[Bugs] [Bug 13333] [CVE 21] tomcat 9.0.37 CVEs found

[bugzilla]

https://bugzilla.rosalinux.ru/show_bug.cgi?id=13333

e.malashin на rosalinux.ru <e.malashin на rosalinux.ru> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |VERIFIED
                 CC|                            |e.malashin на rosalinux.ru

--- Comment #2 from e.malashin на rosalinux.ru <e.malashin на rosalinux.ru> ---
(In reply to Svyatoslav Matveev from comment #1)
> ********** QA ADVISORY **********
> 
> Эти CVE не к нашей версии.
> 
> CVE-2020-9484
> CVE-2021-42340
> CVE-2022-25762
> 
> ===================================
> CVE-2022-34305 по коду не подходит.
> 
> Остальные Cve закрыты патчами.
> ===================================
> 
> *** tomcat
> https://abf.io/build_lists/4440513
> https://abf.io/build_lists/4440512

The update sent to testings

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.
----------- следущая часть -----------
Вложение в формате HTML было извлечено&hellip;
URL: <http://lists.rosalinux.ru/pipermail/bugs/attachments/20230516/6e5c9eca/attachment-0001.html>