How I can upgrade tomcat ship with JBoss

2010-11-02 Thread wwtfu
Hi all, Does anyone know how I can upgrade the Tomcat ship with JBoss? My current version of Tomcat is 5.5.9 and need to upgrade to at least 5.5.28 to resolve the vulnerability issue. Appreciate all your advise. Thanks, FU

Re: Help on upgrade tomcat bundled with JBoss for resolving tomcat security issue -[SECURITY] CVE-2008-5515 RequestDispatcher directory traversal vulnerability

2010-10-25 Thread wwtfu
Yes. Thanks & regards, Wilson Fu Tel: 3182 6675 ww...@ogcio.gov.hk 26.10.2010 10:42 Please respond to "Tomcat Users List" To users@tomcat.apache.org cc Subject Help on upgrade tomcat bundled with JBoss for resolving tomcat security issue -[SECURITY] CVE-2008-5515 RequestDispatcher direc

Help on upgrade tomcat bundled with JBoss for resolving tomcat security issue -[SECURITY] CVE-2008-5515 RequestDispatcher directory traversal vulnerability

2010-10-25 Thread wwtfu
Dear Sir/Madam, Recently it has been checked that there is security vulnerability for the tomcat (version 5.0.9) shipped with the JBoss 4.0.3SP1. >From the link below, it is recommended to upgrade to 5.5.28. http://marc.info/?l=tomcat-user&m=124449799021571&w=2 We have tried to upgrade the