From ebcd767f8a05a13297a91f6e2ff5a4a63df98644 Mon Sep 17 00:00:00 2001
From: Sonia Xu <sonix@amazon.com>
Date: Jun 02 2023 23:30:51 +0000
Subject: Update to 9.0.75


Fixes CVE-2023-28709

---

diff --git a/sources b/sources
index fa93e4d..27278f4 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (apache-tomcat-9.0.71-src.tar.gz) = 0c62a5e526178e39c68717223ce2cb4a31096e5765b718639e4ba4bbf3d70ba28238cd1bb5cf74747f718b35baf98de32c7ee8a7ebd445c6191700070c1ca930
+SHA512 (apache-tomcat-9.0.75-src.tar.gz) = 19f78fbe3391bbad65494e0071a6df9a26ceb1a4bd387b3425c5f34a02391fcaaae40442cdca3a98c4b7b45963d3a9e51dd6a1b72f11c29904c755cff03def64
diff --git a/tomcat.spec b/tomcat.spec
index 0e194dd..736500b 100644
--- a/tomcat.spec
+++ b/tomcat.spec
@@ -31,7 +31,7 @@
 %global jspspec 2.3
 %global major_version 9
 %global minor_version 0
-%global micro_version 71
+%global micro_version 75
 %global packdname apache-tomcat-%{version}-src
 %global servletspec 4.0
 %global elspec 3.0
@@ -496,6 +496,10 @@ fi
 %{appdir}/ROOT
 
 %changelog
+* Fri Jun 02 2023 Sonia Xu <sonix@amazon.com> - 1:9.0.75-1
+- Update to 9.0.75
+- Resolves: rhbz#2210321 - CVE-2023-28709 tomcat: Fix for CVE-2023-24998 was incomplete
+
 * Sun Jan 29 2023 Hui Wang <huwang@redhat.com> - 1:9.0.71-1
 - Update to 9.0.71
 - Remove osgi-annotations patch