https://issues.apache.org/bugzilla/show_bug.cgi?id=53370
--- Comment #1 from Christopher Schultz <ch...@christopherschultz.net> --- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0781 says CVS was assigned 2009-03-04. http://www.securityfocus.com/archive/1/501538/100/0/threaded is markt's post from 2009-03-06 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-0781 says "release date" was 2009-03-09 Tomcat's security pages currently say "first reported to the Tomcat security team on 5 Mar 2009 and made public on 3 Jun 2009". It looks like the intended date was that of markt's post to BugTraq on 2009-03-06 but it got confused with 2009-06-03. -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org