Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

The default error pages in tomcat7 displays information about the hosting system. And before version 7.0.29 there was not much one could do about it (unless using tomcat 5 or 6).

The way of hiding such information was to use custom error-handlers defined in context or webapp. In tomcat7 it was not possible (beacuse of confusion regarding the servlet 3.0 spec), but it was reported as a bug https://issues.apache.org/bugzilla/show_bug.cgi?id=52135 and then fixed for version 7.0.29.

In my mind this is a security feature so why isn't the version on Ubuntu 12.04 patched with this fix?

share|improve this question
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.