Viewing all changes in revision 22.
- Committer: Package Import Robot
- Date: 2013-01-10 09:35:41 UTC
- Revision ID: package-import@ubuntu.com-20130110093541-olgyu15r27qx56hi
* SECURITY UPDATE: CSRF bypass via request with no session identifier
- debian/patches/CVE-2012-4431.patch: check for session identifier in
java/org/apache/catalina/filters/CsrfPreventionFilter.java.
- CVE-2012-4431
- debian/patches/CVE-2012-4431.patch: check for session identifier in
java/org/apache/catalina/filters/CsrfPreventionFilter.java.
- CVE-2012-4431
- files added:
- .pc/CVE-2012-4431.patch
- .pc/CVE-2012-4431.patch/java
- .pc/CVE-2012-4431.patch/java/org
- .pc/CVE-2012-4431.patch/java/org/apache
- .pc/CVE-2012-4431.patch/java/org/apache/catalina
- .pc/CVE-2012-4431.patch/java/org/apache/catalina/filters
- files modified:
- .pc/applied-patches
expand all
collapse all
added
removed
