Accepted tomcat7 7.0.28-4+deb7u15 (source all) into oldoldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 24 Sep 2017 16:35:16 +0200
Source: tomcat7
Binary: tomcat7-common tomcat7 tomcat7-user libtomcat7-java libservlet3.0-java libservlet3.0-java-doc tomcat7-admin tomcat7-examples tomcat7-docs
Architecture: source all
Version: 7.0.28-4+deb7u15
Distribution: wheezy-security
Urgency: high
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Description:
libservlet3.0-java - Servlet 3.0 and JSP 2.2 Java API classes
libservlet3.0-java-doc - Servlet 3.0 and JSP 2.2 Java API documentation
libtomcat7-java - Servlet and JSP engine -- core libraries
tomcat7 - Servlet and JSP engine
tomcat7-admin - Servlet and JSP engine -- admin web applications
tomcat7-common - Servlet and JSP engine -- common files
tomcat7-docs - Servlet and JSP engine -- documentation
tomcat7-examples - Servlet and JSP engine -- example web applications
tomcat7-user - Servlet and JSP engine -- tools to create user instances
Changes:
tomcat7 (7.0.28-4+deb7u15) wheezy-security; urgency=high
.
* Team upload.
* Fix CVE-2017-12616.
When using a VirtualDirContext it was possible to bypass security
constraints and/or view the source code of JSPs for resources served by the
VirtualDirContext using a specially crafted request.
Checksums-Sha1:
8fa7a6071d58b3e8660cfcf15d25540386f711bf 2799 tomcat7_7.0.28-4+deb7u15.dsc
9c6265786b9b2662ab4245ffc532e328be46c3e9 196634 tomcat7_7.0.28-4+deb7u15.debian.tar.gz
665ad97605717957cc4c72f7d309c279c9bcfec3 67028 tomcat7-common_7.0.28-4+deb7u15_all.deb
962ae69acd0001d0539f29a3242a27190ab36163 54100 tomcat7_7.0.28-4+deb7u15_all.deb
5dde894c6ff4c3dca73c7d5620a28d33c65eb1d3 42392 tomcat7-user_7.0.28-4+deb7u15_all.deb
6f6daabb1c0e92a93c33f8d74870cb4d3263ba84 3510866 libtomcat7-java_7.0.28-4+deb7u15_all.deb
f22a606301e4ce4f2e1cc4d56eb704054bffcac1 308496 libservlet3.0-java_7.0.28-4+deb7u15_all.deb
8caa3fde9e7f690797fd54bab16bb18c428dd0d4 322726 libservlet3.0-java-doc_7.0.28-4+deb7u15_all.deb
4cff4e186d752e7895da9969f175aa6448d1fdee 54966 tomcat7-admin_7.0.28-4+deb7u15_all.deb
0030c82785da7137805d3950adff1e0531029774 208660 tomcat7-examples_7.0.28-4+deb7u15_all.deb
a65cd8636f9908f8bd896eec5788e71d11e983fc 649598 tomcat7-docs_7.0.28-4+deb7u15_all.deb
Checksums-Sha256:
9176a0330311e4cdfd0926141631a450f37be3889c2d03fd84e50c7b5dccb013 2799 tomcat7_7.0.28-4+deb7u15.dsc
87bbbd288da1fe3e6c6ef3d7d599939e704382bb9e2f5188580cc1211babccd6 196634 tomcat7_7.0.28-4+deb7u15.debian.tar.gz
4f527b6d238be176d653e10d81b430d9c43bf32dc511ed9b2781e4c13707b3b5 67028 tomcat7-common_7.0.28-4+deb7u15_all.deb
d25fb0f136196a3d8939bf906154587f71beb268beccc5c7049000af682fdbda 54100 tomcat7_7.0.28-4+deb7u15_all.deb
55860f70eb128454e9fca8a9d96381f72f11e4ea58ae76ed3ad956e0fcbbf7e6 42392 tomcat7-user_7.0.28-4+deb7u15_all.deb
980587757f0879534ce2983706436c7397c5927e08ce13ab6095043a380aaced 3510866 libtomcat7-java_7.0.28-4+deb7u15_all.deb
59352e4d1857afa4962619d636aabd21bb4e10b06849fb17c54810a81720fea7 308496 libservlet3.0-java_7.0.28-4+deb7u15_all.deb
ec01f4dcaa4d43764bb1d0307c131056eceab62e07d83887cc84fc44357ff8d7 322726 libservlet3.0-java-doc_7.0.28-4+deb7u15_all.deb
852740cff67e3a5e20bbbf1c8b7a7f4462e55af95a66447366f92b09ad0aad1f 54966 tomcat7-admin_7.0.28-4+deb7u15_all.deb
6e24f74cf5561872642af3cd71afb3da895d0acf88fdceb01a6aefbefae1490f 208660 tomcat7-examples_7.0.28-4+deb7u15_all.deb
b40c44dd4066d584be05fa7d74fd93863426402d27319bb5fcb7228f15c071c8 649598 tomcat7-docs_7.0.28-4+deb7u15_all.deb
Files:
33ffa46450185b598f3c7ada4c9be0e2 2799 java optional tomcat7_7.0.28-4+deb7u15.dsc
f1461c79bc544eb168a70fd7a4555953 196634 java optional tomcat7_7.0.28-4+deb7u15.debian.tar.gz
ade74cdcc1f8320c20be469a646f588f 67028 java optional tomcat7-common_7.0.28-4+deb7u15_all.deb
9399a031316a854294c2039249cfd7ee 54100 java optional tomcat7_7.0.28-4+deb7u15_all.deb
afa0de9ae84d884aee5565b75b565e3d 42392 java optional tomcat7-user_7.0.28-4+deb7u15_all.deb
cf27f5744b36e3cc263cae32a4a37971 3510866 java optional libtomcat7-java_7.0.28-4+deb7u15_all.deb
253d29e61b1fd9b3573646bc55f53455 308496 java optional libservlet3.0-java_7.0.28-4+deb7u15_all.deb
c160bed062cb9da531a6e684afad4cb1 322726 doc optional libservlet3.0-java-doc_7.0.28-4+deb7u15_all.deb
da834a7f2bcff4920d026673d83a5a66 54966 java optional tomcat7-admin_7.0.28-4+deb7u15_all.deb
73bf02b466b6fbd8d2353c053caa46ee 208660 java optional tomcat7-examples_7.0.28-4+deb7u15_all.deb
9b079161ca5fd89191d40f1ec25b6008 649598 doc optional tomcat7-docs_7.0.28-4+deb7u15_all.deb
-----BEGIN PGP SIGNATURE-----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=6IgZ
-----END PGP SIGNATURE-----