| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: tomcat6-el-1_0-api | Distribution: openSUSE 11.3 |
| Version: 6.0.24 | Vendor: openSUSE |
| Release: 5.16.1 | Build date: Mon Jan 9 11:15:41 2012 |
| Group: Development/Libraries/Java | Build host: build32 |
| Size: 32125 | Source RPM: tomcat6-6.0.24-5.16.1.src.rpm |
| Packager: http://bugs.opensuse.org | |
| Url: http://tomcat.apache.org | |
| Summary: Expression Language v1.0 API | |
Expression Language 1.0.
Apache Software License ..
* Fri Jan 06 2012 mvyskocil@suse.cz
- fix bnc#727543 - VUL-0: Apache tomcat vulnerable to hash collision attack
backport upstream changes:
* generic CSRF protection layer (to have FilterBase needed for
FailedRequestFilter)
http://svn.apache.org/viewvc?view=revision&revision=1030547
* add getCharset method for B2Converter
http://svn.apache.org/viewvc?view=revision&revision=1140904
* add isConfigProblemFatal method
http://svn.apache.org/viewvc?view=revision&revision=1199122
* GET POST parameter processing performance. Adds maximum number of
parameters per request (defaults to 10000) and new FailedRequestFilter for
rejecting requests with excessive number of parameters
http://svn.apache.org/viewvc?view=revision&revision=1200601
- fix bnc#712784 - tomcat6: add missing Requires on java >= 1.6.0
* add recommends on java >= 1.6.0 and java-devel >= 1.6.0
- with CSRF protection layer manager and host-manager now supports
new roles, see
* /srv/tomcat6/webapps/docs/manager-howto.html
* /srv/tomcat6/webapps/manager/WEB-INF/web.xml
* /srv/tomcat6/webapps/host-manager/WEB-INF/web.xml
* Thu Sep 15 2011 mvyskocil@suse.cz
- fix bnc#715991 - VUL-0: tomcat authentication bypass and information
disclosure (CVE-2011-3190)
* http://svn.apache.org/viewvc?view=revision&revision=1162959
* Mon Aug 15 2011 mvyskocil@suse.cz
- fix bnc#706404 - VUL-0: tomcat user password information leak (CVE-2011-2204)
* http://svn.apache.org/viewvc?view=revision&revision=1140071
- fix bnc#706382 - VUL-0: tomcat information leak and DoS (CVE-2011-2526)
* http://svn.apache.org/viewvc?view=revision&revision=1146703
- fix bnc#702289 - suse manager pam ldap authentication fails
* source CATALINA_HOME/bin/setenv.sh if exists
* Fri Feb 11 2011 mvyskocil@suse.cz
- fix bnc#669897 - VUL-0: tomcat6: Apache Tomcat Local bypass of security
manger file permissions (CVE-2010-3781)
* http://svn.apache.org/viewvc?view=revision&revision=1022560
- fix bnc#669929 - VUL-0: tomcat6: Apache Tomcat Manager XSS vulnerability
(CVE-2011-0013)
* http://svn.apache.org/viewvc?view=revision&revision=1057270
- fix bnc#669930 - VUL-0: tomcat6: Apache Tomcat DoS vulnerability
(CVE-2011-0534)
* http://svn.apache.org/viewvc?view=revision&revision=1066313
* Mon Jan 17 2011 mvyskocil@suse.cz
- fix bnc#655440#c14 - clean workdir of tomcat6's webapps
* Thu Nov 25 2010 mvyskocil@suse.cz
- fix bnc#655440 - VUL-0: tomcat6: Apache Tomcat Manager application XSS
vulnerability (CVE-2010-4172)
http://svn.apache.org/viewvc?view=revision&revision=1037779
* Mon Nov 08 2010 mvyskocil@suse.cz
- fix bnc#650130 - Update of tomcat6 not possible (cpio: Is a directory)
* workaround the rpm bug - it cannot update directory to symlink
* make /etc/tomcat6/Catalina/ as ghost file
create link in %posttrans
* Wed Sep 22 2010 mvyskocil@site
- fix bnc#625415 - Tomcat6 does not have permissions to its own directories
* use defattr instead of attr, it seems it does not cover dirs anymore
- fix the wrong /etc/tomcat6/Catalina symlink
* Thu Jul 15 2010 mvyskocil@suse.cz
- fix bnc#599554: VUL-1: tomcat information disclosure (CVE-2010-1157)
* http://svn.apache.org/viewvc?view=revision&revision=936540
- fix bnc#622188: VUL-0: tomcat: remote DoS / information disclosure
(CVE-2010-2227)
* http://svn.apache.org/viewvc?view=revision&revision=958977
- link dtomcat6 to CATALINA_HOME/bin/catalina.sh
- install scripts with mode 0755
- recommends logrotate
* Wed Feb 03 2010 mvyskocil@suse.cz
- Update to 6.0.24 (bugfix release). This obsoletes patch
* tomcat6-bug47316.patch
- Merged with tomcat6-6.0.18-10.jpp6.src.rpm
* return the jpackage.org license header in spec
* polish in spec (use more macros)
* add logrotate support
* add patch to document webapps in %%{_sysconfdir}/%%{name}/tomcat-users.xml
* move %%{_bindir}/d%%{name} to %%{_sbindir}/%%{name} and provide symlink to
%%{_sbindir}/d%%{name}
* add digest and tool-wrapper scripts
* explicitly unset CLASSPATH
* explicitly set OPT_JAR_LIST to include ant/ant-trax
* build and install sample webapp
* use copy instead of move to fix short-circuit install build
* version jsp and servlet Provides with their spec versions
* make initscript LSB-complaint
* add el subpackage
* Tue Jan 05 2010 mvyskocil@suse.cz
- fixed bnc#565901 - missing catalina.sh
* added catalina.sh (link from dtomcat6) to improve upstream compatibility
* Wed Sep 30 2009 mvyskocil@suse.cz
- fixed bnc#542634: Tomcat NPE on start
applied patch from upstream bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=47316#c3
* Wed Aug 26 2009 mvyskocil@suse.cz
- fixed bnc#520532: marked all webapp/ROOT/* files as config(noreplace)
- marked /etc/ant.d/catalina-ant as config(noreplace)
* Mon Jun 15 2009 mvyskocil@suse.cz
- added a missing -p1 for %patch0
* Wed Jun 03 2009 mvyskocil@suse.cz
- fixed bnc#488061: work directory clean on tomcat stop
- update to 6.0.20 - the bugfix release:
* MemoryUserDatabase is read-only by default
* Allow huge request body packets for AJP13
* Never return an empty HTTP status reason phrase
* Prevent double initialisation of JSPs
* A node should ignore its own heartbeat messages
* Prettry error messages (instead of stacktrace) if shutdown port is disabled
* Mon Mar 16 2009 mvyskocil@suse.cz
- fixed bnc#418664 - Tomcat6 installation has missing bits
- added /etc/ant.d/catalina-ant
- another fix for bnc#471639 - tomcat does not start/work
* merged a sysconfig and tomcat6.conf to allow a dtomcat6 start works
* also fixs (bnc#471639)
- fixed bnc#424675 - Access rights to /etc/tomcat6 directory not set right
* create a link from /etc/tomcat6/Catalina to /var/cache/tomcat6/Catalina
- removed a CATALINA_OPTS from stop in dtcomcat6 (bao#42951)
/usr/share/java/el_1_0_api.jar /usr/share/java/el_api.jar /usr/share/java/tomcat6-el-1.0-api-6.0.24.jar /usr/share/java/tomcat6-el-1.0-api.jar
Generated by rpm2html 1.8.1
Fabrice Bellet, Mon May 20 05:18:54 2013