RE: [SECURITY] Security Vulnerabilities in Tomcat 3.1 and 3.2

[GOMEZ Henri]

>> Proposal #1:  Release a Tomcat 3.1.1 that fixes *only* the security
>> problems
>
+1

I'll still be for security updates but release a 3.1.1 could make
some users thinking the 3.1 tree is still alive. Could be disturbing
some days after 3.2 release.

>
>
>> Proposal #2:  Release a Tomcat 3.2.1 that fixes the 
>following security
>> problems
>> plus the patches committed to date.
>
+ 1

I've also fixed ajp13/multiples cookies. Will it be included ?