João Paulo,
On 8/7/26 15:20, joao-paulo.martins-prestataire.ca-ps.com via users wrote:
I am pleased to see that the upcoming Tomcat 11.0.25 release is documented
<https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.25> as
addressing CVE-2026-66299.
Is there any estimated release date or timeline available for version 11.0.25?
https://app.opencve.io/cve/CVE-2026-66299, Quote:
"Hosts that have removed the embedded examples web application are not
vulnerable."
You're likely not affected by this CVE, since you probably didn't deploy
the 'examples' application. If you deployed it, remove it and restart
Tomcat and the problem is solved.
Sebastian
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
