[java-sig-commits] [Bug 1311085] New: CVE-2015-5346 Apache Tomcat Session fixation