Hi,
Has Tomcat 5.5.28 been released?
I've never seen the release announce yet, but it seems
we can download it.
http://tomcat.apache.org/download-55.cgi
For changelog and status, they are still 5.5.27.
http://tomcat.apache.org/tomcat-5.5-doc/changelog.html
http://tomcat.apache.org/tomcat-5.
From: ma...@apache.org
Subject: Re: [SECURITY] CVE-2008-4308: Tomcat information disclosure
vulnerability
Date: Thu, 05 Mar 2009 12:45:10 +0100
> nambo.k...@oss.ntt.co.jp wrote:
> > Hi, Mark.
> >
> >> The unsupported Tomcat 3.x, 4.0.x and 5.0.x versions may be also affected
> > I checked Tomcat
Hi, Mark.
> The unsupported Tomcat 3.x, 4.0.x and 5.0.x versions may be also affected
I checked Tomcat 5.0.x source code and I've found that
org.apache.coyote.http11.filters.SavedRequestInputFilter is NOT included.
Does this mean Tomcat 5.0.x is not affected by this vulnerability?
Advice, please
