Re: Tomcat 8.0.41 release date and CVE-2016-8735

2017-01-23 Thread Mark Thomas
On 23/01/2017 20:18, Nikola Vouk wrote: >I've been reviewing the release logs on the security fixes going into > tomcat > (https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.0.40) , > and I would like to ask if you could clarify a couple of things for me please: > > > 1)

Tomcat 8.0.41 release date and CVE-2016-8735

2017-01-23 Thread Nikola Vouk
I've been reviewing the release logs on the security fixes going into tomcat (https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.0.40) , and I would like to ask if you could clarify a couple of things for me please: 1) 8.0.41 release date: 8.0.40 seems to have been indef