https://issues.apache.org/bugzilla/show_bug.cgi?id=54010
--- Comment #3 from Dongcai Shen <shensiu...@gmail.com> --- Thank Mark for your efforts. The credit of this vulnerability should be given to this bug report: https://issues.apache.org/bugzilla/show_bug.cgi?id=36883 They discovered the bug but only fixed in the httpd site and left the problem in tomcat intact. Now the problem at the tomcat part is also fixed. -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org