Debian Security Advisory

DLA-91-2 tomcat6 -- LTS security update

Date Reported:
19 Jan 2015
Affected Packages:
tomcat6
Vulnerable:
Yes
Security database references:
No other external database security references currently available.
More information:

This update fixes a NoSuchElementException when an XML attribute has an empty string as value.

For Debian 6 Squeeze, these issues have been fixed in tomcat6 version 6.0.41-2+squeeze6