[Security - CVE] Tomcat version of MeDC and MeDC MSP

[Security - CVE] Tomcat version of MeDC and MeDC MSP

Hello,

Following these CVE :
CVE-2018-8037 : http://mail-archives.us.apache.org/mod_mbox/www-announce/201807.mbox/%3C20180722090623.GA92700%40minotaur.apache.org%3E
CVE-2018-1336 : http://mail-archives.us.apache.org/mod_mbox/www-announce/201807.mbox/%3C20180722090435.GA60759%40minotaur.apache.org%3E

Can we know what is the actual versions of both MeDC products?
Do you plan to release a quick fix?

Thanks.
Sylvain