On 09.03.2012 23:19, Jayant Sane wrote:
Pardon the re-post but I just wanted some kind of ack from the Tomcat dev team on the following. Has the "Tomcat WAR deployment directory traversal..." issue as detailed in http://securitytracker.com/id/1023504 been fixed in version 7.0.023? As I mentioned, the Apache security team wont comment on known security issues.
It was fixed by http://svn.apache.org/viewvc?view=revision&revision=892795 before the first release of TC 7. Regards, Rainer --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org