~ubuntu-branches/ubuntu/utopic/tomcat7/utopic-security : changes

~ubuntu-branches/ubuntu/utopic/tomcat7/utopic-security » Changes from revision 32

From Revision 32 to 13

Rev	Summary	Authors	Tags	Date
32	* SECURITY UPDATE: SecurityManager bypass via Expression Lan... * SECURITY UPDATE: SecurityManager bypass via Expression Language - debian/patches/CVE-2014-7810.patch: handle classes that may not be accessible but have accessible interfaces in java/javax/el/BeanELResolver.java, remove unnecessary code in java/org/apache/jasper/runtime/PageContextImpl.java, java/org/apache/jasper/security/SecurityClassLoad.java. - CVE-2014-7810 * Replace expired ssl certs and use TLS to fix tests causing FTBFS: - debian/patches/0022-use-tls-in-ssl-unit-tests.patch - debian/patches/0023-replace-expired-ssl-certificates.patch - debian/source/include-binaries	Marc Deslauriers	7.0.55-1ubuntu0.2	8 years ago
31	* New upstream release * New upstream release * Refreshed the patches	Emmanuel Bourg	7.0.55-1	9 years ago
30	[ Emmanuel Bourg ] [ Emmanuel Bourg ] * debian/defaults.template: Bumped the required version of Java mentioned in the comment on the JAVA_HOME variable * debian/tomcat7.init: Search for OpenJDK 8 and Oracle JDKs when starting the server (Closes: #714349) * Updated the version required for libtcnative-1 (>= 1.1.30) (Closes: #750454)	tony mancill	7.0.54-2	9 years ago
29	* New upstream release * New upstream release * Refreshed the patches * Use XZ compression for the upstream tarball	Emmanuel Bourg	7.0.54-1	9 years ago
28	* New upstream release. * New upstream release. * Refresh patches: - debian/patches/0011-fix-classpath-lintian-warnings.patch. - debian/patches/0015_disable_test_TestCometProcessor.patch. * Add new patch: - Disabled Java 8 support in JSPs (requires an Eclipse compiler update). * Update my email address in Uploaders list.	Miguel Landaeta	7.0.53-1	10 years ago
27	* Team upload. * Team upload. * New upstream release. - Addresses security issue: CVE-2014-0050	Gianfranco Costamagn...	7.0.52-1	10 years ago
26	New upstream release. New upstream release.	James Page	7.0.50-1	10 years ago
25	[ Gianfranco Costamagna ] [ Gianfranco Costamagna ] * Team upload. * New upstream release, patch refresh. * Renamed patch fix-manager-webapp.path to fix-manager-webapp.patch (extension typo). * Refresh patches for upstream release. * Removed -Djava.net.preferIPv4Stack=true from init script (lp: #1088681), thanks Hendrik Haddorp. * Added webapp manager path patch (lp: #1128067) thanks TJ. [ tony mancill ] * Bump Standards-Version to 3.9.5. * Change copyright year in javadocs to 2013. * Add patch to include the distribution name in error pages. (Closes: #729840)	tony mancill	7.0.47-1	10 years ago
24	[ Gianfranco Costamagna ] [ Gianfranco Costamagna ] * Team upload. * New upstream release. * Added libhamcrest-java >= 1.3 as build-dep, tweaked debian/rules. * Bumped compat level to 9. * Removed some version checks, newer releases already in oldstable. * Refresh patches. * debian/control: changed Vcs-Git and Vcs-Browser fields, now they are canonical. * Fixed error message in Tomcat init script, patch by Thijs Kinkhorst (Closes: #714348)	Gianfranco Costamagn...	7.0.42-1	10 years ago
23	* Fix deployment of POMs for libservlet-3.0-java JARs into j... * Fix deployment of POMs for libservlet-3.0-java JARs into javax coordinates. - JARs were deployed into maven-repo, but not POMs. * Fix servlet-api groupId in d/javaxpoms/jsp-api.pom.	Jakub Adam	7.0.40-2	10 years ago
22	* New upstream release. * New upstream release. - Addresses security issue: CVE-2013-2071 * Refresh patches: - 0015_disable_test_TestCometProcessor.patch	Miguel Landaeta	7.0.40-1	10 years ago
21	Upload to unstable for jessie release cycle. Upload to unstable for jessie release cycle.	tony mancill	7.0.39-1	11 years ago
20	* Acknowledge NMU: 7.0.28-3+nmu1 (Closes: #692440) * Acknowledge NMU: 7.0.28-3+nmu1 (Closes: #692440) - Thank you to Michael Gilbert. * Add patches for the following security issues: (Closes: #695251) - CVE-2012-4431, CVE-2012-3546	tony mancill	7.0.28-4	11 years ago
19	* Non-maintainer upload. * Non-maintainer upload. * Fix cve-2012-3439: multiple replay attack issues in digest authentication. (closes: #692440)	Michael Gilbert	7.0.28-3+nmu1	11 years ago
18	[ Miguel Landaeta ] [ Miguel Landaeta ] * Fix small typo in README.Debian. [ tony mancill ] * Use ucf and a template for /etc/logrotate.d/tomcat6 file to avoid updating the shipped conffile. (Closes: #688936)	tony mancill	7.0.28-3	11 years ago
17	[ Jakub Adam ] [ Jakub Adam ] * Ensure webapps/examples/WEB-INF/lib exists before files are copied there. * Fix FTBFS when user home dir doesn't exist (Closes: #680844). [ tony mancill ] * Fix build to generate postrm from postrm.in (Closes: #681160)	tony mancill	7.0.28-2	11 years ago
16	[ Miguel Landaeta ] [ Miguel Landaeta ] * Add Slovak debconf translation (Closes: #677913). - Thanks to Ivan Masár. [ James Page ] * New upstream release. * Enable test suite during package build: - d/control: Add junit4, libjstl1.1-java and libjakarta-taglibs-standard-java to BDI's. - d/rules: + Add ant/junit4 jars files to build classpath. + Target java 1.6 to support test suite exection. + Specify location of junit jar file. + Install jstl jar files to example webapp during build. + Conditionally execute test target if required. + Purge jar files from example webapp during clean. * Fix JSTL examples in examples web application: - d/control: Add dependencies on libjstl1.1-java and libjakarta-taglibs-standard-java for tomcat7-examples. - d/tomcat7-examples.links: Add links to jstl and standard jar files for examples web application. - d/context/examples.xml: Allow linking to jar files in examples webapp. * Fix mapping to javax packages for API jar files: - d/maven.[rules,publishedRules]: Ensure all javax.[servlet\|el] jar files are published to the correct locations in /usr/share/[maven-repo\|java]. - d/libservlet3.0-java.manifest: Update jar file locations for javax remapping. - d/libservlet3.0-java.links: Provide backwards compatible links for deprecated tomcat-.jar files in /usr/share/java. [ tony mancill ] Set DMUA flag.	tony mancill	7.0.28-1	11 years ago
15	New upstream release. New upstream release.	tony mancill	7.0.27-1	11 years ago
14	* Address regression leaving ROOT webapp files after purge. ... * Address regression leaving ROOT webapp files after purge. (Closes: #670440) * Update copyright year in javadoc to 2012.	tony mancill	7.0.26-4	11 years ago
13	* Team upload. * Team upload. * Apply patches provided by James Page (Closes: #671370) - d/patches/0012-java7-compat.patch: Added compatibility patch to support compilation with openjdk-7 as default-jdk (LP: #889002). - d/default_root/index.html: Fixup instructions for enabling manager web application access (LP: #910368). * Fix README.Debian symlink; file is not compressed. (Closes: #674119)	tony mancill	7.0.26-3	11 years ago

Older »