tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Remy Maucherat <>
Subject Re: [5.0.17] Tag tomorrow
Date Wed, 14 Jan 2004 16:00:06 GMT
Remy Maucherat wrote:
> Hi,
> I plan to tag 5.0.17 tomorrow.
> So there will be a fix for a DoS with SSL in this release (plus the XSS 
> "issue", but I'll only mention it in the changelog). I'll tag 4.1.30 a 
> little bit later (since it's supposed to be the really stable branch, it 
> can use some testing through 5.0.x).
> As for JSR 160 support, it'll have to wait for next time, unless it's 
> really easy to do (I'm going to try this afternoon). I plan to implement 
> it as a server listener, disabled by default (of course).

Everything seems ok (and the changelog is a lot bigger than what I 
though). I actually had forgotten one security issue: data corruption 
for incomplete small POSTs (and generally, mishandling of incomplete POSTs).

I'll tag soon.


To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message