Main | Next day (Aug 2, 2003) »
20030801 Friday August 01, 2003

[ANNOUNCE] Tomcat 4.1.27 Stable Released

The Tomcat Team announces the immediate availability of Apache Tomcat 4.1.27 Stable. Among other bugfixes and improvements, Tomcat 4.1.27 includes security fixes for:

- Improper recycling of SSL client certificates with Coyote JK 2
- Improper handling of invalid content lengths in requests, causing HTTP processors to be left in an invalid state in Coyote HTTP/1.1, causing a DoS condition
- URI normalization bug in Coyote
- Improper handling of certain URLs in Coyote JK 2, causing a DoS condition

Downloads: http://jakarta.apache.org/site/binindex.cgi

I upgraded this site this morning (from 4.1.24) - everything seems to be humming along just fine. Posted in Java at Aug 01 2003, 09:59:55 AM MDT Add a Comment