-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 14 Oct 2020 10:54:20 +0100 Source: tomcat8 Binary: tomcat8-common tomcat8 tomcat8-user libtomcat8-java libtomcat8-embed-java libservlet3.1-java libservlet3.1-java-doc tomcat8-admin tomcat8-examples tomcat8-docs Architecture: source all Version: 8.5.54-0+deb9u4 Distribution: stretch-security Urgency: high Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org> Changed-By: Chris Lamb <lamby@debian.org> Description: libservlet3.1-java - Servlet 3.1, JSP 2.3, EL 3.0 and WebSocket 1.0 Java API classes libservlet3.1-java-doc - Servlet 3.1, JSP 2.3, EL 3.0 and WebSocket 1.0 Java API documenta libtomcat8-embed-java - Apache Tomcat 8 - Servlet and JSP engine -- embed libraries libtomcat8-java - Apache Tomcat 8 - Servlet and JSP engine -- core libraries tomcat8 - Apache Tomcat 8 - Servlet and JSP engine tomcat8-admin - Apache Tomcat 8 - Servlet and JSP engine -- admin web application tomcat8-common - Apache Tomcat 8 - Servlet and JSP engine -- common files tomcat8-docs - Apache Tomcat 8 - Servlet and JSP engine -- documentation tomcat8-examples - Apache Tomcat 8 - Servlet and JSP engine -- example web applicati tomcat8-user - Apache Tomcat 8 - Servlet and JSP engine -- tools to create user Changes: tomcat8 (8.5.54-0+deb9u4) stretch-security; urgency=high . * Non-maintainer upload by the LTS team. * CVE-2020-13943: Prevent an issue where an excessive number of concurrent streams could result in users seeing responses for unexpected resources. Checksums-Sha1: af5463c51190a8121bbbac23d870eb827afacc1d 2950 tomcat8_8.5.54-0+deb9u4.dsc 8de4d5b538a9b5464e3c308e5eae0e1b602c99a2 3779176 tomcat8_8.5.54.orig.tar.xz aee68d5a86b57be3823ea615fbe3ab7d49107204 47880 tomcat8_8.5.54-0+deb9u4.debian.tar.xz d9934f644e819f33ec0de3078326c7b4a74f7ecc 244124 libservlet3.1-java-doc_8.5.54-0+deb9u4_all.deb ffc01acd5574ba4f0219548e840f7926886e646f 403608 libservlet3.1-java_8.5.54-0+deb9u4_all.deb 2c271eceb46cfb342a0c33bf4df9ab63461f99a2 4106166 libtomcat8-embed-java_8.5.54-0+deb9u4_all.deb 5e566eebf009328d5aee4339400a2c35bb682bf0 5362436 libtomcat8-java_8.5.54-0+deb9u4_all.deb b74b07f31a41025026d211aaaf0b3ca40f163a8c 33376 tomcat8-admin_8.5.54-0+deb9u4_all.deb 40ced4b3ae7c5eb203ed4b6fbd7f57a5fe4db99d 67676 tomcat8-common_8.5.54-0+deb9u4_all.deb f077f392d5f644208aa3cbf5047c38f2a1799f74 691412 tomcat8-docs_8.5.54-0+deb9u4_all.deb 81df62db366d9c3c2ca8fa419ade43868457edb7 394902 tomcat8-examples_8.5.54-0+deb9u4_all.deb d16492b07f42c8d3aed182c30e5f5f1365b3258f 41840 tomcat8-user_8.5.54-0+deb9u4_all.deb b108d037e584cb86ae0deb9b7631db678330f2c5 54012 tomcat8_8.5.54-0+deb9u4_all.deb 8a6197423b856817310f1c86cf2944407803e00f 14443 tomcat8_8.5.54-0+deb9u4_amd64.buildinfo Checksums-Sha256: e8716a78a101f68ae85f5a59efd166af7ecc62bfa154700ed419b34b801e9683 2950 tomcat8_8.5.54-0+deb9u4.dsc a7733123c889b44521fbfe601472ffd5fe1109ded465aa10df6ab20569beddda 3779176 tomcat8_8.5.54.orig.tar.xz 4d076a81a3fefa55aecbb1fc16b878fe150fb8b943f9a4288351324ad7baa5a8 47880 tomcat8_8.5.54-0+deb9u4.debian.tar.xz 27103e81288196383a9943f03587087425de7d66a035a40a34ccd9c82ae72068 244124 libservlet3.1-java-doc_8.5.54-0+deb9u4_all.deb b07b99532ce98412ec90ec937d2702585607da3c7cfd817447f4a0f897888166 403608 libservlet3.1-java_8.5.54-0+deb9u4_all.deb a38aa0f2ff9b8d2c9ca12f83ed3c07725e63906ac4a4a51231d46d51ef3e9be7 4106166 libtomcat8-embed-java_8.5.54-0+deb9u4_all.deb 2215ae5e1905c03c7f78a973791043628ec59eb5f6494e7cb0a5920653316812 5362436 libtomcat8-java_8.5.54-0+deb9u4_all.deb 62ae6d94980396e0b2a562c8f9b8988309e9c3c1a45855715cceff616f2b7726 33376 tomcat8-admin_8.5.54-0+deb9u4_all.deb 1a2a9883edcaee065d7f5a7ad2d00f3a7313e454612f4ab4b2e1312eae413e88 67676 tomcat8-common_8.5.54-0+deb9u4_all.deb 218684f0bd70001ad2d66348a6bfdd147f47f5a3063f2e6e958fa414baf6ef0e 691412 tomcat8-docs_8.5.54-0+deb9u4_all.deb d41e4dbcca1235d2bc9bafdc481758589551942f69268068e9055d9c6cc350b7 394902 tomcat8-examples_8.5.54-0+deb9u4_all.deb f2066edecd02d78b6071bd1420996679891d6f52ea36aac8c6a2b6bd5d9d674b 41840 tomcat8-user_8.5.54-0+deb9u4_all.deb 73d158c6a4a1befa93e80946ed0f2b6cfa3208cb98273baa93b9988df3166681 54012 tomcat8_8.5.54-0+deb9u4_all.deb ec579bedfa014ae8e82691409caaaa4d9962b87da2c60e1d32aa6b03473a3117 14443 tomcat8_8.5.54-0+deb9u4_amd64.buildinfo Files: 4b0429e261428971a91fa7dff5840e5a 2950 java optional tomcat8_8.5.54-0+deb9u4.dsc 389adbb82ba032062a3241eb66969753 3779176 java optional tomcat8_8.5.54.orig.tar.xz 05b2152d736241c11c1faf76bdb57427 47880 java optional tomcat8_8.5.54-0+deb9u4.debian.tar.xz 5b10a0b39cf197c3c017b682f24626b0 244124 doc optional libservlet3.1-java-doc_8.5.54-0+deb9u4_all.deb d38418766044451656e8117c5af989ff 403608 java optional libservlet3.1-java_8.5.54-0+deb9u4_all.deb 4ccb85f55a75b013326c4c5b324d9c24 4106166 java optional libtomcat8-embed-java_8.5.54-0+deb9u4_all.deb 878357a9f641d4e5a84ac504098c0d3c 5362436 java optional libtomcat8-java_8.5.54-0+deb9u4_all.deb 0fad83cfb20f4e615e0045542dfb757d 33376 java optional tomcat8-admin_8.5.54-0+deb9u4_all.deb 73c535f69c2b18d694d7f895f229dc5a 67676 java optional tomcat8-common_8.5.54-0+deb9u4_all.deb 0c485a8136587bd6eeaff4d2f4e2a192 691412 doc optional tomcat8-docs_8.5.54-0+deb9u4_all.deb 1822f42f4e5f6709da3bccbdccb5a3d6 394902 java optional tomcat8-examples_8.5.54-0+deb9u4_all.deb bc71b8e0f73aa20677770a550841f6f4 41840 java optional tomcat8-user_8.5.54-0+deb9u4_all.deb 87f7e4ebf2d3a611b04edcf991e5876d 54012 java optional tomcat8_8.5.54-0+deb9u4_all.deb 13731a13d1540a9a15a8255b04fbcde3 14443 java optional tomcat8_8.5.54-0+deb9u4_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAl+G3PQACgkQHpU+J9Qx HlhUshAAl33hlSb/RDBY1B9JWatOVLFMIWf5H8pSqGJwLw2m1aVpDfO0o6ckvBwo HaGkBVwyD2o1DPPiD6QYOI0kltHgr202pv4YEd03bhgsqYuEXnE6Af8+10whREcm azoU05Aaenz8VsM1R6DKpgmrK/0Ctm8ACdT+eN6GNLlUlUH7a815VWhZtTeeHh8U EN1yzEqqIZWOUkErlvsO4zivK84QI/lVniCSbFJw70iTWI/U0/EpQzFJ4bV3rlPx IPiqp58dtQgTuc7J9suDFFP/WUAx0SyYGwEeUfE+cQ/EpC8qWUGXogThtVrPoR7d 3eyaBV0GcqcgSp4KzJ6pjn6lrps/u/7KtXzQ5sVZ5W/3y/axCq5aD6mhAeD3pyvF h77bl9nkxuOTownNCGDUUm63qyIBsrzzwN1gsWP36zfaQ3Vv3IGMIZbObQwnsaS2 SX/VWZquqU2zN9VIBYZD3sif1nyvOKUgoW7ibeMKCE+9VzQdoFsOMMTKNG3LW7S8 xHCxp/VbcOPDdLkYkBMioV1B1w677yOLMbBS33Gnenv0jjoc29eMHbyjjS4J7KQG jouaZ+JTQxexCVvxyMEVyVyAYAhqxE46ujT1J/bSU8+ko9KAQkloqgIR8MPhplX0 5YLVTU+RHV49mRGcrpXj131oIAbC9gjKFnXOO4nnmSsrbyQsApQ= =9fhW -----END PGP SIGNATURE-----