[ubuntu/lucid-updates] tomcat6 6.0.24-2ubuntu1.13 (Accepted)

Tue May 28 17:29:16 UTC 2013

tomcat6 (6.0.24-2ubuntu1.13) lucid-security; urgency=low

  * SECURITY UPDATE: denial of service via chunked transfer encoding
    - debian/patches/CVE-2012-3544.patch: properly parse CRLF in requests
      in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java.
    - CVE-2012-3544
  * SECURITY UPDATE: FORM authentication request injection
    - debian/patches/CVE-2013-2067.patch: properly change session ID
      in java/org/apache/catalina/authenticator/FormAuthenticator.java.
    - CVE-2013-2067

Date: 2013-05-23 14:30:22.036446+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Signed-By: Ubuntu Archive Robot <cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk>
https://launchpad.net/ubuntu/lucid/+source/tomcat6/6.0.24-2ubuntu1.13
-------------- next part --------------
Sorry, changesfile not available.