[java-sig-commits] [Bug 1069905] CVE-2013-4322 tomcat: incomplete fix for CVE-2012-3544