Re: [SECURITY] Security Vulnerabilities in Tomcat 3.1 and 3.2

[Glenn Nielsen]

"Craig R. McClanahan" wrote:
> 
> Glenn Nielsen wrote:
> 
> > Very shortly I will have some updated documents for configuring Tomcat to use
> > the Java SecurityManager under various flavors of MS Windows.  I would like
> > to get this into the 3.2.1 release.
> >
> > +1 If you can hold off a day so I can get these documents updated
> >
> 
> I would be really uncomfortable holding off security related fixes for "feature"
> improvements (or even bug fixes), when we can roll a 3.2.2 release as soon as the
> changes are committed and tested.  Keep in mind that we're bypassing the usual "beta
> test" period if we release 3.2.1 ASAP, so adding lots of things creates some measure
> of risk.
> 

Thats fine, it can wait.

+1 on ASAP release of 3.2.1

Glenn

----------------------------------------------------------------------
Glenn Nielsen             [EMAIL PROTECTED] | /* Spelin donut madder    |
MOREnet System Programming               |  * if iz ina coment.      |
Missouri Research and Education Network  |  */                       |
----------------------------------------------------------------------