Publishing details

• Removed from disk on 2018-10-11.
• Removal requested on 2018-10-11.
• Superseded on 2018-10-10 by tomcat8 - 8.0.32-1ubuntu1.8
• Published on 2018-07-25
• Copied from ubuntu xenial in PPA for Ubuntu Security Proposed by Ubuntu Archive Robot

Changelog

tomcat8 (8.0.32-1ubuntu1.7) xenial-security; urgency=medium

  * SECURITY UPDATE: DoS via issue in UTF-8 decoder
    - debian/patches/CVE-2018-1336.patch: fix logic in
      java/org/apache/tomcat/util/buf/Utf8Decoder.java.
    - CVE-2018-1336
  * SECURITY UPDATE: missing hostname verification in WebSocket client
    - debian/patches/CVE-2018-8034.patch: enable hostname verification by
      default in webapps/docs/web-socket-howto.xml,
      java/org/apache/tomcat/websocket/WsWebSocketContainer.java.
    - CVE-2018-8034

 -- Marc Deslauriers <email address hidden>  Wed, 25 Jul 2018 08:17:36 -0400

Builds

• amd64

Package files

• libservlet3.1-java-doc_8.0.32-1ubuntu1.7_all.deb (236.0 KiB)
• libservlet3.1-java_8.0.32-1ubuntu1.7_all.deb (381.5 KiB)
• libtomcat8-java_8.0.32-1ubuntu1.7_all.deb (4.4 MiB)
• tomcat8-admin_8.0.32-1ubuntu1.7_all.deb (30.1 KiB)
• tomcat8-common_8.0.32-1ubuntu1.7_all.deb (51.8 KiB)
• tomcat8-docs_8.0.32-1ubuntu1.7_all.deb (659.8 KiB)
• tomcat8-examples_8.0.32-1ubuntu1.7_all.deb (183.5 KiB)
• tomcat8-user_8.0.32-1ubuntu1.7_all.deb (30.0 KiB)
• tomcat8_8.0.32-1ubuntu1.7.debian.tar.xz (63.3 KiB)
• tomcat8_8.0.32-1ubuntu1.7.dsc (2.8 KiB)
• tomcat8_8.0.32-1ubuntu1.7_all.deb (41.3 KiB)
• tomcat8_8.0.32.orig.tar.xz (3.3 MiB)