Archived
1
0
Fork 0

gnu: java-tomcat: Update to 8.5.53.

This fixes CVE-2020-1938 ("Ghostcat").

* gnu/packages/web.scm (java-tomcat): Update to 8.5.53.
[properties]: Add cpe-name.
This commit is contained in:
Björn Höfling 2020-03-22 13:34:01 +01:00
parent 3089b70d76
commit eebaed2b76
No known key found for this signature in database
GPG key ID: BF286CB6593E5FFD

View file

@ -39,6 +39,7 @@
;;; Copyright © 2020 Timotej Lazar <timotej.lazar@araneo.si> ;;; Copyright © 2020 Timotej Lazar <timotej.lazar@araneo.si>
;;; Copyright © 2020 Alexandros Theodotou <alex@zrythm.org> ;;; Copyright © 2020 Alexandros Theodotou <alex@zrythm.org>
;;; Copyright © 2020 Pierre Neidhardt <mail@ambrevar.xyz> ;;; Copyright © 2020 Pierre Neidhardt <mail@ambrevar.xyz>
;;; Copyright © 2018, 2019, 2020 Björn Höfling <bjoern.hoefling@bjoernhoefling.de>
;;; ;;;
;;; This file is part of GNU Guix. ;;; This file is part of GNU Guix.
;;; ;;;
@ -6109,14 +6110,14 @@ encoder/decoder based on the draft-12 specification for UBJSON.")
(define-public java-tomcat (define-public java-tomcat
(package (package
(name "java-tomcat") (name "java-tomcat")
(version "8.5.46") (version "8.5.53")
(source (origin (source (origin
(method url-fetch) (method url-fetch)
(uri (string-append "mirror://apache/tomcat/tomcat-8/v" (uri (string-append "mirror://apache/tomcat/tomcat-8/v"
version "/src/apache-tomcat-" version "-src.tar.gz")) version "/src/apache-tomcat-" version "-src.tar.gz"))
(sha256 (sha256
(base32 (base32
"0fb49gsqa3r6jrwc54yynvsakq9qbzr2pbxr7a29c2zvja2v65iq")) "15lwq3clf21hzk7mma70sffpxjqn8ww5mjq6zhmwcp4m17m22z26"))
(modules '((guix build utils))) (modules '((guix build utils)))
;; Delete bundled jars. ;; Delete bundled jars.
(snippet (snippet
@ -6194,6 +6195,7 @@ encoder/decoder based on the draft-12 specification for UBJSON.")
(let ((out (assoc-ref outputs "out"))) (let ((out (assoc-ref outputs "out")))
(copy-recursively "output/build" out)) (copy-recursively "output/build" out))
#t))))) #t)))))
(properties '((cpe-name . "tomcat")))
(home-page "https://tomcat.apache.org") (home-page "https://tomcat.apache.org")
(synopsis "Java Servlet, JavaServer Pages, Java Expression Language and Java (synopsis "Java Servlet, JavaServer Pages, Java Expression Language and Java
WebSocket") WebSocket")