Viewing all changes in revision 48.
- Committer: Package Import Robot
- Date: 2013-05-21 09:39:22 UTC
- Revision ID: package-import@ubuntu.com-20130521093922-ickfs3vu61z2zjoy
* SECURITY UPDATE: denial of service via chunked transfer encoding
- debian/patches/CVE-2012-3544.patch: properly parse CRLF in requests
in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java.
- CVE-2012-3544
* SECURITY UPDATE: FORM authentication request injection
- debian/patches/CVE-2013-2067.patch: properly change session ID
in java/org/apache/catalina/authenticator/FormAuthenticator.java.
- CVE-2013-2067
- debian/patches/CVE-2012-3544.patch: properly parse CRLF in requests
in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java.
- CVE-2012-3544
* SECURITY UPDATE: FORM authentication request injection
- debian/patches/CVE-2013-2067.patch: properly change session ID
in java/org/apache/catalina/authenticator/FormAuthenticator.java.
- CVE-2013-2067
- files added:
- .pc/CVE-2012-3544.patch
- .pc/CVE-2012-3544.patch/java
- .pc/CVE-2012-3544.patch/java/org
- .pc/CVE-2012-3544.patch/java/org/apache
- .pc/CVE-2012-3544.patch/java/org/apache/coyote
- .pc/CVE-2012-3544.patch/java/org/apache/coyote/http11
- .pc/CVE-2012-3544.patch/java/org/apache/coyote/http11/filters
- .pc/CVE-2013-2067.patch
- .pc/CVE-2013-2067.patch/java
- .pc/CVE-2013-2067.patch/java/org
- .pc/CVE-2013-2067.patch/java/org/apache
- .pc/CVE-2013-2067.patch/java/org/apache/catalina
- .pc/CVE-2013-2067.patch/java/org/apache/catalina/authenticator
- files modified:
- .pc/applied-patches
expand all
collapse all
added
removed
