From 449935b9adece9693ac1d38c40da5c9243a0e363 Mon Sep 17 00:00:00 2001 From: Coty Sutherland Date: Nov 30 2016 14:52:02 +0000 Subject: Resolves: rhbz#1397495 CVE-2016-6816 CVE-2016-8735 tomcat: various flaws --- diff --git a/sources b/sources index 7e4e264..c9d3615 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -e176d014e49685e2642f7abd8eb7b53b apache-tomcat-7.0.72-src.tar.gz +c8391fe6504d2104835a2f7f883858ad apache-tomcat-7.0.73-src.tar.gz diff --git a/tomcat.spec b/tomcat.spec index 40b31f7..2fd5e9f 100644 --- a/tomcat.spec +++ b/tomcat.spec @@ -31,7 +31,7 @@ %global jspspec 2.2 %global major_version 7 %global minor_version 0 -%global micro_version 72 +%global micro_version 73 %global packdname apache-tomcat-%{version}-src %global servletspec 3.0 %global elspec 2.2 @@ -638,6 +638,10 @@ fi %{_sbindir}/%{name}-jsvc %changelog +* Tue Nov 29 2016 Coty Sutherland - 0:7.0.73-1 +- Update to 7.0.73 +- Resolves: rhbz#1397495 CVE-2016-6816 CVE-2016-8735 tomcat: various flaws + * Fri Sep 23 2016 Coty Sutherland 0:7.0.72-1 - Resolves: rhbz#1375582 CVE-2016-5388 Tomcat: CGI sets environmental variable based on user supplied Proxy request header - Resolves: rhbz#1376718 CVE-2016-1240 tomcat: Local privilege escalation via unsafe file handling in the Tomcat init script