Hi Based on the apache security reports i dont see any mention of these CVEs b= eing fixed in tomcat, and as they have a very high score i would like to kn= ow if they have been fixed. These are almost 3-4 years old but as i dont see any mention on them in the= security reports i would still like to know as im planning to use this con= tainer in an environment where security is very important.
CVE-2011-1571 CVE-2010-0557 -- BR, chris
