Fridrich Strba
5d3c84a4fd
* Fixed CVEs:
+ CVE-2024-54677: DoS in examples web application (bsc#1233434)
+ CVE-2024-50379: RCE due to TOCTOU issue in JSP compilation (bsc#1234663)
* Catalina
+ Add: Add option to serve resources from subpath only with WebDAV Servlet
like with DefaultServlet. (michaelo)
+ Fix: Add special handling for the protocols attribute of SSLHostConfig in
storeconfig. (remm)
+ Fix: 69442: Fix case sensitive check on content-type when parsing request
parameters. (remm)
+ Code: Refactor duplicate code for extracting media type and subtype from
content-type into a single method. (markt)
+ Fix: Compatibility of generated embedded code with components where
constructors or property related methods throw a checked exception. (remm)
+ Fix: The previous fix for inconsistent resource metadata during concurrent
reads and writes was incomplete. (markt)
+ Fix: 69444: Ensure that the javax.servlet.error.message request attribute
is set when an application defined error page is called. (markt)
+ Fix: Avoid quotes for numeric values in the JSON generated by the status
servlet. (remm)
+ Add: Add strong ETag support for the WebDAV and default servlet, which can
be enabled by using the useStrongETags init parameter with a value set to
true. The ETag generated will be a SHA-1 checksum of the resource content.
(remm)
+ Fix: Use client locale for directory listings. (remm)
+ Fix: 69439: Improve the handling of multiple Cache-Control headers in the
ExpiresFilter. Based on pull request #777 by Chenjp. (markt)
+ Fix: 69447: Update the support for caching classes the web application
class loader cannot find to take account of classes loaded from external
OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat?expand=0&rev=325
39 lines
1.2 KiB
Diff
39 lines
1.2 KiB
Diff
Index: apache-tomcat-9.0.97-src/build.xml
|
|
===================================================================
|
|
--- apache-tomcat-9.0.97-src.orig/build.xml
|
|
+++ apache-tomcat-9.0.97-src/build.xml
|
|
@@ -228,11 +228,21 @@
|
|
<!--<defaultexcludes echo="true" />-->
|
|
|
|
<!-- Classpaths -->
|
|
+ <path id="bnd.classpath">
|
|
+ <fileset file="${bnd.jar}" />
|
|
+ <fileset dir="${bnd.dir}">
|
|
+ <include name="**/*.jar"/>
|
|
+ </fileset>
|
|
+ <fileset file="${osgiannotation.jar}" />
|
|
+ <fileset file="${osgicmpn.jar}" />
|
|
+ <fileset file="${slf4j-api.jar}" />
|
|
+ </path>
|
|
+
|
|
<path id="compile.classpath">
|
|
- <pathelement location="${bnd.jar}"/>
|
|
<pathelement location="${jdt.jar}"/>
|
|
<pathelement location="${jaxrpc-lib.jar}"/>
|
|
<pathelement location="${wsdl4j-lib.jar}"/>
|
|
+ <path refid="bnd.classpath"/>
|
|
</path>
|
|
|
|
<path id="tomcat.classpath">
|
|
@@ -4034,10 +4044,6 @@ Read the Building page on the Apache Tom
|
|
|
|
<target name="setup-bnd" depends="download-bnd" unless="${skip.build.java.version}">
|
|
<!-- Add bnd tasks to project -->
|
|
- <path id="bnd.classpath">
|
|
- <fileset file="${bnd.jar}" />
|
|
- </path>
|
|
-
|
|
<taskdef resource="aQute/bnd/ant/taskdef.properties" classpathref="bnd.classpath" />
|
|
</target>
|
|
|