Author: jfclere Date: Wed Feb 9 08:25:51 2011 New Revision: 1068787 URL: http://svn.apache.org/viewvc?rev=1068787&view=rev Log: See http://www.oracle.com/technetwork/topics/security/alert-cve-2010-4476-305811.html
Modified: tomcat/site/trunk/docs/security-5.html tomcat/site/trunk/docs/security-6.html tomcat/site/trunk/docs/security-7.html tomcat/site/trunk/xdocs/security-5.xml tomcat/site/trunk/xdocs/security-6.xml tomcat/site/trunk/xdocs/security-7.xml Modified: tomcat/site/trunk/docs/security-5.html URL: http://svn.apache.org/viewvc/tomcat/site/trunk/docs/security-5.html?rev=1068787&r1=1068786&r2=1068787&view=diff ============================================================================== --- tomcat/site/trunk/docs/security-5.html (original) +++ tomcat/site/trunk/docs/security-5.html Wed Feb 9 08:25:51 2011 @@ -3,18 +3,18 @@ <html> <head> <title>Apache Tomcat - Apache Tomcat 5 vulnerabilities</title> -<meta name="author" content="Apache Tomcat Project"/> -<link type="text/css" href="stylesheets/tomcat.css" rel="stylesheet"/> -<link type="text/css" href="stylesheets/tomcat-printer.css" rel="stylesheet" media="print"/> +<meta content="Apache Tomcat Project" name="author" /> +<link rel="stylesheet" href="stylesheets/tomcat.css" type="text/css" /> +<link media="print" rel="stylesheet" href="stylesheets/tomcat-printer.css" type="text/css" /> </head> -<body bgcolor="#ffffff" text="#000000" link="#525D76" alink="#525D76" vlink="#525D76"> -<table border="0" width="100%" cellspacing="0"> +<body vlink="#525D76" alink="#525D76" link="#525D76" text="#000000" bgcolor="#ffffff"> +<table cellspacing="0" width="100%" border="0"> <!--PAGE HEADER--> <tr> <td> <!--PROJECT LOGO--> <a href="http://tomcat.apache.org/"> -<img src="./images/tomcat.gif" align="left" alt="Tomcat Logo" border="0"/> +<img border="0" alt="Tomcat Logo" align="left" src="./images/tomcat.gif" /> </a> </td> <td> @@ -25,28 +25,28 @@ <td> <!--APACHE LOGO--> <a href="http://www.apache.org/"> -<img src="http://www.apache.org/images/asf-logo.gif" align="right" alt="Apache Logo" border="0"/> +<img border="0" alt="Apache Logo" align="right" src="http://www.apache.org/images/asf-logo.gif" /> </a> </td> </tr> </table> <div class="searchbox noPrint"> -<form action="http://www.google.com/search" method="get"> -<input value="tomcat.apache.org" name="sitesearch" type="hidden"/> -<input value="Search the Site" size="25" name="q" id="query" type="text"/> -<input name="Search" value="Search Site" type="submit"/> +<form method="get" action="http://www.google.com/search"> +<input type="hidden" name="sitesearch" value="tomcat.apache.org" /> +<input type="text" id="query" name="q" size="25" value="Search the Site" /> +<input type="submit" value="Search Site" name="Search" /> </form> </div> -<table border="0" width="100%" cellspacing="4"> +<table cellspacing="4" width="100%" border="0"> <!--HEADER SEPARATOR--> <tr> <td colspan="2"> -<hr noshade="" size="1"/> +<hr size="1" noshade="" /> </td> </tr> <tr> <!--LEFT SIDE NAVIGATION--> -<td width="20%" valign="top" nowrap="true" class="noPrint"> +<td class="noPrint" nowrap="true" valign="top" width="20%"> <p> <strong>Apache Tomcat</strong> </p> @@ -178,11 +178,11 @@ </ul> </td> <!--RIGHT SIDE MAIN BODY--> -<td width="80%" valign="top" align="left" id="mainBody"> -<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<td id="mainBody" align="left" valign="top" width="80%"> +<table width="100%" cellpadding="2" cellspacing="0" border="0"> <tr> <td bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica,sanserif"> +<font face="arial,helvetica,sanserif" color="#ffffff"> <a name="Table of Contents"> <!--()--> </a> @@ -264,14 +264,14 @@ </tr> <tr> <td> -<br/> +<br /> </td> </tr> </table> -<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<table width="100%" cellpadding="2" cellspacing="0" border="0"> <tr> <td bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica,sanserif"> +<font face="arial,helvetica,sanserif" color="#ffffff"> <a name="Apache Tomcat 5.x vulnerabilities"> <!--()--> </a> @@ -312,14 +312,14 @@ </tr> <tr> <td> -<br/> +<br /> </td> </tr> </table> -<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<table width="100%" cellpadding="2" cellspacing="0" border="0"> <tr> <td bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica,sanserif"> +<font face="arial,helvetica,sanserif" color="#ffffff"> <a name="Fixed in Apache Tomcat 5.5.32"> <!--()--> </a> @@ -328,8 +328,8 @@ </a> </font> </td> -<td align="right" bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica.sanserif"> +<td bgcolor="#525D76" align="right"> +<font face="arial,helvetica.sanserif" color="#ffffff"> <strong>released 1 Feb 2011</strong> </font> </td> @@ -365,14 +365,14 @@ </tr> <tr> <td> -<br/> +<br /> </td> </tr> </table> -<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<table width="100%" cellpadding="2" cellspacing="0" border="0"> <tr> <td bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica,sanserif"> +<font face="arial,helvetica,sanserif" color="#ffffff"> <a name="Fixed in Apache Tomcat 5.5.30"> <!--()--> </a> @@ -381,8 +381,8 @@ </a> </font> </td> -<td align="right" bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica.sanserif"> +<td bgcolor="#525D76" align="right"> +<font face="arial,helvetica.sanserif" color="#ffffff"> <strong>released 9 Jul 2010</strong> </font> </td> @@ -475,14 +475,14 @@ </tr> <tr> <td> -<br/> +<br /> </td> </tr> </table> -<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<table width="100%" cellpadding="2" cellspacing="0" border="0"> <tr> <td bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica,sanserif"> +<font face="arial,helvetica,sanserif" color="#ffffff"> <a name="Fixed in Apache Tomcat 5.5.29"> <!--()--> </a> @@ -491,8 +491,8 @@ </a> </font> </td> -<td align="right" bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica.sanserif"> +<td bgcolor="#525D76" align="right"> +<font face="arial,helvetica.sanserif" color="#ffffff"> <strong>released 20 Apr 2010</strong> </font> </td> @@ -592,14 +592,14 @@ </tr> <tr> <td> -<br/> +<br /> </td> </tr> </table> -<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<table width="100%" cellpadding="2" cellspacing="0" border="0"> <tr> <td bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica,sanserif"> +<font face="arial,helvetica,sanserif" color="#ffffff"> <a name="Fixed in Apache Tomcat 5.5.28"> <!--()--> </a> @@ -608,8 +608,8 @@ </a> </font> </td> -<td align="right" bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica.sanserif"> +<td bgcolor="#525D76" align="right"> +<font face="arial,helvetica.sanserif" color="#ffffff"> <strong>released 4 Sep 2009</strong> </font> </td> @@ -737,14 +737,14 @@ </tr> <tr> <td> -<br/> +<br /> </td> </tr> </table> -<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<table width="100%" cellpadding="2" cellspacing="0" border="0"> <tr> <td bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica,sanserif"> +<font face="arial,helvetica,sanserif" color="#ffffff"> <a name="Fixed in Apache Tomcat 5.5.27"> <!--()--> </a> @@ -753,8 +753,8 @@ </a> </font> </td> -<td align="right" bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica.sanserif"> +<td bgcolor="#525D76" align="right"> +<font face="arial,helvetica.sanserif" color="#ffffff"> <strong>released 8 Sep 2008</strong> </font> </td> @@ -834,14 +834,14 @@ </tr> <tr> <td> -<br/> +<br /> </td> </tr> </table> -<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<table width="100%" cellpadding="2" cellspacing="0" border="0"> <tr> <td bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica,sanserif"> +<font face="arial,helvetica,sanserif" color="#ffffff"> <a name="Fixed in Apache Tomcat 5.5.26"> <!--()--> </a> @@ -850,8 +850,8 @@ </a> </font> </td> -<td align="right" bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica.sanserif"> +<td bgcolor="#525D76" align="right"> +<font face="arial,helvetica.sanserif" color="#ffffff"> <strong>released 5 Feb 2008</strong> </font> </td> @@ -917,14 +917,14 @@ </tr> <tr> <td> -<br/> +<br /> </td> </tr> </table> -<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<table width="100%" cellpadding="2" cellspacing="0" border="0"> <tr> <td bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica,sanserif"> +<font face="arial,helvetica,sanserif" color="#ffffff"> <a name="Fixed in Apache Tomcat 5.5.25, 5.0.SVN"> <!--()--> </a> @@ -933,8 +933,8 @@ </a> </font> </td> -<td align="right" bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica.sanserif"> +<td bgcolor="#525D76" align="right"> +<font face="arial,helvetica.sanserif" color="#ffffff"> <strong>released 8 Sep 2007</strong> </font> </td> @@ -1014,14 +1014,14 @@ </tr> <tr> <td> -<br/> +<br /> </td> </tr> </table> -<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<table width="100%" cellpadding="2" cellspacing="0" border="0"> <tr> <td bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica,sanserif"> +<font face="arial,helvetica,sanserif" color="#ffffff"> <a name="Fixed in Apache Tomcat 5.5.24, 5.0.SVN"> <!--()--> </a> @@ -1030,8 +1030,8 @@ </a> </font> </td> -<td align="right" bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica.sanserif"> +<td bgcolor="#525D76" align="right"> +<font face="arial,helvetica.sanserif" color="#ffffff"> <strong>Not released</strong> </font> </td> @@ -1059,14 +1059,14 @@ </tr> <tr> <td> -<br/> +<br /> </td> </tr> </table> -<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<table width="100%" cellpadding="2" cellspacing="0" border="0"> <tr> <td bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica,sanserif"> +<font face="arial,helvetica,sanserif" color="#ffffff"> <a name="Fixed in Apache Tomcat 5.5.23, 5.0.SVN"> <!--()--> </a> @@ -1075,8 +1075,8 @@ </a> </font> </td> -<td align="right" bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica.sanserif"> +<td bgcolor="#525D76" align="right"> +<font face="arial,helvetica.sanserif" color="#ffffff"> <strong>released 9 Mar 2007</strong> </font> </td> @@ -1109,14 +1109,14 @@ </tr> <tr> <td> -<br/> +<br /> </td> </tr> </table> -<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<table width="100%" cellpadding="2" cellspacing="0" border="0"> <tr> <td bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica,sanserif"> +<font face="arial,helvetica,sanserif" color="#ffffff"> <a name="Fixed in Apache Tomcat 5.5.22, 5.0.SVN"> <!--()--> </a> @@ -1125,8 +1125,8 @@ </a> </font> </td> -<td align="right" bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica.sanserif"> +<td bgcolor="#525D76" align="right"> +<font face="arial,helvetica.sanserif" color="#ffffff"> <strong>not released</strong> </font> </td> @@ -1178,14 +1178,14 @@ </tr> <tr> <td> -<br/> +<br /> </td> </tr> </table> -<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<table width="100%" cellpadding="2" cellspacing="0" border="0"> <tr> <td bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica,sanserif"> +<font face="arial,helvetica,sanserif" color="#ffffff"> <a name="Fixed in Apache Tomcat 5.5.21, 5.0.SVN"> <!--()--> </a> @@ -1194,8 +1194,8 @@ </a> </font> </td> -<td align="right" bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica.sanserif"> +<td bgcolor="#525D76" align="right"> +<font face="arial,helvetica.sanserif" color="#ffffff"> <strong>not released</strong> </font> </td> @@ -1226,14 +1226,14 @@ </tr> <tr> <td> -<br/> +<br /> </td> </tr> </table> -<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<table width="100%" cellpadding="2" cellspacing="0" border="0"> <tr> <td bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica,sanserif"> +<font face="arial,helvetica,sanserif" color="#ffffff"> <a name="Fixed in Apache Tomcat 5.5.21"> <!--()--> </a> @@ -1242,8 +1242,8 @@ </a> </font> </td> -<td align="right" bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica.sanserif"> +<td bgcolor="#525D76" align="right"> +<font face="arial,helvetica.sanserif" color="#ffffff"> <strong>not released</strong> </font> </td> @@ -1286,14 +1286,14 @@ </tr> <tr> <td> -<br/> +<br /> </td> </tr> </table> -<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<table width="100%" cellpadding="2" cellspacing="0" border="0"> <tr> <td bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica,sanserif"> +<font face="arial,helvetica,sanserif" color="#ffffff"> <a name="Fixed in Apache Tomcat 5.5.18, 5.0.SVN"> <!--()--> </a> @@ -1302,8 +1302,8 @@ </a> </font> </td> -<td align="right" bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica.sanserif"> +<td bgcolor="#525D76" align="right"> +<font face="arial,helvetica.sanserif" color="#ffffff"> <strong>not released</strong> </font> </td> @@ -1329,14 +1329,14 @@ </tr> <tr> <td> -<br/> +<br /> </td> </tr> </table> -<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<table width="100%" cellpadding="2" cellspacing="0" border="0"> <tr> <td bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica,sanserif"> +<font face="arial,helvetica,sanserif" color="#ffffff"> <a name="Fixed in Apache Tomcat 5.5.17, 5.0.SVN"> <!--()--> </a> @@ -1345,8 +1345,8 @@ </a> </font> </td> -<td align="right" bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica.sanserif"> +<td bgcolor="#525D76" align="right"> +<font face="arial,helvetica.sanserif" color="#ffffff"> <strong>released 27 Apr 2006</strong> </font> </td> @@ -1372,14 +1372,14 @@ </tr> <tr> <td> -<br/> +<br /> </td> </tr> </table> -<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<table width="100%" cellpadding="2" cellspacing="0" border="0"> <tr> <td bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica,sanserif"> +<font face="arial,helvetica,sanserif" color="#ffffff"> <a name="Fixed in Apache Tomcat 5.5.16, 5.0.SVN"> <!--()--> </a> @@ -1388,8 +1388,8 @@ </a> </font> </td> -<td align="right" bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica.sanserif"> +<td bgcolor="#525D76" align="right"> +<font face="arial,helvetica.sanserif" color="#ffffff"> <strong>released 15 Mar 2006</strong> </font> </td> @@ -1415,14 +1415,14 @@ </tr> <tr> <td> -<br/> +<br /> </td> </tr> </table> -<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<table width="100%" cellpadding="2" cellspacing="0" border="0"> <tr> <td bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica,sanserif"> +<font face="arial,helvetica,sanserif" color="#ffffff"> <a name="Fixed in Apache Tomcat 5.5.13, 5.0.SVN"> <!--()--> </a> @@ -1473,14 +1473,14 @@ </tr> <tr> <td> -<br/> +<br /> </td> </tr> </table> -<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<table width="100%" cellpadding="2" cellspacing="0" border="0"> <tr> <td bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica,sanserif"> +<font face="arial,helvetica,sanserif" color="#ffffff"> <a name="Fixed in Apache Tomcat 5.5.7, 5.0.SVN"> <!--()--> </a> @@ -1511,14 +1511,14 @@ </tr> <tr> <td> -<br/> +<br /> </td> </tr> </table> -<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<table width="100%" cellpadding="2" cellspacing="0" border="0"> <tr> <td bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica,sanserif"> +<font face="arial,helvetica,sanserif" color="#ffffff"> <a name="Fixed in Apache Tomcat 5.5.1"> <!--()--> </a> @@ -1553,14 +1553,14 @@ </tr> <tr> <td> -<br/> +<br /> </td> </tr> </table> -<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<table width="100%" cellpadding="2" cellspacing="0" border="0"> <tr> <td bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica,sanserif"> +<font face="arial,helvetica,sanserif" color="#ffffff"> <a name="Not a vulnerability in Tomcat"> <!--()--> </a> @@ -1577,8 +1577,8 @@ <p> <strong>Important: Remote Denial Of Service</strong> - <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-XXXX"> - CVE-2011-XXXX</a> + <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4476"> + CVE-2010-4476</a> </p> <p>A JVM bug could cause Double conversion to hang JVM when accessing to a @@ -1688,7 +1688,7 @@ </tr> <tr> <td> -<br/> +<br /> </td> </tr> </table> @@ -1697,17 +1697,17 @@ <!--FOOTER SEPARATOR--> <tr> <td colspan="2"> -<hr noshade="" size="1"/> +<hr size="1" noshade="" /> </td> </tr> <!--PAGE FOOTER--> <tr> <td colspan="2"> <div align="center"> -<font color="#525D76" size="-1"> +<font size="-1" color="#525D76"> <em> Copyright © 1999-2011, The Apache Software Foundation - <br/> + <br /> Apache Tomcat, Tomcat, Apache, the Apache feather, and the Apache Tomcat project logo are trademarks of the Apache Software Foundation. </em> Modified: tomcat/site/trunk/docs/security-6.html URL: http://svn.apache.org/viewvc/tomcat/site/trunk/docs/security-6.html?rev=1068787&r1=1068786&r2=1068787&view=diff ============================================================================== --- tomcat/site/trunk/docs/security-6.html (original) +++ tomcat/site/trunk/docs/security-6.html Wed Feb 9 08:25:51 2011 @@ -3,18 +3,18 @@ <html> <head> <title>Apache Tomcat - Apache Tomcat 6 vulnerabilities</title> -<meta name="author" content="Apache Tomcat Project"/> -<link type="text/css" href="stylesheets/tomcat.css" rel="stylesheet"/> -<link type="text/css" href="stylesheets/tomcat-printer.css" rel="stylesheet" media="print"/> +<meta content="Apache Tomcat Project" name="author" /> +<link rel="stylesheet" href="stylesheets/tomcat.css" type="text/css" /> +<link media="print" rel="stylesheet" href="stylesheets/tomcat-printer.css" type="text/css" /> </head> -<body bgcolor="#ffffff" text="#000000" link="#525D76" alink="#525D76" vlink="#525D76"> -<table border="0" width="100%" cellspacing="0"> +<body vlink="#525D76" alink="#525D76" link="#525D76" text="#000000" bgcolor="#ffffff"> +<table cellspacing="0" width="100%" border="0"> <!--PAGE HEADER--> <tr> <td> <!--PROJECT LOGO--> <a href="http://tomcat.apache.org/"> -<img src="./images/tomcat.gif" align="left" alt="Tomcat Logo" border="0"/> +<img border="0" alt="Tomcat Logo" align="left" src="./images/tomcat.gif" /> </a> </td> <td> @@ -25,28 +25,28 @@ <td> <!--APACHE LOGO--> <a href="http://www.apache.org/"> -<img src="http://www.apache.org/images/asf-logo.gif" align="right" alt="Apache Logo" border="0"/> +<img border="0" alt="Apache Logo" align="right" src="http://www.apache.org/images/asf-logo.gif" /> </a> </td> </tr> </table> <div class="searchbox noPrint"> -<form action="http://www.google.com/search" method="get"> -<input value="tomcat.apache.org" name="sitesearch" type="hidden"/> -<input value="Search the Site" size="25" name="q" id="query" type="text"/> -<input name="Search" value="Search Site" type="submit"/> +<form method="get" action="http://www.google.com/search"> +<input type="hidden" name="sitesearch" value="tomcat.apache.org" /> +<input type="text" id="query" name="q" size="25" value="Search the Site" /> +<input type="submit" value="Search Site" name="Search" /> </form> </div> -<table border="0" width="100%" cellspacing="4"> +<table cellspacing="4" width="100%" border="0"> <!--HEADER SEPARATOR--> <tr> <td colspan="2"> -<hr noshade="" size="1"/> +<hr size="1" noshade="" /> </td> </tr> <tr> <!--LEFT SIDE NAVIGATION--> -<td width="20%" valign="top" nowrap="true" class="noPrint"> +<td class="noPrint" nowrap="true" valign="top" width="20%"> <p> <strong>Apache Tomcat</strong> </p> @@ -178,11 +178,11 @@ </ul> </td> <!--RIGHT SIDE MAIN BODY--> -<td width="80%" valign="top" align="left" id="mainBody"> -<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<td id="mainBody" align="left" valign="top" width="80%"> +<table width="100%" cellpadding="2" cellspacing="0" border="0"> <tr> <td bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica,sanserif"> +<font face="arial,helvetica,sanserif" color="#ffffff"> <a name="Table of Contents"> <!--()--> </a> @@ -246,14 +246,14 @@ </tr> <tr> <td> -<br/> +<br /> </td> </tr> </table> -<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<table width="100%" cellpadding="2" cellspacing="0" border="0"> <tr> <td bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica,sanserif"> +<font face="arial,helvetica,sanserif" color="#ffffff"> <a name="Apache Tomcat 6.x vulnerabilities"> <!--()--> </a> @@ -288,14 +288,14 @@ </tr> <tr> <td> -<br/> +<br /> </td> </tr> </table> -<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<table width="100%" cellpadding="2" cellspacing="0" border="0"> <tr> <td bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica,sanserif"> +<font face="arial,helvetica,sanserif" color="#ffffff"> <a name="Fixed in Apache Tomcat 6.0.32"> <!--()--> </a> @@ -304,8 +304,8 @@ </a> </font> </td> -<td align="right" bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica.sanserif"> +<td bgcolor="#525D76" align="right"> +<font face="arial,helvetica.sanserif" color="#ffffff"> <strong>released 03 Feb 2011</strong> </font> </td> @@ -348,14 +348,14 @@ </tr> <tr> <td> -<br/> +<br /> </td> </tr> </table> -<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<table width="100%" cellpadding="2" cellspacing="0" border="0"> <tr> <td bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica,sanserif"> +<font face="arial,helvetica,sanserif" color="#ffffff"> <a name="Fixed in Apache Tomcat 6.0.30"> <!--()--> </a> @@ -364,8 +364,8 @@ </a> </font> </td> -<td align="right" bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica.sanserif"> +<td bgcolor="#525D76" align="right"> +<font face="arial,helvetica.sanserif" color="#ffffff"> <strong>released 13 Jan 2011</strong> </font> </td> @@ -449,14 +449,14 @@ </tr> <tr> <td> -<br/> +<br /> </td> </tr> </table> -<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<table width="100%" cellpadding="2" cellspacing="0" border="0"> <tr> <td bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica,sanserif"> +<font face="arial,helvetica,sanserif" color="#ffffff"> <a name="Fixed in Apache Tomcat 6.0.28"> <!--()--> </a> @@ -465,8 +465,8 @@ </a> </font> </td> -<td align="right" bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica.sanserif"> +<td bgcolor="#525D76" align="right"> +<font face="arial,helvetica.sanserif" color="#ffffff"> <strong>released 9 Jul 2010</strong> </font> </td> @@ -538,14 +538,14 @@ </tr> <tr> <td> -<br/> +<br /> </td> </tr> </table> -<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<table width="100%" cellpadding="2" cellspacing="0" border="0"> <tr> <td bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica,sanserif"> +<font face="arial,helvetica,sanserif" color="#ffffff"> <a name="Fixed in Apache Tomcat 6.0.24"> <!--()--> </a> @@ -554,8 +554,8 @@ </a> </font> </td> -<td align="right" bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica.sanserif"> +<td bgcolor="#525D76" align="right"> +<font face="arial,helvetica.sanserif" color="#ffffff"> <strong>released 21 Jan 2010</strong> </font> </td> @@ -663,14 +663,14 @@ </tr> <tr> <td> -<br/> +<br /> </td> </tr> </table> -<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<table width="100%" cellpadding="2" cellspacing="0" border="0"> <tr> <td bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica,sanserif"> +<font face="arial,helvetica,sanserif" color="#ffffff"> <a name="Fixed in Apache Tomcat 6.0.20"> <!--()--> </a> @@ -679,8 +679,8 @@ </a> </font> </td> -<td align="right" bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica.sanserif"> +<td bgcolor="#525D76" align="right"> +<font face="arial,helvetica.sanserif" color="#ffffff"> <strong>released 3 Jun 2009</strong> </font> </td> @@ -810,14 +810,14 @@ </tr> <tr> <td> -<br/> +<br /> </td> </tr> </table> -<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<table width="100%" cellpadding="2" cellspacing="0" border="0"> <tr> <td bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica,sanserif"> +<font face="arial,helvetica,sanserif" color="#ffffff"> <a name="Fixed in Apache Tomcat 6.0.18"> <!--()--> </a> @@ -826,8 +826,8 @@ </a> </font> </td> -<td align="right" bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica.sanserif"> +<td bgcolor="#525D76" align="right"> +<font face="arial,helvetica.sanserif" color="#ffffff"> <strong>released 31 Jul 2008</strong> </font> </td> @@ -913,14 +913,14 @@ </tr> <tr> <td> -<br/> +<br /> </td> </tr> </table> -<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<table width="100%" cellpadding="2" cellspacing="0" border="0"> <tr> <td bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica,sanserif"> +<font face="arial,helvetica,sanserif" color="#ffffff"> <a name="Fixed in Apache Tomcat 6.0.16"> <!--()--> </a> @@ -929,8 +929,8 @@ </a> </font> </td> -<td align="right" bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica.sanserif"> +<td bgcolor="#525D76" align="right"> +<font face="arial,helvetica.sanserif" color="#ffffff"> <strong>released 8 Feb 2008</strong> </font> </td> @@ -1010,14 +1010,14 @@ </tr> <tr> <td> -<br/> +<br /> </td> </tr> </table> -<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<table width="100%" cellpadding="2" cellspacing="0" border="0"> <tr> <td bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica,sanserif"> +<font face="arial,helvetica,sanserif" color="#ffffff"> <a name="Fixed in Apache Tomcat 6.0.14"> <!--()--> </a> @@ -1026,8 +1026,8 @@ </a> </font> </td> -<td align="right" bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica.sanserif"> +<td bgcolor="#525D76" align="right"> +<font face="arial,helvetica.sanserif" color="#ffffff"> <strong>released 13 Aug 2007</strong> </font> </td> @@ -1107,14 +1107,14 @@ </tr> <tr> <td> -<br/> +<br /> </td> </tr> </table> -<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<table width="100%" cellpadding="2" cellspacing="0" border="0"> <tr> <td bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica,sanserif"> +<font face="arial,helvetica,sanserif" color="#ffffff"> <a name="Fixed in Apache Tomcat 6.0.11"> <!--()--> </a> @@ -1123,8 +1123,8 @@ </a> </font> </td> -<td align="right" bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica.sanserif"> +<td bgcolor="#525D76" align="right"> +<font face="arial,helvetica.sanserif" color="#ffffff"> <strong>not released</strong> </font> </td> @@ -1170,14 +1170,14 @@ </tr> <tr> <td> -<br/> +<br /> </td> </tr> </table> -<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<table width="100%" cellpadding="2" cellspacing="0" border="0"> <tr> <td bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica,sanserif"> +<font face="arial,helvetica,sanserif" color="#ffffff"> <a name="Fixed in Apache Tomcat 6.0.10"> <!--()--> </a> @@ -1186,8 +1186,8 @@ </a> </font> </td> -<td align="right" bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica.sanserif"> +<td bgcolor="#525D76" align="right"> +<font face="arial,helvetica.sanserif" color="#ffffff"> <strong>released 28 Feb 2007</strong> </font> </td> @@ -1234,14 +1234,14 @@ </tr> <tr> <td> -<br/> +<br /> </td> </tr> </table> -<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<table width="100%" cellpadding="2" cellspacing="0" border="0"> <tr> <td bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica,sanserif"> +<font face="arial,helvetica,sanserif" color="#ffffff"> <a name="Fixed in Apache Tomcat 6.0.9"> <!--()--> </a> @@ -1250,8 +1250,8 @@ </a> </font> </td> -<td align="right" bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica.sanserif"> +<td bgcolor="#525D76" align="right"> +<font face="arial,helvetica.sanserif" color="#ffffff"> <strong>released 8 Feb 2007</strong> </font> </td> @@ -1278,14 +1278,14 @@ </tr> <tr> <td> -<br/> +<br /> </td> </tr> </table> -<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<table width="100%" cellpadding="2" cellspacing="0" border="0"> <tr> <td bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica,sanserif"> +<font face="arial,helvetica,sanserif" color="#ffffff"> <a name="Fixed in Apache Tomcat 6.0.6"> <!--()--> </a> @@ -1294,8 +1294,8 @@ </a> </font> </td> -<td align="right" bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica.sanserif"> +<td bgcolor="#525D76" align="right"> +<font face="arial,helvetica.sanserif" color="#ffffff"> <strong>released 18 Dec 2006</strong> </font> </td> @@ -1326,14 +1326,14 @@ </tr> <tr> <td> -<br/> +<br /> </td> </tr> </table> -<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<table width="100%" cellpadding="2" cellspacing="0" border="0"> <tr> <td bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica,sanserif"> +<font face="arial,helvetica,sanserif" color="#ffffff"> <a name="Not a vulnerability in Tomcat"> <!--()--> </a> @@ -1350,8 +1350,8 @@ <p> <strong>Important: Remote Denial Of Service</strong> - <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-XXXX"> - CVE-2011-XXXX</a> + <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4476"> + CVE-2010-4476</a> </p> <p>A JVM bug could cause Double conversion to hang JVM when accessing to a @@ -1447,7 +1447,7 @@ </tr> <tr> <td> -<br/> +<br /> </td> </tr> </table> @@ -1456,17 +1456,17 @@ <!--FOOTER SEPARATOR--> <tr> <td colspan="2"> -<hr noshade="" size="1"/> +<hr size="1" noshade="" /> </td> </tr> <!--PAGE FOOTER--> <tr> <td colspan="2"> <div align="center"> -<font color="#525D76" size="-1"> +<font size="-1" color="#525D76"> <em> Copyright © 1999-2011, The Apache Software Foundation - <br/> + <br /> Apache Tomcat, Tomcat, Apache, the Apache feather, and the Apache Tomcat project logo are trademarks of the Apache Software Foundation. </em> Modified: tomcat/site/trunk/docs/security-7.html URL: http://svn.apache.org/viewvc/tomcat/site/trunk/docs/security-7.html?rev=1068787&r1=1068786&r2=1068787&view=diff ============================================================================== --- tomcat/site/trunk/docs/security-7.html (original) +++ tomcat/site/trunk/docs/security-7.html Wed Feb 9 08:25:51 2011 @@ -3,18 +3,18 @@ <html> <head> <title>Apache Tomcat - Apache Tomcat 7 vulnerabilities</title> -<meta name="author" content="Apache Tomcat Project"/> -<link type="text/css" href="stylesheets/tomcat.css" rel="stylesheet"/> -<link type="text/css" href="stylesheets/tomcat-printer.css" rel="stylesheet" media="print"/> +<meta content="Apache Tomcat Project" name="author" /> +<link rel="stylesheet" href="stylesheets/tomcat.css" type="text/css" /> +<link media="print" rel="stylesheet" href="stylesheets/tomcat-printer.css" type="text/css" /> </head> -<body bgcolor="#ffffff" text="#000000" link="#525D76" alink="#525D76" vlink="#525D76"> -<table border="0" width="100%" cellspacing="0"> +<body vlink="#525D76" alink="#525D76" link="#525D76" text="#000000" bgcolor="#ffffff"> +<table cellspacing="0" width="100%" border="0"> <!--PAGE HEADER--> <tr> <td> <!--PROJECT LOGO--> <a href="http://tomcat.apache.org/"> -<img src="./images/tomcat.gif" align="left" alt="Tomcat Logo" border="0"/> +<img border="0" alt="Tomcat Logo" align="left" src="./images/tomcat.gif" /> </a> </td> <td> @@ -25,28 +25,28 @@ <td> <!--APACHE LOGO--> <a href="http://www.apache.org/"> -<img src="http://www.apache.org/images/asf-logo.gif" align="right" alt="Apache Logo" border="0"/> +<img border="0" alt="Apache Logo" align="right" src="http://www.apache.org/images/asf-logo.gif" /> </a> </td> </tr> </table> <div class="searchbox noPrint"> -<form action="http://www.google.com/search" method="get"> -<input value="tomcat.apache.org" name="sitesearch" type="hidden"/> -<input value="Search the Site" size="25" name="q" id="query" type="text"/> -<input name="Search" value="Search Site" type="submit"/> +<form method="get" action="http://www.google.com/search"> +<input type="hidden" name="sitesearch" value="tomcat.apache.org" /> +<input type="text" id="query" name="q" size="25" value="Search the Site" /> +<input type="submit" value="Search Site" name="Search" /> </form> </div> -<table border="0" width="100%" cellspacing="4"> +<table cellspacing="4" width="100%" border="0"> <!--HEADER SEPARATOR--> <tr> <td colspan="2"> -<hr noshade="" size="1"/> +<hr size="1" noshade="" /> </td> </tr> <tr> <!--LEFT SIDE NAVIGATION--> -<td width="20%" valign="top" nowrap="true" class="noPrint"> +<td class="noPrint" nowrap="true" valign="top" width="20%"> <p> <strong>Apache Tomcat</strong> </p> @@ -178,11 +178,11 @@ </ul> </td> <!--RIGHT SIDE MAIN BODY--> -<td width="80%" valign="top" align="left" id="mainBody"> -<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<td id="mainBody" align="left" valign="top" width="80%"> +<table width="100%" cellpadding="2" cellspacing="0" border="0"> <tr> <td bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica,sanserif"> +<font face="arial,helvetica,sanserif" color="#ffffff"> <a name="Table of Contents"> <!--()--> </a> @@ -225,14 +225,14 @@ </tr> <tr> <td> -<br/> +<br /> </td> </tr> </table> -<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<table width="100%" cellpadding="2" cellspacing="0" border="0"> <tr> <td bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica,sanserif"> +<font face="arial,helvetica,sanserif" color="#ffffff"> <a name="Apache Tomcat 7.x vulnerabilities"> <!--()--> </a> @@ -262,14 +262,14 @@ </tr> <tr> <td> -<br/> +<br /> </td> </tr> </table> -<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<table width="100%" cellpadding="2" cellspacing="0" border="0"> <tr> <td bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica,sanserif"> +<font face="arial,helvetica,sanserif" color="#ffffff"> <a name="Fixed in Apache Tomcat 7.0.8 (released 5 Feb 2011)"> <!--()--> </a> @@ -317,14 +317,14 @@ </tr> <tr> <td> -<br/> +<br /> </td> </tr> </table> -<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<table width="100%" cellpadding="2" cellspacing="0" border="0"> <tr> <td bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica,sanserif"> +<font face="arial,helvetica,sanserif" color="#ffffff"> <a name="Fixed in Apache Tomcat 7.0.6 (released 14 Jan 2011)"> <!--()--> </a> @@ -365,14 +365,14 @@ </tr> <tr> <td> -<br/> +<br /> </td> </tr> </table> -<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<table width="100%" cellpadding="2" cellspacing="0" border="0"> <tr> <td bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica,sanserif"> +<font face="arial,helvetica,sanserif" color="#ffffff"> <a name="Fixed in Apache Tomcat 7.0.5 (released 1 Dec 2010)"> <!--()--> </a> @@ -413,14 +413,14 @@ </tr> <tr> <td> -<br/> +<br /> </td> </tr> </table> -<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<table width="100%" cellpadding="2" cellspacing="0" border="0"> <tr> <td bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica,sanserif"> +<font face="arial,helvetica,sanserif" color="#ffffff"> <a name="Fixed in Apache Tomcat 7.0.4 (released 21 Oct 2010)"> <!--()--> </a> @@ -470,14 +470,14 @@ </tr> <tr> <td> -<br/> +<br /> </td> </tr> </table> -<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<table width="100%" cellpadding="2" cellspacing="0" border="0"> <tr> <td bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica,sanserif"> +<font face="arial,helvetica,sanserif" color="#ffffff"> <a name="Fixed in Apache Tomcat 7.0.2 (released 11 Aug 2010)"> <!--()--> </a> @@ -529,14 +529,14 @@ </tr> <tr> <td> -<br/> +<br /> </td> </tr> </table> -<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<table width="100%" cellpadding="2" cellspacing="0" border="0"> <tr> <td bgcolor="#525D76"> -<font color="#ffffff" face="arial,helvetica,sanserif"> +<font face="arial,helvetica,sanserif" color="#ffffff"> <a name="Not a vulnerability in Tomcat"> <!--()--> </a> @@ -553,8 +553,8 @@ <p> <strong>Important: Remote Denial Of Service</strong> - <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-XXXX"> - CVE-2011-XXXX</a> + <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4476"> + CVE-2010-4476</a> </p> <p>A JVM bug could cause Double conversion to hang JVM when accessing to a @@ -614,7 +614,7 @@ </tr> <tr> <td> -<br/> +<br /> </td> </tr> </table> @@ -623,17 +623,17 @@ <!--FOOTER SEPARATOR--> <tr> <td colspan="2"> -<hr noshade="" size="1"/> +<hr size="1" noshade="" /> </td> </tr> <!--PAGE FOOTER--> <tr> <td colspan="2"> <div align="center"> -<font color="#525D76" size="-1"> +<font size="-1" color="#525D76"> <em> Copyright © 1999-2011, The Apache Software Foundation - <br/> + <br /> Apache Tomcat, Tomcat, Apache, the Apache feather, and the Apache Tomcat project logo are trademarks of the Apache Software Foundation. </em> Modified: tomcat/site/trunk/xdocs/security-5.xml URL: http://svn.apache.org/viewvc/tomcat/site/trunk/xdocs/security-5.xml?rev=1068787&r1=1068786&r2=1068787&view=diff ============================================================================== --- tomcat/site/trunk/xdocs/security-5.xml (original) +++ tomcat/site/trunk/xdocs/security-5.xml Wed Feb 9 08:25:51 2011 @@ -710,8 +710,8 @@ <section name="Not a vulnerability in Tomcat"> <p><strong>Important: Remote Denial Of Service</strong> - <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-XXXX"> - CVE-2011-XXXX</a></p> + <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4476"> + CVE-2010-4476</a></p> <p>A JVM bug could cause Double conversion to hang JVM when accessing to a form based security constrained page or any page that calls Modified: tomcat/site/trunk/xdocs/security-6.xml URL: http://svn.apache.org/viewvc/tomcat/site/trunk/xdocs/security-6.xml?rev=1068787&r1=1068786&r2=1068787&view=diff ============================================================================== --- tomcat/site/trunk/xdocs/security-6.xml (original) +++ tomcat/site/trunk/xdocs/security-6.xml Wed Feb 9 08:25:51 2011 @@ -648,8 +648,8 @@ <section name="Not a vulnerability in Tomcat"> <p><strong>Important: Remote Denial Of Service</strong> - <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-XXXX"> - CVE-2011-XXXX</a></p> + <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4476"> + CVE-2010-4476</a></p> <p>A JVM bug could cause Double conversion to hang JVM when accessing to a form based security constrained page or any page that calls Modified: tomcat/site/trunk/xdocs/security-7.xml URL: http://svn.apache.org/viewvc/tomcat/site/trunk/xdocs/security-7.xml?rev=1068787&r1=1068786&r2=1068787&view=diff ============================================================================== --- tomcat/site/trunk/xdocs/security-7.xml (original) +++ tomcat/site/trunk/xdocs/security-7.xml Wed Feb 9 08:25:51 2011 @@ -161,8 +161,8 @@ <section name="Not a vulnerability in Tomcat"> <p><strong>Important: Remote Denial Of Service</strong> - <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-XXXX"> - CVE-2011-XXXX</a></p> + <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4476"> + CVE-2010-4476</a></p> <p>A JVM bug could cause Double conversion to hang JVM when accessing to a form based security constrained page or any page that calls --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org