On 10/08/17 10:42, Violeta Georgieva wrote:
> The proposed Apache Tomcat 7.0.80 release is now available for voting.
>
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-7/v7.0.80/
> The Maven staging repo is:
>
Author: violetagg
Date: Thu Aug 10 08:52:58 2017
New Revision: 1804644
URL: http://svn.apache.org/viewvc?rev=1804644=rev
Log:
Drop the tag in order to pick up a fix in javadoc
Removed:
tomcat/tc7.0.x/tags/TOMCAT_7_0_80/
-
Author: violetagg
Date: Thu Aug 10 08:55:03 2017
New Revision: 1804645
URL: http://svn.apache.org/viewvc?rev=1804645=rev
Log:
Tag 7.0.80
Added:
tomcat/tc7.0.x/tags/TOMCAT_7_0_80/ (props changed)
- copied from r1804644, tomcat/tc7.0.x/trunk/
Modified:
Author: violetagg
Date: Thu Aug 10 09:45:45 2017
New Revision: 1804649
URL: http://svn.apache.org/viewvc?rev=1804649=rev
Log:
Increment version for next dev cycle
Modified:
tomcat/tc7.0.x/trunk/build.properties.default
tomcat/tc7.0.x/trunk/res/maven/mvn.properties.default
Author: violetagg
Date: Thu Aug 10 08:51:01 2017
New Revision: 1804643
URL: http://svn.apache.org/viewvc?rev=1804643=rev
Log:
Fix javadoc
Modified:
tomcat/tc7.0.x/trunk/java/org/apache/naming/resources/FileDirContext.java
Modified:
Added: dev/tomcat/tomcat-7/v7.0.80/bin/extras/catalina-jmx-remote.jar.sha1
==
--- dev/tomcat/tomcat-7/v7.0.80/bin/extras/catalina-jmx-remote.jar.sha1 (added)
+++
Author: violetagg
Date: Thu Aug 10 09:41:42 2017
New Revision: 20917
Log:
Stage 7.0.80 RC
Added:
dev/tomcat/tomcat-7/v7.0.80/
dev/tomcat/tomcat-7/v7.0.80/KEYS
dev/tomcat/tomcat-7/v7.0.80/README.html
dev/tomcat/tomcat-7/v7.0.80/RELEASE-NOTES
dev/tomcat/tomcat-7/v7.0.80/bin/
The proposed Apache Tomcat 7.0.80 release is now available for voting.
It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-7/v7.0.80/
The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1149/
The svn tag is:
Author: markt
Date: Thu Aug 10 21:09:31 2017
New Revision: 1804729
URL: http://svn.apache.org/viewvc?rev=1804729=rev
Log:
Correct regression in r1804604 that broke WebDAV.
Modified:
tomcat/tc7.0.x/trunk/java/org/apache/naming/resources/FileDirContext.java
Author: markt
Date: Thu Aug 10 22:01:13 2017
New Revision: 1804734
URL: http://svn.apache.org/viewvc?rev=1804734=rev
Log:
Add info for:
- CVE-2017-7674
- CVE-2017-7675
Modified:
tomcat/site/trunk/docs/security-7.html
tomcat/site/trunk/docs/security-8.html
CVE-2017-7674 Apache Tomcat Cache Poisoning
Severity: Moderate
Vendor: The Apache Software Foundation
Versions Affected:
Apache Tomcat 9.0.0.M1 to 9.0.0.M21
Apache Tomcat 8.5.0 to 8.5.15
Apache Tomcat 8.0.0.RC1 to 8.0.44
Apache Tomcat 7.0.41 to 7.0.78
Description:
The CORS Filter did not an
CVE-2017-7675 Apache Tomcat Cache Poisoning
Severity: Important
Vendor: The Apache Software Foundation
Versions Affected:
Apache Tomcat 9.0.0.M1 to 9.0.0.M21
Apache Tomcat 8.5.0 to 8.5.15
Description:
The HTTP/2 implementation bypassed a number of security checks that
prevented directory
Author: markt
Revision: 1796090
Modified property: svn:log
Modified: svn:log at Thu Aug 10 22:05:29 2017
--
--- svn:log (original)
+++ svn:log Thu Aug 10 22:05:29 2017
@@ -1,2 +1,3 @@
Fix
Author: markt
Revision: 1796091
Modified property: svn:log
Modified: svn:log at Thu Aug 10 22:05:43 2017
--
--- svn:log (original)
+++ svn:log Thu Aug 10 22:05:43 2017
@@ -1,2 +1,3 @@
Fix
https://bz.apache.org/bugzilla/show_bug.cgi?id=61120
--- Comment #2 from Mark Thomas ---
This is CVE-2017-7675.
--
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe,
Author: markt
Revision: 1795813
Modified property: svn:log
Modified: svn:log at Thu Aug 10 22:06:43 2017
--
--- svn:log (original)
+++ svn:log Thu Aug 10 22:06:43 2017
@@ -1 +1,2 @@
BZ61101: CORS filter should set Vary
Author: markt
Revision: 1795814
Modified property: svn:log
Modified: svn:log at Thu Aug 10 22:06:58 2017
--
--- svn:log (original)
+++ svn:log Thu Aug 10 22:06:58 2017
@@ -1 +1,2 @@
BZ61101: CORS filter should set Vary
Author: markt
Revision: 1795815
Modified property: svn:log
Modified: svn:log at Thu Aug 10 22:07:08 2017
--
--- svn:log (original)
+++ svn:log Thu Aug 10 22:07:08 2017
@@ -1 +1,2 @@
BZ61101: CORS filter should set Vary
Author: markt
Revision: 1795816
Modified property: svn:log
Modified: svn:log at Thu Aug 10 22:07:19 2017
--
--- svn:log (original)
+++ svn:log Thu Aug 10 22:07:19 2017
@@ -1 +1,2 @@
BZ61101: CORS filter should set Vary
https://bz.apache.org/bugzilla/show_bug.cgi?id=61101
--- Comment #2 from Mark Thomas ---
This is CVE-2017-7674
--
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe,
CVE-2017-7675 Apache Tomcat Security Constraint Bypass
Severity: Important
Vendor: The Apache Software Foundation
Versions Affected:
Apache Tomcat 9.0.0.M1 to 9.0.0.M21
Apache Tomcat 8.5.0 to 8.5.15
Description:
The HTTP/2 implementation bypassed a number of security checks that
prevented
https://bz.apache.org/bugzilla/show_bug.cgi?id=59617
Banupriya changed:
What|Removed |Added
CC|
https://bz.apache.org/bugzilla/show_bug.cgi?id=61398
Bug ID: 61398
Summary: classpath jars and files are not loading from
classpath in web applicaiton
Product: Tomcat 8
Version: 8.0.45
Hardware: Other
OS:
https://bz.apache.org/bugzilla/show_bug.cgi?id=61398
Mark Thomas changed:
What|Removed |Added
Resolution|--- |INVALID
Author: violetagg
Date: Thu Aug 10 09:56:12 2017
New Revision: 1804653
URL: http://svn.apache.org/viewvc?rev=1804653=rev
Log:
Tag 8.0.46
Added:
tomcat/tc8.0.x/tags/TOMCAT_8_0_46/ (props changed)
- copied from r1804652, tomcat/tc8.0.x/trunk/
Modified:
The proposed Apache Tomcat 8.0.46 release is now available for voting.
It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-8/v8.0.46/
The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1150/
The svn tag is:
https://bz.apache.org/bugzilla/show_bug.cgi?id=61393
Konstantin Kolinko changed:
What|Removed |Added
OS||All
Added: dev/tomcat/tomcat-8/v8.0.46/bin/extras/catalina-ws.jar.asc
==
--- dev/tomcat/tomcat-8/v8.0.46/bin/extras/catalina-ws.jar.asc (added)
+++ dev/tomcat/tomcat-8/v8.0.46/bin/extras/catalina-ws.jar.asc Thu Aug 10
Author: violetagg
Date: Thu Aug 10 10:54:28 2017
New Revision: 20918
Log:
Stage 8.0.46 RC
Added:
dev/tomcat/tomcat-8/v8.0.46/
dev/tomcat/tomcat-8/v8.0.46/KEYS
dev/tomcat/tomcat-8/v8.0.46/README.html
dev/tomcat/tomcat-8/v8.0.46/RELEASE-NOTES
dev/tomcat/tomcat-8/v8.0.46/bin/
Author: violetagg
Date: Thu Aug 10 11:00:55 2017
New Revision: 1804661
URL: http://svn.apache.org/viewvc?rev=1804661=rev
Log:
Increment version for next dev cycle
Modified:
tomcat/tc8.0.x/trunk/build.properties.default
tomcat/tc8.0.x/trunk/res/maven/mvn.properties.default
30 matches
Mail list logo