Hi there, Sorry to trouble you folks but I could not find on Google any proof/info that state Apache Tomcat fixes are cumulative. I have a customer asking me if fixes listed in https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.109 cumulative ? E.g. Cumulative as meaning fixes in Tomcat 7.0.100 are also present in Tomcat 7.0.109. My guts tell me it's cumulative but I need some sort of proof for my customer.
Best Regards, Jason Tan