Your message dated Sun, 18 Nov 2012 06:02:46 +0000
with message-id <e1tzxxu-0004he...@franck.debian.org>
and subject line Bug#692440: fixed in tomcat7 7.0.28-3+nmu1
has caused the Debian Bug report #692440,
regarding tomcat7: CVE-2012-2733 CVE-2012-3439
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
692440: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=692440
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: tomcat7
Severity: grave
Tags: security
Justification: user security hole

Please see http://tomcat.apache.org/security-7.html

Since Wheezy is frozen, please apply isolated security fixes instead
of updating to a new upstream release.

Cheers,
        Moritz

--- End Message ---
--- Begin Message ---
Source: tomcat7
Source-Version: 7.0.28-3+nmu1

We believe that the bug you reported is fixed in the latest version of
tomcat7, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 692...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Michael Gilbert <mgilb...@debian.org> (supplier of updated tomcat7 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Sun, 18 Nov 2012 01:40:30 +0000
Source: tomcat7
Binary: tomcat7-common tomcat7 tomcat7-user libtomcat7-java libservlet3.0-java 
libservlet3.0-java-doc tomcat7-admin tomcat7-examples tomcat7-docs
Architecture: source all
Version: 7.0.28-3+nmu1
Distribution: unstable
Urgency: high
Maintainer: Debian Java Maintainers 
<pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Michael Gilbert <mgilb...@debian.org>
Description: 
 libservlet3.0-java - Servlet 3.0 and JSP 2.2 Java API classes
 libservlet3.0-java-doc - Servlet 3.0 and JSP 2.2 Java API documentation
 libtomcat7-java - Servlet and JSP engine -- core libraries
 tomcat7    - Servlet and JSP engine
 tomcat7-admin - Servlet and JSP engine -- admin web applications
 tomcat7-common - Servlet and JSP engine -- common files
 tomcat7-docs - Servlet and JSP engine -- documentation
 tomcat7-examples - Servlet and JSP engine -- example web applications
 tomcat7-user - Servlet and JSP engine -- tools to create user instances
Closes: 692440
Changes: 
 tomcat7 (7.0.28-3+nmu1) unstable; urgency=high
 .
   * Non-maintainer upload.
   * Fix cve-2012-3439: multiple replay attack issues in digest authentication.
     (closes: #692440)
Checksums-Sha1: 
 e6c4534bafc8e50dbff9e0e9bcac4a5b4a3a5692 3330 tomcat7_7.0.28-3+nmu1.dsc
 3791505c61cd6f357cd3e99b2f87c1d619d76e20 50118 
tomcat7_7.0.28-3+nmu1.debian.tar.gz
 071d2cddbfbb71ca49fbdd0d859704e420e62ac5 61906 
tomcat7-common_7.0.28-3+nmu1_all.deb
 81804f7d087eec44f2e40fa96db04fdda9b164c1 49206 tomcat7_7.0.28-3+nmu1_all.deb
 c65e95a8581caed3a0a079bdd9f8629675db2a61 37348 
tomcat7-user_7.0.28-3+nmu1_all.deb
 d330e247a33486c0a79462cbef81672f157c40a8 3502208 
libtomcat7-java_7.0.28-3+nmu1_all.deb
 fb070975386e93cf841dab3c84fcb44324bfe46a 303420 
libservlet3.0-java_7.0.28-3+nmu1_all.deb
 38b345eba0dfa770bd5f3810ec442235306d5e06 299764 
libservlet3.0-java-doc_7.0.28-3+nmu1_all.deb
 deb8b9025f4a21014bda8ef6c5c9390774f0fd7c 50094 
tomcat7-admin_7.0.28-3+nmu1_all.deb
 834bbaec8b2766e5ff4168eab1adcf4389b91921 201220 
tomcat7-examples_7.0.28-3+nmu1_all.deb
 6ad12e37a8c0e55b0c4012e47333e0bc01132643 649026 
tomcat7-docs_7.0.28-3+nmu1_all.deb
Checksums-Sha256: 
 624c832bfa698cd315f88b89053ced82e3c88d709d89beb1a85f52564b3457fb 3330 
tomcat7_7.0.28-3+nmu1.dsc
 4b4cb803b3cff3b65ba4fca965f8fe4df8db2fe50ae18d2d47fa8fe8e48a04d5 50118 
tomcat7_7.0.28-3+nmu1.debian.tar.gz
 054751719d2c8da631c3cb5a78f64cf1c31e139160a309c1a9e13b13c0eb9aa9 61906 
tomcat7-common_7.0.28-3+nmu1_all.deb
 a8a20a62c00ab4bb80e320b4365895dedfd958d4e51079c353f068c645939a47 49206 
tomcat7_7.0.28-3+nmu1_all.deb
 9382e29065378fd6d35aab28cc827fe3282bc921aa5764b7e01991a540f85da2 37348 
tomcat7-user_7.0.28-3+nmu1_all.deb
 8830844109b0995d36c4cc96ecefa42169cf234cd345af2b4b1b4a3cbed38497 3502208 
libtomcat7-java_7.0.28-3+nmu1_all.deb
 24d81a69b592ef34399498c023c25c1edc571f8cdf68e3baa6d6579d871c4722 303420 
libservlet3.0-java_7.0.28-3+nmu1_all.deb
 079a7d37e3edb7ea78e13937305ba5ccee7188687bef87a07294dc93408c2574 299764 
libservlet3.0-java-doc_7.0.28-3+nmu1_all.deb
 9b86a3154b2723232f69c374fc1de8537eaab862781ce8cccd0890ae8e056a1a 50094 
tomcat7-admin_7.0.28-3+nmu1_all.deb
 d5049ef988da5790c70284fa7bffc71c8c31d3b25940b043176e5bb4f669c8e8 201220 
tomcat7-examples_7.0.28-3+nmu1_all.deb
 d39b3fa56b69b6df7e4afb91f77263d63c0b298d36c58be9f1b7f318063f1039 649026 
tomcat7-docs_7.0.28-3+nmu1_all.deb
Files: 
 dd544b4852230fc8f9b773325b48952e 3330 java optional tomcat7_7.0.28-3+nmu1.dsc
 8d2fe397a1cf831e353ae99227ec4275 50118 java optional 
tomcat7_7.0.28-3+nmu1.debian.tar.gz
 524ef3fb9e3a4bb2459bd0f94ad2fdf7 61906 java optional 
tomcat7-common_7.0.28-3+nmu1_all.deb
 a800f7562dd5d06c0ff75c830b745faf 49206 java optional 
tomcat7_7.0.28-3+nmu1_all.deb
 3a19304a888ddb37c976546228a8b985 37348 java optional 
tomcat7-user_7.0.28-3+nmu1_all.deb
 4ca51c896f95dd6c4444d7751598ba52 3502208 java optional 
libtomcat7-java_7.0.28-3+nmu1_all.deb
 c53e2ac31d9f0b0dd1914e7032e962ca 303420 java optional 
libservlet3.0-java_7.0.28-3+nmu1_all.deb
 52fc5e1b9d85c6cd7782f9aa0d58f8f3 299764 doc optional 
libservlet3.0-java-doc_7.0.28-3+nmu1_all.deb
 d845a35619527818fa6e3e1b1c5fbef1 50094 java optional 
tomcat7-admin_7.0.28-3+nmu1_all.deb
 eed814f4a21fbb5e2d74278f45d7ccfb 201220 java optional 
tomcat7-examples_7.0.28-3+nmu1_all.deb
 9599ce001306e8646e9c11e194bf783a 649026 doc optional 
tomcat7-docs_7.0.28-3+nmu1_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iQQcBAEBCAAGBQJQqHfxAAoJELjWss0C1vRzAr0f/1HUj1Yy3nMuwYBsCmOGSjfp
A34D/WvsZbjFtaYG3vJwy76rHR+bAIWE9YXQ3aWTcq1ic0kxxGiHMsctMgxqzVsR
oqkcCsffYfNo9ckYbPgyhqf8RaQLvLI5DoMxuTBHR/J4eQYKVKue097idBTiSYGY
+IOsUW4DScreFixpCFus+bMNTGO6bv7EFP7WYOIZOrBDBSucSxwKHNuabLXMdKlw
4V/nkvO3l8dg6q+wzPlij6s0gYwvhYO/H9yZyQhtqfwBlRXTd4BIbtx0EwGCXZJ7
itsvwiIU4h6QAOxMnX2HMvCIuU2twFIMLAdoauIrI6ALTTIhFLZbXY43Ra9QooUe
s2erHaniQTHEYSjXuVFg44r+YG4LssGgGoBghHA8LRMLK5pYK7uFn/iVG753+4za
jvS6KHnZ+oWcF1p0714RIXUUABa5uFtN3ExgsfXPUiURGZltsJAGSWy49AW/6C1Z
Bihj8n0dPDezJiMKQOuti/lvJ+u8moEWa+KtDBzQf3QhwBuUhSmQQAGWU02/RdG6
JJNXmfYxHb6Vl/J/zu5FtZVFIemkF82XOHN1jqbv4KCIg9puU1aqxK2+SVOQP32p
XMF0Hzt1a2nKoggAz2EdvUBH+Pd8LWuzSbjHhvtGtARqAWY1pKfP/DWMEyOTMk7g
eBZ30/yt7C08AphZmb0Zv47Tep4HveUzBWEzZ/8gIO5lBggeFNIfcATZKCSwE9T3
tZGTSKIH3YDmlcR7+poq/pZf9Jjl2GP4HVRPRRFchDDCglxTuFj1fZfqP15+ZLZm
/wgOm5//jQBRs5WuMWyfQMwaZmYWr9v6/qGKAv1E0kXQB16xIGC94GdLXbg/Ki85
4RR562O9VAdpKmqUJgwxUSNrgErShvkQBDK0XlE127mSmtTbaksWAhbCjaCITD36
2NHZgFXvjomP/cuIFjKDn3QisztqUkjfbfaXpYR3TQmdEp0btB+yIcSDQIvaAiU8
IHWWShgo1p3xQEXQqGjc324QjWtWIwMhRJu+nx2xdlYjMGYwSyQOxKQVYhJlAx6y
gBW9/WtgHATAAhq3oPZQRK+HA0YQnldpCTWR8j1m3NVHrpMoGOCgIniCTYXA+J37
tJG5+bmbKC/C5IZYnkXbOKL9ZuSlESJuHoFWSs4/H6sY5RsUsZgw6AGWbJYNDjWa
94k4Bq353EXEcl6hm9Bclp6+4PJX8vN/tp+gfQMMAfMyTIYvpV+2tddFFl4JuNsk
0u0Tdlmx9fqxtnLH1MUXHCpMCrajNTuSLA4SsKimidCbb2ZDVWkvrysM2lp26LXg
fFnVPA/ipo1DzY1H9O6887zsssYc7O22CqJJ+1md+pXdjNBT3U4vaVbsPAKXmtE=
=AGXp
-----END PGP SIGNATURE-----

--- End Message ---
__
This is the maintainer address of Debian's Java team
<http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers>. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Reply via email to