tomcat6 6.0.35-1ubuntu3.4 source package in Ubuntu
Changelog
tomcat6 (6.0.35-1ubuntu3.4) precise-security; urgency=medium * SECURITY UPDATE: request smuggling attack via content-length headers - debian/patches/CVE-2013-4286.patch: handle multiple content lengths in java/org/apache/coyote/ajp/AbstractAjpProcessor.java, java/org/apache/coyote/ajp/AjpProcessor.java, handle content length and chunked encoding being both specified in java/org/apache/coyote/http11/Http11AprProcessor.java, java/org/apache/coyote/http11/Http11NioProcessor.java, java/org/apache/coyote/http11/Http11Processor.java. - CVE-2013-4286 * SECURITY UPDATE: denial of service via chunked transfer coding - debian/patches/CVE-2013-4322.patch: limit length of extension data in java/org/apache/coyote/Constants.java, java/org/apache/coyote/http11/filters/ChunkedInputFilter.java, webapps/docs/config/systemprops.xml. - CVE-2013-4322 * SECURITY UPDATE: session fixation attack via crafted URL - debian/patches/CVE-2014-0033.patch: properly handle disableURLRewriting in java/org/apache/catalina/connector/CoyoteAdapter.java. - CVE-2014-0033 -- Marc Deslauriers <email address hidden> Tue, 04 Mar 2014 11:14:51 -0500
Upload details
- Uploaded by:
- Marc Deslauriers
- Uploaded to:
- Precise
- Original maintainer:
- Ubuntu Developers
- Architectures:
- all
- Section:
- java
- Urgency:
- Medium Urgency
See full publishing history Publishing
Series | Published | Component | Section |
---|
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
tomcat6_6.0.35.orig.tar.gz | 3.1 MiB | d348778396d7dde5c290c87d18464f9abc3b6d4d5e9a8e6ba13c4eddfebe6ab8 |
tomcat6_6.0.35-1ubuntu3.4.debian.tar.gz | 54.3 KiB | 58eef8e60e629854fbcb0488283786c850159af8e709c05abf60a6395f66f463 |
tomcat6_6.0.35-1ubuntu3.4.dsc | 2.7 KiB | 530fe9d6387533b75d98db04fac58648d02ab69c65fd1c9c9947ba021dedb286 |
Available diffs
Binary packages built by this source
- libservlet2.5-java: Servlet 2.5 and JSP 2.1 Java API classes
Apache Tomcat implements the Java Servlet and the JavaServer Pages (JSP)
specifications from Sun Microsystems, and provides a "pure Java" HTTP web
server environment for Java code to run.
.
This package contains the Java Servlet and JSP library.
- libservlet2.5-java-doc: Servlet 2.5 and JSP 2.1 Java API documentation
Apache Tomcat implements the Java Servlet and the JavaServer Pages (JSP)
specifications from Sun Microsystems, and provides a "pure Java" HTTP web
server environment for Java code to run.
.
This package contains the documentation for the Java Servlet and JSP library.
- libtomcat6-java: Servlet and JSP engine -- core libraries
Apache Tomcat implements the Java Servlet and the JavaServer Pages (JSP)
specifications from Sun Microsystems, and provides a "pure Java" HTTP web
server environment for Java code to run.
.
This package contains the Tomcat core classes which can be used by other
Java applications to embed Tomcat.
- tomcat6: Servlet and JSP engine
Apache Tomcat implements the Java Servlet and the JavaServer Pages (JSP)
specifications from Sun Microsystems, and provides a "pure Java" HTTP web
server environment for Java code to run.
.
This package contains only the startup scripts for the system-wide daemon.
No documentation or web applications are included here, please install
the tomcat6-docs and tomcat6-examples packages if you want them.
Install the authbind package if you need to use Tomcat on ports 1-1023.
Install tomcat6-user instead of this package if you don't want Tomcat to
start as a service.
- tomcat6-admin: Servlet and JSP engine -- admin web applications
Apache Tomcat implements the Java Servlet and the JavaServer Pages (JSP)
specifications from Sun Microsystems, and provides a "pure Java" HTTP web
server environment for Java code to run.
.
This package contains the administrative web interfaces.
- tomcat6-common: Servlet and JSP engine -- common files
Apache Tomcat implements the Java Servlet and the JavaServer Pages (JSP)
specifications from Sun Microsystems, and provides a "pure Java" HTTP web
server environment for Java code to run.
.
This package contains common files needed by the tomcat6 and tomcat6-user
packages (Tomcat 6 scripts and libraries).
- tomcat6-docs: Servlet and JSP engine -- documentation
Apache Tomcat implements the Java Servlet and the JavaServer Pages (JSP)
specifications from Sun Microsystems, and provides a "pure Java" HTTP web
server environment for Java code to run.
.
This package contains the online documentation web application.
- tomcat6-examples: Servlet and JSP engine -- example web applications
Apache Tomcat implements the Java Servlet and the JavaServer Pages (JSP)
specifications from Sun Microsystems, and provides a "pure Java" HTTP web
server environment for Java code to run.
.
This package contains the default Tomcat example webapps.
- tomcat6-extras: Servlet and JSP engine -- additional components
Apache Tomcat implements the Java Servlet and the JavaServer Pages (JSP)
specifications from Sun Microsystems, and provides a "pure Java" HTTP web
server environment for Java code to run.
.
This package contains additional ("extra") component libraries.
(Currently only catalina-jmx-remote. jar.)
- tomcat6-user: Servlet and JSP engine -- tools to create user instances
Apache Tomcat implements the Java Servlet and the JavaServer Pages (JSP)
specifications from Sun Microsystems, and provides a "pure Java" HTTP web
server environment for Java code to run.
.
This package contains files needed to create a user Tomcat instance.
This user Tomcat instance can be started and stopped using the scripts
provided in the Tomcat instance directory.