Contro: tags -1 - moreinfo Le 12/04/2017 à 18:41, Ivo De Decker a écrit :
> Please go ahead once the security upload currently in unstable migrated to > testing (that should happen in a few days, I just unblocked and aged it). > Please remove the moreinfo tag from this bug once the new upload is in > unstable and built on the relevant architecture. Hi, Thanks a lot, tomcat8/8.5.12-1 is now in unstable. This version contains the fix for CVE-2017-5648 which was backported in 8.5.11-2. If time allows I'll probably propose a last update to include the fixes for the other CVEs. Emmanuel Bourg