https://bz.apache.org/bugzilla/show_bug.cgi?id=64206
--- Comment #4 from david wooffindin <david.wooffin...@autoliv.com> --- [semi-offtopic] : just curious, was the CVE for the AJP fixed in this release ? Or just disabling it instead by default ? -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org