tomcat8 8.5.21-1ubuntu1.1 source package in Ubuntu
Changelog
tomcat8 (8.5.21-1ubuntu1.1) artful-security; urgency=medium * SECURITY UPDATE: missing checks when HTTP PUTs enabled (LP: #1721749) - debian/patches/CVE-2017-12617.patch: add checks to java/org/apache/catalina/servlets/DefaultServlet.java, java/org/apache/catalina/webresources/AbstractFileResourceSet.java, java/org/apache/catalina/webresources/DirResourceSet.java, java/org/apache/tomcat/util/compat/JrePlatform.java, test/org/apache/catalina/webresources/AbstractTestResourceSet.java, test/org/apache/catalina/webresources/TestAbstractFileResourceSetPerformance.java. - CVE-2017-12617 * SECURITY UPDATE: incorrectly documented CGI search algorithm - debian/patches/CVE-2017-15706.patch: adjust documentation in webapps/docs/cgi-howto.xml. - CVE-2017-15706 * SECURITY UPDATE: security constraints mapped to context root are ignored - debian/patches/CVE-2018-1304.patch: add check to java/org/apache/catalina/realm/RealmBase.java. - CVE-2018-1304 * SECURITY UPDATE: security constraint annotations applied too late - debian/patches/CVE-2018-1305.patch: change ordering in java/org/apache/catalina/Wrapper.java, java/org/apache/catalina/authenticator/AuthenticatorBase.java, java/org/apache/catalina/core/ApplicationContext.java, java/org/apache/catalina/core/ApplicationServletRegistration.java, java/org/apache/catalina/core/StandardContext.java, java/org/apache/catalina/core/StandardWrapper.java, java/org/apache/catalina/startup/ContextConfig.java, java/org/apache/catalina/startup/Tomcat.java, java/org/apache/catalina/startup/WebAnnotationSet.java. - CVE-2018-1305 * SECURITY UPDATE: CORS filter has insecure defaults - debian/patches/CVE-2018-8014.patch: change defaults in java/org/apache/catalina/filters/CorsFilter.java, java/org/apache/catalina/filters/LocalStrings.properties, test/org/apache/catalina/filters/TestCorsFilter.java, test/org/apache/catalina/filters/TesterFilterConfigs.java. - CVE-2018-8014 -- Marc Deslauriers <email address hidden> Mon, 28 May 2018 09:03:55 -0400
Upload details
- Uploaded by:
- Marc Deslauriers
- Uploaded to:
- Artful
- Original maintainer:
- Ubuntu Developers
- Architectures:
- all
- Section:
- java
- Urgency:
- Medium Urgency
See full publishing history Publishing
Series | Published | Component | Section |
---|
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
tomcat8_8.5.21.orig.tar.xz | 3.2 MiB | 7c45ffe41ca1a725b27c2d10cca7f02878f6ca63db6120a9097f9d87329d37b6 |
tomcat8_8.5.21-1ubuntu1.1.debian.tar.xz | 51.0 KiB | 57b84dd064149c58939c480ccc903c4d3f590fe562a95564ba947680353af5b5 |
tomcat8_8.5.21-1ubuntu1.1.dsc | 2.9 KiB | b2b1362d7fe5ffd70161007fa194a14dc4dd940a0a8d6c98dac35c23f575e75a |
Available diffs
Binary packages built by this source
- libservlet3.1-java: No summary available for libservlet3.1-java in ubuntu artful.
No description available for libservlet3.1-java in ubuntu artful.
- libservlet3.1-java-doc: No summary available for libservlet3.1-java-doc in ubuntu artful.
No description available for libservlet3.
1-java- doc in ubuntu artful.
- libtomcat8-embed-java: No summary available for libtomcat8-embed-java in ubuntu artful.
No description available for libtomcat8-
embed-java in ubuntu artful.
- libtomcat8-java: No summary available for libtomcat8-java in ubuntu artful.
No description available for libtomcat8-java in ubuntu artful.
- tomcat8: No summary available for tomcat8 in ubuntu artful.
No description available for tomcat8 in ubuntu artful.
- tomcat8-admin: No summary available for tomcat8-admin in ubuntu artful.
No description available for tomcat8-admin in ubuntu artful.
- tomcat8-common: No summary available for tomcat8-common in ubuntu artful.
No description available for tomcat8-common in ubuntu artful.
- tomcat8-docs: No summary available for tomcat8-docs in ubuntu artful.
No description available for tomcat8-docs in ubuntu artful.
- tomcat8-examples: No summary available for tomcat8-examples in ubuntu artful.
No description available for tomcat8-examples in ubuntu artful.
- tomcat8-user: No summary available for tomcat8-user in ubuntu artful.
No description available for tomcat8-user in ubuntu artful.