# changelog

author: Coty Sutherland <csutherl@redhat.com> - 1:8.0.37-1
changelog:
  - Rebase to 8.0.37
  - Resolves: rhbz#1375581 CVE-2016-5388 CGI sets environmental variable based on user supplied Proxy request header
  - Resolves: rhbz#1370262 catalina.out is no longer in use in the main package, but still gets rotated


author: Coty Sutherland <csutherl@redhat.com> - 1:8.0.37-3
changelog:
  - Resolves: rhbz#1383216 CVE-2016-6325 tomcat: tomcat writable config files allow privilege escalation
  - Resolves: rhbz#1382310 CVE-2016-5425 tomcat: Local privilege escalation via systemd-tmpfiles service


author: Coty Sutherland <csutherl@redhat.com> - 1:8.0.39-1
changelog:
  - Update to 8.0.39
  - Resolves: rhbz#1397493 CVE-2016-6816 CVE-2016-6817 CVE-2016-8735 tomcat: various flaws


author: Coty Sutherland <csutherl@redhat.com> - 1:8.5.23-1
changelog:
  - Update to 8.5.23
  - Remove EPEL 7 support since it was broken anyway. There's no way to make it work because dependency that require specific tomcat package versions


