-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 21 Jun 2017 13:36:46 +0200 Source: tomcat8 Binary: tomcat8-common tomcat8 tomcat8-user libtomcat8-java libtomcat8-embed-java libservlet3.1-java libservlet3.1-java-doc tomcat8-admin tomcat8-examples tomcat8-docs Architecture: source Version: 8.5.14-1+deb9u1 Distribution: stretch-security Urgency: high Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org> Changed-By: Emmanuel Bourg <ebourg@apache.org> Description: libservlet3.1-java - Servlet 3.1, JSP 2.3, EL 3.0 and WebSocket 1.0 Java API classes libservlet3.1-java-doc - Servlet 3.1, JSP 2.3, EL 3.0 and WebSocket 1.0 Java API documenta libtomcat8-embed-java - Apache Tomcat 8 - Servlet and JSP engine -- embed libraries libtomcat8-java - Apache Tomcat 8 - Servlet and JSP engine -- core libraries tomcat8 - Apache Tomcat 8 - Servlet and JSP engine tomcat8-admin - Apache Tomcat 8 - Servlet and JSP engine -- admin web application tomcat8-common - Apache Tomcat 8 - Servlet and JSP engine -- common files tomcat8-docs - Apache Tomcat 8 - Servlet and JSP engine -- documentation tomcat8-examples - Apache Tomcat 8 - Servlet and JSP engine -- example web applicati tomcat8-user - Apache Tomcat 8 - Servlet and JSP engine -- tools to create user Closes: 864447 Changes: tomcat8 (8.5.14-1+deb9u1) stretch-security; urgency=high . * Team upload. * Fixed CVE-2017-5664: Static error pages can be overwritten if the DefaultServlet is configured to permit writes (Closes: #864447) Checksums-Sha1: def6568d9a61bed5724dc241899baee534a5e795 2990 tomcat8_8.5.14-1+deb9u1.dsc 07d6fb8aafbfb114fa879976b6edd00fa2445abf 3325436 tomcat8_8.5.14.orig.tar.xz a1e39e169b7e5c25512b8d1eb22d0a685f19670c 42252 tomcat8_8.5.14-1+deb9u1.debian.tar.xz e53d78d0e80ca089dd6b7c96a3759f7e9ec72237 10183 tomcat8_8.5.14-1+deb9u1_source.buildinfo Checksums-Sha256: b844e82d31c9276d1efd0be5c0082bbbb0f1ebd89e6778cff9f9e95f653ad86a 2990 tomcat8_8.5.14-1+deb9u1.dsc 55793397099260a4f85e6ec810ac487faa4c4d03c24023dca99137d19e8808db 3325436 tomcat8_8.5.14.orig.tar.xz d9ac4fee10307a3c540a7a2bcb83bc1f2fe9b8fd250e6f03d1476ee5c4c7dc63 42252 tomcat8_8.5.14-1+deb9u1.debian.tar.xz 033f94239cf6d08c0087caa1f84325d2f0bf3e81c3dc5a116eaacd071befe8b0 10183 tomcat8_8.5.14-1+deb9u1_source.buildinfo Files: bbdbf0ec3ec8e2be35f840793bf3a55e 2990 java optional tomcat8_8.5.14-1+deb9u1.dsc cf8bd5c141d38fe2843286a07b153449 3325436 java optional tomcat8_8.5.14.orig.tar.xz 5215b46942b69ce5b40d8b4b428dd5cf 42252 java optional tomcat8_8.5.14-1+deb9u1.debian.tar.xz 78e06261c0188c87eb72b29a72c1e5c1 10183 java optional tomcat8_8.5.14-1+deb9u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJGBAEBCAAwFiEEuM5N4hCA3PkD4WxA9RPEGeS50KwFAllKln4SHGVib3VyZ0Bh cGFjaGUub3JnAAoJEPUTxBnkudCsv08P/Rzg9/CRZQmWjen4WoJtEVmpLnXxC1ZT h+eHGUDwgMfty7MCstf8niv2Uax6dGEHjDmN41iExLtXHCK6vNfvTgYW4KxCtq/6 y3oGvMax89k8kESwPpRMugdAyciPLZhNITx8IVl5P0UB+h73U/nu8DxbwjN1umKY 8kPG2ud6QUyOAcADT6VhRMxb1pW4vyCHj4pPM1B6G1i4s1PmfrzBjsroIH6vdnji o79Qwc4ssxdR9vgv1QlNCOmVqtSyLJltgcF3//2WyRywMG82c+jFQsWlXFdcw/SI Seu87mmqh/qvVNXU1X6LGIWv7bPfUhNqFJAFLjvliBr+rUSqA2UgaswfTaF8aBd2 22PzRPAaZ3M1NPsnhIepD29wPq1rwOyLImPP6ua9rEQyvNXDXwG+eEkKY8AzDag7 gBsNvveb+ay7fneuiwbQ1hGuBbUPpzw1PljxMBoEoAuWO66oUuO6YT9xO8E/qGDW G2+0kTDXYzAAMmZfxarCigDS2WH8Qiht1y7qifqrP5+bxv5245vCz9QJHe1i9rRD lou7dBfyJYbImuFOoEUORcNJiKvvg71B6NLcVGyAlpp0rVy52RSVFI2nXGmenuQ8 YKI7VYMn2ZR+pRz73DMn1RrzlZ+ElTHlvVDUszMqdgzn6OeY65sYcqHiFVF7V8Bi F+s2hDMGZd1s =dEuj -----END PGP SIGNATURE-----