Viewing all changes in revision 50.
- Committer: Package Import Robot
- Date: 2014-07-24 15:38:01 UTC
- Revision ID: package-import@ubuntu.com-20140724153801-ye1h4zt8z9oijbm2
* SECURITY UPDATE: denial of service via malformed chunk size
- debian/patches/CVE-2014-0075.patch: fix overflow in
java/org/apache/coyote/http11/filters/ChunkedInputFilter.java.
- CVE-2014-0075
* SECURITY UPDATE: file disclosure via XXE issue
- debian/patches/CVE-2014-0096.patch: change globalXsltFile to be a
relative path in conf/web.xml,
java/org/apache/catalina/servlets/DefaultServlet.java,
java/org/apache/catalina/servlets/LocalStrings.properties,
webapps/docs/default-servlet.xml.
- CVE-2014-0096
* SECURITY UPDATE: HTTP request smuggling attack via crafted
Content-Length HTTP header
- debian/patches/CVE-2014-0099.patch: correctly handle long values in
java/org/apache/tomcat/util/buf/Ascii.java.
- CVE-2014-0099
- debian/patches/CVE-2014-0075.patch: fix overflow in
java/org/apache/coyote/http11/filters/ChunkedInputFilter.java.
- CVE-2014-0075
* SECURITY UPDATE: file disclosure via XXE issue
- debian/patches/CVE-2014-0096.patch: change globalXsltFile to be a
relative path in conf/web.xml,
java/org/apache/catalina/servlets/DefaultServlet.java,
java/org/apache/catalina/servlets/LocalStrings.properties,
webapps/docs/default-servlet.xml.
- CVE-2014-0096
* SECURITY UPDATE: HTTP request smuggling attack via crafted
Content-Length HTTP header
- debian/patches/CVE-2014-0099.patch: correctly handle long values in
java/org/apache/tomcat/util/buf/Ascii.java.
- CVE-2014-0099
- files added:
- .pc/CVE-2014-0075.patch
- .pc/CVE-2014-0075.patch/java
- .pc/CVE-2014-0075.patch/java/org
- .pc/CVE-2014-0075.patch/java/org/apache
- .pc/CVE-2014-0075.patch/java/org/apache/coyote
- .pc/CVE-2014-0075.patch/java/org/apache/coyote/http11
- .pc/CVE-2014-0075.patch/java/org/apache/coyote/http11/filters
- .pc/CVE-2014-0096.patch
- .pc/CVE-2014-0096.patch/conf
- .pc/CVE-2014-0096.patch/java
- .pc/CVE-2014-0096.patch/java/org
- .pc/CVE-2014-0096.patch/java/org/apache
- .pc/CVE-2014-0096.patch/java/org/apache/catalina
- .pc/CVE-2014-0096.patch/java/org/apache/catalina/servlets
- .pc/CVE-2014-0096.patch/webapps
- .pc/CVE-2014-0096.patch/webapps/docs
- .pc/CVE-2014-0099.patch
- .pc/CVE-2014-0099.patch/java
- .pc/CVE-2014-0099.patch/java/org
- .pc/CVE-2014-0099.patch/java/org/apache
- .pc/CVE-2014-0099.patch/java/org/apache/tomcat
- .pc/CVE-2014-0099.patch/java/org/apache/tomcat/util
- .pc/CVE-2014-0099.patch/java/org/apache/tomcat/util/buf
- files modified:
- .pc/applied-patches
expand all
collapse all
added
removed
