[java-sig-commits] [Bug 1376712] CVE-2016-1240 tomcat: unsafe chown of catalina.log in tomcat init script allows privilege escalation