Bug 1229649

Summary:	tomcat 7.0.33 is outdated and has a bunch of security vulnerabilities
Product:	[Fedora] Fedora EPEL	Reporter:	Peter Bieringer <pb>
Component:	tomcat	Assignee:	Ivan Afonichev <ivan.afonichev>
Status:	CLOSED ERRATA	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	high	Docs Contact:
Priority:	unspecified
Version:	epel7	CC:	alee, arusso, coolsvap, ivan.afonichev
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	tomcat-7.0.65-1.el6	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2016-02-07 01:25:13 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Peter Bieringer 2015-06-09 10:42:06 UTC

Description of problem:
latest tomcat in EPEL is 7.0.33 released around April 2014

Lastest version fixing security vulnerabilities is 7.0.59, released February 2015

Are there any plans to update the outdated version in EPEL?

Additional info:
https://tomcat.apache.org/security-7.html

Comment 1 Fedora Update System 2016-01-06 19:06:43 UTC

tomcat-7.0.65-1.el6 has been submitted as an update to Fedora EPEL 6. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-819f6356ea

Comment 2 Fedora Update System 2016-01-08 21:19:35 UTC

tomcat-7.0.65-1.el6 has been pushed to the Fedora EPEL 6 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-819f6356ea

Comment 3 Fedora Update System 2016-02-07 01:24:54 UTC

tomcat-7.0.65-1.el6 has been pushed to the Fedora EPEL 6 stable repository. If problems still persist, please make note of it in this bug report.