[SECURITY] CVE-2018-1323 Apache Tomcat JK ISAPI Connector path traversal

2018-03-12 Thread Mark Thomas
CVE-2018-1323 Apache Tomcat JK ISAPI Connector path traversal Severity: Important Vendor: The Apache Software Foundation Versions Affected: - Apache Tomcat JK ISAPI Connector 1.2.0 to 1.2.42 Description The IIS/ISAPI specific code that normalised the requested path before matching it to the

[ANN] Apache Tomcat 8.5.29 available

2018-03-12 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat 8.5.29. Tomcat 8.x users should be using 8.5.x releases in preference to 8.0.x releases. Apache Tomcat 8 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language,