https://bz.apache.org/bugzilla/show_bug.cgi?id=64206
--- Comment #5 from Mark Thomas <ma...@apache.org> --- Found it. Just need to confirm the fix and then I'll back-port. CVE-2020-1938 was fixed in 8.5.51 For more details for https://markmail.org/message/jahnxqb4wnimedlr -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org