[Bug 1073159] [NEW] Please backport tomcat7 7.0.30-0ubuntu1 (main) from raring

[Launchpad Bug Tracker]

You have been subscribed to a public bug:

Please backport tomcat7 7.0.30-0ubuntu1 (main) from raring to precise.

Reason for the backport:
========================
Currently tomcat7 on precise is 7.0.26
quantal an roaring providing 7.0.30

In my opinion it would be good to have the most current tomcat7 version also in precise-backports.
The goal should be providing the latest tomcat7 stable release also via backports in the LTS release of ubuntu.

The number of fixes is still impressing :-)
https://tomcat.apache.org/tomcat-7.0-doc/changelog.html

Testing:
========
Mark off items in the checklist [X] as you test them, but please leave the checklist so that backporters can quickly evaluate the state of testing.

You can test-build the backport in your PPA with backportpackage:
$ backportpackage -u ppa:<lp username>/<ppa name> -s raring -d precise tomcat7

* precise:
[ ] Package builds without modification
[ ] tomcat7-common installs cleanly and runs
[ ] libservlet3.0-java installs cleanly and runs
[ ] tomcat7-docs installs cleanly and runs
[ ] libservlet3.0-java-doc installs cleanly and runs
[ ] tomcat7 installs cleanly and runs
[ ] libtomcat7-java installs cleanly and runs
[ ] tomcat7-user installs cleanly and runs
[ ] tomcat7-admin installs cleanly and runs
[ ] tomcat7-examples installs cleanly and runs

Reverse dependencies:
=====================
The following reverse-dependencies need to be tested against the new version of tomcat7. For reverse-build-dependencies (-Indep), please test that the package still builds against the new tomcat7. For reverse-dependencies, please test that the version of the package currently in the release still works with the new tomcat7 installed. Reverse- Recommends, Suggests, and Enhances don't need to be tested, and are listed for completeness-sake.

tomcat7-common
--------------

libservlet3.0-java
------------------
* libjtharness-java
[ ] precise (Reverse-Depends)
* jtharness
[ ] precise (Reverse-Build-Depends-Indep)

tomcat7-docs
------------

libservlet3.0-java-doc
----------------------

tomcat7
-------

libtomcat7-java
---------------

tomcat7-user
------------

tomcat7-admin
-------------

tomcat7-examples
----------------

** Affects: precise-backports
Importance: Undecided
Status: New


** Tags: precise

[Logan Rosen]

** Summary changed:

- tomcat7 7.0.30 (or newer) should be backported to precise
+ Please backport tomcat7 7.0.30-0ubuntu1 (main) from raring

** Description changed:

+ Please backport tomcat7 7.0.30-0ubuntu1 (main) from raring to precise.
+
+ Reason for the backport:
+ ========================
Currently tomcat7 on precise is 7.0.26
quantal an roaring providing 7.0.30

In my opinion it would be good to have the most current tomcat7 version also in precise-backports.
The goal should be providing the latest tomcat7 stable release also via backports in the LTS release of ubuntu.

The number of fixes is still impressing :-)
https://tomcat.apache.org/tomcat-7.0-doc/changelog.html
+
+ Testing:
+ ========
+ Mark off items in the checklist [X] as you test them, but please leave the checklist so that backporters can quickly evaluate the state of testing.
+
+ You can test-build the backport in your PPA with backportpackage:
+ $ backportpackage -u ppa:<lp username>/<ppa name> -s raring -d precise tomcat7
+
+ * precise:
+ [ ] Package builds without modification
+ [ ] tomcat7-common installs cleanly and runs
+ [ ] libservlet3.0-java installs cleanly and runs
+ [ ] tomcat7-docs installs cleanly and runs
+ [ ] libservlet3.0-java-doc installs cleanly and runs
+ [ ] tomcat7 installs cleanly and runs
+ [ ] libtomcat7-java installs cleanly and runs
+ [ ] tomcat7-user installs cleanly and runs
+ [ ] tomcat7-admin installs cleanly and runs
+ [ ] tomcat7-examples installs cleanly and runs
+
+ Reverse dependencies:
+ =====================
+ The following reverse-dependencies need to be tested against the new version of tomcat7. For reverse-build-dependencies (-Indep), please test that the package still builds against the new tomcat7. For reverse-dependencies, please test that the version of the package currently in the release still works with the new tomcat7 installed. Reverse- Recommends, Suggests, and Enhances don't need to be tested, and are listed for completeness-sake.
+
+ tomcat7-common
+ --------------
+
+ libservlet3.0-java
+ ------------------
+ * libjtharness-java
+ [ ] precise (Reverse-Depends)
+ * jtharness
+ [ ] precise (Reverse-Build-Depends-Indep)
+
+ tomcat7-docs
+ ------------
+
+ libservlet3.0-java-doc
+ ----------------------
+
+ tomcat7
+ -------
+
+ libtomcat7-java
+ ---------------
+
+ tomcat7-user
+ ------------
+
+ tomcat7-admin
+ -------------
+
+ tomcat7-examples
+ ----------------

** Package changed: tomcat7 (Ubuntu) => precise-backports

** Tags removed: precise
--
You received this bug notification because you are a member of Ubuntu
Backporters, which is subscribed to Precise Backports.
https://bugs.launchpad.net/bugs/1073159

Title:
Please backport tomcat7 7.0.30-0ubuntu1 (main) from raring

To manage notifications about this bug go to:
https://bugs.launchpad.net/precise-backports/+bug/1073159/+subscriptions

[Micah Gersten]

Please perform the testing requested in the description and let us know
if the reverse dependencies still work/build and the binaries install.

** Summary changed:

- Please backport tomcat7 7.0.30-0ubuntu1 (main) from raring
+ Please backport tomcat7 7.0.30-0ubuntu1 (main) from quantal
--
You received this bug notification because you are a member of Ubuntu
Backporters, which is subscribed to Precise Backports.
https://bugs.launchpad.net/bugs/1073159

Title:
Please backport tomcat7 7.0.30-0ubuntu1 (main) from quantal

To manage notifications about this bug go to:
https://bugs.launchpad.net/precise-backports/+bug/1073159/+subscriptions

[H.-Dirk Schmitt]

I tried the test scenario above and create a new ppa.
The backport command is failing on a secondary problem:

Successfully signed dsc and changes files
Please check tomcat7 7.0.30-0ubuntu1~precise1~ppa1 in file:///tmp/backportpackage-H8xedr carefully!
Do you want to upload the package to ppa:dirk-computer42/edge [Y|n]? y
Traceback (most recent call last):
File "/usr/bin/backportpackage", line 322, in <module>
sys.exit(main(sys.argv))
File "/usr/bin/backportpackage", line 314, in main
opts.prompt)
File "/usr/bin/backportpackage", line 269, in do_backport
upload, prompt)
File "/usr/bin/backportpackage", line 233, in do_upload
check_call(['dput', upload, changes], cwd=workdir)
File "/usr/bin/backportpackage", line 49, in check_call
ret = subprocess.call(cmd, *args, **kwargs)
File "/usr/lib/python2.7/dist-packages/ubuntutools/subprocess.py", line 59, in call
return Popen(*popenargs, **kwargs).wait()
File "/usr/lib/python2.7/dist-packages/ubuntutools/subprocess.py", line 44, in __init__
subprocess.Popen.__init__(self, *args, **kwargs)
File "/usr/lib/python2.7/subprocess.py", line 679, in __init__
errread, errwrite)
File "/usr/lib/python2.7/subprocess.py", line 1249, in _execute_child
raise child_exception
OSError: [Errno 2] No such file or directory
--
You received this bug notification because you are a member of Ubuntu
Backporters, which is subscribed to Precise Backports.
https://bugs.launchpad.net/bugs/1073159

Title:
Please backport tomcat7 7.0.30-0ubuntu1 (main) from quantal

To manage notifications about this bug go to:
https://bugs.launchpad.net/precise-backports/+bug/1073159/+subscriptions

[H.-Dirk Schmitt]

problem of #3 is described in https://bugs.launchpad.net/ubuntu/+source
/ubuntu-dev-tools/+bug/1086342
--
You received this bug notification because you are a member of Ubuntu
Backporters, which is subscribed to Precise Backports.
https://bugs.launchpad.net/bugs/1073159

Title:
Please backport tomcat7 7.0.30-0ubuntu1 (main) from quantal

To manage notifications about this bug go to:
https://bugs.launchpad.net/precise-backports/+bug/1073159/+subscriptions

[H.-Dirk Schmitt]

backport available in ppa:dirk-computer42/c42-backport

** Description changed:

Please backport tomcat7 7.0.30-0ubuntu1 (main) from raring to precise.

Reason for the backport:
========================
Currently tomcat7 on precise is 7.0.26
quantal an roaring providing 7.0.30

In my opinion it would be good to have the most current tomcat7 version also in precise-backports.
The goal should be providing the latest tomcat7 stable release also via backports in the LTS release of ubuntu.

The number of fixes is still impressing :-)
https://tomcat.apache.org/tomcat-7.0-doc/changelog.html

Testing:
========
Mark off items in the checklist [X] as you test them, but please leave the checklist so that backporters can quickly evaluate the state of testing.

You can test-build the backport in your PPA with backportpackage:
$ backportpackage -u ppa:<lp username>/<ppa name> -s raring -d precise tomcat7

+ --> see ppa:dirk-computer42/c42-backport
+
* precise:
- [ ] Package builds without modification
- [ ] tomcat7-common installs cleanly and runs
- [ ] libservlet3.0-java installs cleanly and runs
- [ ] tomcat7-docs installs cleanly and runs
- [ ] libservlet3.0-java-doc installs cleanly and runs
- [ ] tomcat7 installs cleanly and runs
- [ ] libtomcat7-java installs cleanly and runs
- [ ] tomcat7-user installs cleanly and runs
- [ ] tomcat7-admin installs cleanly and runs
- [ ] tomcat7-examples installs cleanly and runs
+ [X] Package builds without modification
+ [X] tomcat7-common installs cleanly and runs
+ [X] libservlet3.0-java installs cleanly and runs
+ [X] tomcat7-docs installs cleanly and runs
+ [X] libservlet3.0-java-doc installs cleanly and runs
+ [X] tomcat7 installs cleanly and runs
+ [X] libtomcat7-java installs cleanly and runs
+ [X] tomcat7-user installs cleanly and runs
+ [X] tomcat7-admin installs cleanly and runs
+ [X] tomcat7-examples installs cleanly and runs

Reverse dependencies:
=====================
The following reverse-dependencies need to be tested against the new version of tomcat7. For reverse-build-dependencies (-Indep), please test that the package still builds against the new tomcat7. For reverse-dependencies, please test that the version of the package currently in the release still works with the new tomcat7 installed. Reverse- Recommends, Suggests, and Enhances don't need to be tested, and are listed for completeness-sake.

tomcat7-common
--------------

libservlet3.0-java
------------------
* libjtharness-java
- [ ] precise (Reverse-Depends)
+ ??[ ] precise (Reverse-Depends)
* jtharness
- [ ] precise (Reverse-Build-Depends-Indep)
+ ??[ ] precise (Reverse-Build-Depends-Indep)

tomcat7-docs
------------

libservlet3.0-java-doc
----------------------

tomcat7
-------

libtomcat7-java
---------------

tomcat7-user
------------

tomcat7-admin
-------------

tomcat7-examples
----------------

** Tags added: precise

** Tags added: backport
--
You received this bug notification because you are a member of Ubuntu
Backporters, which is subscribed to Precise Backports.
https://bugs.launchpad.net/bugs/1073159

Title:
Please backport tomcat7 7.0.30-0ubuntu1 (main) from quantal

To manage notifications about this bug go to:
https://bugs.launchpad.net/precise-backports/+bug/1073159/+subscriptions

[H.-Dirk Schmitt]

** Changed in: precise-backports
Status: New => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Backporters, which is subscribed to Precise Backports.
https://bugs.launchpad.net/bugs/1073159

Title:
Please backport tomcat7 7.0.30-0ubuntu1 (main) from quantal

To manage notifications about this bug go to:
https://bugs.launchpad.net/precise-backports/+bug/1073159/+subscriptions

[H.-Dirk Schmitt]

Due to the following security problems the current 7.0.34 should be
backported.

* CVE-2012-4431 Apache Tomcat Bypass of CSRF prevention filter (fixed > 7.0.31, affects quantal and precise)
* CVE-2012-3546 Apache Tomcat Bypass of security constraints (fixed > 7.0.29, affects precise)
* CVE-2012-4534 Apache Tomcat denial of service (fixed > 7.0.28, affects precise)

** Summary changed:

- Please backport tomcat7 7.0.30-0ubuntu1 (main) from quantal
+ Please backport tomcat7 7.0.34 (main) from raring to precise (and quantal)

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-3546

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-4431

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-4534

** Also affects: quantal-backports
Importance: Undecided
Status: New

** Tags added: quantal
--
You received this bug notification because you are a member of Ubuntu
Backporters, which is subscribed to Precise Backports.
https://bugs.launchpad.net/bugs/1073159

Title:
Please backport tomcat7 7.0.34 (main) from raring to precise (and
quantal)

To manage notifications about this bug go to:
https://bugs.launchpad.net/precise-backports/+bug/1073159/+subscriptions

[H.-Dirk Schmitt]

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-2733

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-3439
--
You received this bug notification because you are a member of Ubuntu
Backporters, which is subscribed to Precise Backports.
https://bugs.launchpad.net/bugs/1073159

Title:
Please backport tomcat7 7.0.34 (main) from raring to precise (and
quantal)

To manage notifications about this bug go to:
https://bugs.launchpad.net/precise-backports/+bug/1073159/+subscriptions

[H.-Dirk Schmitt]

A backport is again available in

An incompatible version 1.1.22 of the APR based Apache Tomcat Native

library is installed, while Tomcat requires version 1.1.24

So in addition also tomcat-native should be backported


** Summary changed:

- Please backport tomcat7 7.0.34 (main) from raring to precise (and quantal)
+ Please backport tomcat7 7.0.34 (main) from raring to precise (and quantal) [and tomcat-native]

** Description changed:

Please backport tomcat7 7.0.30-0ubuntu1 (main) from raring to precise.

Reason for the backport:
========================
- Currently tomcat7 on precise is 7.0.26
- quantal an roaring providing 7.0.30
+ Currently tomcat7 on precise is 7.0.26 (see linked CVE)
+ quantal is providing 7.0.30 (see some of the linked CVE)
+ raring is providing 7.0.34

In my opinion it would be good to have the most current tomcat7 version also in precise-backports.
The goal should be providing the latest tomcat7 stable release also via backports in the LTS release of ubuntu.
+ In addition the old version if affected by some security issues.

The number of fixes is still impressing :-)
https://tomcat.apache.org/tomcat-7.0-doc/changelog.html
+
+
+ NOTE: In tomcat 7.0.34 has the APR library has changed. For satisfying the runtime dependency tomcat-native should also backported

Testing:
========
Mark off items in the checklist [X] as you test them, but please leave the checklist so that backporters can quickly evaluate the state of testing.

You can test-build the backport in your PPA with backportpackage:
$ backportpackage -u ppa:<lp username>/<ppa name> -s raring -d precise tomcat7

--> see ppa:dirk-computer42/c42-backport

* precise:
[X] Package builds without modification
[X] tomcat7-common installs cleanly and runs
[X] libservlet3.0-java installs cleanly and runs
[X] tomcat7-docs installs cleanly and runs
[X] libservlet3.0-java-doc installs cleanly and runs
[X] tomcat7 installs cleanly and runs
[X] libtomcat7-java installs cleanly and runs
[X] tomcat7-user installs cleanly and runs
[X] tomcat7-admin installs cleanly and runs
[X] tomcat7-examples installs cleanly and runs

Reverse dependencies:
=====================
The following reverse-dependencies need to be tested against the new version of tomcat7. For reverse-build-dependencies (-Indep), please test that the package still builds against the new tomcat7. For reverse-dependencies, please test that the version of the package currently in the release still works with the new tomcat7 installed. Reverse- Recommends, Suggests, and Enhances don't need to be tested, and are listed for completeness-sake.

tomcat7-common
--------------

libservlet3.0-java
------------------
* libjtharness-java
??[ ] precise (Reverse-Depends)
* jtharness
??[ ] precise (Reverse-Build-Depends-Indep)

tomcat7-docs
------------

libservlet3.0-java-doc
----------------------

tomcat7
-------

libtomcat7-java
---------------

tomcat7-user
------------

tomcat7-admin
-------------

tomcat7-examples
----------------

** Also affects: tomcat7 (Ubuntu)
Importance: Undecided
Status: New

** Summary changed:

- Please backport tomcat7 7.0.34 (main) from raring to precise (and quantal) [and tomcat-native]
+ Please backport tomcat7 7.0.34 (main) from raring to precise (and quantal) [and tomcat-native] to fix serious CVE reports
--
You received this bug notification because you are a member of Ubuntu
Backporters, which is subscribed to Precise Backports.
https://bugs.launchpad.net/bugs/1073159

Title:
Please backport tomcat7 7.0.34 (main) from raring to precise (and
quantal) [and tomcat-native] to fix serious CVE reports

To manage notifications about this bug go to:
https://bugs.launchpad.net/precise-backports/+bug/1073159/+subscriptions

[Yolanda Robla]

** Changed in: quantal-backports
Status: New => Confirmed

** Changed in: tomcat7 (Ubuntu)
Status: New => Confirmed

** Changed in: tomcat7 (Ubuntu)
Importance: Undecided => High
--
You received this bug notification because you are a member of Ubuntu
Backporters, which is subscribed to Precise Backports.
https://bugs.launchpad.net/bugs/1073159

Title:
Please backport tomcat7 7.0.34 (main) from raring to precise (and
quantal) [and tomcat-native] to fix serious CVE reports

To manage notifications about this bug go to:
https://bugs.launchpad.net/precise-backports/+bug/1073159/+subscriptions

[John Eikenberry]

Shouldn't this also be backported to Oneric? It is still a supported
version.
--
You received this bug notification because you are a member of Ubuntu
Backporters, which is subscribed to Precise Backports.
https://bugs.launchpad.net/bugs/1073159

Title:
Please backport tomcat7 7.0.34 (main) from raring to precise (and
quantal) [and tomcat-native] to fix serious CVE reports

To manage notifications about this bug go to:
https://bugs.launchpad.net/precise-backports/+bug/1073159/+subscriptions

[H.-Dirk Schmitt]

As a workaround my backport in ppa:dirk-computer42/c42-backport may be
used.

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-3544

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2013-2067
--
You received this bug notification because you are a member of Ubuntu
Backporters, which is subscribed to Precise Backports.
https://bugs.launchpad.net/bugs/1073159

Title:
Please backport tomcat7 7.0.34 (main) from raring to precise (and
quantal) [and tomcat-native] to fix serious CVE reports

To manage notifications about this bug go to:
https://bugs.launchpad.net/precise-backports/+bug/1073159/+subscriptions

[H.-Dirk Schmitt]

The bug report is some days old now - so I updated the goal to 7.0.40.
See also https://bugs.launchpad.net/ubuntu/precise/+source/tomcat7/+bug/1178645
and for libtomcat7-native https://bugs.launchpad.net/ubuntu/+source/tomcat7/+bug/1092548 .

A "no change backport" from debian [7.0.40-2] to precise was build in
https://launchpad.net/~dirk-computer42/+archive/c42-edge-server and is
distributed in https://launchpad.net/~dirk-
computer42/+archive/c42-backport.

For my installations it works without any known problem.

** Summary changed:

- Please backport tomcat7 7.0.34 (main) from raring to precise (and quantal) [and tomcat-native] to fix serious CVE reports
+ Please backport tomcat7 7.0.40 (main) from debian to precise (and quantal) [and tomcat-native] to fix serious CVE reports

** Summary changed:

- Please backport tomcat7 7.0.40 (main) from debian to precise (and quantal) [and tomcat-native] to fix serious CVE reports
+ Please backport tomcat7 7.0.40 (main) from saucy/debian to precise (and quantal) [and tomcat-native] to fix serious CVE reports
--
You received this bug notification because you are a member of Ubuntu
Backporters, which is subscribed to Precise Backports.
https://bugs.launchpad.net/bugs/1073159

Title:
Please backport tomcat7 7.0.40 (main) from saucy/debian to precise
(and quantal) [and tomcat-native] to fix serious CVE reports

To manage notifications about this bug go to:
https://bugs.launchpad.net/precise-backports/+bug/1073159/+subscriptions

[H.-Dirk Schmitt]

7.0.40 fix also CVE-2013-2071

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2013-2071

** Also affects: raring-backports
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Backporters, which is subscribed to Precise Backports.
Matching subscriptions: Ubuntu Backporters
https://bugs.launchpad.net/bugs/1073159

Title:
Please backport tomcat7 7.0.40 (main) from saucy/debian to precise
(and quantal) [and tomcat-native] to fix serious CVE reports

To manage notifications about this bug go to:
https://bugs.launchpad.net/precise-backports/+bug/1073159/+subscriptions

[H.-Dirk Schmitt]

Due to https://bugs.launchpad.net/ubuntu/+source/tomcat7/+bug/1092548 I
have changed the goal to 7.0.42.

As before a "no change backport" is in was build in
https://launchpad.net/~dirk-computer42/+archive/c42-edge-server and is
distributed in https://launchpad.net/~dirk-
computer42/+archive/c42-backport.

---
Ubuntu Bug Squad volunteer triager
http://wiki.ubuntu.com/BugSquad

** Summary changed:

- Please backport tomcat7 7.0.40 (main) from saucy/debian to precise (and quantal) [and tomcat-native] to fix serious CVE reports
+ Please backport tomcat7 7.0.42 (main) from saucy/debian to precise (and quantal) [and tomcat-native] to fix serious CVE reports
--
You received this bug notification because you are a member of Ubuntu
Backporters, which is subscribed to Precise Backports.
Matching subscriptions: Ubuntu Backporters
https://bugs.launchpad.net/bugs/1073159

Title:
Please backport tomcat7 7.0.42 (main) from saucy/debian to precise
(and quantal) [and tomcat-native] to fix serious CVE reports

To manage notifications about this bug go to:
https://bugs.launchpad.net/precise-backports/+bug/1073159/+subscriptions

[Hendy Irawan]

Thanks for proposing the backports, hopefully it'd be accepted.

As of now tomcat7 with APR connector is unusable in Ubuntu 12.10 due to
bug #1088687 / #1092548.
--
You received this bug notification because you are a member of Ubuntu
Backporters, which is subscribed to Precise Backports.
Matching subscriptions: Ubuntu Backporters
https://bugs.launchpad.net/bugs/1073159

Title:
Please backport tomcat7 7.0.42 (main) from saucy/debian to precise
(and quantal) [and tomcat-native] to fix serious CVE reports

To manage notifications about this bug go to:
https://bugs.launchpad.net/precise-backports/+bug/1073159/+subscriptions

[Hendy Irawan]

Addition to above: bug #1092548
--
You received this bug notification because you are a member of Ubuntu
Backporters, which is subscribed to Precise Backports.
Matching subscriptions: Ubuntu Backporters
https://bugs.launchpad.net/bugs/1073159

Title:
Please backport tomcat7 7.0.42 (main) from saucy/debian to precise
(and quantal) [and tomcat-native] to fix serious CVE reports

To manage notifications about this bug go to:
https://bugs.launchpad.net/precise-backports/+bug/1073159/+subscriptions

[bofkentucky]

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2013-1571
--
You received this bug notification because you are a member of Ubuntu
Backporters, which is subscribed to Precise Backports.
Matching subscriptions: Ubuntu Backporters
https://bugs.launchpad.net/bugs/1073159

Title:
Please backport tomcat7 7.0.42 (main) from saucy/debian to precise
(and quantal) [and tomcat-native] to fix serious CVE reports

To manage notifications about this bug go to:
https://bugs.launchpad.net/precise-backports/+bug/1073159/+subscriptions

[Mathew Hodson]

** Tags removed: quantal
--
You received this bug notification because you are a member of Ubuntu
Backporters, which is subscribed to Precise Backports.
Matching subscriptions: Ubuntu Backporters
https://bugs.launchpad.net/bugs/1073159

Title:
Please backport tomcat7 7.0.42 (main) from saucy/debian to precise
[and tomcat-native] to fix serious CVE reports

To manage notifications about this bug go to:
https://bugs.launchpad.net/precise-backports/+bug/1073159/+subscriptions

[Launchpad Bug Tracker]

Status changed to 'Confirmed' because the bug affects multiple users.

** Changed in: ubuntu
Status: New => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Backporters, which is subscribed to Precise Backports.
https://bugs.launchpad.net/bugs/1073159

Title:
Please backport tomcat7 7.0.42 (main) from saucy/debian to precise
[and tomcat-native] to fix serious CVE reports

To manage notifications about this bug go to:
https://bugs.launchpad.net/precise-backports/+bug/1073159/+subscriptions

[Mathew Hodson]

** Project changed: raring-backports => ubuntu

** No longer affects: ubuntu

** Project changed: quantal-backports => ubuntu

** No longer affects: ubuntu

** Summary changed:

- Please backport tomcat7 7.0.42 (main) from saucy/debian to precise (and quantal) [and tomcat-native] to fix serious CVE reports
+ Please backport tomcat7 7.0.42 (main) from saucy/debian to precise [and tomcat-native] to fix serious CVE reports
--
You received this bug notification because you are a member of Ubuntu
Backporters, which is subscribed to Precise Backports.
Matching subscriptions: Ubuntu Backporters
https://bugs.launchpad.net/bugs/1073159

Title:
Please backport tomcat7 7.0.42 (main) from saucy/debian to precise
[and tomcat-native] to fix serious CVE reports

To manage notifications about this bug go to:
https://bugs.launchpad.net/precise-backports/+bug/1073159/+subscriptions

[Andreas Hasenack]

Thank you for reporting this bug to Ubuntu.

Ubuntu 12.04 (precise) reached end-of-life on April 28, 2017.

See this document for currently supported Ubuntu releases:
https://wiki.ubuntu.com/Releases

We appreciate that this bug may be old and you might not be interested
in discussing it any more. But if you are then please upgrade to the
latest Ubuntu version and re-test. If you then find the bug is still
present in the newer Ubuntu version, please add a comment here telling
us which new version it is in and change the bug status to Confirmed.


** Changed in: tomcat7 (Ubuntu)
Status: Confirmed => Won't Fix
--
You received this bug notification because you are a member of Ubuntu
Backporters, which is subscribed to Precise Backports.
https://bugs.launchpad.net/bugs/1073159

Title:
Please backport tomcat7 7.0.42 (main) from saucy/debian to precise
[and tomcat-native] to fix serious CVE reports

To manage notifications about this bug go to:
https://bugs.launchpad.net/precise-backports/+bug/1073159/+subscriptions