[Bug 1449975] Re: Security bugs are never fixed in the tomcat packages

[Marc Deslauriers]

Thanks for reporting this issue.

You can track the security updates for tomcat 7 here:
http://people.canonical.com/~ubuntu-security/cve/pkg/tomcat7.html

CVE-2014-0075, CVE-2014-0096 and CVE-2014-0099 have been published for trusty in this advisory:
http://www.ubuntu.com/usn/usn-2302-1/

CVE-2014-0119, CVE-2014-0227 and CVE-2014-0230 have been rated as being
"low" priority, which means we will include them in a security update
once a more important issue comes up.

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2014-0230

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1449975

Title:
  Security bugs are never fixed in the tomcat packages

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/tomcat7/+bug/1449975/+subscriptions