Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 918696 - www-servers/tomcat-{8.5.96,9.0.83,10.1.16}: please stabilize (security: CVE-2023-46589 Apache Tomcat - Request Smuggling)
Summary: www-servers/tomcat-{8.5.96,9.0.83,10.1.16}: please stabilize (security: CVE-2...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Stabilization (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Java team
URL:
Whiteboard:
Keywords: CC-ARCHES, SECURITY, STABLEREQ
Depends on:
Blocks: CVE-2023-46589
  Show dependency tree
 
Reported: 2023-11-28 15:34 UTC by Miroslav Šulc
Modified: 2023-11-28 19:22 UTC (History)
0 users

See Also:
Package list:
www-servers/tomcat-8.5.96 www-servers/tomcat-9.0.83 www-servers/tomcat-10.1.16
Runtime testing required: ---
nattka: sanity-check+

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Miroslav Šulc gentoo-dev 2023-11-28 15:34:49 UTC 
commit a3e20bde7d51d047f9716618686fcbd0a67ece41
Author: Miroslav Šulc <fordfrog@gentoo.org>
Date:   Wed Nov 15 14:07:55 2023 +0100

    www-servers/tomcat: bump to 8.5.96
    
    Signed-off-by: Miroslav Šulc <fordfrog@gentoo.org>

commit 02820b8d422e76a66f8e1d3ee72691f490c42ba7
Author: Miroslav Šulc <fordfrog@gentoo.org>
Date:   Wed Nov 15 14:01:51 2023 +0100

    www-servers/tomcat: bump to 9.0.83
    
    Signed-off-by: Miroslav Šulc <fordfrog@gentoo.org>

commit 3ad30aad7990debfb69aecc0258597971ae8fd27
Author: Miroslav Šulc <fordfrog@gentoo.org>
Date:   Wed Nov 15 13:54:18 2023 +0100

    www-servers/tomcat: bump to 10.1.16
    
    Signed-off-by: Miroslav Šulc <fordfrog@gentoo.org>
Comment 1 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2023-11-28 19:17:50 UTC 
amd64 done

all arches done
Comment 2 Larry the Git Cow gentoo-dev 2023-11-28 19:22:09 UTC 
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=41e79b6cbfc1c5cecca19531d6af0bead808b71f

commit 41e79b6cbfc1c5cecca19531d6af0bead808b71f
Author:     Miroslav Šulc <fordfrog@gentoo.org>
AuthorDate: 2023-11-28 19:21:55 +0000
Commit:     Miroslav Šulc <fordfrog@gentoo.org>
CommitDate: 2023-11-28 19:21:55 +0000

    www-servers/tomcat: dropped obsolete 8.5.95-r1, 9.0.82 & 10.1.15 (security)
    
    Bug: https://bugs.gentoo.org/918696
    Bug: https://bugs.gentoo.org/918700
    Signed-off-by: Miroslav Šulc <fordfrog@gentoo.org>

 www-servers/tomcat/Manifest                |   7 --
 www-servers/tomcat/tomcat-10.1.15.ebuild   | 181 -----------------------------
 www-servers/tomcat/tomcat-8.5.95-r1.ebuild | 157 -------------------------
 www-servers/tomcat/tomcat-9.0.82.ebuild    | 180 ----------------------------
 4 files changed, 525 deletions(-)