest, init and wrapper scripts and config file
- build require geronimo apis and wsdl4j
- disable webservices in javadoc target
- initial packaging of tomcat7 7.0.6
OBS-URL: https://build.opensuse.org/request/show/548119
OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat?expand=0&rev=117
2017-12-04 16:08:14 +01:00
|
|
|
- Added "tomcat-" prefix to lib symlinks under
|
|
|
|
|
/usr/share/java to avoid file conflicts with servletapi5
|
|
|
|
|
and geronimo-specs
|
2017-12-04 11:14:09 +01:00
|
|
|
- Fixed wrong %ghost file paths for alternatives symlinks
|
2017-12-03 00:45:46 +01:00
|
|
|
|
2017-11-28 22:04:57 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Nov 23 13:50:29 UTC 2017 - rbrown@suse.com
|
|
|
|
|
|
2018-07-16 10:57:56 +02:00
|
|
|
- Replace references to /var/adm/fillup-templates with new
|
2017-11-28 22:04:57 +01:00
|
|
|
%_fillupdir macro (boo#1069468)
|
|
|
|
|
|
2017-10-23 14:39:41 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Oct 23 09:42:48 UTC 2017 - malbu@suse.com
|
|
|
|
|
|
2018-07-16 10:57:56 +02:00
|
|
|
- Build with JDK 8 to fix runtime errors when running with JDK 7
|
2017-10-23 14:39:41 +02:00
|
|
|
and 8
|
|
|
|
|
- Fix tomcat-digest classpath error (bsc#977410)
|
|
|
|
|
- Fix packaged /etc/alternatives symlinks for api libs that caused
|
2018-07-16 10:57:56 +02:00
|
|
|
rpm -V to report link mismatch (bsc#1019016)
|
2017-10-23 14:39:41 +02:00
|
|
|
|
2017-10-23 11:27:05 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Oct 23 06:07:05 UTC 2017 - ecsos@opensuse.org
|
|
|
|
|
|
|
|
|
|
- update to 8.0.47
|
|
|
|
|
http://tomcat.apache.org/tomcat-8.0-doc/changelog.html
|
|
|
|
|
* Fixed CVE:
|
2018-07-16 10:57:56 +02:00
|
|
|
- CVE-2017-12617
|
2017-10-23 11:27:05 +02:00
|
|
|
- rebase tomcat-8.0-sle.catalina.policy.patch
|
|
|
|
|
|
2017-09-19 11:08:57 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Sep 19 09:07:39 UTC 2017 - fstrba@suse.com
|
|
|
|
|
|
|
|
|
|
- Added patch:
|
|
|
|
|
* tomcat-8.0.44-javadoc.patch
|
|
|
|
|
- generate documentation with the same source level as class
|
|
|
|
|
files
|
2018-07-16 10:57:56 +02:00
|
|
|
- fixes build with jdk9
|
2017-09-19 11:08:57 +02:00
|
|
|
|
2017-06-23 17:31:32 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Jun 9 05:44:53 UTC 2017 - ecsos@opensuse.org
|
|
|
|
|
|
|
|
|
|
- Version update to 8.0.44:
|
|
|
|
|
http://tomcat.apache.org/tomcat-8.0-doc/changelog.html
|
2018-07-16 10:57:56 +02:00
|
|
|
* Fixed CVE:
|
2017-06-23 17:31:32 +02:00
|
|
|
- CVE-2017-5664 (bsc#1042910)
|
|
|
|
|
|
2017-05-09 18:59:24 +02:00
|
|
|
-------------------------------------------------------------------
|
2017-05-19 17:56:31 +02:00
|
|
|
Fri May 19 09:22:56 UTC 2017 - dziolkowski@suse.com
|
|
|
|
|
|
|
|
|
|
- New build dependency: javapackages-local
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2017-05-09 18:59:24 +02:00
|
|
|
Tue May 9 13:36:47 UTC 2017 - malbu@suse.com
|
|
|
|
|
|
2018-07-16 10:57:56 +02:00
|
|
|
- Version update to 8.0.43:
|
|
|
|
|
* Another bugfix release, for full details see:
|
2017-05-09 18:59:24 +02:00
|
|
|
http://tomcat.apache.org/tomcat-8.0-doc/changelog.html
|
|
|
|
|
* Fixed CVEs:
|
|
|
|
|
- CVE-2017-5647 (bnc#1033448)
|
|
|
|
|
- CVE-2017-5648 (bnc#1033447)
|
|
|
|
|
- CVE-2016-8745
|
|
|
|
|
- Renamed and rebased patches:
|
|
|
|
|
* tomcat-7.0-sle.catalina.policy.patch -> tomcat-8.0-sle.catalina.policy.patch
|
|
|
|
|
- Enable optional setenv.sh script. See section
|
|
|
|
|
"(3.4) Using the "setenv" script (optional, recommended)" in
|
|
|
|
|
http://tomcat.apache.org/tomcat-8.0-doc/RUNNING.txt
|
|
|
|
|
(bnc#1002662)
|
|
|
|
|
- Fix file conflicts when upgrading from SLES 12 to SLES 12 SP1 (bnc#1023412).
|
|
|
|
|
Added explicit obsoletes for tomcat-el-2_2-api, tomcat-jsp-2_2-api,
|
|
|
|
|
tomcat-servlet-3_0-api
|
|
|
|
|
|
2017-01-02 11:28:40 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Dec 21 21:49:10 UTC 2016 - astieger@suse.com
|
|
|
|
|
|
|
|
|
|
- update to 8.0.39: (boo#1003911)
|
|
|
|
|
* Improve handling of I/O errors with async processing
|
|
|
|
|
* Fail earlier on invalid HTTP request
|
|
|
|
|
- includes changes from 8.0.38:
|
|
|
|
|
* Refactoring the non-container thread Async complete()/dispatch()
|
|
|
|
|
handling to remove the possibility of deadlock
|
|
|
|
|
* Improved UTF-8 handling for the RewriteValve
|
|
|
|
|
- includes changes from 8.0.37:
|
|
|
|
|
* Treat paths used to obtain a request dispatcher as encoded
|
|
|
|
|
(configurable)
|
|
|
|
|
* Various jdbc-pool fixes
|
|
|
|
|
- drop tomcat-8.0.36-jar-scanner-loop.patch, upstream
|
|
|
|
|
|
2016-09-29 14:27:01 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Sep 29 12:26:30 UTC 2016 - tchvatal@suse.com
|
|
|
|
|
|
|
|
|
|
- Switch to commons-dbcp2 fate#321029
|
|
|
|
|
|
2016-09-04 21:25:39 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Sep 2 13:20:00 UTC 2016 - malbu@suse.com
|
|
|
|
|
|
|
|
|
|
- Backport fix for inifinite loop in the jar scanner for 8.0.36. (bnc#993862)
|
|
|
|
|
Added: tomcat-8.0.36-jar-scanner-loop.patch
|
|
|
|
|
|
2016-07-11 15:24:03 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jul 6 12:20:03 UTC 2016 - malbu@suse.com
|
|
|
|
|
|
|
|
|
|
- Version update to 8.0.36:
|
|
|
|
|
* Another bugfix release for the 8.0 series. Full details:
|
|
|
|
|
http://tomcat.apache.org/tomcat-8.0-doc/changelog.html#Tomcat_8.0.36_(markt)
|
|
|
|
|
- CVE fixed by the version update:
|
|
|
|
|
- CVE-2016-3092 (bnc#986359)
|
2016-07-12 15:47:50 +02:00
|
|
|
- Fixed a deployment error in the examples webapp by changing the context.xml format to the new one
|
|
|
|
|
introduced by Tomcat 8. See http://tomcat.apache.org/migration-8.html#Web_application_resources
|
2016-07-11 15:24:03 +02:00
|
|
|
|
2016-05-02 18:07:21 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon May 2 16:05:26 UTC 2016 - dmacvicar@suse.de
|
|
|
|
|
|
|
|
|
|
- fix maven fragments paths to build in multiple distribution
|
|
|
|
|
versions
|
|
|
|
|
|
2016-04-22 11:40:16 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Apr 21 21:22:56 UTC 2016 - jcnengel@gmail.com
|
|
|
|
|
|
|
|
|
|
- Version update to 8.0.33:
|
|
|
|
|
* Another bugfix release for 8.0 series, full details:
|
|
|
|
|
http://tomcat.apache.org/tomcat-8.0-doc/changelog.html#Tomcat_8.0.33_(markt)
|
|
|
|
|
- Rebase tomcat-8.0-tomcat-users-webapp.patch
|
2016-04-22 11:46:29 +02:00
|
|
|
- Rebase tomcat-7.0.53-JDTCompiler-java.patch
|
|
|
|
|
to tomcat-8.0.33-JDTCompiler-java.patch
|
2016-04-22 11:40:16 +02:00
|
|
|
|
2016-04-07 15:02:00 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Apr 7 13:01:07 UTC 2016 - tchvatal@suse.com
|
|
|
|
|
|
|
|
|
|
- Fix fixme for the prereq preamble value
|
|
|
|
|
- It seems systemd prints error on adding the @ services to macros
|
|
|
|
|
so do not do that
|
|
|
|
|
|
2016-04-07 14:59:42 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Mar 31 08:18:39 UTC 2016 - dmacvicar@suse.de
|
|
|
|
|
|
|
|
|
|
- package was partly merged with the scripts used in the
|
|
|
|
|
Fedora distribution
|
|
|
|
|
- support running multiple tomcat instances on the same server
|
|
|
|
|
(fate#317783)
|
|
|
|
|
- add catalina-jmx-remote.jar (fate#318403)
|
|
|
|
|
- remove sysvinit support: systemd is required
|
|
|
|
|
|
2016-02-29 16:04:41 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Feb 29 12:45:46 UTC 2016 - dmacvicar@suse.de
|
|
|
|
|
|
|
|
|
|
- update changes file for CVE information
|
|
|
|
|
- Fixed CVEs:
|
|
|
|
|
- CVE-2015-5346 (bnc#967814) in 8.0.32
|
|
|
|
|
- CVE-2015-5351 (bnc#967812) in 8.0.32
|
|
|
|
|
- CVE-2016-0706 (bnc#967815) in 8.0.32
|
|
|
|
|
- CVE-2016-0714 (bnc#967964) in 8.0.32
|
|
|
|
|
- CVE-2016-0763 (bnc#967966) in 8.0.32
|
|
|
|
|
- CVE-2015-5345 (bnc#967965) in 8.0.30
|
|
|
|
|
- CVE-2015-5174 (bnc#967967) in 8.0.27
|
|
|
|
|
|
2016-02-17 19:24:24 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Feb 17 18:12:57 UTC 2016 - tchvatal@suse.com
|
|
|
|
|
|
|
|
|
|
- Version update to 8.0.32:
|
|
|
|
|
* Another bugfix release for 8.0 series, full details:
|
|
|
|
|
http://tomcat.apache.org/tomcat-8.0-doc/changelog.html#Tomcat_8.0.32_(markt)
|
|
|
|
|
- Rebase patch:
|
|
|
|
|
* tomcat-8.0.9-property-build.windows.patch
|
|
|
|
|
|
2015-11-10 13:22:09 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Nov 10 09:20:40 UTC 2015 - dmacvicar@suse.de
|
|
|
|
|
|
|
|
|
|
- update to Tomcat 8.0.28
|
|
|
|
|
* Multiple fixes, read upstream changelog at:
|
|
|
|
|
https://tomcat.apache.org/tomcat-8.0-doc/changelog.html#Tomcat_8.0.28_(markt)
|
|
|
|
|
|
2015-06-01 11:08:51 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jun 1 09:08:36 UTC 2015 - tchvatal@suse.com
|
|
|
|
|
|
|
|
|
|
- Some whitespace cleanups
|
|
|
|
|
|
2015-06-01 11:08:04 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jun 1 09:07:45 UTC 2015 - tchvatal@suse.com
|
|
|
|
|
|
|
|
|
|
- Remove pointless conflicts on provide/obsolete symbols
|
|
|
|
|
|
2015-06-01 10:55:52 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jun 1 08:54:33 UTC 2015 - tchvatal@suse.com
|
|
|
|
|
|
2016-04-29 14:24:22 +02:00
|
|
|
- Version bump to 8.0.23 fate#318913:
|
2015-06-01 10:55:52 +02:00
|
|
|
* Multiple testfixes all around, read upstream changelog at:
|
|
|
|
|
http://tomcat.apache.org/tomcat-8.0-doc/changelog.html#Tomcat_8.0.23_(markt)
|
|
|
|
|
|
2015-03-24 09:06:50 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Mar 24 08:06:33 UTC 2015 - tchvatal@suse.com
|
|
|
|
|
|
|
|
|
|
- Fix previous commit. Fix one rpmlint warning
|
|
|
|
|
|
2015-03-18 11:22:44 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Mar 18 10:22:27 UTC 2015 - tchvatal@suse.com
|
|
|
|
|
|
|
|
|
|
- Drop gpg verification from spec, it is done by obs
|
|
|
|
|
|
2015-03-18 11:16:20 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Mar 18 10:16:07 UTC 2015 - tchvatal@suse.com
|
|
|
|
|
|
|
|
|
|
- Fix build with new jpackage-tools
|
|
|
|
|
|
2015-06-01 10:49:05 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Feb 10 10:12:38 UTC 2015 - wittemar@googlemail.com
|
|
|
|
|
|
2015-06-01 10:53:30 +02:00
|
|
|
- update to Tomcat 8.0.18:
|
|
|
|
|
* Major update for tomcat8 from tomcat7
|
|
|
|
|
* For full changelog please read upstream changes at:
|
|
|
|
|
+ http://tomcat.apache.org/tomcat-8.0-doc/changelog.html
|
|
|
|
|
* Rename all tomcat-7.0-* files to tomcat-8.0-*
|
|
|
|
|
* Update keyring file
|
|
|
|
|
- Update windows patch to apply again:
|
|
|
|
|
* Deleted: tomcat-7.0.52-property-build.windows.patch
|
|
|
|
|
* Added: tomcat-8.0.9-property-build.windows.patch
|
2015-06-01 10:59:49 +02:00
|
|
|
* Added:tomcat-8.0-tomcat-users-webapp.patch
|
|
|
|
|
* Deleted: tomcat-7.0-tomcat-users-webapp.patch
|
|
|
|
|
* Added: tomcat-8.0-bootstrap-MANIFEST.MF.patch
|
|
|
|
|
* Deleted: tomcat-7.0-bootstrap-MANIFEST.MF.patch
|
2015-06-01 10:49:05 +02:00
|
|
|
|
2016-04-29 14:24:22 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Feb 3 14:05:08 UTC 2015 - bmaryniuk@suse.com
|
|
|
|
|
|
|
|
|
|
- Version 1.1.30 or higher is required for APR listener (bnc#914725)
|
|
|
|
|
|
2014-09-17 10:38:34 +02:00
|
|
|
-------------------------------------------------------------------
|
2014-09-17 14:20:43 +02:00
|
|
|
Wed Sep 17 11:28:46 UTC 2014 - bmaryniuk@suse.com
|
|
|
|
|
|
|
|
|
|
- SLE12 has different path for the "rm" command than older versions.
|
|
|
|
|
To avoid possible clashes, the entire coreutils must be provided.
|
|
|
|
|
(bnc#894292)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2014-09-17 10:38:34 +02:00
|
|
|
Tue Sep 16 16:09:59 UTC 2014 - bmaryniuk@suse.com
|
|
|
|
|
|
|
|
|
|
- Fixed Security Manager policies, which makes unable properly
|
|
|
|
|
run webapps by default. (bnc#891264)
|
|
|
|
|
Added: tomcat-7.0-sle.catalina.policy.patch
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Sep 16 14:13:20 UTC 2014 - bmaryniuk@suse.com
|
|
|
|
|
|
|
|
|
|
- Missing security manager policy file prevents Tomcat to start
|
|
|
|
|
with systemd. (bnc#890995)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Sep 15 13:02:02 UTC 2014 - dmacvicar@suse.de
|
|
|
|
|
|
|
|
|
|
- Tomcat 7.0.55 requires ecj 4.4.0
|
|
|
|
|
|
2014-09-08 14:23:03 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Sep 8 09:01:13 UTC 2014 - dmacvicar@suse.de
|
|
|
|
|
|
|
|
|
|
- include the tomcat websocket implementation (tomcat7-websocket)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Sep 8 08:23:28 UTC 2014 - dmacvicar@suse.de
|
|
|
|
|
|
|
|
|
|
- Update to 7.0.55
|
|
|
|
|
* Update to the Eclipse JDT Compiler 4.4
|
|
|
|
|
* Better error handling when the error occurs after the response
|
|
|
|
|
has been committed
|
2018-07-16 10:57:56 +02:00
|
|
|
* Various improvements to the Mapper including fixing some
|
2014-09-08 14:23:03 +02:00
|
|
|
concurrency bugs
|
|
|
|
|
* See http://tomcat.apache.org/tomcat-7.0-doc/changelog.html
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Sep 8 07:44:28 UTC 2014 - dmacvicar@suse.de
|
|
|
|
|
|
|
|
|
|
- build tomcat-embed as a subpackage
|
|
|
|
|
|
2014-09-03 16:43:27 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Sep 3 14:43:12 UTC 2014 - tchvatal@suse.com
|
|
|
|
|
|
|
|
|
|
- Drop two unused defines
|
|
|
|
|
|
2014-09-03 12:48:04 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Sep 3 10:47:16 UTC 2014 - dmacvicar@suse.de
|
|
|
|
|
|
|
|
|
|
- touch the alternatives files to avoid build errors
|
|
|
|
|
in older versions
|
|
|
|
|
|
2014-07-29 13:25:39 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jul 29 11:25:14 UTC 2014 - tchvatal@suse.com
|
|
|
|
|
|
|
|
|
|
- Do not define default defattr as it is pointless.
|
|
|
|
|
|
2014-07-19 11:35:46 +02:00
|
|
|
-------------------------------------------------------------------
|
2014-07-25 11:25:01 +02:00
|
|
|
Fri Jul 25 09:24:12 UTC 2014 - tchvatal@suse.com
|
|
|
|
|
|
|
|
|
|
- One file here was not supposed to be ghost.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2014-07-19 11:35:46 +02:00
|
|
|
Sat Jul 19 09:35:11 UTC 2014 - tchvatal@suse.com
|
|
|
|
|
|
|
|
|
|
- Fix once more the alternatives.
|
|
|
|
|
|
2014-07-11 16:17:08 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Jul 11 14:16:47 UTC 2014 - tchvatal@suse.com
|
|
|
|
|
|
|
|
|
|
- Add path to rm command.
|
|
|
|
|
|
2014-07-11 11:18:33 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Jul 11 09:18:07 UTC 2014 - tchvatal@suse.com
|
|
|
|
|
|
|
|
|
|
- Silence loads of warnings by rpmlintrc
|
|
|
|
|
|
2014-07-10 17:10:16 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Jul 10 14:57:29 UTC 2014 - tchvatal@suse.com
|
|
|
|
|
|
|
|
|
|
- Cleanup with spec-cleaner and format few things a bit.
|
|
|
|
|
|
2014-05-24 11:59:26 +02:00
|
|
|
-------------------------------------------------------------------
|
2014-07-10 16:47:50 +02:00
|
|
|
Thu Jul 10 14:47:30 UTC 2014 - tchvatal@suse.com
|
|
|
|
|
|
|
|
|
|
- Remove few deps not really needed for sle11.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Jul 10 14:42:03 UTC 2014 - tchvatal@suse.com
|
|
|
|
|
|
|
|
|
|
- Drop unused files obs.bl and local.lb
|
|
|
|
|
- Drop unused collections-tomcat-build.xml
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2014-05-24 11:59:26 +02:00
|
|
|
Sat May 24 09:58:55 UTC 2014 - tchvatal@suse.com
|
|
|
|
|
|
|
|
|
|
- Version bump to 7.0.54:
|
|
|
|
|
* bugfix update
|
|
|
|
|
* See http://tomcat.apache.org/tomcat-7.0-doc/changelog.html
|
|
|
|
|
|
2014-05-20 13:53:20 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu May 15 14:59:25 UTC 2014 - darin@darins.net
|
|
|
|
|
|
|
|
|
|
- Update to 7.0.53
|
|
|
|
|
* bugfix release
|
|
|
|
|
* Update the Eclipse JDT compiler to enable full Java 8 support in JSPs.
|
|
|
|
|
* See http://tomcat.apache.org/tomcat-7.0-doc/changelog.html
|
|
|
|
|
- Patch for Bug 56373
|
2014-05-24 11:39:28 +02:00
|
|
|
* See https://issues.apache.org/bugzilla/show_bug.cgi?id=56373
|
|
|
|
|
* tomcat-7.0.53-JDTCompiler-java.patch
|
|
|
|
|
- Rename tomcat-7.0.2-property-build.windows.patch to
|
|
|
|
|
tomcat-7.0.52-property-build.windows.patch
|
2014-05-20 13:53:20 +02:00
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu May 15 14:41:40 UTC 2014 - darin@darins.net
|
|
|
|
|
|
|
|
|
|
- remove saxon build requirement for sles
|
2018-07-16 10:57:56 +02:00
|
|
|
- disable bytecode check for sles
|
2014-05-20 13:53:20 +02:00
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Apr 14 17:59:07 UTC 2014 - darin@darins.net
|
|
|
|
|
|
|
|
|
|
- remove unknown option from fillup_only macro
|
|
|
|
|
- wrap systemd %pre[un]/%post[un] in conditional
|
|
|
|
|
- specify required ant version
|
|
|
|
|
|
2014-04-14 14:54:43 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Apr 8 17:27:09 UTC 2014 - wittemar@googlemail.com
|
|
|
|
|
|
|
|
|
|
- Update to 7.0.52
|
|
|
|
|
* bugfix release
|
|
|
|
|
* Fix CVE-2014-0050, a DoS vulnerability related to multi-part processing
|
|
|
|
|
- Update to 7.0.50
|
|
|
|
|
* bugfix release
|
|
|
|
|
|
2013-12-12 11:16:26 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Dec 12 10:14:47 UTC 2013 - mvyskocil@suse.com
|
|
|
|
|
|
|
|
|
|
- Add missing commons-pool-tomcat5 symlink (bnc#847505c#13)
|
|
|
|
|
|
2013-11-04 15:49:19 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Nov 4 14:12:40 UTC 2013 - mvyskocil@suse.com
|
|
|
|
|
|
2013-12-12 11:16:26 +01:00
|
|
|
- Update to 7.0.47
|
2013-11-04 15:49:19 +01:00
|
|
|
* bugfix release
|
|
|
|
|
* backport of JSR-356 Java WebSocket 1.0
|
|
|
|
|
* package tomcat now requires java7 at lease
|
|
|
|
|
- Updated tomcat.keyring to reflect the fact new release is signed by
|
|
|
|
|
Violeta Georgieva / D63011C7
|
|
|
|
|
see http://osdir.com/ml/dev-tomcat.apache.org/2013-10/msg00849.html
|
|
|
|
|
- Add tomcat-dbcp.jar (bnc#847505) back into tomcat lib dir
|
|
|
|
|
- Install tomcat-coyote.jar as well
|
|
|
|
|
- Remove pointless scriplets
|
|
|
|
|
|
2013-09-09 14:02:02 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Sep 9 11:06:25 UTC 2013 - tchvatal@suse.com
|
|
|
|
|
|
|
|
|
|
- Move from jpackage-utils to javapackage-tools
|
|
|
|
|
|
2013-09-05 16:01:11 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Sep 5 13:59:28 UTC 2013 - mvyskocil@suse.com
|
|
|
|
|
|
2018-07-16 10:57:56 +02:00
|
|
|
- drop a dependency on unecessary -tomcat5 packages
|
2013-09-05 16:01:11 +02:00
|
|
|
- use commons-dbcp.jar for build
|
|
|
|
|
- add missing commons-pool.jar to libdir
|
|
|
|
|
|
2013-08-09 12:02:56 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Aug 9 09:18:44 UTC 2013 - mvyskocil@suse.com
|
|
|
|
|
|
|
|
|
|
- add _constraints to not schedule build on some build machines
|
|
|
|
|
workaround for bnc#832762
|
|
|
|
|
|
2013-07-26 15:07:50 +02:00
|
|
|
-------------------------------------------------------------------
|
2013-08-07 10:44:38 +02:00
|
|
|
Tue Aug 6 20:24:06 UTC 2013 - robert.munteanu@gmail.com
|
|
|
|
|
|
|
|
|
|
- Add missing 'su root tomcat' line to logrotate. See also
|
2018-07-16 10:57:56 +02:00
|
|
|
https://bugzilla.redhat.com/show_bug.cgi?id=790334
|
2013-08-07 10:44:38 +02:00
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2013-07-26 15:07:50 +02:00
|
|
|
Fri Jul 26 13:06:35 UTC 2013 - mvyskocil@suse.com
|
|
|
|
|
|
2013-07-30 15:22:14 +02:00
|
|
|
- call chown --no-dereference in init script
|
|
|
|
|
(bnc#822177#c7/prevents CVE-2013-1976)
|
2018-07-16 10:57:56 +02:00
|
|
|
|
2013-07-23 16:35:12 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jul 23 14:33:47 UTC 2013 - mvyskocil@suse.com
|
|
|
|
|
|
|
|
|
|
- update to 7.0.42 (bugfix release)
|
|
|
|
|
see http://tomcat.apache.org/tomcat-7.0-doc/changelog.html
|
|
|
|
|
- fix file list to be compatible for new rpm
|
|
|
|
|
|
2013-04-18 14:44:10 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Apr 18 12:23:13 UTC 2013 - mvyskocil@suse.com
|
|
|
|
|
|
|
|
|
|
- update to 7.0.39 (bugfix release)
|
|
|
|
|
- install only systemd unit files on openSUSE 12.1+
|
|
|
|
|
* and call proper code when init script still exists
|
|
|
|
|
- add a proper scripplets for -jsvc subpackage
|
2013-04-19 13:53:03 +02:00
|
|
|
- don't use catalina.out, systemd redirects stderr/stdout to syslog
|
|
|
|
|
- don't use and recommends logrotate
|
2013-04-19 15:06:53 +02:00
|
|
|
- package /etc/ant.d properly, mark only catalina-ant as a config file
|
2013-04-18 14:44:10 +02:00
|
|
|
|
2013-02-21 15:48:16 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat Feb 16 07:29:52 UTC 2013 - m407@mail.ru
|
|
|
|
|
|
|
|
|
|
- Fix tomcat init scripts generating malformed classpath
|
|
|
|
|
(http://youtrack.jetbrains.com/issue/JT-18545)
|
2013-02-21 15:56:20 +01:00
|
|
|
bnc#804992
|
2013-02-21 15:48:16 +01:00
|
|
|
|
2013-01-21 14:55:33 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jan 21 13:54:18 UTC 2013 - mvyskocil@suse.com
|
|
|
|
|
|
|
|
|
|
- update to 7.0.35 (bugfix release)
|
|
|
|
|
require ecj >= 4.2.1, like upstream do
|
|
|
|
|
- make gpg-offline work distros after 12.2
|
|
|
|
|
|
2013-01-02 16:11:21 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Dec 27 17:14:55 UTC 2012 - archie@dellroad.org
|
|
|
|
|
|
|
|
|
|
- Ensure tomcat stdout/stderr output ends up in catalina.out
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Dec 20 22:45:19 UTC 2012 - archie@dellroad.org
|
|
|
|
|
|
|
|
|
|
- Recommend libtcnative-1-0 >= 1.1.24
|
|
|
|
|
- /etc/init.d/tomcate init script fixes:
|
|
|
|
|
* Include /usr/bin and /usr/sbin in the PATH
|
|
|
|
|
* Fix logic for cleaning the work directories
|
|
|
|
|
* Fix typo (log_success_msg lsb function name)
|
|
|
|
|
* Fix typo (reload message)
|
|
|
|
|
- Require log4j
|
|
|
|
|
|
2012-12-18 10:34:59 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Dec 18 09:34:29 UTC 2012 - mvyskocil@suse.com
|
|
|
|
|
|
2018-07-16 10:57:56 +02:00
|
|
|
- Require gpg-offline on 12.2+
|
2012-12-18 10:34:59 +01:00
|
|
|
|
2012-12-18 10:32:34 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Nov 29 19:17:03 CET 2012 - sbrabec@suse.cz
|
|
|
|
|
|
|
|
|
|
- Verify GPG signature.
|
|
|
|
|
|
2012-11-26 14:05:00 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Nov 26 13:01:44 UTC 2012 - mvyskocil@suse.com
|
|
|
|
|
|
|
|
|
|
- update to 7.0.33 (bugfix release)
|
|
|
|
|
|
2012-09-11 10:50:06 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Sep 11 08:24:53 UTC 2012 - mvyskocil@suse.cz
|
|
|
|
|
|
2018-07-16 10:57:56 +02:00
|
|
|
- update to 7.0.30 (bugfix release)
|
2012-09-11 10:50:06 +02:00
|
|
|
* SSI and CGI disabled by default
|
|
|
|
|
- fix bnc#779538: change the working dir to $CATALINA_BASE
|
|
|
|
|
- document the CATALINA_BASE and CATALINA_HOME in tomcat.conf better
|
|
|
|
|
- fix rpmlintrc file
|
|
|
|
|
|
2012-07-17 16:23:06 +02:00
|
|
|
-------------------------------------------------------------------
|
2012-07-19 10:58:29 +02:00
|
|
|
Thu Jul 19 08:48:31 UTC 2012 - mvyskocil@suse.cz
|
2012-07-17 16:23:06 +02:00
|
|
|
|
|
|
|
|
- fix bnc#771802 - systemd support is broken
|
|
|
|
|
* change type froking to simple as it does not make a sense run java in a
|
|
|
|
|
background to emulate that
|
|
|
|
|
* remove the need of nested wrappers, so /usr/sbin/tomcat-sysd now relies on
|
|
|
|
|
systemd features like User/EnvironmentFile
|
|
|
|
|
* workaround the 143 exit code in Stop phase - return 0 in this case
|
2012-07-19 10:58:29 +02:00
|
|
|
* merge the jsvc into tomcat-sysd code, the -jsvc-sysd is a symlink
|
|
|
|
|
* properly use jsvc with pid file to start and stop
|
2012-07-17 16:23:06 +02:00
|
|
|
|
2012-06-16 07:18:01 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jun 13 12:37:49 UTC 2012 - mvyskocil@suse.cz
|
|
|
|
|
|
|
|
|
|
- update to 7.0.26 (bugfix release)
|
|
|
|
|
- rename package to tomcat in order to emphasise a fact, there is only one
|
|
|
|
|
major release of tomcat maintained in distribution
|
|
|
|
|
- add manifest files and systemd support (thanks Fedora)
|
|
|
|
|
- create tomcat-jsvc package
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Feb 23 13:59:10 UTC 2012 - mvyskocil@suse.cz
|
|
|
|
|
|
|
|
|
|
- update to 7.0.26 (bugfix release)
|
|
|
|
|
- fix bnc#747771 - don't use /var/lock/subsys
|
|
|
|
|
sync tomcat7 init with tomcat6
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sun Feb 19 23:02:42 UTC 2012 - wittemar@googlemail.com
|
|
|
|
|
|
|
|
|
|
- update to 7.0.25 (bugfix release)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Nov 1 12:36:57 UTC 2011 - mvyskocil@suse.cz
|
|
|
|
|
|
|
|
|
|
- update to 7.0.22 (bugfix release)
|
|
|
|
|
- wrote changes and prepare for inclusion to openSUSE distribution
|
|
|
|
|
- fix bnc#726307
|
|
|
|
|
/etc/tomcat7 is writtable for tomcat group
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Sep 19 10:21:29 UTC 2011 - wittemar@googlemail.com
|
2018-07-16 10:57:56 +02:00
|
|
|
|
2012-06-16 07:18:01 +02:00
|
|
|
- update to version 7.0.21
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Jul 21 10:21:29 UTC 2011 - mvyskocil@suse.cz
|
|
|
|
|
|
|
|
|
|
- update to version 7.0.16 (bugfix update)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Mar 30 16:29:28 UTC 2011 - jrenner@suse.de
|
|
|
|
|
|
|
|
|
|
- add rpmlintrc, digest, init and wrapper scripts and config file
|
|
|
|
|
- build require geronimo apis and wsdl4j
|
|
|
|
|
- disable webservices in javadoc target
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jan 18 12:22:55 UTC 2011 - mvyskocil@suse.cz
|
|
|
|
|
|
|
|
|
|
- initial packaging of tomcat7 7.0.6
|
|
|
|
|
|
