Viewing all changes in revision 32.
- Committer: Package Import Robot
- Date: 2015-06-19 09:52:59 UTC
- Revision ID: package-import@ubuntu.com-20150619095259-iuwo6rgyti61ngf7
* SECURITY UPDATE: SecurityManager bypass via Expression Language
- debian/patches/CVE-2014-7810.patch: handle classes that may not be
accessible but have accessible interfaces in
java/javax/el/BeanELResolver.java, remove unnecessary code in
java/org/apache/jasper/runtime/PageContextImpl.java,
java/org/apache/jasper/security/SecurityClassLoad.java.
- CVE-2014-7810
* Replace expired ssl certs and use TLS to fix tests causing FTBFS:
- debian/patches/0022-use-tls-in-ssl-unit-tests.patch
- debian/patches/0023-replace-expired-ssl-certificates.patch
- debian/source/include-binaries
- debian/patches/CVE-2014-7810.patch: handle classes that may not be
accessible but have accessible interfaces in
java/javax/el/BeanELResolver.java, remove unnecessary code in
java/org/apache/jasper/runtime/PageContextImpl.java,
java/org/apache/jasper/security/SecurityClassLoad.java.
- CVE-2014-7810
* Replace expired ssl certs and use TLS to fix tests causing FTBFS:
- debian/patches/0022-use-tls-in-ssl-unit-tests.patch
- debian/patches/0023-replace-expired-ssl-certificates.patch
- debian/source/include-binaries
- files added:
- .pc/0022-use-tls-in-ssl-unit-tests.patch
- .pc/0022-use-tls-in-ssl-unit-tests.patch/test
- .pc/0022-use-tls-in-ssl-unit-tests.patch/test/org
- .pc/0022-use-tls-in-ssl-unit-tests.patch/test/org/apache
- .pc/0022-use-tls-in-ssl-unit-tests.patch/test/org/apache/tomcat
- .pc/0022-use-tls-in-ssl-unit-tests.patch/test/org/apache/tomcat/util
- .pc/0022-use-tls-in-ssl-unit-tests.patch/test/org/apache/tomcat/util/net
- .pc/0023-replace-expired-ssl-certificates.patch
- .pc/0023-replace-expired-ssl-certificates.patch/test
- .pc/0023-replace-expired-ssl-certificates.patch/test/org
- .pc/0023-replace-expired-ssl-certificates.patch/test/org/apache
- .pc/0023-replace-expired-ssl-certificates.patch/test/org/apache/tomcat
- .pc/0023-replace-expired-ssl-certificates.patch/test/org/apache/tomcat/util
- .pc/0023-replace-expired-ssl-certificates.patch/test/org/apache/tomcat/util/net
- .pc/CVE-2014-7810.patch
- .pc/CVE-2014-7810.patch/java
- .pc/CVE-2014-7810.patch/java/javax
- .pc/CVE-2014-7810.patch/java/javax/el
- .pc/CVE-2014-7810.patch/java/org
- .pc/CVE-2014-7810.patch/java/org/apache
- .pc/CVE-2014-7810.patch/java/org/apache/jasper
- .pc/CVE-2014-7810.patch/java/org/apache/jasper/runtime
- .pc/CVE-2014-7810.patch/java/org/apache/jasper/security
- files modified:
- .pc/applied-patches
expand all
collapse all
added
removed
