> Le 25 juin 2015 à 16:16, Christopher Schultz <[email protected]> a > écrit : > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA256 > > Pascal, > > On 6/25/15 10:01 AM, Christopher Schultz wrote: >> Pascal, >> >> On 6/24/15 4:23 PM, Pascal Abaziou wrote: >>> Hello, >> >>> I’m searching for the version that fixes a bug I’ve on a tomcat >>> 6.0.24 (on redhat). As I do not reproduce it on my windows >>> workstation with tomcat 6.0.44, I need elements to argue to >>> upgrade to the sys admin. >> >>> So the bug : with a REST resource service implemented with >>> Jersey, if there’s no method corresponding to a URI (under the >>> hierarchy that Jersey should handle), Jersey raises a 404 >>> NOT_FOUND error. >> >>> In 6.0.24, tomcat raises a 500 internal error. In 6.0.44, tomcat >>> propagates the 404 not found error. >> >>> As the sysadmin want to stay on version delivered by redhead, I >>> need elements to motivate an update. >> >>> I’ve read the tomcat 6 changelog, but did not find when this was >>> fixed. >> >> This is more compelling reading: >> >> http://tomcat.apache.org/security-6.html > > Here are some issues you may want to specifically be aware of (search > for them in the text of the above document): > > CVE-2012-0022 > CVE-2012-4534 > CVE-2012-2733 > CVE-2012-3544/CVE-2013-4322 > CVE-2005-2090/CVE-2013-4286 > CVE-2014-0099 > CVE-2014-0075 > CVE-2014-0227 > > - -chris > -----BEGIN PGP SIGNATURE----- > Comment: GPGTools - http://gpgtools.org > > iQIcBAEBCAAGBQJVjA07AAoJEBzwKT+lPKRY3/wP/0AryA0WY6uek7TLhNg/G+dT > hSFoVPNohDsKde2BP+kdCabBRVUnqe2b5rRID0CuGQe4Ve5RCzdmwQtXoJEvySNW > WEiQVIKO4sg3D3ihrAAyDtWKKSwlHr8PY9R+J80yPATfKKdGjvAJkRMe1CxCGbZ9 > hcU3F7g86h7dnqh2nL3EcfscCT/4E+0QXmrEaNWluMD2acCYFcfJRVzLpo+vTP7B > exrOdlgPp4TWPt/StzoDIrJ00daI6y0rYtgQSNrKIXFGVgCB7PsEpDQoQ2fcLHkD > QVUl5EfAIP4/oWSnLjh7Ncj2x/gp15yc3oR/EkBNgeqxVPzB+y0UHTrn7p6CzlED > bVxFzOCdBCFHGqIuZi1hR26TIbHOu3XJlBBafpVD2kxJnKgyo5mjpxj/mMNVwX2A > Wj/NHtmieKMRIqTKlqXyIFEYBBrzYVNNjRPmIR/ghPwGRntw45x2eEuzZLL49f1O > NXIwiuf80H5pjrmMt/dWztRlq5QlyqFtxf/xMSNtWu1tnfG6OJI2Nsmtc1MCCXmu > apZx3Em+lohCEh9/ElX8ZlKGJ2AsjhI6WNXvcS3uE7/8zInCU/P04y+QI9Zw/w/F > jQAJ4gSarQAyk+hDKtSHcC2LfeExhbRR9upONF/P3wPOZukWN/T6ZJsMelhpzx/m > /aJbYhiVNM9fmo6bfLww > =ywXV > -----END PGP SIGNATURE----- > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] >
Christopher, Many thanks for the link. It will be very helpful. Regards, Pascal --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
