Funny thing: we recently needed to update a customer's Tomcat because they were complaining about a security issue that had prompted 8.5.88.

And by the time we got the update request, 8.5.89 was already out, but we hadn't yet heard of CVE-2023-34981.

So we'd already skipped over 8.5.88 before we were even aware that it had a problem.

--
JHHL

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to