Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: pass (athena.apache.org: local policy)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=s1024; d=yahoo.com;
  h=X-YMail-OSG:Received:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding;
  b=S775fmTjFaiIwh9m6h8VlZDF3mCqZxFnRFTAIhoLueh+k2fI0HK1VUVEynFUHvpRkhmZ0eSImsgz88Vq3OpjaoeGTwC+sXw4TlXGZubOsxOAsnB2rmQSQ3Bb/YpHOj52gCaaUixZcRPrk3ojkd3fEM8w+/N7O/uykx/M+yVA0UE=;
References: 
 <OF757E6AE0.7A7DD45F-ON85257922.00580268-85257922.0058A9EB@csc.com>
Message-ID: <1318014354.31269.YahooMailNeo@web125520.mail.ne1.yahoo.com>
Date: Fri, 7 Oct 2011 12:05:54 -0700 (PDT)
From: Mark Eggers <its_toasted@yahoo.com>
Reply-To: Mark Eggers <its_toasted@yahoo.com>
Subject: Re: Adding Revisions
To: Tomcat Users List <users@tomcat.apache.org>
In-Reply-To: 
 <OF757E6AE0.7A7DD45F-ON85257922.00580268-85257922.0058A9EB@csc.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

----- Original Message -----=0A=0A> From: Brendan P Keenan <bkeenan@csc.com=
>=0A> To: users@tomcat.apache.org=0A> Cc: =0A> Sent: Friday, October 7, 201=
1 9:08 AM=0A> Subject: Adding Revisions=0A> =0A> =0A> I apologise if this h=
as been answered somewhere else but I just haven't=0A> been able to find it=
...=0A> =0A> Server is running Windows 2003 R2 SP2=0A> Tomcat 6.0.33=0A> =
=0A> I need to mitigate CVE-2011-3190. It appears revision 1162959 fixes it=
.=0A> =0A> I cannot find how to apply 1162959. Hopefully someone can tell m=
e the steps=0A> or point me to documentation=0A> Thanks=0A> =0A> =0A> =0A> =
Brendan P Keenan=0A> Mainframe Automation=0A> CSC=0A>=0A=0ACould you use on=
e of the two mitigation recommendations?=0A=0AThe announcement:=0A=0Ahttp:/=
/tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.34_(not_yet_r=
eleased)=0A=0A=0AIf you're using mod_jk, then the following two links gives=
 you detailed configuration information.=0A=0Ahttp://tomcat.apache.org/tomc=
at-6.0-doc/config/ajp.html=0A=0Ahttp://tomcat.apache.org/connectors-doc/ref=
erence/workers.html=0A=0A=0AIf you're using mod_proxy_ajp or mod_jk earlier=
 than 1.2.12 (upgrade), then you can change the AJP connector protocol to=
=A0org.apache.jk.server.JkCoyoteHandler as per the announcement.=0A=0A. . .=
 . just my two cents.=0A/mde/

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org