-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 15 Sep 2017 13:18:33 +0200 Source: tomcat8 Binary: tomcat8-common tomcat8 tomcat8-user libtomcat8-java libservlet3.1-java libservlet3.1-java-doc tomcat8-admin tomcat8-examples tomcat8-docs Architecture: source all Version: 8.0.14-1+deb8u11 Distribution: oldstable Urgency: high Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org> Changed-By: Sebastien Delafond <seb@debian.org> Description: libservlet3.1-java - Servlet 3.1, JSP 2.3, EL 3.0 and WebSocket 1.0 Java API classes libservlet3.1-java-doc - Servlet 3.1, JSP 2.3, EL 3.0 and WebSocket 1.0 Java API documenta libtomcat8-java - Apache Tomcat 8 - Servlet and JSP engine -- core libraries tomcat8 - Apache Tomcat 8 - Servlet and JSP engine tomcat8-admin - Apache Tomcat 8 - Servlet and JSP engine -- admin web application tomcat8-common - Apache Tomcat 8 - Servlet and JSP engine -- common files tomcat8-docs - Apache Tomcat 8 - Servlet and JSP engine -- documentation tomcat8-examples - Apache Tomcat 8 - Servlet and JSP engine -- example web applicati tomcat8-user - Apache Tomcat 8 - Servlet and JSP engine -- tools to create user Changes: tomcat8 (8.0.14-1+deb8u11) jessie-security; urgency=high . * Fix CVE-2017-7674: The CORS Filter did not add an HTTP Vary header indicating that the response varies depending on Origin. This permitted client and server side cache poisoning in some circumstances. Checksums-Sha1: 0aa9d41310570dba0ce715ef37a020817afbe142 2517 tomcat8_8.0.14-1+deb8u11.dsc 230281415e6a20b728f7b6e40b1628487acfa6a5 78208 tomcat8_8.0.14-1+deb8u11.debian.tar.xz f05670ed4183985b84c51e8e653f632bc1bb2373 58638 tomcat8-common_8.0.14-1+deb8u11_all.deb e5fae9d8c9bb92dec0091667989a41a4fbbaad0c 48054 tomcat8_8.0.14-1+deb8u11_all.deb e83433416701ddb8ba5d4345f98dc1dfb3b95163 35722 tomcat8-user_8.0.14-1+deb8u11_all.deb 415bfd9db4deb92bcd05492b6aab072458d5eda6 4592626 libtomcat8-java_8.0.14-1+deb8u11_all.deb 4d0e786dc69e428314ec625d64c69a5347bbed57 392908 libservlet3.1-java_8.0.14-1+deb8u11_all.deb 6aa0c0da1d9584c0ce7a6b1da22f16679bc6facd 248680 libservlet3.1-java-doc_8.0.14-1+deb8u11_all.deb 69f3aac8b53d8ab1c90f9599702b6b5b5baeb84d 37022 tomcat8-admin_8.0.14-1+deb8u11_all.deb e2d7b254e97ebc30c744ff8d86d1e13453aa3199 195262 tomcat8-examples_8.0.14-1+deb8u11_all.deb d06025c7e029bbe8457374c83471f5e1105da974 689654 tomcat8-docs_8.0.14-1+deb8u11_all.deb Checksums-Sha256: 0636064aaf507013139e05529f17ed961f019a80e48002faf6c86eb367c14b18 2517 tomcat8_8.0.14-1+deb8u11.dsc 2bed139fd09da6a0a5bf62c100b5f60180d6f12ea967f477d3caaf05e11ab4a4 78208 tomcat8_8.0.14-1+deb8u11.debian.tar.xz 47c5129c922ffab00f4db22eacf2643d675cfd4efee40dcc3a60484193f176b4 58638 tomcat8-common_8.0.14-1+deb8u11_all.deb e55dc7f8a0efae39cfe433e0b7b88e2cd4616086e39b2129ba3cf660c76145d1 48054 tomcat8_8.0.14-1+deb8u11_all.deb 2847759206764486210f9095a9f6c46e3e6ebba3d642f7bdba232717974c2740 35722 tomcat8-user_8.0.14-1+deb8u11_all.deb b811e0f35f3bbfc2429116d2a6e8bda11803692e4487c6cb1dde9b14b78ac43f 4592626 libtomcat8-java_8.0.14-1+deb8u11_all.deb 3e3faa891260523919ab65534fa3fc9481bd78223f7cde50f437bcd8074755a9 392908 libservlet3.1-java_8.0.14-1+deb8u11_all.deb abd4107da7d8570ff02f66d0d221cf1b5e7e3a2a87e1a926c092997e3202c738 248680 libservlet3.1-java-doc_8.0.14-1+deb8u11_all.deb 5b379ae8158ce96a49c09987e950f09f4b187a34c111cbd6da2b3b941c88690f 37022 tomcat8-admin_8.0.14-1+deb8u11_all.deb 5d6fe5f70ee460e06c4917848be184433b7323a34435d274beecd65c52f04bb0 195262 tomcat8-examples_8.0.14-1+deb8u11_all.deb b09dd0ebfb0f383bb0d839a1697267976a6454b0bd5b527b850759d9ef31d7c9 689654 tomcat8-docs_8.0.14-1+deb8u11_all.deb Files: 0178fd4b6f3ba8907a99c7fc3aa5e6a5 2517 java optional tomcat8_8.0.14-1+deb8u11.dsc 73a80afaf6370af51f771810f0f7055b 78208 java optional tomcat8_8.0.14-1+deb8u11.debian.tar.xz fa802013e1a42818250bd132e892b5d3 58638 java optional tomcat8-common_8.0.14-1+deb8u11_all.deb 4901dfdee9414a34dda51bfc1ffbfc0e 48054 java optional tomcat8_8.0.14-1+deb8u11_all.deb e4b89a1c914dda065c74507eaa99ccf3 35722 java optional tomcat8-user_8.0.14-1+deb8u11_all.deb a1cf75b87de8cff1240ea36674ed5117 4592626 java optional libtomcat8-java_8.0.14-1+deb8u11_all.deb 6f62fef312c9e21c72a905d85c063832 392908 java optional libservlet3.1-java_8.0.14-1+deb8u11_all.deb c9507706af9c611d9da23192e198fe08 248680 doc optional libservlet3.1-java-doc_8.0.14-1+deb8u11_all.deb a247340ff507cdf8b60d79915ff7e68c 37022 java optional tomcat8-admin_8.0.14-1+deb8u11_all.deb 923e7bd8f5ee3d10889934e5a5221a43 195262 java optional tomcat8-examples_8.0.14-1+deb8u11_all.deb bf10d374da7372cc353b1e987896540b 689654 doc optional tomcat8-docs_8.0.14-1+deb8u11_all.deb -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEAqSkbVtrXP4xJMh3EL6Jg/PVnWQFAlm77AkACgkQEL6Jg/PV nWQzzgf9HS6EwUH7PGad3sCWGDbqRVH4SpwD2FM2XhJK54QCiDDOKtlQpnTLBKom Grupe8FU1AIt5SVuUJmlLYjbLPdtxE0Dk7UzJVMHNapJONKGfFG91JGvD68mxQH4 o2+FMYSn1M53kmlPtha30wiHmXSy1/rbTNr+t9tVL9fBxXHf0IiFwLD9dzFOSw/d Ph88SAek9+jP+I6eiQlEzzpr0BSSx6sTkZ5roXQgUfeMjeyQfAHF3jatI6PGZpio kTJOtUHmqLdzV4lGK+ytyHXS1dRLLj3U8cPFDzhdH87Ew/wUVEq1CJTWfGJsdiU3 ywha1vsBMO42GPJ+u8zKIOH04Uji1w== =1L3e -----END PGP SIGNATURE-----