[SECURITY] Fedora 17 Update: tomcat-7.0.40-1.fc17

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-7999
2013-05-13 00:03:02
--------------------------------------------------------------------------------

Name        : tomcat
Product     : Fedora 17
Version     : 7.0.40
Release     : 1.fc17
URL         : http://tomcat.apache.org/
Summary     : Apache Servlet/JSP Engine, RI for Servlet 3.0/JSP 2.2 API
Description :
Tomcat is the servlet container that is used in the official Reference
Implementation for the Java Servlet and JavaServer Pages technologies.
The Java Servlet and JavaServer Pages specifications are developed by
Sun under the Java Community Process.

Tomcat is developed in an open and participatory environment and
released under the Apache Software License version 2.0. Tomcat is intended
to be a collaboration of the best-of-breed developers from around the world.

--------------------------------------------------------------------------------
Update Information:

- Updated to 7.0.40
- Resolves: rhbz 956569 added missing commons-pool link
--------------------------------------------------------------------------------
ChangeLog:

* Sat May 11 2013 Ivan Afonichev <ivan.afonichev at gmail.com> 0:7.0.40-1
- Updated to 7.0.40
- Resolves: rhbz 956569 added missing commons-pool link
* Wed Feb 20 2013 Ivan Afonichev <ivan.afonichev at gmail.com> 0:7.0.37-1
- Updated to 7.0.37
* Mon Feb  4 2013 Ivan Afonichev <ivan.afonichev at gmail.com> 0:7.0.35-1
- Updated to 7.0.35
* Mon Dec 24 2012 Ivan Afonichev <ivan.afonichev at gmail.com> 0:7.0.34-1
- Updated to 7.0.34
- ecj >= 4.2.1 now required
- Resolves: rhbz 889395 concat classpath correctly; chdir to $CATALINA_HOME
* Fri Dec  7 2012 Ivan Afonichev <ivan.afonichev at gmail.com> 0:7.0.33-2
- Resolves: rhbz 883806 refix logdir ownership
* Sun Dec  2 2012 Ivan Afonichev <ivan.afonichev at gmail.com> 0:7.0.33-1
- Updated to 7.0.33
- Resolves: rhbz 873620 need chkconfig for update-alternatives
* Fri Oct 19 2012 Ivan Afonichev <ivan.afonichev at gmail.com> 0:7.0.32-1
- Updated to 7.0.32
- Resolves: rhbz 863307 read CATALINA_PID from env on tomcat-sysd
* Thu Jul 26 2012 Ivan Afonichev <ivan.afonichev at gmail.com> 0:7.0.29-1
- Updated to 7.0.29
* Mon Jul  2 2012 Ivan Afonichev <ivan.afonichev at gmail.com> 0:7.0.28-1
- Updated to 7.0.28
- Resolves: rhbz 820119 Remove bundled apache-commons-dbcp
- Resolves: rhbz 814900 Added tomcat-coyote POM
- Resolves: rhbz 810775 Remove systemv stuff from %post scriptlet
- Remove redhat-lsb R
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #928294 - tomcat-7.0.39 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=928294
  [ 2 ] Bug #956569 - Missing link creation for apache-commons-pool
        https://bugzilla.redhat.com/show_bug.cgi?id=956569
  [ 3 ] Bug #961806 - CVE-2013-2071 tomcat: Information disclosure in asynchronous context when using AsyncListeners that threw RuntimeExceptions [fedora-all]
        https://bugzilla.redhat.com/show_bug.cgi?id=961806
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update tomcat' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------