Tomcat build for the patch https://issues.apache.org/bugzilla/show_bug.cgi?id=47316#c3

["Krishnamurthi, Venkat " <ve...@citi.com>]

Hi,

Is there an alternative to building from source as mentioned in the workaround? Is there a tomcat build available for the patch reported here? If not, will it be available anytime soon? Please let us know.

Also, we are not using server.xml to start tomcat. We are use the embedded program interface for this process.

Thanks,
Venkat

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

Re: Tomcat build for the patch https://issues.apache.org/bugzilla/show_bug.cgi?id=47316#c3

[Mark Thomas <ma...@apache.org>]

Krishnamurthi, Venkat wrote:
> Hi,
> 
> Is there an alternative to building from source as mentioned in the workaround?
Pay someone to do it for you?

> Is there a tomcat build available for the patch reported here?
No.

> If not, will it be available anytime soon?
Releases happen when they happen. There may be a 6.0.21 fairly soon to
provide a workaround for CVE-2009-3555.

Mark

> Please let us know.
> 
> Also, we are not using server.xml to start tomcat. We are use the embedded program interface for this process.
> 
> Thanks,
> Venkat
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
> 




---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org