Hash: SHA512

Package        : tomcat7
Version        : 7.0.28-4+deb7u13
Debian Bug     : 861872

The security update announced as DLA-924-1 introduced a regression in
Tomcat's APR protocol due to the fix for CVE-2017-5647 and prevented a
successful sendfile request.

For Debian 7 "Wheezy", these problems have been fixed in version
7.0.28-4+deb7u13.

We recommend that you upgrade your tomcat7 packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

Debian LTS: DLA-924-2: tomcat7 regression update

May 10, 2017
The security update announced as DLA-924-1 introduced a regression in Tomcat's APR protocol due to the fix for CVE-2017-5647 and prevented a successful sendfile request

Summary

For Debian 7 "Wheezy", these problems have been fixed in version
7.0.28-4+deb7u13.

We recommend that you upgrade your tomcat7 packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Severity
Package : tomcat7
Version : 7.0.28-4+deb7u13
Debian Bug : 861872

Related News