On 3/9/12 2:19 PM, "Jayant Sane" <[email protected]> wrote:
> > >Pardon the re-post but I just wanted some kind of ack from the Tomcat dev >team on the following. >Has the "Tomcat WAR deployment directory traversal..." issue as detailed >in http://securitytracker.com/id/1023504 been fixed in version 7.0.023? >As I mentioned, the Apache security team wont comment on known security >issues. According to your link, only Tomcat major version 5 and 6 were affected. Also, the issue was report Jan 25, 2010. Tomcat 7.0.23 was released Nov 25, 2011. I imagine that any issue would have been patched well before that. http://tomcat.apache.org/tomcat-7.0-doc/changelog.html Leon > >many thanks,Jayant >--------------------------------------------------------------------- >To unsubscribe, e-mail: [email protected] >For additional commands, e-mail: [email protected] > --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
