tomcat/apache-tomcat-9.0.98-src.tar.gz.asc
Fridrich Strba 5d3c84a4fd - Update to Tomcat 9.0.98
* Fixed CVEs:
    + CVE-2024-54677: DoS in examples web application (bsc#1233434)
    + CVE-2024-50379: RCE due to TOCTOU issue in JSP compilation (bsc#1234663)
  * Catalina
    + Add: Add option to serve resources from subpath only with WebDAV Servlet
      like with DefaultServlet. (michaelo)
    + Fix: Add special handling for the protocols attribute of SSLHostConfig in
      storeconfig. (remm)
    + Fix: 69442: Fix case sensitive check on content-type when parsing request
      parameters. (remm)
    + Code: Refactor duplicate code for extracting media type and subtype from
      content-type into a single method. (markt)
    + Fix: Compatibility of generated embedded code with components where
      constructors or property related methods throw a checked exception. (remm)
    + Fix: The previous fix for inconsistent resource metadata during concurrent
      reads and writes was incomplete. (markt)
    + Fix: 69444: Ensure that the javax.servlet.error.message request attribute
      is set when an application defined error page is called. (markt)
    + Fix: Avoid quotes for numeric values in the JSON generated by the status
      servlet. (remm)
    + Add: Add strong ETag support for the WebDAV and default servlet, which can
      be enabled by using the useStrongETags init parameter with a value set to
      true. The ETag generated will be a SHA-1 checksum of the resource content.
      (remm)
    + Fix: Use client locale for directory listings. (remm)
    + Fix: 69439: Improve the handling of multiple Cache-Control headers in the
      ExpiresFilter. Based on pull request #777 by Chenjp. (markt)
    + Fix: 69447: Update the support for caching classes the web application
      class loader cannot find to take account of classes loaded from external

OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat?expand=0&rev=325
2025-01-06 16:20:19 +00:00

17 lines
833 B
Plaintext

-----BEGIN PGP SIGNATURE-----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=EWT+
-----END PGP SIGNATURE-----