Comment 6 for bug 1073159

Revision history for this message
H.-Dirk Schmitt (dirk-computer42) wrote : Re: Please backport tomcat7 7.0.34 (main) from raring to precise (and quantal)

Due to the following security problems the current 7.0.34 should be backported.

* CVE-2012-4431 Apache Tomcat Bypass of CSRF prevention filter (fixed > 7.0.31, affects quantal and precise)
* CVE-2012-3546 Apache Tomcat Bypass of security constraints (fixed > 7.0.29, affects precise)
* CVE-2012-4534 Apache Tomcat denial of service (fixed > 7.0.28, affects precise)