RE: CVE-2017-6056.

2017-02-24 Thread Caldarale, Charles R
> From: Paralos Trainings [mailto:paralostranin...@gmail.com] > Subject: CVE-2017-6056. > I'd like to know if the latest version of Tomcat 7 and Tomcat 8 are > affected by CVE-2017-6056. Real Tomcat releases (downloaded from tomcat.apache.org) are not affected. Some 3rd

CVE-2017-6056.

2017-02-24 Thread Paralos Trainings
I’d like to know if the latest version of Tomcat 7 and Tomcat 8 are affected by CVE-2017-6056. If so, when is the update to fix the vulnerability going to be released. I couldn’t find the reference on any of the vulnerabilities pages: https://tomcat.apache.org/security.html Thanks. PT