need help for CVE-2007-1355

["li.weijie" <li...@yahoo.com.cn>]

HI, I'm a user of tomcat4.1.24. I knew that the version with  the vulnerability problem of CVE-2007-1355 .
  But I don't know how to fix it.
  I want to know whether the version of 4.1.36(stable) could be downloaded from http://tomcat.apache.org/download-41.cgi has already fixed the problem.
  If not , how can i get a safety version？
   
  Need your help!

       
---------------------------------
天生购物狂，狂抢购物券，你还等什么！ 

回复： Re: need help for CVE-2007-1355

["li.weijie" <li...@yahoo.com.cn>]

THANK YOU ALL
       
---------------------------------
天生购物狂，狂抢购物券，你还等什么！ 

Re: need help for CVE-2007-1355

[Konstantin Kolinko <kn...@gmail.com>]

Please note that it is fixed in the sources (aka SVN) only, but not in
any released version.

The fix was committed on May 19th in revision
http://svn.apache.org/viewvc?view=rev&revision=539759

4.1.36 released in April does not contain the fix.

2007/12/17, Mary Joseph <JM...@novell.com>:
> Looks like it is fixed.
>
> http://tomcat.apache.org/security-4.html
>

---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

Re: need help for CVE-2007-1355

[Mary Joseph <JM...@novell.com>]

Looks like it is fixed. 

http://tomcat.apache.org/security-4.html 

Better confirm though.. 

Mary

>>> "li.weijie" <li...@yahoo.com.cn> 12/17/07 2:47 PM >>>
HI, I'm a user of tomcat4.1.24. I knew that the version with  the vulnerability problem of CVE-2007-1355 .
  But I don't know how to fix it.
  I want to know whether the version of 4.1.36(stable) could be downloaded from http://tomcat.apache.org/download-41.cgi has already fixed the problem.
  If not , how can i get a safety version？
  
  Need your help!

      
---------------------------------
天生购物狂，狂抢购物券，你还等什么！