tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Craig R. McClanahan" <craig...@apache.org>
Subject [ANNOUNCEMENT] Tomcat 4.0-beta-7 Released
Date Fri, 10 Aug 2001 06:01:58 GMT
A release candidate version of Tomcat 4.0, version "beta 7", has been
released.  This version conforms to the Proposed Final Draft 3 version of
the Servlet 2.3 and JSP 1.2 specifications, which will go final soon, and
incorporates all of the latest bugfixes.

In addition, for users who run Tomcat 4.0 on Windows 9x, this release
fixes a security vulnerability that allows users to browse the directory
tree above the web application's context root by using request URIs
including three or more dots ("/...").  Users running on Win2K and Unix
systems are *not* susceptible to this vulneratibility.

In addition, as with the previous version, an installer-based version of
Tomcat 4.0-beta-7 is available for Windows users, as well as native code
versions of the mod_webapp connector for Apache.

Binary distributions are available at:

  http://jakarta.apache.org/builds/jakarta-tomcat-4.0/release/v4.0-b7/

Source distributions are available at:

  http://jakarta.apache.org/builds/jakarta-tomcat-4.0/release/v4.0-b7/src/

Craig McClanahan



Mime
View raw message