[SCM] tomcat6 packaging branch, master, updated. debian/6.0.33-1-4-g3ac261c
Miguel Landaeta
miguel at miguel.cc
Fri Dec 9 02:02:47 UTC 2011
The following commit has been merged in the master branch:
commit 3ac261ca836cb99daf998adfbf13839d45757196
Author: Miguel Landaeta <miguel at miguel.cc>
Date: Thu Dec 8 21:35:59 2011 -0430
New upstream release
diff --git a/debian/changelog b/debian/changelog
index 98780ef..4f3c354 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,9 +1,15 @@
-tomcat6 (6.0.33-2) UNRELEASED; urgency=low
+tomcat6 (6.0.35-1~miguel1) UNRELEASED; urgency=low
- * Team upload.
- * Update Vcs-* fields in debian/control for swith to git.
+ [ Miguel Landaeta ]
+ * New upstream release.
+ * Add myself to Uploaders.
+ * Remove 0013-CVE-2011-3190.patch since it was included upstream.
+ * Add mh_clean call in clean target.
+
+ [ tony mancill ]
+ * Update Vcs-* fields in debian/control for switch to git.
- -- tony mancill <tmancill at debian.org> Fri, 02 Dec 2011 22:57:58 -0800
+ -- Miguel Landaeta <miguel at miguel.cc> Thu, 08 Dec 2011 21:35:17 -0430
tomcat6 (6.0.33-1) unstable; urgency=low
diff --git a/debian/control b/debian/control
index b8c4524..806d46d 100644
--- a/debian/control
+++ b/debian/control
@@ -4,7 +4,7 @@ Priority: optional
Maintainer: Debian Java Maintainers <pkg-java-maintainers at lists.alioth.debian.org>
Uploaders: Torsten Werner <twerner at debian.org>,
Ludovic Claude <ludovic.claude at laposte.net>, Michael Koch <konqueror at gmx.de>,
- Damien Raude-Morvan <drazzib at debian.org>
+ Damien Raude-Morvan <drazzib at debian.org>, Miguel Landaeta <miguel at miguel.cc>
Build-Depends: default-jdk, ant-optional, debhelper (>= 7), po-debconf
Build-Depends-Indep: maven-repo-helper (>> 1.0.1), libecj-java
Standards-Version: 3.9.2
diff --git a/debian/patches/0013-CVE-2011-3190.patch b/debian/patches/0013-CVE-2011-3190.patch
deleted file mode 100644
index 89fda13..0000000
--- a/debian/patches/0013-CVE-2011-3190.patch
+++ /dev/null
@@ -1,72 +0,0 @@
-Description: [PATCH] Fix CVE-2011-3190 Fix
- https://issues.apache.org/bugzilla/show_bug.cgi?id=51698
- Prevent AJP request forgery via unread request body packet
-Origin: https://github.com/apache/tomcat60/commit/1a04877e07c8ac9f924b130cbc372a11c273de66
-
-Index: tomcat6/java/org/apache/coyote/ajp/AjpAprProcessor.java
-===================================================================
---- tomcat6.orig/java/org/apache/coyote/ajp/AjpAprProcessor.java 2011-09-08 14:25:11.619833000 +0100
-+++ tomcat6/java/org/apache/coyote/ajp/AjpAprProcessor.java 2011-09-08 14:44:12.771697501 +0100
-@@ -390,11 +390,13 @@
- }
- continue;
- } else if(type != Constants.JK_AJP13_FORWARD_REQUEST) {
-- // Usually the servlet didn't read the previous request body
-- if(log.isDebugEnabled()) {
-- log.debug("Unexpected message: "+type);
-+ // Unexpected packet type. Unread body packets should have
-+ // been swallowed in finish().
-+ if (log.isDebugEnabled()) {
-+ log.debug("Unexpected message: " + type);
- }
-- continue;
-+ error = true;
-+ break;
- }
-
- keptAlive = true;
-@@ -1033,6 +1035,11 @@
-
- finished = true;
-
-+ // Swallow the unread body packet if present
-+ if (first && request.getContentLengthLong() > 0) {
-+ receive();
-+ }
-+
- // Add the end message
- if (outputBuffer.position() + endMessageArray.length > outputBuffer.capacity()) {
- flush();
-Index: tomcat6/java/org/apache/coyote/ajp/AjpProcessor.java
-===================================================================
---- tomcat6.orig/java/org/apache/coyote/ajp/AjpProcessor.java 2011-09-08 14:25:11.619833000 +0100
-+++ tomcat6/java/org/apache/coyote/ajp/AjpProcessor.java 2011-09-08 14:44:12.771697501 +0100
-@@ -408,11 +408,13 @@
- }
- continue;
- } else if(type != Constants.JK_AJP13_FORWARD_REQUEST) {
-- // Usually the servlet didn't read the previous request body
-- if(log.isDebugEnabled()) {
-- log.debug("Unexpected message: "+type);
-+ // Unexpected packet type. Unread body packets should have
-+ // been swallowed in finish().
-+ if (log.isDebugEnabled()) {
-+ log.debug("Unexpected message: " + type);
- }
-- continue;
-+ error = true;
-+ break;
- }
-
- request.setStartTime(System.currentTimeMillis());
-@@ -1038,6 +1040,11 @@
-
- finished = true;
-
-+ // Swallow the unread body packet if present
-+ if (first && request.getContentLengthLong() > 0) {
-+ receive();
-+ }
-+
- // Add the end message
- output.write(endMessageArray);
diff --git a/debian/patches/series b/debian/patches/series
index 3df340a..f4fb4ad 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -7,4 +7,3 @@
0007-add-OSGi-headers-to-servlet-api.patch
0008-add-OSGI-headers-to-jsp-api.patch
0010-Use-java.security.policy-file-in-catalina.sh.patch
-0013-CVE-2011-3190.patch
diff --git a/debian/rules b/debian/rules
index c9a6ea5..dbda264 100755
--- a/debian/rules
+++ b/debian/rules
@@ -66,6 +66,7 @@ clean:
rm -rf "output/"
rm -f build-stamp
dh_clean
+ mh_clean
install: build
dh_testdir
--
tomcat6 packaging
More information about the pkg-java-commits
mailing list