Hello All I have a java application where I use Apache catalina springsource OSGI bundle ( *com.springsource.org.apache.catalina.springsource-6.0.20.S2-r5956.jar*) to configure and start tomcat and register tomcat as an OSGI service to my application. Now I have to migrate to tomcat of latest version which has security vulnerabilities issued fixed ( http://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.43). Looking at Apache Tomcat website, they have released latest version of tomcat 6.0.43 where they have fixed many of the security vulnerabilities. But I see the latest release of Apache catalina springsource bundle is com.springsource.org.apache.catalina.springsource v6.0.32 ( http://ebr.springsource.com/repository/app/search?query=com.springsource.org.apache.catalina.springsource ).
My questions are 1) What is the apache tomcat version matches to com.springsource.org.apache.catalina.springsource v6.0.32. Does it match Apache Tomcat v6.0.32 ? 2) I don't see com.springsource.org.apache.catalina.springsource bundle for version 6.0.43. What is the plan for springsource to release bundle for version 6.0.43 ? 3) Do apache provide any OSGi bundle (including coyote, jasper and other related bundles), on version 6.0.43 which I can use in my OSGi container and register and use tomcat as an OSGi service ? Thanks and Regards ------------------------------- Raghavendra Neelekani
