Bug 1265704

Summary: CVE-2015-5174 tomcat: URL Normalization issue [jbews-3.0.0]
Product: [Retired] JBoss Web Server 3 Reporter: Timothy Walsh <twalsh>
Component: tomcat7Assignee: Coty Sutherland <csutherl>
Status: CLOSED ERRATA QA Contact: Michal Karm Babacek <mbabacek>
Severity: medium Docs Contact:
Priority: medium    
Version: 3.0.0CC: jclere, jdoyle, lgao, mbabacek, myarboro, pslavice, rsvoboda, twalsh, weli
Target Milestone: ---Keywords: Security, SecurityTracking
Target Release: 3.0.0   
Hardware: All   
OS: Linux   
Whiteboard: component:tomcat
Fixed In Version: Doc Type: Release Note
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-02-01 03:05:47 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1265698    

Description Timothy Walsh 2015-09-23 13:53:39 UTC
jbews-3.0.0 tracking bug for tomcat: see blocks bug list for full details of the security issue(s).

This bug is never intended to be made public, please put any public notes
in the blocked bugs.

NOTE THIS ISSUE IS CURRENTLY EMBARGOED, DO NOT MAKE PUBLIC COMMITS OR COMMENTS ABOUT THIS ISSUE.

[bug automatically created by: add-tracking-bugs]

Comment 2 JBoss JIRA Server 2015-10-09 12:59:15 UTC
David Knox <dknox> updated the status of jira JWS-240 to Resolved

Comment 3 JBoss JIRA Server 2015-11-27 00:51:37 UTC
Coty Sutherland <csutherl> updated the status of jira JWS-240 to Resolved

Comment 4 JBoss JIRA Server 2015-12-17 17:39:59 UTC
Michal Karm Babacek <mbabacek> updated the status of jira JWS-240 to Closed

Comment 6 JBoss JIRA Server 2016-04-19 10:23:20 UTC
Michal Karm Babacek <mbabacek> updated the status of jira JWS-240 to Reopened

Comment 7 JBoss JIRA Server 2016-04-19 10:23:32 UTC
Michal Karm Babacek <mbabacek> updated the status of jira JWS-240 to Closed

Comment 8 JBoss JIRA Server 2016-04-19 10:32:14 UTC
Tim Walsh <twalsh> updated the status of jira JWS-240 to Reopened

Comment 9 JBoss JIRA Server 2016-04-19 10:33:15 UTC
Tim Walsh <twalsh> updated the status of jira JWS-240 to Closed