tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Christopher Schultz <ch...@christopherschultz.net>
Subject Re: [ANN] Apache Tomcat Native 1.1.27 released
Date Wed, 13 Feb 2013 15:33:22 GMT
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

All,

On 2/13/13 1:01 AM, Mladen Turk wrote:
> The Apache Tomcat team announces the immediate availability of
> Apache Tomcat Native 1.1.27 stable.

It's worth mentioning that tcnative-1.1.27 is required in order to
configure Tomcat for the following features:

* SSLHonorCipherOrder [1]
* Enable FIPS mode with OpenSSL 1.0.1c [2]
* Disable TLS compression (thwarts CRIME attack) [3]

If any of the above affect you, I would highly recommend that you
upgrade at your earliest convenience.

- -chris

[1] http://issues.apache.org/bugzilla/show_bug.cgi?id=53481
[2] https://issues.apache.org/bugzilla/show_bug.cgi?id=54468
[3] https://issues.apache.org/bugzilla/show_bug.cgi?id=54324
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEAREIAAYFAlEbskIACgkQ9CaO5/Lv0PC0vwCeKOfTusD1g4Fp9jA3UIEoMAY8
NGkAoLdIo+3qiZTBLg4kbtsRAWwtAikg
=Tzhr
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Mime
View raw message