You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by bu...@apache.org on 2012/06/06 06:29:29 UTC
[Bug 53370] New: Tomcat site - fix date in vulnerability pages for
CVE-2009-0781
https://issues.apache.org/bugzilla/show_bug.cgi?id=53370
Priority: P2
Bug ID: 53370
Assignee: dev@tomcat.apache.org
Summary: Tomcat site - fix date in vulnerability pages for
CVE-2009-0781
Severity: minor
Classification: Unclassified
OS: All
Reporter: superarya@gmail.com
Hardware: All
Status: NEW
Version: unspecified
Component: Documentation
Product: Tomcat 6
14:04] <gdfgdf> http://svn.apache.org/viewvc?view=revision&revision=1045265
[14:05] <gdfgdf> CVE-2009-0781 was made public 06 Mar 2009, not 03 Jun 2009
[14:11] <pucko> file a bug
[14:15] <gdfgdf> I was about to, but I didn't think it was that critical
[14:16] <pucko> then flag it as a minor. or leave a mail in the mailinglist I
guess.
[14:17] <gdfgdf> up to you, whatever you prefer. How is feedback for the
website usually given?
[14:24] <pucko> no idea. never done it myself, I think it's Mark who usually
does it. but he seems not to be online atm
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
[Bug 53370] Tomcat site - fix date in vulnerability pages for
CVE-2009-0781
Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=53370
--- Comment #1 from Christopher Schultz <ch...@christopherschultz.net> ---
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0781 says CVS was
assigned 2009-03-04.
http://www.securityfocus.com/archive/1/501538/100/0/threaded is markt's post
from 2009-03-06
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-0781 says "release
date" was 2009-03-09
Tomcat's security pages currently say "first reported to the Tomcat security
team on 5 Mar 2009 and made public on 3 Jun 2009".
It looks like the intended date was that of markt's post to BugTraq on
2009-03-06 but it got confused with 2009-06-03.
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
[Bug 53370] Tomcat site - fix date in vulnerability pages for
CVE-2009-0781
Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=53370
--- Comment #2 from Mark Thomas <ma...@apache.org> ---
The dates from my personal mail archive are:
- date notified 5th March 2009
- date CVE requested 6th March 2009
- date CVE assigned 6th Match 2009
- date published 6th March 2009
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
[Bug 53370] Tomcat site - fix date in vulnerability pages for
CVE-2009-0781
Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=53370
Christopher Schultz <ch...@christopherschultz.net> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution|--- |FIXED
--- Comment #3 from Christopher Schultz <ch...@christopherschultz.net> ---
Fixed and published.
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org