tomcat7_7.0.72-2_amd64.changes ACCEPTED into unstable

[Debian FTP Masters]

Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Fri, 28 Oct 2016 01:34:22 +0200
Source: tomcat7
Binary: tomcat7-common tomcat7 tomcat7-user libtomcat7-java libservlet3.0-java libservlet3.0-java-doc tomcat7-admin tomcat7-examples tomcat7-docs
Architecture: source all
Version: 7.0.72-2
Distribution: unstable
Urgency: high
Maintainer: Debian Java Maintainers <pkg-java-maintainers at lists.alioth.debian.org>
Changed-By: Emmanuel Bourg <ebourg at apache.org>
Description:
 libservlet3.0-java - Servlet 3.0 and JSP 2.2 Java API classes
 libservlet3.0-java-doc - Servlet 3.0 and JSP 2.2 Java API documentation
 libtomcat7-java - Servlet and JSP engine -- core libraries
 tomcat7    - Servlet and JSP engine
 tomcat7-admin - Servlet and JSP engine -- admin web applications
 tomcat7-common - Servlet and JSP engine -- common files
 tomcat7-docs - Servlet and JSP engine -- documentation
 tomcat7-examples - Servlet and JSP engine -- example web applications
 tomcat7-user - Servlet and JSP engine -- tools to create user instances
Changes:
 tomcat7 (7.0.72-2) unstable; urgency=high
 .
   * Team upload.
   * CVE-2016-1240 follow-up:
     - The previous init.d fix was vulnerable to a race condition that could
       be exploited to make any existing file writable by the tomcat user.
       Thanks to Paul Szabo for the report and the fix.
     - The catalina.policy file generated on startup was affected by a similar
       vulnerability that could be exploited to overwrite any file on the system.
       Thanks to Paul Szabo for the report.
   * Hardened the init.d script, thanks to Paul Szabo
   * Switch to debhelper level 10
Checksums-Sha1:
 495092be3630a12d78167ab227d51fa5c87d161e 2792 tomcat7_7.0.72-2.dsc
 fb8178fee2f0c6a2a0b1355a6433a9aa6615d335 67128 tomcat7_7.0.72-2.debian.tar.xz
 a624c4459919c116df24c342ac3b3d233b90b8cf 194304 libservlet3.0-java-doc_7.0.72-2_all.deb
 b4302c2b77631963268735f1f0c64f860f3e234d 314270 libservlet3.0-java_7.0.72-2_all.deb
 2013e678b793b3a33ef4ad6d96ae6610a729bbbd 3744066 libtomcat7-java_7.0.72-2_all.deb
 ca9433efe99dde253ad236171cb13cb2814b4c1c 39638 tomcat7-admin_7.0.72-2_all.deb
 559a2288cb7776cfd5f6e6b96473ab55b44d7ac3 281378 tomcat7-common_7.0.72-2_all.deb
 cac082b26c6f7ef8b93fe7e3d9d0bd50f54466ba 653078 tomcat7-docs_7.0.72-2_all.deb
 ee8ff01b1a0a10b7081d6591ea3c96412ccdb383 196232 tomcat7-examples_7.0.72-2_all.deb
 ebf330767028e74f94757b5c4b9b977295054291 39616 tomcat7-user_7.0.72-2_all.deb
 df7ab6eb72493bf6cf545d41a82d5101158d4d7a 51290 tomcat7_7.0.72-2_all.deb
Checksums-Sha256:
 8252e015718431ae1c1dcd8cc6e700fdaa09ad21916fe4ce1a333e09eec709a3 2792 tomcat7_7.0.72-2.dsc
 9c4f7b076556b7099cd4faabe9b8e0f18521659d5e63a51e02daf71e70d22f46 67128 tomcat7_7.0.72-2.debian.tar.xz
 4ef4a9ed2581780ba846c306b3ca8b3e7f11a8e28c1eac4fd7ee9463dbecf631 194304 libservlet3.0-java-doc_7.0.72-2_all.deb
 c1e18a10e4da8d4969d446f18c00b1597cc63290f23d1a91d6d0a6a1e8ff4706 314270 libservlet3.0-java_7.0.72-2_all.deb
 30b37f58b9dda1a1abc7dc95dcd672cd6c69b46f01bc7d4c7c0cde44ed33b0b6 3744066 libtomcat7-java_7.0.72-2_all.deb
 c5f25f0f492c46c5cd02ed2374a99a8c2f077d3331035b9a3400d422cbd22ac0 39638 tomcat7-admin_7.0.72-2_all.deb
 0092082e9140265613904346c51cd29737fc6055d715fda7fffd7e8aab8f75a4 281378 tomcat7-common_7.0.72-2_all.deb
 2b21b3775d4adbe5edc040f80cd8b0ab517d1af9c57c39f1566985420761bc37 653078 tomcat7-docs_7.0.72-2_all.deb
 f236a486b7b24a8ba14e2d52ac424e3758ea80ce4b886a89ea72b3dc2f9907c1 196232 tomcat7-examples_7.0.72-2_all.deb
 91e1cf2a96e1aba02b0511e28bda669ce4ee9d425a9069adf6219fedd8a1499f 39616 tomcat7-user_7.0.72-2_all.deb
 c47bbb2330dbaf248bc667734d0d347beadb34446f786e594b50b06083ad2099 51290 tomcat7_7.0.72-2_all.deb
Files:
 49bdbb625395c308e7525c9853713d3a 2792 java optional tomcat7_7.0.72-2.dsc
 7177ba276ac19e21ed33097083562f25 67128 java optional tomcat7_7.0.72-2.debian.tar.xz
 4e1c73f35a98e605d0f351d676205bdd 194304 doc optional libservlet3.0-java-doc_7.0.72-2_all.deb
 38ad478071992dd89c1828752edd27c3 314270 java optional libservlet3.0-java_7.0.72-2_all.deb
 57eed0e7979397fbbdbc52dc5d31cb32 3744066 java optional libtomcat7-java_7.0.72-2_all.deb
 7821ba56dedbd18fe9a58d08c50a6f06 39638 java optional tomcat7-admin_7.0.72-2_all.deb
 72355e8c6f1005cac55e6e225d1e1c79 281378 java optional tomcat7-common_7.0.72-2_all.deb
 acc9ace8111b8d93deb022f2c8a23038 653078 doc optional tomcat7-docs_7.0.72-2_all.deb
 f7f62226a0a40a61f91c146dbe55267a 196232 java optional tomcat7-examples_7.0.72-2_all.deb
 f97d4f7e8ad98a6d4b60fe2565c1d246 39616 java optional tomcat7-user_7.0.72-2_all.deb
 c26011de782ed3d9916bb47c39b30117 51290 java optional tomcat7_7.0.72-2_all.deb

-----BEGIN PGP SIGNATURE-----
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=YNIv
-----END PGP SIGNATURE-----


Thank you for your contribution to Debian.