The source are still missing in :
http://jakarta.apache.org/builds/jakarta-tomcat-4.0/release/v4.0-b3/src/
Regards.
>Tomcat 4.0-beta-3 is an update to the Tomcat 4.0-beta-2
>distribution that
>was released on 30 March 2001. It fixes a further security
>vulnerability
>related to potentially exposing JSP source that was only partially
>corrected in beta 2. Anyone using versions of Tomcat 4.0
>earlier than the
>beta 3 release (or the nightly build dated 20010403 or later)
>is strongly
>encouraged to immediately update to the beta 3 release.
>
>Craig McClanahan
>
>
