Subject: CVS commit: [pkgsrc-2017Q3] pkgsrc/www/apache-tomcat85
From: Benny Siegert
Date: 2017-11-04 20:33:29
Message id: 20171104193329.21913FBDE@cvs.NetBSD.org

Log Message:
Pullup ticket #5597 - requested by sevan
www/apache-tomcat85: security fix

Revisions pulled up:
- www/apache-tomcat85/Makefile                                  1.4
- www/apache-tomcat85/distinfo                                  1.4

---
   Module Name:    pkgsrc
   Committed By:   ryoon
   Date:           Wed Oct 25 14:18:47 UTC 2017

   Modified Files:
           pkgsrc/www/apache-tomcat85: Makefile distinfo

   Log Message:
   Update to 8.5.23

   Changelog:
       A fix for CVE-2017-12617.
       Stricter validation of the HTTP Host header.
       Add ExtractingRoot, a new WebResourceRoot implementation that
   extracts JARs to the work directory for improved performance when
   deploying packed WAR files.
       Added support for the OpenSSL SSL_CONF API. To support this the
   minimum required Tomcat Native version is 1.2.14.

Files:
RevisionActionfile
1.3.4.1modifypkgsrc/www/apache-tomcat85/Makefile
1.3.4.1modifypkgsrc/www/apache-tomcat85/distinfo