Le 8/02/2017 à 15:52, Markus Koschany a écrit : > it appears that Tomcat 7 and 8 in Jessie and Wheezy are affected by this > bug. Are you still working on it or shall I prepare updates for > -security based on the upstream patch from > > https://github.com/apache/tomcat80/commit/614e7f78aecc429d8740bb59900c2f9fbc86a788#diff-2aeb244142da5fcb78a54e23f717fcd2
Hi Markus, Feel free to prepare the update, I'm rather busy atm and I won't be able to work on this before this weekend. I was considering uploading a stable update but it won't be immediately available. A security update would be faster but I don't know if the security team would accept it. Emmanuel Bourg