RE: potential thread? and what should we do?

2009-06-24 Thread Caldarale, Charles R
> From: Leon Rosenberg [mailto:rosenberg.l...@googlemail.com] > Subject: Re: potential thread? and what should we do? > > If your car is broken, do you buy a new one from a vendor, or do you > buy a "do it yourself" manual and separate parts and spend next > three ye

Re: potential thread? and what should we do?

2009-06-24 Thread Mark Thomas
Niki Diulgerov wrote: > Mark, > I used the build.xml downloaded from here > (http://tomcat.apache.org/tomcat-5.5-doc/build.xml). > Looking at it I can see that it checks out > http://svn.apache.org/repos/asf/tomcat/current/tc5.5.x (probably the > latest available revision). Correct, that is the la

Re: potential thread? and what should we do?

2009-06-24 Thread Leon Rosenberg
A bit of advice... Its much less risky and complicated to take the last 6.0.x version, namely 6.0.20, instead of building what will become your unique personal tomcat version r-something. If your car is broken, do you buy a new one from a vendor, or do you buy a "do it yourself" manual and separa

Re: potential thread? and what should we do?

2009-06-24 Thread Niki Diulgerov
Mark, I used the build.xml downloaded from here (http://tomcat.apache.org/tomcat-5.5-doc/build.xml). Looking at it I can see that it checks out http://svn.apache.org/repos/asf/tomcat/current/tc5.5.x (probably the latest available revision). Please advice me does it contain the latest approved pat

Re: potential thread? and what should we do?

2009-06-24 Thread Mark Thomas
Niki Diulgerov wrote: > After doing some reading of the documentation I found that these bugs > are fixed in the SVN repository. Also checking out the latest source I > can see that it is revision (Checked out revision 787991) and tomcat is > with version 5.5.28. > Following the simple instructions

Re: potential thread? and what should we do?

2009-06-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Nikolay, On 6/24/2009 4:20 AM, Niki Diulgerov wrote: > Does this means that 5.5.x is no more developed, and there will be no > new versions in the 5.5 branch ? http://wiki.apache.org/tomcat/TomcatVersions - -chris -BEGIN PGP SIGNATURE- Versi

Re: potential thread? and what should we do?

2009-06-24 Thread Niki Diulgerov
After doing some reading of the documentation I found that these bugs are fixed in the SVN repository. Also checking out the latest source I can see that it is revision (Checked out revision 787991) and tomcat is with version 5.5.28. Following the simple instructions on the site (http://tomcat.

Re: potential thread? and what should we do?

2009-06-24 Thread David kerber
Niki Diulgerov wrote: Hello there, recently I'm reading in the security news channels that there are discovered "multiple vulnerabilities" in tomcat and almost all versions are affected. For example these news from today: http://www.linuxsecurity.com/content/view/149201?rdf On the other side,

Re: potential thread? and what should we do?

2009-06-24 Thread André Warnier
André Warnier wrote: Leon Rosenberg wrote: I'm probably the wrong person to answer this, ... Me too, but a pretty detailed overview of these matters is always available here : http://tomcat.apache.org/whichversion.html and here : http://tomcat.apache.org/security.html All these links are a

Re: potential thread? and what should we do?

2009-06-24 Thread André Warnier
Leon Rosenberg wrote: I'm probably the wrong person to answer this, ... Me too, but a pretty detailed overview of these matters is always available here : http://tomcat.apache.org/whichversion.html - To unsubscribe, e-mail: u

Re: potential thread? and what should we do?

2009-06-24 Thread Leon Rosenberg
I'm probably the wrong person to answer this, but there will be patches and updates to 5.5.x as there are for even 4.1.x, but the general development is moving along to tomcat 7, so 5.5.x is an outdated model. However, for almost all webapps the migration to 6.0.x is rather smooth (I've had an iss

Re: potential thread? and what should we do?

2009-06-24 Thread Niki Diulgerov
Does this means that 5.5.x is no more developed, and there will be no new versions in the 5.5 branch ? Best regards, Nikolay Diulgerov Network Administrator E-mail: ndiulge...@imx.fr Telephone : +33 4 89 87 77 77 Fax : +33 4 89 87 77 00 Web: http://www.codix-france.com Leon Rosenberg

Re: potential thread? and what should we do?

2009-06-24 Thread Leon Rosenberg
The latest version of tomcat is 6.0.20 and its about one month old. http://tomcat.apache.org/download-60.cgi#6.0.20 enjoy :-) Leon On Wed, Jun 24, 2009 at 10:06 AM, Niki Diulgerov wrote: > Hello there, > recently I'm reading in the security news channels that there are discovered > "multiple vu

potential thread? and what should we do?

2009-06-24 Thread Niki Diulgerov
Hello there, recently I'm reading in the security news channels that there are discovered "multiple vulnerabilities" in tomcat and almost all versions are affected. For example these news from today: http://www.linuxsecurity.com/content/view/149201?rdf On the other side, I can see that the lat