This is an automated email from the git hooks/post-receive script.
ebourg-guest pushed a commit to branch jessie
in repository tomcat8.
commit 4f321e73a19688d2605bf284b448c22ae02ddee0
Author: Emmanuel Bourg <ebo...@apache.org>
Date: Fri Dec 2 10:27:10 2016 +0100
Fixed a privilege escalation when the package is purged (Closes: #845385)
---
debian/changelog | 4 +++-
debian/tomcat8.postrm.in | 3 ---
2 files changed, 3 insertions(+), 4 deletions(-)
diff --git a/debian/changelog b/debian/changelog
index e26eb9c..8c45cb1 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -25,8 +25,10 @@ tomcat8 (8.0.14-1+deb8u5) UNRELEASED; urgency=medium
* Added asm-all.jar to the test classpath to fix TestWebappServiceLoader
* Fixed a test failure in the new TestNamingContext test added with the fix
for CVE-2016-6797
- * Fixed a privilege escalation when the package is upgraded.
+ * Fixed a potential privilege escalation when the tomcat8 package is
upgraded.
Thanks to Paul Szabo for the report (Closes: #845393)
+ * Fixed a potential privilege escalation when the tomcat8 package is purged.
+ Thanks to Paul Szabo for the report (Closes: #845385)
* Test failures are no longer ignored and now stop the build
-- Emmanuel Bourg <ebo...@apache.org> Tue, 22 Nov 2016 23:21:56 +0100
diff --git a/debian/tomcat8.postrm.in b/debian/tomcat8.postrm.in
index d25ce11..d70d5e7 100644
--- a/debian/tomcat8.postrm.in
+++ b/debian/tomcat8.postrm.in
@@ -64,9 +64,6 @@ case "$1" in
/etc/tomcat8/Catalina/localhost /etc/tomcat8/Catalina /etc/tomcat8
# clean up /etc/authbind after conffiles have been removed
rmdir --ignore-fail-on-non-empty /etc/authbind/byuid /etc/authbind
- # Put all files owned by group tomcat8 back into root group before
deleting
- # the tomcat8 user and group
- chown -Rhf root:root /etc/tomcat8/ || true
# Remove user/group and log files (don't remove everything under
# /var/lib/tomcat8 because there might be user-installed webapps)
db_get tomcat8/username && TOMCAT8_USER="$RET" ||
TOMCAT8_USER="tomcat8"
--
Alioth's /usr/local/bin/git-commit-notice on
/srv/git.debian.org/git/pkg-java/tomcat8.git
_______________________________________________
pkg-java-commits mailing list
pkg-java-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-commits
