-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 01 Sep 2018 11:13:51 -0400
Source: tomcat8
Binary: tomcat8-common tomcat8 tomcat8-user libtomcat8-java libservlet3.1-java
libservlet3.1-java-doc tomcat8-admin tomcat8-examples tomcat8-docs
Architecture: source all
Version: 8.0.14-1+deb8u13
Distribution: jessie-security
Urgency: high
Maintainer: Debian Java Maintainers
<pkg-java-maintain...@lists.alioth.debian.org>
Changed-By: Roberto C. Sanchez <robe...@debian.org>
Description:
libservlet3.1-java - Servlet 3.1, JSP 2.3, EL 3.0 and WebSocket 1.0 Java API
classes
libservlet3.1-java-doc - Servlet 3.1, JSP 2.3, EL 3.0 and WebSocket 1.0 Java
API documenta
libtomcat8-java - Apache Tomcat 8 - Servlet and JSP engine -- core libraries
tomcat8 - Apache Tomcat 8 - Servlet and JSP engine
tomcat8-admin - Apache Tomcat 8 - Servlet and JSP engine -- admin web
application
tomcat8-common - Apache Tomcat 8 - Servlet and JSP engine -- common files
tomcat8-docs - Apache Tomcat 8 - Servlet and JSP engine -- documentation
tomcat8-examples - Apache Tomcat 8 - Servlet and JSP engine -- example web
applicati
tomcat8-user - Apache Tomcat 8 - Servlet and JSP engine -- tools to create user
Changes:
tomcat8 (8.0.14-1+deb8u13) jessie-security; urgency=high
.
* Non-maintainer upload by the LTS Team.
* Fix CVE-2018-1336: An improper handing of overflow in the UTF-8 decoder
with supplementary characters can lead to an infinite loop in the decoder
causing a Denial of Service.
* Fix CVE-2018-8034: The host name verification when using TLS with the
WebSocket client was missing. It is now enabled by default.
Checksums-Sha1:
b163f2eaaa6333848469de7fd157d4baa7736ef7 2891 tomcat8_8.0.14-1+deb8u13.dsc
9a88c213747a5c7d80e2af78cbff561b7dd419e3 82740
tomcat8_8.0.14-1+deb8u13.debian.tar.xz
b3559baf6ce0776044cfb2bc17f61a42802b4856 59230
tomcat8-common_8.0.14-1+deb8u13_all.deb
3b908a20ea61abb648d0cb5e179891ee12ee300d 48692 tomcat8_8.0.14-1+deb8u13_all.deb
36c66af7dbbb14447ac930092be86136e26804f0 36272
tomcat8-user_8.0.14-1+deb8u13_all.deb
e0ab21c2792412cdcc88fd1582b5fcace1bedd4b 4593212
libtomcat8-java_8.0.14-1+deb8u13_all.deb
ac0c8915e0609428901276a14173b4adb3408faf 393728
libservlet3.1-java_8.0.14-1+deb8u13_all.deb
d05f3450e1fa27c7fabce8ca28488546f295ba53 249418
libservlet3.1-java-doc_8.0.14-1+deb8u13_all.deb
2b9b2e7f962a19f2e1f19a9b47101ae3563e6f53 37716
tomcat8-admin_8.0.14-1+deb8u13_all.deb
c375b7e082c189a5f550147762170036b746f238 195938
tomcat8-examples_8.0.14-1+deb8u13_all.deb
be871a7541d4c1a3c81f8c06e4cb8146d5af8cc0 690102
tomcat8-docs_8.0.14-1+deb8u13_all.deb
Checksums-Sha256:
c6e35ddb441d17934399e756a01ebad4f39ae0169f045d6bfec2a7b59fa4faf1 2891
tomcat8_8.0.14-1+deb8u13.dsc
2a1ace13c29952adbd8907bd8a8dc61e3a9b63a6f530cc717feee387aa508231 82740
tomcat8_8.0.14-1+deb8u13.debian.tar.xz
4e627ef5882a1058eed05754950e0f28c450fceb54c5676740998c11ecc5354a 59230
tomcat8-common_8.0.14-1+deb8u13_all.deb
896de6184cc187279ebb2ea6597f1c1980fcf1650f62ea162754497aa5abcb5d 48692
tomcat8_8.0.14-1+deb8u13_all.deb
56066128b0e6247692477af84020c2772ed4067e1d32db60d91cc20b80aff9ef 36272
tomcat8-user_8.0.14-1+deb8u13_all.deb
4a737a88744294215f331e35f99698294cccb0d31c3e26eb9a14b7dad4d2b5f3 4593212
libtomcat8-java_8.0.14-1+deb8u13_all.deb
55310b5383c85033c7f2b55159b293d5b69707f6f3dad28ef42504868771c286 393728
libservlet3.1-java_8.0.14-1+deb8u13_all.deb
9621ebd1f40f3c4bf321144af04706c422feeb189833376c7941b59f147eb63e 249418
libservlet3.1-java-doc_8.0.14-1+deb8u13_all.deb
65672ca8666308b8859897c568e8b8113ea0ae1379e0cfdf2ea1b3d020660c9a 37716
tomcat8-admin_8.0.14-1+deb8u13_all.deb
1db738fea61ceb0cec61954b85f579d7f6037dc9f7c7331d8e420a6457f79115 195938
tomcat8-examples_8.0.14-1+deb8u13_all.deb
415b80f5e1797019ee681a2c25a521589282b2d0214f271e7be1d68a8e2dd210 690102
tomcat8-docs_8.0.14-1+deb8u13_all.deb
Files:
18f897461dff25ca3f8fe11fcedae1b7 2891 java optional
tomcat8_8.0.14-1+deb8u13.dsc
4d5ed85f2496856497c2f41a6851105a 82740 java optional
tomcat8_8.0.14-1+deb8u13.debian.tar.xz
67375b42aeeed52c7d9b5620faef511d 59230 java optional
tomcat8-common_8.0.14-1+deb8u13_all.deb
4242f883ab7d533c9ef697fe71b80aea 48692 java optional
tomcat8_8.0.14-1+deb8u13_all.deb
5e0162931eeafe4fff3597188a6bc28a 36272 java optional
tomcat8-user_8.0.14-1+deb8u13_all.deb
96795bb49563df5259f042c3a52f3bb1 4593212 java optional
libtomcat8-java_8.0.14-1+deb8u13_all.deb
72f7ac88614f8a8187c772934015df2e 393728 java optional
libservlet3.1-java_8.0.14-1+deb8u13_all.deb
466a34126bf8158dc5947a8ad3d1a1a3 249418 doc optional
libservlet3.1-java-doc_8.0.14-1+deb8u13_all.deb
44d80e59ad1e5720b1123eaaeaa7006c 37716 java optional
tomcat8-admin_8.0.14-1+deb8u13_all.deb
76279e92daed3d692fc3165c7dc28248 195938 java optional
tomcat8-examples_8.0.14-1+deb8u13_all.deb
c8e0fa1c503fb84f934fdee136462f7e 690102 doc optional
tomcat8-docs_8.0.14-1+deb8u13_all.deb
-----BEGIN PGP SIGNATURE-----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=FPS9
-----END PGP SIGNATURE-----
