ELSA-2023-7065

Описание

[1:9.0.62-27]

• Related: RHEL-12543
• Bump release number

[1:9.0.62-16]

• Resolves: RHEL-12543 HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)
• Remove JDK subpackges which are unused

[1:9.0.62-14]

• Related: RHEL-2330 Bump release number

[1:9.0.62-13]

• Resolves: RHEL-2330 Revert the fix for pki-servlet-engine

[1:9.0.62-12]

• Related: #2184135 Declare file conflicts

[1:9.0.62-11]

• Resolves: #2184135 Fix bug introduced in initial commit

[1:9.0.62-10]

• Resolves: #2210630 CVE-2023-28709 tomcat
• Resolves: #2181448 CVE-2023-28708 tomcat: not including the secure attribute causes information disclosure

[1:9.0.62-9]

• Resolves: #2184135 Add Obsoletes to tomcat package

[1:9.0.62-8]

• Resolves: #2189676 Missing Tomcat POM files in RHEL 8.9

[1:9.0.62-7]

• Related: #2173874 Tomcat installs older java even though newer java is installed
• Bump release number

[1:9.0.62-6]

• Resolves: #2173874 Tomcat installs older java even though newer java is installed
• Sync with rhel-8.8.0 branch