Format: 1.8
Date: Mon, 09 Sep 2019 16:47:51 -0300
Source: tomcat8
Binary: tomcat8-common tomcat8 tomcat8-user libtomcat8-java libtomcat8-embed-java tomcat8-admin tomcat8-examples tomcat8-docs
Architecture: all
Version: 8.5.39-1ubuntu1~18.04.3
Distribution: bionic
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@lgw01-amd64-003.buildd>
Changed-By: Emilia Torino <emilia.torino@canonical.com>
Description:
 libtomcat8-embed-java - Apache Tomcat 8 - Servlet and JSP engine -- embed libraries
 libtomcat8-java - Apache Tomcat 8 - Servlet and JSP engine -- core libraries
 tomcat8    - Apache Tomcat 8 - Servlet and JSP engine
 tomcat8-admin - Apache Tomcat 8 - Servlet and JSP engine -- admin web application
 tomcat8-common - Apache Tomcat 8 - Servlet and JSP engine -- common files
 tomcat8-docs - Apache Tomcat 8 - Servlet and JSP engine -- documentation
 tomcat8-examples - Apache Tomcat 8 - Servlet and JSP engine -- example web applicati
 tomcat8-user - Apache Tomcat 8 - Servlet and JSP engine -- tools to create user
Changes:
 tomcat8 (8.5.39-1ubuntu1~18.04.3) bionic-security; urgency=medium
 .
   * SECURITY UPDATE: XSS attack on SSI printenv command
     - debian/patches/CVE-2019-0221.patch: escape debug output to aid
       readability
     - CVE-2019-0221
   * SECURITY UPDATE: DoS via thread exhaustion
     - debian/patches/CVE-2019-10072-1.patch: expand HTTP/2 timeout
       handling to connection window exhaustion on write.
     - debian/patches/CVE-2019-10072-2.patch: Fix test failures. Handle
       full allocation case.
     - CVE-2019-10072
Checksums-Sha1:
 02325ccc95302698c4674f6b460c57a66f01bf1d 3981116 libtomcat8-embed-java_8.5.39-1ubuntu1~18.04.3_all.deb
 4e22a09ab65667b1ed5822b53b9f4e3b6e4dbc96 4988948 libtomcat8-java_8.5.39-1ubuntu1~18.04.3_all.deb
 38c84573bc72ab7a7abbc7c708406ec2166404ea 27916 tomcat8-admin_8.5.39-1ubuntu1~18.04.3_all.deb
 a01731090edb40f72dab4b4e4ea50a284d38f323 59272 tomcat8-common_8.5.39-1ubuntu1~18.04.3_all.deb
 83abf5c9f102b543d84be2cb347e41c7ed493c8b 653608 tomcat8-docs_8.5.39-1ubuntu1~18.04.3_all.deb
 94811cb0d12bf703d6c3c5e433353f8ba32f92be 385112 tomcat8-examples_8.5.39-1ubuntu1~18.04.3_all.deb
 13c4803343a8720cfb2f950bfa3bf89eb7a3985c 36256 tomcat8-user_8.5.39-1ubuntu1~18.04.3_all.deb
 50ceb31bbe9d96a5639116a342d6c29426d767c7 46376 tomcat8_8.5.39-1ubuntu1~18.04.3_all.deb
 8958a93029e542322ac75847443c689399348de0 11337 tomcat8_8.5.39-1ubuntu1~18.04.3_amd64.buildinfo
Checksums-Sha256:
 8c292d58062263c612c1b5f158eab8dcd6f98136e04663bad50f9f3e721d082a 3981116 libtomcat8-embed-java_8.5.39-1ubuntu1~18.04.3_all.deb
 1e0b65fb8a55bf839ce91f1fb32ac5a35904e9e85946cd56f0ec2646a4ac180d 4988948 libtomcat8-java_8.5.39-1ubuntu1~18.04.3_all.deb
 ad77b10d9ee210d454189324d04ae96cb7e4637e346587688bae3828ee1bcfb9 27916 tomcat8-admin_8.5.39-1ubuntu1~18.04.3_all.deb
 25665b5169d7cef70d9f56e5fe13f8d2b2cd16aa503f1a18df3dd4812b8909b9 59272 tomcat8-common_8.5.39-1ubuntu1~18.04.3_all.deb
 52b54aabbe2d373a9b457548f2bee4e8b200da0b080471d31760684bea07e1d3 653608 tomcat8-docs_8.5.39-1ubuntu1~18.04.3_all.deb
 910e49de078f7a03a0f739cab0a7464ce2c047207a241fc6daa794a473550184 385112 tomcat8-examples_8.5.39-1ubuntu1~18.04.3_all.deb
 58fd9c2baf924e1cec280733faee9c4311809a61aa225a913f7bdd58975878f8 36256 tomcat8-user_8.5.39-1ubuntu1~18.04.3_all.deb
 681d680976beef6d4d1fcd9e7fc463f12c0cf6b12324769f2bff7dd556c645af 46376 tomcat8_8.5.39-1ubuntu1~18.04.3_all.deb
 c14f93a6766cc3ad2c13195bd102c1138f75e64177185a0347b53dde0e9941c3 11337 tomcat8_8.5.39-1ubuntu1~18.04.3_amd64.buildinfo
Files:
 6bc2103b1aed8e2fb1fa3e69b341be8a 3981116 java optional libtomcat8-embed-java_8.5.39-1ubuntu1~18.04.3_all.deb
 dd12a445c4d966ebc460dba0fa438eb9 4988948 java optional libtomcat8-java_8.5.39-1ubuntu1~18.04.3_all.deb
 646ab781e9137aa2282efecbdf3d589d 27916 java optional tomcat8-admin_8.5.39-1ubuntu1~18.04.3_all.deb
 3dc161665c88cf80fdb125c0991fdffc 59272 java optional tomcat8-common_8.5.39-1ubuntu1~18.04.3_all.deb
 61c8fc36296b204b80d1675cc7ffcebb 653608 doc optional tomcat8-docs_8.5.39-1ubuntu1~18.04.3_all.deb
 bd9d0443cf206d07a2b0e8c98c787b24 385112 java optional tomcat8-examples_8.5.39-1ubuntu1~18.04.3_all.deb
 26f4f4eda7bb749f8bc1676cd52dcd78 36256 java optional tomcat8-user_8.5.39-1ubuntu1~18.04.3_all.deb
 3bf7ba273cc1c49813b6ad9cbc2db031 46376 java optional tomcat8_8.5.39-1ubuntu1~18.04.3_all.deb
 06f23e528dfb8c40f09a5a5e77516fc6 11337 java optional tomcat8_8.5.39-1ubuntu1~18.04.3_amd64.buildinfo
Original-Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>