Hi Markus, hi Emmanuel, On Mon, Feb 13, 2017 at 10:48:20AM +0100, Markus Koschany wrote: > On 13.02.2017 08:34, Moritz Mühlenhoff wrote: > > On Sun, Feb 12, 2017 at 09:38:31PM +0100, Markus Koschany wrote: > >> Hi, > >> > >> a bug was reported against tomcat8 and tomcat7 in Jessie and it seems > >> the issue is related to our latest security updates. We would like to > >> address this regression as soon as possible because this one can be > >> triggered remotely and cause a denial-of-service. > >> > >> I have attached the debdiffs for tomcat8 and tomcat7 to this email. I > >> will update the changelogs later. > > > > Thanks, please upload. > > Thanks. Uploaded.
Btw, I requested a CVE for this issue and it got assigned CVE-2017-6056. Regards, Salvatore