Bug 650027
| Summary: | multiple (11) CVEs against f14 released version of tomcat5 | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Jason Corley <jason.corley> |
| Component: | tomcat5 | Assignee: | Devrim Gündüz <devrim> |
| Status: | CLOSED DUPLICATE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | high | Docs Contact: | |
| Priority: | low | ||
| Version: | 14 | CC: | akurtako, devrim, dwalluck, vdanen |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2010-11-05 15:46:57 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Jason Corley
2010-11-05 02:53:34 UTC
Thanks for the report. These are known, although I'm not sure why rawhide has 5.5.31 but Fedora 14 and previous are still at 5.5.27. Tracking bugs have been filed already for the relevant CVEs. Of the list above, the following do not affect us: CVE-2009-3548 is for Windows. Existing Fedora tracking bugs are as follows: bug #585370 (CVE-2009-2901 CVE-2009-2902 CVE-2009-2693 CVE-2010-1157) bug #533905 (CVE-2009-0033 CVE-2009-0580 CVE-2009-0783 CVE-2008-5515 CVE-2009-0781) bug #632314 (CVE-2010-2227) I'm going to close this bug as a duplicate. I've updated each of those tracking bugs to F14 so the maintainer will get spammed a bit and hopefully update Fedora's version of tomcat5. *** This bug has been marked as a duplicate of bug 632314 *** |