Will a fix to 5.5 be done for CVE-2007-3382 and CVE-2007-3385?

["Lanoux, Mark" <Ma...@mms.gov>]

Does any know if a fix to Tomcat 5.5 will be done to remediate security
issues CVE-2007-3382 and CVE-2007-3385?

http://securitytracker.com/alerts/2007/Aug/1018556.html

http://securitytracker.com/alerts/2007/Aug/1018557.html

We would rather not have to upgrade to 6.0.14 at this time....

Thanks,
Mark

Re: Will a fix to 5.5 be done for CVE-2007-3382 and CVE-2007-3385?

[Filip Hanik - Dev Lists <de...@hanik.com>]

a 5.5.25 tag is planned for Friday, includes both of those fixes

Filip

Lanoux, Mark wrote:
> Does any know if a fix to Tomcat 5.5 will be done to remediate security
> issues CVE-2007-3382 and CVE-2007-3385?
>
> http://securitytracker.com/alerts/2007/Aug/1018556.html
>
> http://securitytracker.com/alerts/2007/Aug/1018557.html
>
> We would rather not have to upgrade to 6.0.14 at this time....
>
> Thanks,
> Mark
>
>
>
>   
> ------------------------------------------------------------------------
>
> No virus found in this incoming message.
> Checked by AVG Free Edition. 
> Version: 7.5.484 / Virus Database: 269.12.0/961 - Release Date: 8/19/2007 7:27 AM
>   


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org