Apache Tomcat Board Report, December 2006

[Yoav Shapira <yo...@apache.org>]

Apache Tomcat Board Report, December 2006
-------------------------------------------------------------------
Issues requiring the Board's attention: none.

Development
------------------
Work continues apache on Tomcat 6 and the mod_jk connector.  Both
products have done multiple alpha- and beta-level releases since the
last Board report.  Both have received increased testing from the
committers as well as outside contributors, resulting in some
interesting issues discovered and addressed.  We hope to have a stable
mod_jk release, 1.2.20, in the next week or two, as well as another
alpha-level build of Tomcat (6.0.6), and the first stable Tomcat 6
release before the next Board report.

Several of the fixes found in Tomcat 6 have been back-ported to Tomcat
5.x as well, but there has been no 5.x release since 5.5.20 in September.

Security
------------
On December 7th a possible security issue was reported to us by the
Struts PMC, which had been notified of it earlier.  After some
discussion, we concluded this was a fairly minor issue with
responsibility on both the Tomcat and Struts sides.  There was a patch
available in SVN within a day or so, and it was back-ported to
previous Tomcat branches as well.  I think we were all pretty pleased
with the efficiency and speed of communication between the projects.

Because the issue has yet to be publicly announced and this Board
report may become public before the issue is announced, we are
omitting the actual details here.  The Tomcat PMC will be glad to
provide any details required, and the discussions are archived on the
mailing list archives of private@tomcat.apache.org,
private@struts.apache.org, and security@tomcat.apache.org.

Trademarks / Legal
----------------------------
A couple of days ago we noted that
http://www.octazen.com/product_tomcatnet.html was calling their
product Tomcat.NET.  We contacted them, CCing the PRC for its records,
and Octazen immediately agreed to relabel their product and clarify
the page as to their relationship to Apache Tomcat.  So this issue was
resolved pleasantly and quickly.

Community
----------------
Not much going on here: no new committers, no new PMC members, but no
one resigning or leaving either ;)

Thanks on behalf of the Tomcat PMC,
Yoav

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org