tomcat6 6.0.18-0ubuntu3.3 source package in Ubuntu

Changelog

tomcat6 (6.0.18-0ubuntu3.3) intrepid-security; urgency=low

  * SECURITY UPDATE: arbitrary file creation or overwrite from directory
    traversal via a .. entry in a WAR file.
    - CVE-2009-2693
  * SECURITY UPDATE: authentication bypass via autodeployment process
    - CVE-2009-2901
  * SECURITY UPDATE: work-directory file deletion via directory traversal
    sequences in a WAR filename.
    - CVE-2009-2902
    - debian/patches/security_CVE-2009-2693_2901_2902.patch: validate file
      names and paths in java/org/apache/catalina/loader/
      {LocalStrings.properties,WebappClassLoader.java},
      java/org/apache/catalina/startup/{ContextConfig.java,ExpandWar.java,
      HostConfig.java,LocalStrings.properties}
 -- Marc Deslauriers <email address hidden>   Thu, 11 Feb 2010 09:22:51 -0500

Upload details

Uploaded by:
Marc Deslauriers on 2010-02-11
Uploaded to:
Intrepid
Original maintainer:
MOTU
Architectures:
all
Section:
web
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Builds

Intrepid: [FULLYBUILT] i386

Downloads

File Size SHA-256 Checksum
tomcat6_6.0.18.orig.tar.gz 3.3 MiB f5ad5dd12e221d75e25234ca734fb434cf45f3fcea93623232a73dc9bfd03dc4
tomcat6_6.0.18-0ubuntu3.3.diff.gz 26.0 KiB a7ef7ffbbd092a9e4b6c4b7d71696f979b721574c428dc8ed7335840fe38d44e
tomcat6_6.0.18-0ubuntu3.3.dsc 1.3 KiB 8721b339299e114ee88adc7691e1fbe23fcce5b7090838a34ef6341e3f104b0d

View changes file

Binary packages built by this source

libservlet2.5-java: No summary available for libservlet2.5-java in ubuntu intrepid.

No description available for libservlet2.5-java in ubuntu intrepid.

libtomcat6-java: No summary available for libtomcat6-java in ubuntu intrepid.

No description available for libtomcat6-java in ubuntu intrepid.

tomcat6: No summary available for tomcat6 in ubuntu intrepid.

No description available for tomcat6 in ubuntu intrepid.

tomcat6-admin: No summary available for tomcat6-admin in ubuntu intrepid.

No description available for tomcat6-admin in ubuntu intrepid.

tomcat6-common: No summary available for tomcat6-common in ubuntu intrepid.

No description available for tomcat6-common in ubuntu intrepid.

tomcat6-docs: No summary available for tomcat6-docs in ubuntu intrepid.

No description available for tomcat6-docs in ubuntu intrepid.

tomcat6-examples: No summary available for tomcat6-examples in ubuntu intrepid.

No description available for tomcat6-examples in ubuntu intrepid.

tomcat6-user: No summary available for tomcat6-user in ubuntu intrepid.

No description available for tomcat6-user in ubuntu intrepid.