Ubuntu
tomcat7 package

Branches for Quantal

Name		Status	Last Modified	Last Commit
lp://staging/ubuntu/quantal/tomcat7		2 Mature	2012-09-17 10:14:50 UTC 2012-09-17	21. * New upstream point release includin... Author: James Page Revision Date: 2012-09-17 10:52:06 UTC * New upstream point release including several fixes for Java 7 specific issues. * Refreshed patches.
lp://staging/ubuntu/quantal-security/tomcat7		2 Mature	2014-03-04 10:45:20 UTC 2014-03-04	24. * SECURITY UPDATE: request smuggling ... Author: Marc Deslauriers Revision Date: 2014-03-04 10:45:20 UTC * SECURITY UPDATE: request smuggling attack via content-length headers - debian/patches/CVE-2013-4286.patch: use long as content length in java/org/apache/coyote/Request.java, handle multiple content lengths in java/org/apache/coyote/ajp/AbstractAjpProcessor.java, handle content length and chunked encoding being both specified in java/org/apache/coyote/http11/AbstractHttp11Processor.java. - CVE-2013-4286 * SECURITY UPDATE: denial of service via chunked transfer coding - debian/patches/CVE-2013-4322.patch: enforce maximum size in java/org/apache/coyote/http11/{AbstractHttp11Processor.java, AbstractHttp11Protocol.java, Http11AprProcessor.java, Http11AprProtocol.java, Http11NioProcessor.java, Http11NioProtocol.java, Http11Processor.java, Http11Protocol.java}, java/org/apache/coyote/http11/filters/ChunkedInputFilter.java, test/org/apache/coyote/http11/filters/TestChunkedInputFilter.java, webapps/docs/config/http.xml. - CVE-2013-4322 * SECURITY UPDATE: denial of service via malformed content-type header - debian/patches/CVE-2014-0050.patch: validate sizes in java/org/apache/tomcat/util/http/fileupload/FileUploadBase.java, java/org/apache/tomcat/util/http/fileupload/MultipartStream.java. - CVE-2014-0050 * d/p/0018-update-test-certificates.patch: remove binary parts to support newer quilt.
lp://staging/ubuntu/quantal-updates/tomcat7		2 Mature	2014-03-04 10:45:20 UTC 2014-03-04	24. * SECURITY UPDATE: request smuggling ... Author: Marc Deslauriers Revision Date: 2014-03-04 10:45:20 UTC * SECURITY UPDATE: request smuggling attack via content-length headers - debian/patches/CVE-2013-4286.patch: use long as content length in java/org/apache/coyote/Request.java, handle multiple content lengths in java/org/apache/coyote/ajp/AbstractAjpProcessor.java, handle content length and chunked encoding being both specified in java/org/apache/coyote/http11/AbstractHttp11Processor.java. - CVE-2013-4286 * SECURITY UPDATE: denial of service via chunked transfer coding - debian/patches/CVE-2013-4322.patch: enforce maximum size in java/org/apache/coyote/http11/{AbstractHttp11Processor.java, AbstractHttp11Protocol.java, Http11AprProcessor.java, Http11AprProtocol.java, Http11NioProcessor.java, Http11NioProtocol.java, Http11Processor.java, Http11Protocol.java}, java/org/apache/coyote/http11/filters/ChunkedInputFilter.java, test/org/apache/coyote/http11/filters/TestChunkedInputFilter.java, webapps/docs/config/http.xml. - CVE-2013-4322 * SECURITY UPDATE: denial of service via malformed content-type header - debian/patches/CVE-2014-0050.patch: validate sizes in java/org/apache/tomcat/util/http/fileupload/FileUploadBase.java, java/org/apache/tomcat/util/http/fileupload/MultipartStream.java. - CVE-2014-0050 * d/p/0018-update-test-certificates.patch: remove binary parts to support newer quilt.