Hello Moritz,

Thank you for filing the bug.  I've uploaded an updated tomcat6 package
for unstable and will get the patch applied for the next tomcat7 upload
soon.  I'll also look into an upload of 6.0.28 for stable proposed updates.

Cheers,
tony

On 07/06/2011 10:58 AM, Moritz Muehlenhoff wrote:
> Package: tomcat6
> Severity: grave
> Tags: security
> 
> (Also applies to Tomcat 5.5 and Tomcat 6)
> 
> Please see
> http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2204
> 
> This doesn't warrant a DSA, but could be fixed through a point
> update.
> 
> Cheers,
>         Moritz

Attachment: signature.asc
Description: OpenPGP digital signature

__
This is the maintainer address of Debian's Java team
<http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers>. 
Please use
[email protected] for discussions and questions.

Reply via email to