Format: 1.8 Date: Wed, 25 Jul 2018 08:27:25 -0400 Source: tomcat7 Binary: tomcat7-common tomcat7 tomcat7-user libtomcat7-java libservlet3.0-java libservlet3.0-java-doc tomcat7-admin tomcat7-examples tomcat7-docs Architecture: all i386_translations Version: 7.0.52-1ubuntu0.15 Distribution: trusty Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: libservlet3.0-java - Servlet 3.0 and JSP 2.2 Java API classes libservlet3.0-java-doc - Servlet 3.0 and JSP 2.2 Java API documentation libtomcat7-java - Servlet and JSP engine -- core libraries tomcat7 - Servlet and JSP engine tomcat7-admin - Servlet and JSP engine -- admin web applications tomcat7-common - Servlet and JSP engine -- common files tomcat7-docs - Servlet and JSP engine -- documentation tomcat7-examples - Servlet and JSP engine -- example web applications tomcat7-user - Servlet and JSP engine -- tools to create user instances Changes: tomcat7 (7.0.52-1ubuntu0.15) trusty-security; urgency=medium . * SECURITY UPDATE: DoS via issue in UTF-8 decoder - debian/patches/CVE-2018-1336.patch: fix logic in java/org/apache/tomcat/util/buf/Utf8Decoder.java. - CVE-2018-1336 * SECURITY UPDATE: missing hostname verification in WebSocket client - debian/patches/CVE-2018-8034.patch: enable hostname verification by default in webapps/docs/web-socket-howto.xml, java/org/apache/tomcat/websocket/WsWebSocketContainer.java. - CVE-2018-8034 Checksums-Sha1: 0e93770bf084dd5927351468484ec9e22e63b1d2 48056 tomcat7-common_7.0.52-1ubuntu0.15_all.deb e0adabb75b587dd23799d2f692f3683931c56790 36036 tomcat7_7.0.52-1ubuntu0.15_all.deb 112195fc690c386d7f550acf1f550737ddf76b26 24378 tomcat7-user_7.0.52-1ubuntu0.15_all.deb 4e91f3dbb360253bfe616d33ad1b3f279053c16e 3659586 libtomcat7-java_7.0.52-1ubuntu0.15_all.deb 783beb1acb5d05d305aa1bdd20f6632bd6caae94 296080 libservlet3.0-java_7.0.52-1ubuntu0.15_all.deb 2494d40d72c4db800dc3883aaec89c6504f07f62 195562 libservlet3.0-java-doc_7.0.52-1ubuntu0.15_all.deb 07c68753483b1821b96a40b7e7ce47467fc9831a 25650 tomcat7-admin_7.0.52-1ubuntu0.15_all.deb 65c9127164a508102003abcf5370d0b89443989d 180546 tomcat7-examples_7.0.52-1ubuntu0.15_all.deb cbd0f61000f70e05ac23ae4ca7bcc996c9b4295d 547238 tomcat7-docs_7.0.52-1ubuntu0.15_all.deb 56479e85ec0b1ae38857f305b8284148a9da3ab1 8274 tomcat7_7.0.52-1ubuntu0.15_i386_translations.tar.gz Checksums-Sha256: 6b7780df55f9be4a52d684729d9f99041fd41f51611558e95cc6467851dc8853 48056 tomcat7-common_7.0.52-1ubuntu0.15_all.deb f004ae21658a68c13a56f1b8c85000bdb70ffeaef1ca68eae53475bf2d9f7b2c 36036 tomcat7_7.0.52-1ubuntu0.15_all.deb 45b280365e985230aaabe3d03712f924c8523d3407f9eceabf9f2c267ed004f3 24378 tomcat7-user_7.0.52-1ubuntu0.15_all.deb e1192a63e705c4458c06b2ba158bb022438bbf4c53bbcdff9dc4a3fab9bac49d 3659586 libtomcat7-java_7.0.52-1ubuntu0.15_all.deb f6a71752f2b78e7a9cfe41b8bfcb1e8b9e404911d09ee1492f003497c6543ddf 296080 libservlet3.0-java_7.0.52-1ubuntu0.15_all.deb 148426af016fa2cef6a147a21187aac3f2d02096f6f3e4c5cf10d8842d18915b 195562 libservlet3.0-java-doc_7.0.52-1ubuntu0.15_all.deb 38e77bb3feb013a3349f42dc8b88b26da3d7773dcf7bf8f169fe6edcc44a358d 25650 tomcat7-admin_7.0.52-1ubuntu0.15_all.deb 5a89325c38c841ccf8dc969c94986ec2b20b91a76c1dbd526e49c9da42c4bb60 180546 tomcat7-examples_7.0.52-1ubuntu0.15_all.deb 9d64d7ee6334759efd7552f437ddcfc63e5704f39dbc2542c1a0a9457b2d3ac5 547238 tomcat7-docs_7.0.52-1ubuntu0.15_all.deb 886e732fbe86c52d17a216eeaf16db02d6e06f30f37d96c5ae7d30bed5807fb3 8274 tomcat7_7.0.52-1ubuntu0.15_i386_translations.tar.gz Files: 517cc356f767350f7e0166f89275d771 48056 java optional tomcat7-common_7.0.52-1ubuntu0.15_all.deb 630b8c175fc847f2ce1f8459fd829cf4 36036 java optional tomcat7_7.0.52-1ubuntu0.15_all.deb 2b9f91dfef749286c627cd4683253042 24378 java optional tomcat7-user_7.0.52-1ubuntu0.15_all.deb 57e49a256cc565d84387f286af9a29d8 3659586 java optional libtomcat7-java_7.0.52-1ubuntu0.15_all.deb c5b6b8b99e58a8218f30824c099597cb 296080 java optional libservlet3.0-java_7.0.52-1ubuntu0.15_all.deb cfdd1b321b0b58b772de1ddc26c7ba9c 195562 doc optional libservlet3.0-java-doc_7.0.52-1ubuntu0.15_all.deb 35e931118a165d5f5bf91dd3686076c5 25650 java optional tomcat7-admin_7.0.52-1ubuntu0.15_all.deb b60a8a6f51506c1a91682f71f99e501e 180546 java optional tomcat7-examples_7.0.52-1ubuntu0.15_all.deb ce5a4f1cb737305fee8925991289b8e8 547238 doc optional tomcat7-docs_7.0.52-1ubuntu0.15_all.deb 0eabd8bedfa3674250c3a344e2512468 8274 raw-translations - tomcat7_7.0.52-1ubuntu0.15_i386_translations.tar.gz Original-Maintainer: Debian Java Maintainers