[ubuntu/quantal-security] tomcat7 7.0.30-0ubuntu1.1 (Accepted)

[Marc Deslauriers]

tomcat7 (7.0.30-0ubuntu1.1) quantal-security; urgency=low

  * SECURITY UPDATE: CSRF bypass via request with no session identifier
    - debian/patches/CVE-2012-4431.patch: check for session identifier in
      java/org/apache/catalina/filters/CsrfPreventionFilter.java.
    - CVE-2012-4431

Date: 2013-01-10 16:05:11.266051+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/quantal/+source/tomcat7/7.0.30-0ubuntu1.1
-------------- next part --------------
Sorry, changesfile not available.