CVE-2014-0230 CVE-2014-7810 http://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.44
A commit references this bug: Author: delphij Date: Tue Jun 16 00:38:33 UTC 2015 New revision: 389780 URL: https://svnweb.freebsd.org/changeset/ports/389780 Log: Security update to 6.0.44. PR: 200275 MFH: 2015Q2 Approved by: maintainer timeout Changes: head/www/tomcat6/Makefile head/www/tomcat6/distinfo head/www/tomcat6/pkg-plist
A commit references this bug: Author: delphij Date: Tue Jun 16 00:39:10 UTC 2015 New revision: 389781 URL: https://svnweb.freebsd.org/changeset/ports/389781 Log: MFH: r389780 Security update to 6.0.44. PR: 200275 Approved by: ports-secteam Changes: _U branches/2015Q2/ branches/2015Q2/www/tomcat6/Makefile branches/2015Q2/www/tomcat6/distinfo branches/2015Q2/www/tomcat6/pkg-plist
Fixed in HEAD and 2015Q2.