Re: [DSA 2160-1] tomcat6 security update

2011-02-14 Thread Moritz Mühlenhoff
moog schrieb: > Hi, > > DSA 2160-1 is about CVE-2010-3718, CVE-2011-0013 and CVE-2011-0534. It says > "The oldstable distribution (lenny) is not affected by these issues." I > wonder > if that's mistaken, because says: > > CVE-2010-3718 ... Affects: 6.

[DSA 2160-1] tomcat6 security update

2011-02-14 Thread moog
Hi, DSA 2160-1 is about CVE-2010-3718, CVE-2011-0013 and CVE-2011-0534. It says "The oldstable distribution (lenny) is not affected by these issues." I wonder if that's mistaken, because says: CVE-2010-3718 ... Affects: 6.0.0-6.0.29 CVE-2011-0013 ...