Re: Is there a 6.0.x patch for CVE-2016-5388?

2016-10-07 Thread Violeta Georgieva
Hi, 2016-10-04 9:35 GMT+03:00 Vamsavardhana Reddy : > > Hi, > > Thanks for your reply. I meant to ask if Tomcat will be releasing a 6.0.x > version (say 6.0.46?) addressing this CVE. If yes, what time frame may I > expect this version out? For Tomcat 6.0.46 you can follow

Re: Is there a 6.0.x patch for CVE-2016-5388?

2016-10-04 Thread Vamsavardhana Reddy
Hi, Thanks for your reply. I meant to ask if Tomcat will be releasing a 6.0.x version (say 6.0.46?) addressing this CVE. If yes, what time frame may I expect this version out? Best regards, Vamsi

Re: Is there a 6.0.x patch for CVE-2016-5388?

2016-10-03 Thread tomcat
On 03.10.2016 13:10, André Warnier (tomcat) wrote: On 03.10.2016 13:03, Vamsavardhana Reddy wrote: Hi, Is there a 6.0.x patch for CVE-2016-5388? I do not see it listed in https://tomcat.apache.org/security-6.html . Hi. If you really mean "patch", see http://tomcat.apache.org/sec

Re: Is there a 6.0.x patch for CVE-2016-5388?

2016-10-03 Thread tomcat
On 03.10.2016 13:03, Vamsavardhana Reddy wrote: Hi, Is there a 6.0.x patch for CVE-2016-5388? I do not see it listed in https://tomcat.apache.org/security-6.html . Hi. If you really mean "patch", see http://tomcat.apache.org/security.html First paragraph. Also see http://tomcat.

Is there a 6.0.x patch for CVE-2016-5388?

2016-10-03 Thread Vamsavardhana Reddy
Hi, Is there a 6.0.x patch for CVE-2016-5388? I do not see it listed in https://tomcat.apache.org/security-6.html . Thanks and best regards, Vamsi