[ubuntu/vivid-security] tomcat7 7.0.56-2ubuntu0.1 (Accepted)

[Marc Deslauriers]

tomcat7 (7.0.56-2ubuntu0.1) vivid-security; urgency=medium

  * SECURITY UPDATE: SecurityManager bypass via Expression Language
    - debian/patches/CVE-2014-7810.patch: handle classes that may not be
      accessible but have accessible interfaces in
      java/javax/el/BeanELResolver.java, remove unnecessary code in
      java/org/apache/jasper/runtime/PageContextImpl.java,
      java/org/apache/jasper/security/SecurityClassLoad.java.
    - CVE-2014-7810

Date: 2015-06-19 15:27:14.126440+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/tomcat7/7.0.56-2ubuntu0.1
-------------- next part --------------
Sorry, changesfile not available.