tomcat7 (7.0.30-0ubuntu1.1) quantal-security; urgency=low
* SECURITY UPDATE: CSRF bypass via request with no session identifier
- debian/patches/CVE-2012-4431.patch: check for session identifier in
java/org/apache/catalina/filters/CsrfPreventionFilter.java.
- CVE-2012-4431
Date: 2013-01-10 16:05:11.266051+00:00
Changed-By: Marc Deslauriers <[email protected]>
https://launchpad.net/ubuntu/quantal/+source/tomcat7/7.0.30-0ubuntu1.1
Sorry, changesfile not available.
--
Quantal-changes mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/quantal-changes
