Re: Does CVE-2014-8157 affect tomcat?

2015-02-03 Thread nakagawa....@gmail.com
Relieved to know that. Thank you Mark! Mai Nakagawa On Tue, Feb 3, 2015 at 6:26 PM, Mark Thomas wrote: > On 03/02/2015 09:15, nakagawa....@gmail.com wrote: > > Hi there, > > > > Does CVE-2014-8157 affect tomcat? The security vulnerability was found in > > the way

Does CVE-2014-8157 affect tomcat?

2015-02-03 Thread nakagawa....@gmail.com
Hi there, Does CVE-2014-8157 affect tomcat? The security vulnerability was found in the way JasPer decoded JPEG 2000 as follows: https://bugzilla.redhat.com/show_bug.cgi?id=1179282 I know tomcat bundles jasper, so I want to know if the vulnerability affects tomcat. Cheers, Mai Nakagawa