Your message dated Sat, 08 Dec 2012 08:47:43 +0000 with message-id <e1thg4v-0000n4...@franck.debian.org> and subject line Bug#695251: fixed in tomcat7 7.0.28-4 has caused the Debian Bug report #695251, regarding tomcat7: CVE-2012-4431 CVE-2012-3546 to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 695251: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=695251 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: tomcat7 Severity: grave Tags: security Justification: user security hole New security issues in Tomcat have been disclosed: http://tomcat.apache.org/security-7.html The page contains links to upstream fixes. Cheers, Moritz
--- End Message ---
--- Begin Message ---Source: tomcat7 Source-Version: 7.0.28-4 We believe that the bug you reported is fixed in the latest version of tomcat7, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 695...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. tony mancill <tmanc...@debian.org> (supplier of updated tomcat7 package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Thu, 06 Dec 2012 22:25:07 -0800 Source: tomcat7 Binary: tomcat7-common tomcat7 tomcat7-user libtomcat7-java libservlet3.0-java libservlet3.0-java-doc tomcat7-admin tomcat7-examples tomcat7-docs Architecture: source all Version: 7.0.28-4 Distribution: unstable Urgency: high Maintainer: Debian Java Maintainers <pkg-java-maintain...@lists.alioth.debian.org> Changed-By: tony mancill <tmanc...@debian.org> Description: libservlet3.0-java - Servlet 3.0 and JSP 2.2 Java API classes libservlet3.0-java-doc - Servlet 3.0 and JSP 2.2 Java API documentation libtomcat7-java - Servlet and JSP engine -- core libraries tomcat7 - Servlet and JSP engine tomcat7-admin - Servlet and JSP engine -- admin web applications tomcat7-common - Servlet and JSP engine -- common files tomcat7-docs - Servlet and JSP engine -- documentation tomcat7-examples - Servlet and JSP engine -- example web applications tomcat7-user - Servlet and JSP engine -- tools to create user instances Closes: 692440 695251 Changes: tomcat7 (7.0.28-4) unstable; urgency=high . * Acknowledge NMU: 7.0.28-3+nmu1 (Closes: #692440) - Thank you to Michael Gilbert. * Add patches for the following security issues: (Closes: #695251) - CVE-2012-4431, CVE-2012-3546 Checksums-Sha1: 9702f78fe069418c0ce55f370c3c6a896a5ed285 2614 tomcat7_7.0.28-4.dsc c69867161a9bb53e4d9769d33df631b163dd73fc 51448 tomcat7_7.0.28-4.debian.tar.gz dcce3dca86bcdda6395f8970357391a64154d930 59496 tomcat7-common_7.0.28-4_all.deb 913ccac2120fdb43551c53fc7d549cb36414eb00 49298 tomcat7_7.0.28-4_all.deb 3830f696031ee5fd82d8e227c132076fed12f8e4 37442 tomcat7-user_7.0.28-4_all.deb e4fd242ec8170381ecbac6c8f78b1141316e6150 3502246 libtomcat7-java_7.0.28-4_all.deb ff6eacaea92cfa8dba650f55f7c353d9d3e9ccab 303698 libservlet3.0-java_7.0.28-4_all.deb d48e4690db0a53ee987cb7e6bf2cefe108a457c8 301208 libservlet3.0-java-doc_7.0.28-4_all.deb f4b63fed56c65a8e343c5c7e0f40ae98297fea58 50100 tomcat7-admin_7.0.28-4_all.deb add63fec0f13d5ff4ef99ee6ec3f3af23dc7b1fd 203114 tomcat7-examples_7.0.28-4_all.deb 83fdfc50ee7846ad8a526191cbb6f24f72ba015a 645494 tomcat7-docs_7.0.28-4_all.deb Checksums-Sha256: 5d68650d9b93121ecfaf6496abd628e4e9770e056f793aa9245070897ba448d7 2614 tomcat7_7.0.28-4.dsc f04c1ad86dd7db5d32f8846f8ab8db067d5e2472f58ff22fe56c85b697876a7c 51448 tomcat7_7.0.28-4.debian.tar.gz 41b30b2415239c68eefe97ec93821e7df480b2e2c10e2816ff327de608e36653 59496 tomcat7-common_7.0.28-4_all.deb 454a462370e2d7c912d0688ade03c9dd29f0bb63f74a1d9c1e1dceef67126d33 49298 tomcat7_7.0.28-4_all.deb fa9a371b8fab24e7c5aa6e8733224c35b722f9f8cf6e41f7ecf66d995c016083 37442 tomcat7-user_7.0.28-4_all.deb 5593c785dfcf7bd1557353693403ca6209bf6aef0fd454425966e151e7f0afdb 3502246 libtomcat7-java_7.0.28-4_all.deb 7fa88806b67fd539dd23f979bd08535a832e872d74a4db9493e3bd6ca0a57be7 303698 libservlet3.0-java_7.0.28-4_all.deb a36460bb130f2d9ce148b4d9072904222a11133473f3ab70e46fea49455939b4 301208 libservlet3.0-java-doc_7.0.28-4_all.deb 70884acf4e50fb83a278a04a701aef5352b1e5ae746458d54bdd5b591c0dbd04 50100 tomcat7-admin_7.0.28-4_all.deb 982fe8e3b10cbf6df4efe9568023eda652f8c3815ed2238d768d6dad34803ed8 203114 tomcat7-examples_7.0.28-4_all.deb ec587a24429fbb214996ec04ed3f1ae3fbec3666f82a5eb286aa1bd8b4b4668e 645494 tomcat7-docs_7.0.28-4_all.deb Files: 7262d658d17b39e2e26691f806f829fc 2614 java optional tomcat7_7.0.28-4.dsc c841d6d2b35e9092b3e02c1f3c3c68d3 51448 java optional tomcat7_7.0.28-4.debian.tar.gz c51405465eec9361f75503e2e37c7e59 59496 java optional tomcat7-common_7.0.28-4_all.deb bbad096f79e933c8c32096fd7113a9e4 49298 java optional tomcat7_7.0.28-4_all.deb 2e8d4549ddc225348655e78c4cca7a2b 37442 java optional tomcat7-user_7.0.28-4_all.deb 833929e2314107aa009b2a0220e67182 3502246 java optional libtomcat7-java_7.0.28-4_all.deb ce6cd3fe787b8ab0e06f34cd25a8e959 303698 java optional libservlet3.0-java_7.0.28-4_all.deb 470248b9456aa3576e9a48ab7d417176 301208 doc optional libservlet3.0-java-doc_7.0.28-4_all.deb cd5740933929742b1fc7400dca661473 50100 java optional tomcat7-admin_7.0.28-4_all.deb 4c5bf44bcbfe3c8d18f10734cf57eaac 203114 java optional tomcat7-examples_7.0.28-4_all.deb e9470035bdd86a4b83226d05be7e5783 645494 doc optional tomcat7-docs_7.0.28-4_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQIcBAEBAgAGBQJQwu6nAAoJECHSBYmXSz6WsC0QAMcCh2zbkCjuguUfwFGZNl/H +TqpCsRDujUYXeKiQP5Qndc6KZ3HW2Y+S9hOpC0GFVntZCtTMgXN1NsEMbHILDdi hviqJhPe4mQqKlewb+BSy9E3ayn8UJ2etADEHugW7ou0fzYblDNg5aVKTfreNuxW e/s/HgZI356G9z41Qig5qyWsTAjCyNIF9YbHBlPNPwCuusGwkQqTaJTv95UOEHgZ l5OvqlecUpak2tqvAP48SOflxMyHUtSoHNR3U74/H6zxZwJfLsmyRy/Oedad0PX3 U2UlhVFnv6/F3xWwdMxNJY1nfZK6zxe3lWDsfa8PRn03xRz6gp5He30bkJETc4OO SGIYFL5mPaeIjdqeORcov73HhkX5CVnXYmg/Mdv/Cb0PPZz9DQKRVDdNHYNIaJDR EwLkPqUOGF9ZlYVkHMtkWFVtyDqGXPZrFo52b0VmlrJMfUEIFigbQMJSjnTUhH3c 2L4S5eHQ6/lEJCkNea43p6QbXmVpZkXad/pensA9hlcs7DNF3YSu/9Bf7BjrPHNU bHMWAhEXw0Kj2V4LKkeIAuZgrKXuOsa/nbHq/5+K7sjCTiZYf24gltL/zCyQ2XyO I13Nv4lT6RwNWUVSNtnK7xxRQd+IsTIbC8DRpvxyATVacjXvFGTs+esYQWknZiPL MiuleIRqkcaGM4+rB3nI =66t4 -----END PGP SIGNATURE-----
--- End Message ---
