[jira] Updated: (OFBIZ-3424) Upgrade Tomcat version to 6.0.24

["Jacques Le Roux (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/OFBIZ-3424?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jacques Le Roux updated OFBIZ-3424:
-----------------------------------

    Priority: Major  (was: Blocker)

I don't think we can say this issue is a blocker. For the newer version, yes why not using the last one indeed?

> Upgrade Tomcat version to 6.0.24
> --------------------------------
>
>                 Key: OFBIZ-3424
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-3424
>             Project: OFBiz
>          Issue Type: Improvement
>          Components: framework
>    Affects Versions: SVN trunk
>            Reporter: Erwan de FERRIERES
>             Fix For: SVN trunk
>
>         Attachments: OFBIZ-3424.diff, tomcat-6.0.24-annotations-api.jar, tomcat-6.0.24-catalina-ha.jar, tomcat-6.0.24-catalina-tribes.jar, tomcat-6.0.24-catalina.jar, tomcat-6.0.24-el-api.jar, tomcat-6.0.24-jasper-el.jar, tomcat-6.0.24-jasper-jdt.jar, tomcat-6.0.24-jasper.jar, tomcat-6.0.24-jsp-api.jar, tomcat-6.0.24-servlet-api.jar, tomcat-6.0.24-tomcat-coyote.jar, tomcat-6.0.24-tomcat-dbcp.jar, tomcat-6.0.24-tomcat-juli.jar
>
>
> 3 security issues have been released today for Tomcat, asking to migrate to the latest version :
> CVE-2009-2902: Apache Tomcat unexpected file deletion in work directory
> CVE-2009-2901: Apache Tomcat insecure partial deploy after failed undeploy
> CVE-2009-3548: Apache Tomcat unexpected file deletion and/or alteration

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira