← Back to branch summary

~ubuntu-branches/ubuntu/jaunty/tomcat6/jaunty-security

« back to all changes in this revision

Viewing changes to java/org/apache/catalina/deploy/ErrorPage.java

  • Committer: Bazaar Package Importer
  • Author(s): Thierry Carrez
  • Date: 2008-08-22 09:15:11 UTC
  • mfrom: (1.1.1 upstream)
  • Revision ID: james.westby@ubuntu.com-20080822091511-a31sdx3utvdufjer
Tags: 6.0.18-0ubuntu1
https://launchpad.net/bugs/260016
https://launchpad.net/bugs/256802
https://launchpad.net/bugs/256922
https://launchpad.net/bugs/256926
* New upstream version (LP: #260016)
  - Fixes CVE-2008-2938: Directory traversal vulnerability (LP: #256802)
  - Fixes CVE-2008-2370: Information disclosure vulnerability (LP: #256922)
  - Fixes CVE-2008-1232: XSS through sendError vulnerability (LP: #256926)
* Dropped CVE-2008-1947.patch (fix is shipped in this upstream release)
* control: Improve short descriptions for the binary packages
* copyright: Added link to /usr/share/common-licenses/Apache-2.0
* control: To pull the right JRE, libtomcat6-java now depends on
  default-jre-headless | java6-runtime-headless

Show diffs side-by-side

added added

removed removed

Lines of Context:
java/org/apache/catalina/deploy/ErrorPage.java
29
29
 * deployment descriptor.
30
30
 *
31
31
 * @author Craig R. McClanahan
32
 
 * @version $Revision: 467222 $ $Date: 2006-10-24 05:17:11 +0200 (mar., 24 oct. 2006) $
 
32
 * @version $Revision: 467222 $ $Date: 2006-10-24 05:17:11 +0200 (Tue, 24 Oct 2006) $
33
33
 */
34
34
 
35
35
public class ErrorPage implements Serializable {