Debian Security Advisory

DLA-924-2 tomcat7 -- LTS security update

Date Reported:
10 May 2017
Affected Packages:
Security database references:
In the Debian bugtracking system: Bug 861872.
More information:

The security update announced as DLA-924-1 introduced a regression in Tomcat's APR protocol due to the fix for CVE-2017-5647 and prevented a successful sendfile request.

For Debian 7 Wheezy, these problems have been fixed in version 7.0.28-4+deb7u13.

We recommend that you upgrade your tomcat7 packages.

Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: