On Sat, Jul 25, 2020, 09:55 Darryl Philip Baker < darryl.ba...@northwestern.edu> wrote:
> We have switched from using the Red Hat supplied version of Tomcat to the > Apache supplied binary distribution. My management would like me to follow > any CVE related to Tomcat. I am wondering if there is a mailing list, I can > subscribe to that will give me just those items. > http://tomcat.apache.org/lists.html#tomcat-announce "The list is used to announce Tomcat releases, security vulnerabilities and other project announcements."