tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Mark Thomas <>
Subject Re: How to apply security patches.
Date Sat, 25 Jul 2009 10:07:51 GMT
Dave Thomson wrote:
> Does anyone have any suggestions on how to apply these security patches? Is
> it just a matter of copying the appropriate .jar files to the appropriate
> location while Tomcat is turned off?

You have two options.

1. Wait until 5.5.28 is released which should be in around a week and
then upgrade to 5.5.28.

2. Get the 5.5.27 source distribution. Apply the source code patches
listed for the vulnerabilities that affect your system. Build a local
version of Tomcat from this modified source. Upgrade to your locally
built Tomcat.


To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message