On Thu, Apr 10, 2014 at 2:10 PM, Ji Song <s...@glimmerglass.com> wrote:
> > > Hi, > > > > Does heartbleeding bug impact on Tomcat 6.x, 7.x and 8.x ? I noticed that > Tomcat native connector version 1.1.22 uses : OpenSSL 0.9.8 which doesn't > have the heartbleeding bug, but 1.1.24 and 1.1.29 also include the buggy > openssl. > > > > How can I find which version of Tomcat uses which version of Tomcat > native connector ? For example, how can I figure out which version of > Tomcat native connector is used by Tomcat 7.0 build 47. > > > Look here: http://svn.apache.org/repos/asf/tomcat/tc7.0.x/tags/TOMCAT_7_0_47/build.properties.default Scroll to the # ----- Tomcat native library ----- section
