ports/96468: Jakarta Tomcat 5 is not up to date.
Yann Golanski
yg2 at york.ac.uk
Fri Apr 28 15:30:20 UTC 2006
>Number: 96468
>Category: ports
>Synopsis: Jakarta Tomcat 5 is not up to date.
>Confidential: no
>Severity: critical
>Priority: high
>Responsible: freebsd-ports-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: update
>Submitter-Id: current-users
>Arrival-Date: Fri Apr 28 15:30:18 GMT 2006
>Closed-Date:
>Last-Modified:
>Originator: Yann Golanski
>Release: 5.3
>Organization:
UNiversity of York
>Environment:
FreeBSD mantis.york.ac.uk 5.3-STABLE FreeBSD 5.3-STABLE #1: Sat Apr 16 11:39:59 BST 2005 root at mantis.york.ac.uk:/usr/obj/usr/src/sys/GENERIC i386
>Description:
Jakarta Tomcat version 5 has a security issue that is fixed in newer version. Updating the version of the port should fix it.
>How-To-Repeat:
# cd www/jakarta-tomcat5/
# make
===> jakarta-tomcat-5.0.30_3 has known vulnerabilities:
=> tomcat -- Tomcat Manager cross-site scripting.
Reference: <http://www.FreeBSD.org/ports/portaudit/26a08c77-32da-4dd7-a884-a76fc49aa824.html>
=> Please update your ports tree and try again.
*** Error code 1
Stop in /usr/ports/www/jakarta-tomcat5.
>Fix:
Update Jakarta to latest release version.
>Release-Note:
>Audit-Trail:
>Unformatted:
More information about the freebsd-ports-bugs
mailing list