Return-Path: Delivered-To: apmail-tomcat-dev-archive@www.apache.org Received: (qmail 82564 invoked from network); 6 Jan 2010 06:48:30 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3) by minotaur.apache.org with SMTP; 6 Jan 2010 06:48:30 -0000 Received: (qmail 78184 invoked by uid 500); 6 Jan 2010 06:48:29 -0000 Delivered-To: apmail-tomcat-dev-archive@tomcat.apache.org Received: (qmail 78086 invoked by uid 500); 6 Jan 2010 06:48:29 -0000 Mailing-List: contact dev-help@tomcat.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: "Tomcat Developers List" Delivered-To: mailing list dev@tomcat.apache.org Received: (qmail 78075 invoked by uid 99); 6 Jan 2010 06:48:29 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 06 Jan 2010 06:48:28 +0000 X-ASF-Spam-Status: No, hits=0.2 required=10.0 tests=RCVD_IN_DNSWL_LOW,SPF_NEUTRAL X-Spam-Check-By: apache.org Received-SPF: neutral (nike.apache.org: local policy) Received: from [213.191.128.81] (HELO mxout2.iskon.hr) (213.191.128.81) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 06 Jan 2010 06:48:19 +0000 Received: from mxscanout.iskon.hr (localhost [127.0.0.1]) by localhost (Postfix) with SMTP id CBF773342E7 for ; Wed, 6 Jan 2010 07:47:57 +0100 (CET) Received: from mx.iskon.hr (unknown [213.191.142.123]) by mxscanout.iskon.hr (Postfix) with SMTP id BB31236A896 for ; Wed, 6 Jan 2010 07:47:56 +0100 (CET) Received: (qmail 4609 invoked from network); 6 Jan 2010 07:47:56 +0100 X-Remote-IP: 89.164.30.207 Received: from 30-207.dsl.iskon.hr (HELO fc12x32m0.jboss.hr) (89.164.30.207) by mx.iskon.hr with SMTP; 6 Jan 2010 07:47:56 +0100 Message-ID: <4B44321A.6050400@apache.org> Date: Wed, 06 Jan 2010 07:47:54 +0100 From: Mladen Turk User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1.5) Gecko/20091209 Fedora/3.0-4.fc12 Thunderbird/3.0 MIME-Version: 1.0 To: Tomcat Developers List Subject: Re: [VOTE] Release Apache Tomcat Native 1.1.19 References: <4B4351CF.7050900@apache.org> <427155181001051621j477603cbo4db30945e3134a44@mail.gmail.com> In-Reply-To: <427155181001051621j477603cbo4db30945e3134a44@mail.gmail.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Scanned-By: IskonProtect X-Virus-Checked: Checked by ClamAV on apache.org On 01/06/2010 01:21 AM, Konstantin Kolinko wrote: > 2010/1/5 Mladen Turk: >> Hi, >> >> Native 1.1.19 is available for testing. >> Compared with 1.1.18 It has minor versioning fix and allows building against >> OpenSSL 1.0 (well Rainer beat me before the tag :) >> >> If you want to take a look, the final source distribution can be >> downloaded from: >> >> http://tomcat.apache.org/dev/dist/tomcat-connectors/native/source/1.1.19 >> (until synced the builds are available at) >> http://people.apache.org/~mturk/native/source/1.1.19 >> >> Win32/Win64 binaries will be available at: >> http://tomcat.apache.org/dev/dist/tomcat-connectors/native/binaries/ >> >> So here's the vote. >> It will be closed in about 72 hours >> (or sooner if enough votes are encountered) >> >> >> Apache Tomcat Native 1.1.19 is: >> >> [ ] Stable - no major issues, no regressions >> [ ] Beta - at least one significant issue -- tell us what it is >> [ ] Alpha - multiple significant issues -- tell us what they are >> >> Regards >> -- >> ^TM >> > > I see that the Windows binaries are built with OpenSSL 0.9.8k: > > ( 1) "openssl.exe version" prints that number, > 2) looking for "0.9.8" string inside the DLLs I see that number.) > > Wasn't it supposed to be 0.9.8l ? > Nope. 0.9.8l is broken, so we switched back to 0.9.8k You might check the OpenSSL dev archive (and our own about that subject) We have a patch in 1.1.18 that fully covers the CVE-2009-3955 like in mod_ssl. Regards -- ^TM --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org For additional commands, e-mail: dev-help@tomcat.apache.org