302 Commits

Author SHA256 Message Date
Dominique Leuenberger
b7b97582b2 Accepting request 1039508 from Java:packages
OBS-URL: https://build.opensuse.org/request/show/1039508
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/tomcat?expand=0&rev=88
2022-12-02 12:13:36 +00:00
7044f5b497 Accepting request 1039114 from home:mbussolotto:branches:Java:packages
- Use catalina.out for logging (bsc#1205647)
- Added patches:
  * tomcat-9.0-fix_catalina.patch

OBS-URL: https://build.opensuse.org/request/show/1039114
OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat?expand=0&rev=248
2022-12-02 08:23:58 +00:00
Dominique Leuenberger
8b6b4a7ce9 Accepting request 1037218 from Java:packages
sec. fixes

OBS-URL: https://build.opensuse.org/request/show/1037218
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/tomcat?expand=0&rev=87
2022-11-22 15:10:22 +00:00
0383717111 OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat?expand=0&rev=246 2022-11-22 06:28:25 +00:00
d041727005 Accepting request 1037056 from home:mbussolotto:branches:Java:packages
- Fixed CVEs:
  * CVE-2022-42252: reject invalid content-length requests. (bsc#1204918)
- Added patches:
  * tomcat-9.0.43-CVE-2022-42252.patch

OBS-URL: https://build.opensuse.org/request/show/1037056
OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat?expand=0&rev=245
2022-11-21 12:28:39 +00:00
803dc2e41e Accepting request 1030223 from home:mbussolotto:branches:Java:packages
- Fixed CVEs:
  * CVE-2021-43980: Improve the recycling of Processor objects to make it more robust. (bsc#1203868)
- Added patches:
  * tomcat-9.0.43-CVE-2021-43980.patch

OBS-URL: https://build.opensuse.org/request/show/1030223
OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat?expand=0&rev=244
2022-10-20 16:18:49 +00:00
Dominique Leuenberger
4124490743 Accepting request 989036 from Java:packages
do not hardcode /usr/libexecdir, but use %_libexecdir instead

OBS-URL: https://build.opensuse.org/request/show/989036
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/tomcat?expand=0&rev=86
2022-07-14 14:34:22 +00:00
0a03fd758a OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat?expand=0&rev=242 2022-07-13 13:43:12 +00:00
Dominique Leuenberger
62c2d77d81 Accepting request 987800 from Java:packages
bsc#1201081

OBS-URL: https://build.opensuse.org/request/show/987800
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/tomcat?expand=0&rev=85
2022-07-08 12:03:10 +00:00
c75e4afeff OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat?expand=0&rev=240 2022-07-08 06:29:53 +00:00
Dominique Leuenberger
eda3592fb6 Accepting request 978763 from Java:packages
sync changes with sle

OBS-URL: https://build.opensuse.org/request/show/978763
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/tomcat?expand=0&rev=84
2022-05-24 18:33:30 +00:00
ab654215d5 OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat?expand=0&rev=238 2022-05-23 17:08:25 +00:00
Dominique Leuenberger
889daa511d Accepting request 967588 from Java:packages
OBS-URL: https://build.opensuse.org/request/show/967588
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/tomcat?expand=0&rev=83
2022-04-07 22:28:32 +00:00
45b1f5a3f7 Accepting request 967485 from home:mbussolotto:branches:Java:packages
- Security hardening. Deprecate getResources() and always return null. (bsc#1198136)
- Added patch: tomcat-9.0-hardening_getResources.patch

OBS-URL: https://build.opensuse.org/request/show/967485
OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat?expand=0&rev=236
2022-04-07 17:49:31 +00:00
Dominique Leuenberger
e9c006bd2f Accepting request 957023 from Java:packages
bsc#1196137

OBS-URL: https://build.opensuse.org/request/show/957023
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/tomcat?expand=0&rev=82
2022-02-23 18:06:49 +00:00
2ed7e67af2 OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat?expand=0&rev=235 2022-02-23 11:59:03 +00:00
Dominique Leuenberger
ed9a86a54f Accepting request 956682 from Java:packages
- Fixed CVEs:
  * CVE-2022-23181: Make calculation of session storage location more robust (bsc#1195255)
- Added patches:
  * tomcat-9.0-CVE-2022-23181.patch

OBS-URL: https://build.opensuse.org/request/show/956682
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/tomcat?expand=0&rev=81
2022-02-22 20:18:24 +00:00
ce50f8c0d6 OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat?expand=0&rev=234 2022-02-22 19:00:44 +00:00
Michele Bussolotto
b42b2bcb88 OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat?expand=0&rev=233 2022-01-28 14:29:05 +00:00
Michele Bussolotto
c2fd26d820 - Fixed CVEs:
* CVE-2022-23181: Make calculation of session storage location more robust (bsc#1195255)
- Added patches:
  * tomcat-9.0-CVE-2022-23181.patch

OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat?expand=0&rev=232
2022-01-28 14:25:17 +00:00
Dominique Leuenberger
e789b19695 Accepting request 946292 from Java:packages
OBS-URL: https://build.opensuse.org/request/show/946292
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/tomcat?expand=0&rev=80
2022-01-14 22:13:07 +00:00
7b1f875f7f Accepting request 946275 from home:olh:branches:Java:packages
- remove instance units from post scripts, they can not be reloaded

OBS-URL: https://build.opensuse.org/request/show/946275
OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat?expand=0&rev=231
2022-01-14 05:24:24 +00:00
Dominique Leuenberger
9b2e0f5e45 Accepting request 940058 from Java:packages
OBS-URL: https://build.opensuse.org/request/show/940058
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/tomcat?expand=0&rev=79
2021-12-12 20:27:48 +00:00
f640109f9b Accepting request 939130 from home:mbussolotto:branches:Java:packages
- Fix NPE in JNDIRealm, when userRoleAttribute is not set (bsc#1193569)
- Added patch:
  * tomcat-9.0-NPE-JNDIRealm.patch

OBS-URL: https://build.opensuse.org/request/show/939130
OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat?expand=0&rev=230
2021-12-12 08:13:13 +00:00
Dominique Leuenberger
337f7900e7 Accepting request 930612 from Java:packages
OBS-URL: https://build.opensuse.org/request/show/930612
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/tomcat?expand=0&rev=78
2021-11-10 20:46:39 +00:00
eb7ec9843b Accepting request 928113 from home:mbussolotto:branches:Java:packages
- Fixed CVEs:
  * CVE-2021-30640: Escape parameters in JNDI Realm queries (bsc#1188279)
  * CVE-2021-33037: Process T-E header from both HTTP 1.0 and HTTP 1.1. clients (bsc#1188278)
  * CVE-2021-41079: Validate incoming TLS packet (bsc#1190558)
- Added patches:
  * tomcat-9.0-CVE-2021-30640.patch
  * tomcat-9.0-CVE-2021-33037.patch
  * tomcat-9.0-CVE-2021-41079.patch

OBS-URL: https://build.opensuse.org/request/show/928113
OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat?expand=0&rev=229
2021-11-10 08:18:07 +00:00
45332d7d33 OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat?expand=0&rev=228 2021-11-10 07:12:31 +00:00
d7d5c718d0 OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat?expand=0&rev=227 2021-11-10 06:56:56 +00:00
Dominique Leuenberger
7013b89342 Accepting request 926588 from Java:packages
9.0.43

OBS-URL: https://build.opensuse.org/request/show/926588
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/tomcat?expand=0&rev=77
2021-10-21 21:55:15 +00:00
e8a2685481 OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat?expand=0&rev=225 2021-10-19 09:36:28 +00:00
2574a121fc Accepting request 926112 from home:balta3:tomcat9
Update Tomcat to 9.0.43, ecj 4.18 as submitted in another request is required

- Update to Tomcat 9.0.43. See changelog at
  https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.43_(markt)
- Removed Patches because fixed upstream now:
  * tomcat-9.0-CVE-2021-25122.patch
  * tomcat-9.0-CVE-2021-25329.patch

- Update to Tomcat 9.0.41. See changelog at
  https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.41_(markt)

- Update to Tomcat 9.0.40. See changelog at
  https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.40_(markt)
- Removed Patches because fixed upstream now:
  * tomcat-9.0-CVE-2020-17527.patch
  * tomcat-9.0-CVE-2021-24122.patch

OBS-URL: https://build.opensuse.org/request/show/926112
OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat?expand=0&rev=224
2021-10-19 05:08:40 +00:00
7c32e22b9c Accepting request 925884 from home:balta3:tomcat9
- Update to 9.0.39
- aqute-bnd 5.1.1 required (separate submit request)

OBS-URL: https://build.opensuse.org/request/show/925884
OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat?expand=0&rev=223
2021-10-18 06:37:59 +00:00
Dominique Leuenberger
e486fff548 Accepting request 880711 from Java:packages
OBS-URL: https://build.opensuse.org/request/show/880711
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/tomcat?expand=0&rev=76
2021-03-24 15:15:06 +00:00
4a8fbc25f3 Accepting request 880517 from home:admehmood:branches:Java:packages
* CVE-2021-25122: Apache Tomcat h2c request mix-up (bsc#1182912)
* CVE-2021-25329: Complete fix for CVE-2020-9484 (bsc#1182909)
- Added patches:
  * tomcat-9.0-CVE-2021-25122.patch 
  * tomcat-9.0-CVE-2021-25329.patch

OBS-URL: https://build.opensuse.org/request/show/880517
OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat?expand=0&rev=221
2021-03-23 11:26:59 +00:00
Richard Brown
4f4c21c76b Accepting request 880011 from Java:packages
CVE-2021-24122

OBS-URL: https://build.opensuse.org/request/show/880011
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/tomcat?expand=0&rev=75
2021-03-19 15:42:50 +00:00
b87f5648b0 OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat?expand=0&rev=219 2021-03-19 05:27:29 +00:00
6e5c662b6a Accepting request 879719 from home:admehmood:branches:Java:packages
- CVE-2021-24122

OBS-URL: https://build.opensuse.org/request/show/879719
OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat?expand=0&rev=218
2021-03-18 06:13:13 +00:00
Dominique Leuenberger
d9af3c549b Accepting request 862598 from Java:packages
OBS-URL: https://build.opensuse.org/request/show/862598
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/tomcat?expand=0&rev=74
2021-01-13 17:21:42 +00:00
52983fd500 Accepting request 856448 from home:admehmood:branches:Java:packages
- Fix HTTP/2 request header mix-up: CVE-2020-17527 (bsc#1179602)
- Added patch:
  * tomcat-9.0-CVE-2020-17527.patch

OBS-URL: https://build.opensuse.org/request/show/856448
OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat?expand=0&rev=216
2021-01-12 10:57:31 +00:00
Dominique Leuenberger
7e2e44cd86 Accepting request 845778 from Java:packages
OBS-URL: https://build.opensuse.org/request/show/845778
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/tomcat?expand=0&rev=73
2020-12-04 20:27:50 +00:00
5c88b47afb Accepting request 841492 from home:jengelh:branches:Java:packages
- Replace old specfile constructs. Remove support for SUSE 11.x.
- Drop %systemd_requires, which is considered a no-op.
- Trim redundant license mention from description.
- Make documentation noarch.
- Do not suppress errors from useradd.

OBS-URL: https://build.opensuse.org/request/show/841492
OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat?expand=0&rev=214
2020-11-03 15:34:19 +00:00
Matei Albu
92414c9e01 Accepting request 845747 from home:mateialbu:branches:Java:packages
remove tomcat-9.0-init

OBS-URL: https://build.opensuse.org/request/show/845747
OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat?expand=0&rev=213
2020-11-03 14:25:31 +00:00
Matei Albu
5fc16cd0d0 Accepting request 845720 from home:mateialbu:branches:Java:packages
- Add source url for tomcat-serverxml-tool
- Fix typo in tomcat-webapps %postun that caused /examples
  context to remain in server.xml when package was removed
- Remove tomcat-9.0.init and /usr/lib/tmpfiles.d/tomcat.conf from
  package. They're not used anymore becuse of systemd (bsc#1178396)

OBS-URL: https://build.opensuse.org/request/show/845720
OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat?expand=0&rev=212
2020-11-03 13:23:42 +00:00
Matei Albu
a14e7a9e0d Accepting request 845377 from home:mateialbu:branches:Java:packages
- Fix tomcat-servlet-4_0-api package alternatives to use /usr/share/java/servlet.jar instead of  /usr/share/java/tomcat-servlet.jar. Keep /usr/share/java/tomcat-servlet.jar symlink for compatibility (bsc#1092163) 
- Change default file ownership in tomcat-webapps from 
  tomcat:tomcat to root:tomcat

OBS-URL: https://build.opensuse.org/request/show/845377
OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat?expand=0&rev=211
2020-11-02 16:37:37 +00:00
Dominique Leuenberger
b6c08d4875 Accepting request 841719 from Java:packages
OBS-URL: https://build.opensuse.org/request/show/841719
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/tomcat?expand=0&rev=72
2020-10-14 13:40:15 +00:00
Matei Albu
d14a544fa7 Accepting request 841718 from home:mateialbu:branches:Java:packages
CVE-2020-13943 and bsc#1177601

OBS-URL: https://build.opensuse.org/request/show/841718
OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat?expand=0&rev=209
2020-10-14 08:54:21 +00:00
Dominique Leuenberger
472406ec35 Accepting request 829682 from Java:packages
libexecdir fixes

OBS-URL: https://build.opensuse.org/request/show/829682
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/tomcat?expand=0&rev=71
2020-08-29 18:33:44 +00:00
14216e6c34 OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat?expand=0&rev=207 2020-08-26 06:05:55 +00:00
Dominique Leuenberger
9aabb54a8f Accepting request 823636 from Java:packages
OBS-URL: https://build.opensuse.org/request/show/823636
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/tomcat?expand=0&rev=70
2020-07-31 13:55:04 +00:00
Matei Albu
32d59bc711 Accepting request 823635 from home:mateialbu:branches:Java:packages
- Don't give write permissions for the tomcat group on files and
  directories where it's not needed (bsc#1172562)
- Change tomcat.pid location from /var/run to /run (bsc#1173103)
- Use the /sbin/nologin shell when creating the tomcat user
- Use %tmpfiles_create macro in %post instead of calling
  systemd-tmpfiles directly

OBS-URL: https://build.opensuse.org/request/show/823635
OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat?expand=0&rev=205
2020-07-30 21:16:33 +00:00