Bug 240242

Summary:	tomcat5 should be upgraded to 5.5.23
Product:	[Fedora] Fedora	Reporter:	Vivek Lakshmanan <viveklak>
Component:	tomcat5	Assignee:	Vivek Lakshmanan <viveklak>
Status:	CLOSED CURRENTRELEASE	QA Contact:
Severity:	medium	Docs Contact:
Priority:	urgent
Version:	rawhide	CC:	christoph
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	Fedora 7	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2007-05-17 21:38:28 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	240208
Bug Blocks:

Description Vivek Lakshmanan 2007-05-16 00:06:22 UTC

+++ This bug was initially created as a clone of Bug #240208 +++

Description of problem:
CVE-2005-2090 multiple tomcat issues (CVE-2007-0450 CVE-2006-7195)
A number of flaws affect the versions of Tomcat5 previous to 5.5.23.  Please see
linked bugs for details.

Version-Release number of selected component (if applicable):
tomcat5-5.5.20-5jpp.1.fc7

Comment 1 Vivek Lakshmanan 2007-05-17 14:34:46 UTC

Note that CVE-2006-7195 does not affect tomcat5 5.5.20.

Comment 2 Vivek Lakshmanan 2007-05-17 21:37:45 UTC

$ koji latest-pkg f7-final tomcat5
Build                                     Tag                   Built by
----------------------------------------  --------------------  ----------------
tomcat5-5.5.23-9jpp.2.fc7                 f7-final              vivekl