tomcat7 (7.0.42-1ubuntu0.1) saucy-security; urgency=medium
* SECURITY UPDATE: request smuggling attack via content-length headers
- debian/patches/CVE-2013-4286.patch: use long as content length in
java/org/apache/coyote/Request.java, handle multiple content lengths
in java/org/apache/coyote/ajp/AbstractAjpProcessor.java, handle
content length and chunked encoding being both specified in
java/org/apache/coyote/http11/AbstractHttp11Processor.java.
- CVE-2013-4286
* SECURITY UPDATE: denial of service via chunked transfer coding
- debian/patches/CVE-2013-4322.patch: enforce maximum size in
java/org/apache/coyote/http11/{AbstractHttp11Processor.java,
AbstractHttp11Protocol.java, Http11AprProcessor.java,
Http11AprProtocol.java, Http11NioProcessor.java,
Http11NioProtocol.java, Http11Processor.java, Http11Protocol.java},
java/org/apache/coyote/http11/filters/ChunkedInputFilter.java,
test/org/apache/coyote/http11/filters/TestChunkedInputFilter.java,
webapps/docs/config/http.xml.
- CVE-2013-4322
* SECURITY UPDATE: denial of service via malformed content-type header
- debian/patches/CVE-2014-0050.patch: validate sizes in
java/org/apache/tomcat/util/http/fileupload/FileUploadBase.java,
java/org/apache/tomcat/util/http/fileupload/MultipartStream.java.
- CVE-2014-0050
Date: 2014-03-04 16:46:15.034681+00:00
Changed-By: Marc Deslauriers <[email protected]>
Signed-By: Ubuntu Archive Robot
<[email protected]>
https://launchpad.net/ubuntu/saucy/+source/tomcat7/7.0.42-1ubuntu0.1
Sorry, changesfile not available.
--
Saucy-changes mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/saucy-changes
