[tomcat8] 11/11: Release 8.0.14-1+deb8u3
Emmanuel Bourg
ebourg-guest at moszumanska.debian.org
Sat Nov 12 00:15:03 UTC 2016
This is an automated email from the git hooks/post-receive script.
ebourg-guest pushed a commit to branch jessie
in repository tomcat8.
commit 7110c89f633e1f76c4072f4d028a76ea6b2c8750
Author: Markus Koschany <apo at debian.org>
Date: Mon Aug 15 17:38:25 2016 +0200
Release 8.0.14-1+deb8u3
---
debian/changelog | 7 ++++---
1 file changed, 4 insertions(+), 3 deletions(-)
diff --git a/debian/changelog b/debian/changelog
index 0bbec4e..ae88605 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,13 +1,14 @@
-tomcat8 (8.0.14-1+deb8u3) jessie-security; urgency=medium
+tomcat8 (8.0.14-1+deb8u3) jessie-security; urgency=high
* Team upload.
- * tomcat8.init: Protect /var/lib/tomcat8/catalina.out against a symlink
+ * Fix CVE-2016-1240:
+ tomcat8.init: Protect /var/lib/tomcat8/catalina.out against a symlink
attack and possible root privilege escalation.
* Do not unconditionally overwrite files in /etc/tomcat8 anymore.
(Closes: #825786)
* Change file permissions to 640 for Debian files in /etc/tomcat8.
- -- Markus Koschany <apo at debian.org> Thu, 11 Aug 2016 22:19:27 +0200
+ -- Markus Koschany <apo at debian.org> Mon, 15 Aug 2016 17:38:02 +0200
tomcat8 (8.0.14-1+deb8u2) jessie-security; urgency=high
--
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-java/tomcat8.git
More information about the pkg-java-commits
mailing list