-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Max,

On 3/4/16 2:35 PM, Max Lynch wrote:
> Hi there,
> 
> We have a very heavily used implementation of modjk 1.2.35 running
> in Apache 2.2.15

<snip>

> We're posting this here to try and gather more data. Our process
> prohibits an upgrade of any kind without plenty of evidence
> supporting our position.

You might want to upgrade httpd just based upon the series of CVEs
that have been fixed between 2.2.15 and current 2.2.31.

- -chris
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAlbaBlUACgkQ9CaO5/Lv0PCbsgCeLdWCya/nKXj1eEZwHkzlYunp
4gcAniBzlcG4K4vj+fBORsNE/CFNBmW2
=FLcO
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to