tomcat7 (7.0.55-1ubuntu0.2) utopic-security; urgency=medium
* SECURITY UPDATE: SecurityManager bypass via Expression Language
- debian/patches/CVE-2014-7810.patch: handle classes that may not be
accessible but have accessible interfaces in
java/javax/el/BeanELResolver.java, remove unnecessary code in
java/org/apache/jasper/runtime/PageContextImpl.java,
java/org/apache/jasper/security/SecurityClassLoad.java.
- CVE-2014-7810
* Replace expired ssl certs and use TLS to fix tests causing FTBFS:
- debian/patches/0022-use-tls-in-ssl-unit-tests.patch
- debian/patches/0023-replace-expired-ssl-certificates.patch
- debian/source/include-binaries
Date: 2015-06-19 20:17:12.936081+00:00
Changed-By: Marc Deslauriers <marc.deslauri...@canonical.com>
Signed-By: Ubuntu Archive Robot
<cjwatson+ubuntu-archive-ro...@chiark.greenend.org.uk>
https://launchpad.net/ubuntu/+source/tomcat7/7.0.55-1ubuntu0.2
Sorry, changesfile not available.
--
Utopic-changes mailing list
Utopic-changes@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.canonical.com/mailman/listinfo/utopic-changes
