[tomcat8] 04/11: Reordered the patches

Emmanuel Bourg ebourg-guest at moszumanska.debian.org
Sat Nov 12 00:15:02 UTC 2016


This is an automated email from the git hooks/post-receive script.

ebourg-guest pushed a commit to branch jessie
in repository tomcat8.

commit 407a89522165feaa8b1684af2bd5f469d1381c50
Author: Emmanuel Bourg <ebourg at apache.org>
Date:   Wed Jun 22 19:48:55 2016 +0200

    Reordered the patches
---
 debian/patches/CVE-2015-5345.patch |  8 ++++----
 debian/patches/CVE-2015-5346.patch | 10 +++++-----
 debian/patches/CVE-2015-5351.patch |  2 +-
 debian/patches/CVE-2016-0706.patch |  2 +-
 debian/patches/CVE-2016-0714.patch |  2 +-
 debian/patches/CVE-2016-0763.patch |  2 +-
 debian/patches/series              |  4 ++--
 7 files changed, 15 insertions(+), 15 deletions(-)

diff --git a/debian/patches/CVE-2015-5345.patch b/debian/patches/CVE-2015-5345.patch
index f771868..01aad21 100644
--- a/debian/patches/CVE-2015-5345.patch
+++ b/debian/patches/CVE-2015-5345.patch
@@ -423,9 +423,9 @@ Origin: backport, https://svn.apache.org/r1715207
       * is known that the timestamp was printed between {@code timeA} and
 --- a/webapps/docs/changelog.xml
 +++ b/webapps/docs/changelog.xml
-@@ -188,6 +188,16 @@
-           <bug>58809</bug>: Correctly recycle cookies when mapping requests for
-                parallel deployment. (markt)
+@@ -184,6 +184,16 @@
+         Reduce duplicated code. All AJP connectors use common method to
+         configuration of processor. (kfujino)
        </fix>
 +      <add>
 +        Move the functionality that provides redirects for context roots and
@@ -440,7 +440,7 @@ Origin: backport, https://svn.apache.org/r1715207
      </changelog>
    </subsection>
    <subsection name="Jasper">
-@@ -279,6 +289,11 @@
+@@ -275,6 +285,11 @@
          leak fixes and support for application provided eviction policies.
          (markt)
        </fix>
diff --git a/debian/patches/CVE-2015-5346.patch b/debian/patches/CVE-2015-5346.patch
index 399196f..5b10e6a 100644
--- a/debian/patches/CVE-2015-5346.patch
+++ b/debian/patches/CVE-2015-5346.patch
@@ -108,9 +108,9 @@ Origin: backport, https://svn.apache.org/r1713185
  
 --- a/webapps/docs/changelog.xml
 +++ b/webapps/docs/changelog.xml
-@@ -184,6 +184,10 @@
-         Reduce duplicated code. All AJP connectors use common method to
-         configuration of processor. (kfujino)
+@@ -168,6 +168,10 @@
+         <bug>57011</bug>: Ensure that the request and response are correctly
+         recycled when processing errors during async processing. (markt)
        </fix>
 +      <fix>
 +          <bug>58809</bug>: Correctly recycle cookies when mapping requests for
@@ -118,8 +118,8 @@ Origin: backport, https://svn.apache.org/r1713185
 +      </fix>
      </changelog>
    </subsection>
-   <subsection name="Jasper">
-@@ -318,6 +322,10 @@
+   <subsection name="Coyote">
+@@ -333,6 +337,10 @@
          page that has the <code>isErrorPage</code> page directive set to
          <code>true</code>. (markt)
        </fix>
diff --git a/debian/patches/CVE-2015-5351.patch b/debian/patches/CVE-2015-5351.patch
index 8ca74aa..df65650 100644
--- a/debian/patches/CVE-2015-5351.patch
+++ b/debian/patches/CVE-2015-5351.patch
@@ -6,7 +6,7 @@ Origin: backport, https://svn.apache.org/r1720658
                   https://svn.apache.org/r1720660
 --- a/webapps/docs/changelog.xml
 +++ b/webapps/docs/changelog.xml
-@@ -326,6 +326,13 @@
+@@ -341,6 +341,13 @@
          Handle the unlikely case where different versions of a web application
          are deployed with different session settings. (markt)
        </fix>
diff --git a/debian/patches/CVE-2016-0706.patch b/debian/patches/CVE-2016-0706.patch
index 84cdd5d..c896c24 100644
--- a/debian/patches/CVE-2016-0706.patch
+++ b/debian/patches/CVE-2016-0706.patch
@@ -14,7 +14,7 @@ Origin: backport, https://svn.apache.org/r1722800
 +org.apache.catalina.manager.StatusManagerServlet=restricted
 --- a/webapps/docs/changelog.xml
 +++ b/webapps/docs/changelog.xml
-@@ -333,6 +333,10 @@
+@@ -348,6 +348,10 @@
          Don't create sessions unnecessarily in the Host Manager application.
          (markt)
        </fix>
diff --git a/debian/patches/CVE-2016-0714.patch b/debian/patches/CVE-2016-0714.patch
index 5d6fae2..d587408 100644
--- a/debian/patches/CVE-2016-0714.patch
+++ b/debian/patches/CVE-2016-0714.patch
@@ -487,7 +487,7 @@ Origin: backport, https://svn.apache.org/r1726196
  extensionValidator.extension-not-found-error=ExtensionValidator[{0}][{1}]: Required extension [{2}] not found.
 --- a/webapps/docs/changelog.xml
 +++ b/webapps/docs/changelog.xml
-@@ -308,6 +308,14 @@
+@@ -323,6 +323,14 @@
          Add support for the EECDH alias when using the OpenSSL cipher syntax to
          define JSSE ciphers. (markt)
        </add>
diff --git a/debian/patches/CVE-2016-0763.patch b/debian/patches/CVE-2016-0763.patch
index 313cc21..39f5785 100644
--- a/debian/patches/CVE-2016-0763.patch
+++ b/debian/patches/CVE-2016-0763.patch
@@ -22,7 +22,7 @@ Origin: backport, https://svn.apache.org/r1725929
  
 --- a/webapps/docs/changelog.xml
 +++ b/webapps/docs/changelog.xml
-@@ -337,6 +337,10 @@
+@@ -360,6 +360,10 @@
          Add the <code>StatusManagerServlet</code> to the list of Servlets that
          can only be loaded by privileged applications. (markt)
        </fix>
diff --git a/debian/patches/series b/debian/patches/series
index 47a5947..d69cdee 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -14,10 +14,10 @@
 #0020-disable-java8-support-with-jdtcompiler.patch
 CVE-2014-7810.patch
 CVE-2015-5174.patch
+CVE-2015-5345.patch
 CVE-2015-5346.patch
 CVE-2015-5351.patch
 CVE-2016-0706.patch
-CVE-2016-0763.patch
 CVE-2016-0714.patch
-CVE-2015-5345.patch
+CVE-2016-0763.patch
 CVE-2016-3092.patch

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-java/tomcat8.git



More information about the pkg-java-commits mailing list