[Bug 1540828] New: CVE-2017-15706 tomcat: Incorrect documentation of CGI Servlet search algorithm may lead to misconfiguration
https://bugzilla.redhat.com/show_bug.cgi?id=1540828
Bug ID: 1540828 Summary: CVE-2017-15706 tomcat: Incorrect documentation of CGI Servlet search algorithm may lead to misconfiguration Product: Security Response Component: vulnerability Keywords: Security Severity: low Priority: low Assignee: security-response-team@redhat.com Reporter: sfowler@redhat.com CC: alee@redhat.com, apintea@redhat.com, bkundal@redhat.com, bmaxwell@redhat.com, ccoleman@redhat.com, cdewolf@redhat.com, chazlett@redhat.com, csutherl@redhat.com, darran.lofthouse@redhat.com, dedgar@redhat.com, dimitris@redhat.com, dmcphers@redhat.com, dosoudil@redhat.com, fgavrilo@redhat.com, gzaronik@redhat.com, hchiorea@redhat.com, hhorak@redhat.com, ivan.afonichev@gmail.com, java-sig-commits@lists.fedoraproject.org, jawilson@redhat.com, jclere@redhat.com, jcoleman@redhat.com, jdoyle@redhat.com, jgoulding@redhat.com, jolee@redhat.com, jondruse@redhat.com, jorton@redhat.com, jshepherd@redhat.com, jstastny@redhat.com, krzysztof.daniel@gmail.com, lgao@redhat.com, mbabacek@redhat.com, me@coolsvap.net, mizdebsk@redhat.com, myarboro@redhat.com, nwallace@redhat.com, pavelp@redhat.com, pgier@redhat.com, pjurak@redhat.com, ppalaga@redhat.com, psakar@redhat.com, pslavice@redhat.com, rnetuka@redhat.com, rstancel@redhat.com, rsvoboda@redhat.com, sstavrev@redhat.com, twalsh@redhat.com, vhalbert@redhat.com, vtunka@redhat.com, weli@redhat.com
The description of the search algorithm used by the CGI Servlet to identify which script to execute was incorrect. As a result, some scripts may have failed to execute as expected and other scripts may have been executed unexpectedly. Note that it is only the documentation that was incorrect, the behaviour of the CGI servlet remains unchanged.
Versions Affected: Apache Tomcat 9.0.0.M22 to 9.0.1 Apache Tomcat 8.5.16 to 8.5.23 Apache Tomcat 8.0.45 to 8.0.47 Apache Tomcat 7.0.79 to 7.0.82
Upstream Advisory: http://tomcat.10.x6.nabble.com/SECURITY-CVE-2017-15706-Apache-Tomcat-Incorre...
https://bugzilla.redhat.com/show_bug.cgi?id=1540828
Sam Fowler sfowler@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1540830
https://bugzilla.redhat.com/show_bug.cgi?id=1540828
Sam Fowler sfowler@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1540831
https://bugzilla.redhat.com/show_bug.cgi?id=1540828
Adam Mariš amaris@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1540853 Blocks|1540853 |
https://bugzilla.redhat.com/show_bug.cgi?id=1540828
Timothy Walsh twalsh@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=low,public=20180131, |impact=low,public=20180131, |reported=20180201,source=in |reported=20180201,source=in |ternet,cvss3=0.0/CVSS:3.0/A |ternet,cvss3=0.0/CVSS:3.0/A |V:N/AC:L/PR:N/UI:N/S:U/C:N/ |V:N/AC:L/PR:N/UI:N/S:U/C:N/ |I:N/A:N,jbews-2/tomcat7=new |I:N/A:N,jbews-2/tomcat7=new |,jws-3/tomcat7=new,jws-3/to |,jws-3/tomcat7=affected,jws |mcat8=new,fedora-all/tomcat |-3/tomcat8=affected,fedora- |=new,epel-6/tomcat=new,rhel |all/tomcat=new,epel-6/tomca |-7/tomcat=new,rhel-8/tomcat |t=new,rhel-7/tomcat=new,rhe |=new,eap-6/tomcat7=new,jdv- |l-8/tomcat=new,eap-6/tomcat |6/jbossweb=new,eap-6/jbossw |7=new,jdv-6/jbossweb=new,ea |eb=new,fuse-6/jbossweb=new, |p-6/jbossweb=new,fuse-6/jbo |rhscl-3/rh-java-common-tomc |ssweb=new,rhscl-3/rh-java-c |at=new,jpp-6/jbossweb=new,o |ommon-tomcat=new,jpp-6/jbos |penshift-1/jbossweb=affecte |sweb=new,openshift-1/jbossw |d |eb=affected
https://bugzilla.redhat.com/show_bug.cgi?id=1540828
Tomas Hoger thoger@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=low,public=20180131, |impact=low,public=20180131, |reported=20180201,source=in |reported=20180201,source=in |ternet,cvss3=0.0/CVSS:3.0/A |ternet,cvss3=0.0/CVSS:3.0/A |V:N/AC:L/PR:N/UI:N/S:U/C:N/ |V:N/AC:L/PR:N/UI:N/S:U/C:N/ |I:N/A:N,jbews-2/tomcat7=new |I:N/A:N,jbews-2/tomcat7=new |,jws-3/tomcat7=affected,jws |,jws-3/tomcat7=affected,jws |-3/tomcat8=affected,fedora- |-3/tomcat8=affected,fedora- |all/tomcat=new,epel-6/tomca |all/tomcat=affected,epel-6/ |t=new,rhel-7/tomcat=new,rhe |tomcat=affected,rhel-7/tomc |l-8/tomcat=new,eap-6/tomcat |at=notaffected,rhel-8/tomca |7=new,jdv-6/jbossweb=new,ea |t=affected,eap-6/tomcat7=ne |p-6/jbossweb=new,fuse-6/jbo |w,jdv-6/jbossweb=new,eap-6/ |ssweb=new,rhscl-3/rh-java-c |jbossweb=new,fuse-6/jbosswe |ommon-tomcat=new,jpp-6/jbos |b=new,rhscl-3/rh-java-commo |sweb=new,openshift-1/jbossw |n-tomcat=notaffected,jpp-6/ |eb=affected |jbossweb=new,openshift-1/jb | |ossweb=affected,rhel-6/tomc | |at6=notaffected
--- Comment #3 from Tomas Hoger thoger@redhat.com --- Upstream indicates that the problematic documentation was introduced as part of the fix for the following upstream bug report:
https://bz.apache.org/bugzilla/show_bug.cgi?id=61201
Matching commit is:
http://svn.apache.org/viewvc?view=revision&revision=1799368
Upstream commits correcting the documentation (for various supported branches):
http://svn.apache.org/viewvc?view=rev&rev=1814825 9.x http://svn.apache.org/viewvc?view=rev&rev=1814827 8.x http://svn.apache.org/viewvc?view=rev&rev=1814828 7.x
As the relevant part of the documentation was only recently introduced upstream, it is not yet included in the Tomcat packages as shipped in Red Hat Enterprise Linux.
https://bugzilla.redhat.com/show_bug.cgi?id=1540828
--- Comment #4 from Tomas Hoger thoger@redhat.com --- External References:
http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.2 http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.0.48 http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.84
https://bugzilla.redhat.com/show_bug.cgi?id=1540828
Tomas Hoger thoger@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1541080
https://bugzilla.redhat.com/show_bug.cgi?id=1540828
Tomas Hoger thoger@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1541081, 1541082
--- Comment #6 from Tomas Hoger thoger@redhat.com --- Created tomcat tracking bugs for this issue:
Affects: epel-6 [bug 1541082] Affects: fedora-all [bug 1541081]
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1541081 [Bug 1541081] CVE-2017-15706 tomcat: Incorrect documentation of CGI Servlet search algorithm may lead to misconfiguration [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1541082 [Bug 1541082] CVE-2017-15706 tomcat: Incorrect documentation of CGI Servlet search algorithm may lead to misconfiguration [epel-6]
https://bugzilla.redhat.com/show_bug.cgi?id=1540828
Tomas Hoger thoger@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=low,public=20180131, |impact=low,public=20180131, |reported=20180201,source=in |reported=20180201,source=in |ternet,cvss3=0.0/CVSS:3.0/A |ternet,cvss3=0.0/CVSS:3.0/A |V:N/AC:L/PR:N/UI:N/S:U/C:N/ |V:N/AC:L/PR:N/UI:N/S:U/C:N/ |I:N/A:N,jbews-2/tomcat7=new |I:N/A:N,jbews-2/tomcat7=new |,jws-3/tomcat7=affected,jws |,jws-3/tomcat7=affected,jws |-3/tomcat8=affected,fedora- |-3/tomcat8=affected,fedora- |all/tomcat=affected,epel-6/ |all/tomcat=affected,epel-6/ |tomcat=affected,rhel-7/tomc |tomcat=affected,rhel-7/tomc |at=notaffected,rhel-8/tomca |at=notaffected,rhel-8/tomca |t=affected,eap-6/tomcat7=ne |t=affected,eap-6/tomcat7=ne |w,jdv-6/jbossweb=new,eap-6/ |w,jdv-6/jbossweb=new,eap-6/ |jbossweb=new,fuse-6/jbosswe |jbossweb=new,fuse-6/jbosswe |b=new,rhscl-3/rh-java-commo |b=new,rhscl-3/rh-java-commo |n-tomcat=notaffected,jpp-6/ |n-tomcat=notaffected,jpp-6/ |jbossweb=new,openshift-1/jb |jbossweb=new,openshift-1/jb |ossweb=affected,rhel-6/tomc |ossweb=affected,rhel-6/tomc |at6=notaffected |at6=notaffected,jbews-2/tom | |cat6=new
https://bugzilla.redhat.com/show_bug.cgi?id=1540828 Bug 1540828 depends on bug 1541081, which changed state.
Bug 1541081 Summary: CVE-2017-15706 tomcat: Incorrect documentation of CGI Servlet search algorithm may lead to misconfiguration [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1541081
What |Removed |Added ---------------------------------------------------------------------------- Status|ON_QA |CLOSED Resolution|--- |ERRATA
https://bugzilla.redhat.com/show_bug.cgi?id=1540828
Timothy Walsh twalsh@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=low,public=20180131, |impact=low,public=20180131, |reported=20180201,source=in |reported=20180201,source=in |ternet,cvss3=0.0/CVSS:3.0/A |ternet,cvss3=0.0/CVSS:3.0/A |V:N/AC:L/PR:N/UI:N/S:U/C:N/ |V:N/AC:L/PR:N/UI:N/S:U/C:N/ |I:N/A:N,jbews-2/tomcat7=new |I:N/A:N,jbews-2/tomcat7=new |,jws-3/tomcat7=affected,jws |,jws-3/tomcat7=notaffected, |-3/tomcat8=affected,fedora- |jws-3/tomcat8=notaffected,f |all/tomcat=affected,epel-6/ |edora-all/tomcat=affected,e |tomcat=affected,rhel-7/tomc |pel-6/tomcat=affected,rhel- |at=notaffected,rhel-8/tomca |7/tomcat=notaffected,rhel-8 |t=affected,eap-6/tomcat7=ne |/tomcat=affected,eap-6/tomc |w,jdv-6/jbossweb=new,eap-6/ |at7=new,jdv-6/jbossweb=new, |jbossweb=new,fuse-6/jbosswe |eap-6/jbossweb=new,fuse-6/j |b=new,rhscl-3/rh-java-commo |bossweb=new,rhscl-3/rh-java |n-tomcat=notaffected,jpp-6/ |-common-tomcat=notaffected, |jbossweb=new,openshift-1/jb |jpp-6/jbossweb=new,openshif |ossweb=affected,rhel-6/tomc |t-1/jbossweb=affected,rhel- |at6=notaffected,jbews-2/tom |6/tomcat6=notaffected,jbews |cat6=new |-2/tomcat6=new
https://bugzilla.redhat.com/show_bug.cgi?id=1540828
Timothy Walsh twalsh@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=low,public=20180131, |impact=low,public=20180131, |reported=20180201,source=in |reported=20180201,source=in |ternet,cvss3=0.0/CVSS:3.0/A |ternet,cvss3=0.0/CVSS:3.0/A |V:N/AC:L/PR:N/UI:N/S:U/C:N/ |V:N/AC:L/PR:N/UI:N/S:U/C:N/ |I:N/A:N,jbews-2/tomcat7=new |I:N/A:N,jbews-2/tomcat7=not |,jws-3/tomcat7=notaffected, |affected,jws-3/tomcat7=nota |jws-3/tomcat8=notaffected,f |ffected,jws-3/tomcat8=notaf |edora-all/tomcat=affected,e |fected,fedora-all/tomcat=af |pel-6/tomcat=affected,rhel- |fected,epel-6/tomcat=affect |7/tomcat=notaffected,rhel-8 |ed,rhel-7/tomcat=notaffecte |/tomcat=affected,eap-6/tomc |d,rhel-8/tomcat=affected,ea |at7=new,jdv-6/jbossweb=new, |p-6/tomcat7=new,jdv-6/jboss |eap-6/jbossweb=new,fuse-6/j |web=new,eap-6/jbossweb=new, |bossweb=new,rhscl-3/rh-java |fuse-6/jbossweb=new,rhscl-3 |-common-tomcat=notaffected, |/rh-java-common-tomcat=nota |jpp-6/jbossweb=new,openshif |ffected,jpp-6/jbossweb=new, |t-1/jbossweb=affected,rhel- |openshift-1/jbossweb=affect |6/tomcat6=notaffected,jbews |ed,rhel-6/tomcat6=notaffect |-2/tomcat6=new |ed,jbews-2/tomcat6=notaffec | |ted
https://bugzilla.redhat.com/show_bug.cgi?id=1540828
Timothy Walsh twalsh@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=low,public=20180131, |impact=low,public=20180131, |reported=20180201,source=in |reported=20180201,source=in |ternet,cvss3=0.0/CVSS:3.0/A |ternet,cvss3=0.0/CVSS:3.0/A |V:N/AC:L/PR:N/UI:N/S:U/C:N/ |V:N/AC:L/PR:N/UI:N/S:U/C:N/ |I:N/A:N,jbews-2/tomcat7=not |I:N/A:N,jbews-2/tomcat7=not |affected,jws-3/tomcat7=nota |affected,jws-3/tomcat7=nota |ffected,jws-3/tomcat8=notaf |ffected,jws-3/tomcat8=notaf |fected,fedora-all/tomcat=af |fected,fedora-all/tomcat=af |fected,epel-6/tomcat=affect |fected,epel-6/tomcat=affect |ed,rhel-7/tomcat=notaffecte |ed,rhel-7/tomcat=notaffecte |d,rhel-8/tomcat=affected,ea |d,rhel-8/tomcat=affected,jd |p-6/tomcat7=new,jdv-6/jboss |v-6/jbossweb=new,eap-6/jbos |web=new,eap-6/jbossweb=new, |sweb=notaffected,fuse-6/jbo |fuse-6/jbossweb=new,rhscl-3 |ssweb=new,rhscl-3/rh-java-c |/rh-java-common-tomcat=nota |ommon-tomcat=notaffected,jp |ffected,jpp-6/jbossweb=new, |p-6/jbossweb=new,openshift- |openshift-1/jbossweb=affect |1/jbossweb=affected,rhel-6/ |ed,rhel-6/tomcat6=notaffect |tomcat6=notaffected,jbews-2 |ed,jbews-2/tomcat6=notaffec |/tomcat6=notaffected |ted |
https://bugzilla.redhat.com/show_bug.cgi?id=1540828
Mark Knowles mknowles@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=low,public=20180131, |impact=low,public=20180131, |reported=20180201,source=in |reported=20180201,source=in |ternet,cvss3=0.0/CVSS:3.0/A |ternet,cvss3=0.0/CVSS:3.0/A |V:N/AC:L/PR:N/UI:N/S:U/C:N/ |V:N/AC:L/PR:N/UI:N/S:U/C:N/ |I:N/A:N,jbews-2/tomcat7=not |I:N/A:N,jbews-2/tomcat7=not |affected,jws-3/tomcat7=nota |affected,jws-3/tomcat7=nota |ffected,jws-3/tomcat8=notaf |ffected,jws-3/tomcat8=notaf |fected,fedora-all/tomcat=af |fected,fedora-all/tomcat=af |fected,epel-6/tomcat=affect |fected,epel-6/tomcat=affect |ed,rhel-7/tomcat=notaffecte |ed,rhel-7/tomcat=notaffecte |d,rhel-8/tomcat=affected,jd |d,rhel-8/tomcat=affected,jd |v-6/jbossweb=new,eap-6/jbos |v-6/jbossweb=new,eap-6/jbos |sweb=notaffected,fuse-6/jbo |sweb=notaffected,fuse-6/jbo |ssweb=new,rhscl-3/rh-java-c |ssweb=new,rhscl-3/rh-java-c |ommon-tomcat=notaffected,jp |ommon-tomcat=notaffected,jp |p-6/jbossweb=new,openshift- |p-6/jbossweb=new,openshift- |1/jbossweb=affected,rhel-6/ |1/jbossweb=wontfix,rhel-6/t |tomcat6=notaffected,jbews-2 |omcat6=notaffected,jbews-2/ |/tomcat6=notaffected |tomcat6=notaffected
https://bugzilla.redhat.com/show_bug.cgi?id=1540828 Bug 1540828 depends on bug 1541082, which changed state.
Bug 1541082 Summary: CVE-2017-15706 tomcat: Incorrect documentation of CGI Servlet search algorithm may lead to misconfiguration [epel-6] https://bugzilla.redhat.com/show_bug.cgi?id=1541082
What |Removed |Added ---------------------------------------------------------------------------- Status|ON_QA |CLOSED Resolution|--- |ERRATA
https://bugzilla.redhat.com/show_bug.cgi?id=1540828
Hooman Broujerdi hghasemb@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=low,public=20180131, |impact=low,public=20180131, |reported=20180201,source=in |reported=20180201,source=in |ternet,cvss3=0.0/CVSS:3.0/A |ternet,cvss3=0.0/CVSS:3.0/A |V:N/AC:L/PR:N/UI:N/S:U/C:N/ |V:N/AC:L/PR:N/UI:N/S:U/C:N/ |I:N/A:N,jbews-2/tomcat7=not |I:N/A:N,jbews-2/tomcat7=not |affected,jws-3/tomcat7=nota |affected,jws-3/tomcat7=nota |ffected,jws-3/tomcat8=notaf |ffected,jws-3/tomcat8=notaf |fected,fedora-all/tomcat=af |fected,fedora-all/tomcat=af |fected,epel-6/tomcat=affect |fected,epel-6/tomcat=affect |ed,rhel-7/tomcat=notaffecte |ed,rhel-7/tomcat=notaffecte |d,rhel-8/tomcat=affected,jd |d,rhel-8/tomcat=affected,jd |v-6/jbossweb=new,eap-6/jbos |v-6/jbossweb=new,eap-6/jbos |sweb=notaffected,fuse-6/jbo |sweb=notaffected,fuse-6/jbo |ssweb=new,rhscl-3/rh-java-c |ssweb=notaffected,rhscl-3/r |ommon-tomcat=notaffected,jp |h-java-common-tomcat=notaff |p-6/jbossweb=new,openshift- |ected,jpp-6/jbossweb=new,op |1/jbossweb=wontfix,rhel-6/t |enshift-1/jbossweb=wontfix, |omcat6=notaffected,jbews-2/ |rhel-6/tomcat6=notaffected, |tomcat6=notaffected |jbews-2/tomcat6=notaffected
https://bugzilla.redhat.com/show_bug.cgi?id=1540828
Chess Hazlett chazlett@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=low,public=20180131, |impact=low,public=20180131, |reported=20180201,source=in |reported=20180201,source=in |ternet,cvss3=0.0/CVSS:3.0/A |ternet,cvss3=0.0/CVSS:3.0/A |V:N/AC:L/PR:N/UI:N/S:U/C:N/ |V:N/AC:L/PR:N/UI:N/S:U/C:N/ |I:N/A:N,jbews-2/tomcat7=not |I:N/A:N,jbews-2/tomcat7=not |affected,jws-3/tomcat7=nota |affected,jws-3/tomcat7=nota |ffected,jws-3/tomcat8=notaf |ffected,jws-3/tomcat8=notaf |fected,fedora-all/tomcat=af |fected,fedora-all/tomcat=af |fected,epel-6/tomcat=affect |fected,epel-6/tomcat=affect |ed,rhel-7/tomcat=notaffecte |ed,rhel-7/tomcat=notaffecte |d,rhel-8/tomcat=affected,jd |d,rhel-8/tomcat=affected,jd |v-6/jbossweb=new,eap-6/jbos |v-6/jbossweb=new,eap-6/jbos |sweb=notaffected,fuse-6/jbo |sweb=notaffected,fuse-6/jbo |ssweb=notaffected,rhscl-3/r |ssweb=notaffected,rhscl-3/r |h-java-common-tomcat=notaff |h-java-common-tomcat=notaff |ected,jpp-6/jbossweb=new,op |ected,jpp-6/jbossweb=notaff |enshift-1/jbossweb=wontfix, |ected,openshift-1/jbossweb= |rhel-6/tomcat6=notaffected, |wontfix,rhel-6/tomcat6=nota |jbews-2/tomcat6=notaffected |ffected,jbews-2/tomcat6=not | |affected
https://bugzilla.redhat.com/show_bug.cgi?id=1540828
Pavel Polischouk pavelp@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |drieden@redhat.com, | |jschatte@redhat.com Whiteboard|impact=low,public=20180131, |impact=low,public=20180131, |reported=20180201,source=in |reported=20180201,source=in |ternet,cvss3=0.0/CVSS:3.0/A |ternet,cvss3=0.0/CVSS:3.0/A |V:N/AC:L/PR:N/UI:N/S:U/C:N/ |V:N/AC:L/PR:N/UI:N/S:U/C:N/ |I:N/A:N,jbews-2/tomcat7=not |I:N/A:N,jbews-2/tomcat7=not |affected,jws-3/tomcat7=nota |affected,jws-3/tomcat7=nota |ffected,jws-3/tomcat8=notaf |ffected,jws-3/tomcat8=notaf |fected,fedora-all/tomcat=af |fected,fedora-all/tomcat=af |fected,epel-6/tomcat=affect |fected,epel-6/tomcat=affect |ed,rhel-7/tomcat=notaffecte |ed,rhel-7/tomcat=notaffecte |d,rhel-8/tomcat=affected,jd |d,rhel-8/tomcat=affected,jd |v-6/jbossweb=new,eap-6/jbos |v-6/jbossweb=notaffected,ea |sweb=notaffected,fuse-6/jbo |p-6/jbossweb=notaffected,fu |ssweb=notaffected,rhscl-3/r |se-6/jbossweb=notaffected,r |h-java-common-tomcat=notaff |hscl-3/rh-java-common-tomca |ected,jpp-6/jbossweb=notaff |t=notaffected,jpp-6/jbosswe |ected,openshift-1/jbossweb= |b=notaffected,openshift-1/j |wontfix,rhel-6/tomcat6=nota |bossweb=wontfix,rhel-6/tomc |ffected,jbews-2/tomcat6=not |at6=notaffected,jbews-2/tom |affected |cat6=notaffected
java-sig-commits@lists.fedoraproject.org
-
bugzilla＠redhat.com