larryi 02/01/14 14:32:02 Modified: xdocs news.xml Log: Add announcement of Tomcat 3.3 being updated to 3.3.a Revision Changes Path 1.13 +18 -0 jakarta-tomcat-site/xdocs/news.xml Index: news.xml =================================================================== RCS file: /home/cvs/jakarta-tomcat-site/xdocs/news.xml,v retrieving revision 1.12 retrieving revision 1.13 diff -u -r1.12 -r1.13 --- news.xml 20 Nov 2001 17:46:09 -0000 1.12 +++ news.xml 14 Jan 2002 22:32:02 -0000 1.13 @@ -10,6 +10,24 @@ <section name="News & Status"> +<h3>14 January 2002 - Apache Tomcat 3.3 Updated to 3.3a</h3> + +<p><b>Important Notice:</b> The Tomcat 3.3 release has been updated to +3.3a to deal with a DOS vulnerability on Windows systems. The +vulnerability allows a special HTTP request to hang and never complete. +This prevents the thread handling the request from handling any further requests +until Tomcat is restarted. Other systems are not affected, and both +Tomcat 3.2.x and Tomcat 4.x do not have this vunerability.</p> + +<p>It is recommended that everyone using Tomcat 3.3 on a Windows system +upgrade to 3.3a. This is possible using the full Tomcat 3.3a binary +distribution, or by updating jar(s) in an existing Tomcat 3.3 installation. +These may be found +<a href="http://www.apache.org/dist/jakarta/jakarta-tomcat/release/v3.3/bin">here</a> +along with additional information.</p> + +<hr noshade="" size="1"/> + <h3>20 November 2001 - Apache Tomcat 3.2.4 Released</h3> <p>Tomcat 3.2.4 is now available for download
-- To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]> For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>