Ubuntu
tomcat7 package

  1. Bug #1449975
  2. Comment #1

Comment 1 for bug 1449975

Revision history for this message
Marc Deslauriers (mdeslaur) wrote : Re: Security bugs are never fixed in the tomcat packages

Thanks for reporting this issue.

You can track the security updates for tomcat 7 here:
http://people.canonical.com/~ubuntu-security/cve/pkg/tomcat7.html

CVE-2014-0075, CVE-2014-0096 and CVE-2014-0099 have been published for trusty in this advisory:
http://www.ubuntu.com/usn/usn-2302-1/

CVE-2014-0119, CVE-2014-0227 and CVE-2014-0230 have been rated as being "low" priority, which means we will include them in a security update once a more important issue comes up.