Package: tomcat7 Severity: grave Tags: security Please see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2526 http://tomcat.apache.org/security-7.html The same applies to Tomcat 6 and Tomcat 5.5 Cheers, Moritz