* Fixed CVEs: + CVE-2024-54677: DoS in examples web application (bsc#1233434) + CVE-2024-50379: RCE due to TOCTOU issue in JSP compilation (bsc#1234663) * Catalina + Add: Add option to serve resources from subpath only with WebDAV Servlet like with DefaultServlet. (michaelo) + Fix: Add special handling for the protocols attribute of SSLHostConfig in storeconfig. (remm) + Fix: 69442: Fix case sensitive check on content-type when parsing request parameters. (remm) + Code: Refactor duplicate code for extracting media type and subtype from content-type into a single method. (markt) + Fix: Compatibility of generated embedded code with components where constructors or property related methods throw a checked exception. (remm) + Fix: The previous fix for inconsistent resource metadata during concurrent reads and writes was incomplete. (markt) + Fix: 69444: Ensure that the javax.servlet.error.message request attribute is set when an application defined error page is called. (markt) + Fix: Avoid quotes for numeric values in the JSON generated by the status servlet. (remm) + Add: Add strong ETag support for the WebDAV and default servlet, which can be enabled by using the useStrongETags init parameter with a value set to true. The ETag generated will be a SHA-1 checksum of the resource content. (remm) + Fix: Use client locale for directory listings. (remm) + Fix: 69439: Improve the handling of multiple Cache-Control headers in the ExpiresFilter. Based on pull request #777 by Chenjp. (markt) + Fix: 69447: Update the support for caching classes the web application class loader cannot find to take account of classes loaded from external OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat?expand=0&rev=325
49 lines
1.1 KiB
Bash
49 lines
1.1 KiB
Bash
#!/bin/sh
|
|
#
|
|
# tomcat-digest script
|
|
# JPackage Project <http://www.jpackage.org/>
|
|
|
|
# Set default JAVA_HOME
|
|
export JAVA_HOME="${JAVA_HOME:-%{?java_home}}"
|
|
|
|
# Source functions library
|
|
if [ -f /usr/share/java-utils/java-functions ] ; then
|
|
. /usr/share/java-utils/java-functions
|
|
else
|
|
echo "Can't find functions library, aborting"
|
|
exit 1
|
|
fi
|
|
|
|
# Get the tomcat config (use this for environment specific settings)
|
|
if [ -z "${TOMCAT_CFG}" ]; then
|
|
TOMCAT_CFG="/etc/tomcat/tomcat.conf"
|
|
fi
|
|
|
|
if [ -r "$TOMCAT_CFG" ]; then
|
|
. $TOMCAT_CFG
|
|
fi
|
|
|
|
set_javacmd
|
|
|
|
# CLASSPATH munging
|
|
if [ -n "$JSSE_HOME" ]; then
|
|
CLASSPATH="${CLASSPATH}:$(build-classpath jcert jnet jsse 2>/dev/null)"
|
|
fi
|
|
CLASSPATH="${CLASSPATH}:${CATALINA_HOME}/bin/bootstrap.jar"
|
|
CLASSPATH="${CLASSPATH}:${CATALINA_HOME}/bin/tomcat-juli.jar"
|
|
export CLASSPATH
|
|
|
|
# Configuration
|
|
MAIN_CLASS="org.apache.catalina.startup.Tool"
|
|
BASE_OPTIONS=""
|
|
BASE_FLAGS="-Dcatalina.home=\"$CATALINA_HOME\""
|
|
BASE_JARS="commons-daemon tomcat/catalina tomcat/servlet"
|
|
|
|
# Set parameters
|
|
set_classpath $BASE_JARS
|
|
set_flags $BASE_FLAGS
|
|
set_options $BASE_OPTIONS
|
|
|
|
# Let's start
|
|
run "$@"
|