tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Bill Barker" <wbar...@wilshire.com>
Subject Re: [VOTE] [4.0.5] [4.1.12] Security releases
Date Mon, 23 Sep 2002 18:23:49 GMT

----- Original Message -----
From: "Remy Maucherat" <remm@apache.org>
To: "Tomcat Developers List" <tomcat-dev@jakarta.apache.org>
Sent: Monday, September 23, 2002 7:04 AM
Subject: [VOTE] [4.0.5] [4.1.12] Security releases


> A security vulnerability which affects all releases of Tomcat 4.x has
> been discovered.
>
> It is proposed that new Tomcat 4.0.x and 4.1.x releases are made, at
> which time the exploit will be publicized. The security advisory will
> also include an easy workaround to protect existing Tomcat
> installations, so upgrading is not a necessity.
>
> Tomcat 4.0.5 release
> --------------------
>
> Tomcat 4.0.5 is virtually indentical to 4.0.4, with the exception of:
> - a bugfix to URL parsing
> - the security fix
>
> <ballot>
> +1 [X] Yes, I approve this release
> -1 [ ] No, because:
>
> </ballot>
>
> Tomcat 4.1.12 Stable release
> ----------------------------
>
> Tomcat 4.1.12 includes all the changes made to Tomcat 4.1.10 since its
> release. Tomcat 4.1.11, on which the release is based, has recieved
> positive feedback so far. The list of changes is available in the
> release notes.
> It is proposed that it recieves a Stable rating. The existing 4.1.10
> release will be retired.
>
> <ballot>
> +1 [X] Yes, I approve this release
> -1 [ ] No, because:
>
> </ballot>
>
> The proposed binaries for 4.0.5 and 4.1.12 are available at:
> http://jakarta.apache.org/builds/jakarta-tomcat-4.0/release/v4.0.5/
> http://jakarta.apache.org/builds/jakarta-tomcat-4.0/release/v4.1.12/
>
> 4.0.5 was packaged on my new computer (which I have been using for all
> the 4.1.x releases), and may contain unwanted changes over 4.0.4. Please
> let me know if there are problems.
>
> Remy
>
>
> --
> To unsubscribe, e-mail:
<mailto:tomcat-dev-unsubscribe@jakarta.apache.org>
> For additional commands, e-mail:
<mailto:tomcat-dev-help@jakarta.apache.org>
>


--
To unsubscribe, e-mail:   <mailto:tomcat-dev-unsubscribe@jakarta.apache.org>
For additional commands, e-mail: <mailto:tomcat-dev-help@jakarta.apache.org>


Mime
View raw message