You are viewing a plain text version of this content. The canonical link for it is here.
Posted to general@jakarta.apache.org by Steffen Fries <st...@mchp.siemens.de> on 2002/02/27 16:33:20 UTC

Security Fixes?

Dear Ladies and Sirs, 

I've just got a question to available security fixes. I've seen 
that there are a number of security vulnerabilities listed for 
Tomcat under 
http://securitytracker.com/archives/target/420.html.
For some of the vulnerabilities there exist fixes. 
Unfortunately, I couldn't find a list on the jakarta web site 
showing, if there exists fixes for the known security issues 
and if there are already incorporated within the newest 
release.

Does the 4.0.1. Final Version of Tomcat include fixes for known 
security vulnerabilities?

With friendly regards

	Steffen 
Fries__________________________________________________________
_
Steffen Fries,     Siemens AG, CT IC 3	
Otto-Hahn-Ring 6,  D-81730 Munich, Germany 
Phone:  (+49) 89 / 636-53403, Fax  :  (+49) 89 / 636-48000
Email:  Steffen.Fries@mchp.siemens.de
___________________________________________________________
    This email was written on 100% recycled bytes!



--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>


RE: Security Fixes?

Posted by Gerhard Froehlich <g-...@gmx.de>.
The best place to post a question like this is the 
Tomcat list: 
http://jakarta.apache.org/site/mail.html
http://jakarta.apache.org/site/mail2.html

TIA

  ~Gerhard
 
"Eagles may soar, but weasels don't get 
sucked into jet engines.
(Todd C. Somers)"

>-----Original Message-----
>From: Steffen Fries [mailto:steffen.fries@mchp.siemens.de]
>Sent: Wednesday, February 27, 2002 4:33 PM
>To: general@jakarta.apache.org
>Subject: Security Fixes?
>
>
>Dear Ladies and Sirs, 
>
>I've just got a question to available security fixes. I've seen 
>that there are a number of security vulnerabilities listed for 
>Tomcat under 
>http://securitytracker.com/archives/target/420.html.
>For some of the vulnerabilities there exist fixes. 
>Unfortunately, I couldn't find a list on the jakarta web site 
>showing, if there exists fixes for the known security issues 
>and if there are already incorporated within the newest 
>release.
>
>Does the 4.0.1. Final Version of Tomcat include fixes for known 
>security vulnerabilities?
>
>With friendly regards
>
>	Steffen 
>Fries__________________________________________________________
>_
>Steffen Fries,     Siemens AG, CT IC 3	
>Otto-Hahn-Ring 6,  D-81730 Munich, Germany 
>Phone:  (+49) 89 / 636-53403, Fax  :  (+49) 89 / 636-48000
>Email:  Steffen.Fries@mchp.siemens.de
>___________________________________________________________
>    This email was written on 100% recycled bytes!
>
>
>
>--
>To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
>For additional commands, e-mail: <ma...@jakarta.apache.org>
>
>

--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>