[ANN] Security update: Apache Tomcat 3.3.1a released

2003-01-25 Thread Larry Isaacs
Tomcat 3.3.1a has been released to address the following two vulnerabilities found in Tomcat 3.3.1 and earlier. This includes Tomcat 3.2.4 and earlier. Tomcat 4.0.4, 4.0.6, 4.1.12, 4.1.18, and 4.1.19 have been checked and do not have these vulnerabilities. Vulnerability where, when used with JDK

cvs commit: jakarta-tomcat-site/docs news.html

2003-01-25 Thread larryi
larryi 2003/01/25 19:56:35 Modified:docs news.html Log: Add note about Tomcat 3.3.1a security update Revision ChangesPath 1.34 +14 -1 jakarta-tomcat-site/docs/news.html Index: news.html =

cvs commit: jakarta-tomcat-site/xdocs news.xml

2003-01-25 Thread larryi
larryi 2003/01/25 19:56:11 Modified:xdocsnews.xml Log: Add note about Tomcat 3.3.1a security update Revision ChangesPath 1.26 +15 -0 jakarta-tomcat-site/xdocs/news.xml Index: news.xml ===

cvs commit: jakarta-tomcat RELEASE-NOTES-3.3.2.txt

2003-01-25 Thread larryi
larryi 2003/01/25 19:16:30 Modified:.RELEASE-NOTES-3.3.2.txt Log: Add update made to DecodeInterceptor Revision ChangesPath 1.17 +4 -1 jakarta-tomcat/RELEASE-NOTES-3.3.2.txt Index: RELEASE-NOTES-3.3.2.txt =

cvs commit: jakarta-tomcat/src/share/org/apache/tomcat/modules/mappers DecodeInterceptor.java

2003-01-25 Thread larryi
larryi 2003/01/25 19:06:43 Modified:src/share/org/apache/tomcat/modules/mappers DecodeInterceptor.java Log: Treat the presence of null characters in the URL path as unsafe. Revision ChangesPath 1.19 +4 -0 jakarta-tomcat/src/share/org/ap

cvs commit: jakarta-tomcat build.xml

2003-01-25 Thread larryi
larryi 2003/01/25 19:05:33 Modified:.build.xml Log: Update commons-logging default version and add commons-modeler properties. Pass commons-modeler to http11 build. Update tomcat-ant.jar build to use one jar task. I had strange rename problems in my gump build on

cvs commit: jakarta-tomcat-connectors/jk build.xml

2003-01-25 Thread larryi
larryi 2003/01/25 19:00:23 Modified:jk build.xml Log: Allow servlet-api.jar location to be more flexible Revision ChangesPath 1.64 +2 -1 jakarta-tomcat-connectors/jk/build.xml Index: build.xml ===

Re: cvs commit: jakarta-tomcat-connectors/util/java/org/apache/to mcat/util/threads ThreadPool.java ThreadPoolMX.java

2003-01-25 Thread Sam Ruby
Ignacio J. Ortega wrote: Bill, we will need another gump descriptor to build "coyote_10" tag jtc sources obviously, to allow tc33 to be gumped correctly? Anyone with more knowledge of gump can help ? Clone the existing module descriptor. Change the module name. Add a "module=" and a "tag=" on

RE: cvs commit: jakarta-tomcat-connectors/util/java/org/apache/tomcat/util/threads ThreadPool.java ThreadPoolMX.java

2003-01-25 Thread Ignacio J. Ortega
Bill, we will need another gump descriptor to build "coyote_10" tag jtc sources obviously, to allow tc33 to be gumped correctly? Anyone with more knowledge of gump can help ? > billbarker2003/01/24 20:49:24 > > Modified:util/java/org/apache/tomcat/util/threads Tag: coyote_10 >

Re: Question about duplication of secure property in RequestBaseand HttpRequestBase

2003-01-25 Thread Tim Funk
org.apache.catalina.connector.RequestBase implements ServletRequest. http://jakarta.apache.org/tomcat/tomcat-4.0-doc/catalina/docs/api/org/apache/catalina/connector/RequestBase.html And isSecure is part of the interface of ServletRequest. http://java.sun.com/products/servlet/2.3/javadoc/javax/serv

RE: [GUMP] Build Failure - Tomcat 3.x

2003-01-25 Thread Ignacio J. Ortega
Bill, > Nacho: This has been working, like, forever (which with > Costin's Modeler > changes, is saying something :).If you did a straight > copy-over, then it > should still on commons-logging. > Hmmm, I dont completely understand you, i think, worked prior to the move? it should work

Re: [GUMP] Build Failure - Tomcat 3.x

2003-01-25 Thread Bill Barker
Nacho: This has been working, like, forever (which with Costin's Modeler changes, is saying something :).If you did a straight copy-over, then it should still on commons-logging. - Original Message - From: "Craig McClanahan" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Saturday,

[GUMP] Build Failure - Tomcat 3.x

2003-01-25 Thread Craig McClanahan
This email is autogenerated from the output from: Buildfile: build.xml detect: uptodate: msg.ant15: [echo] Detected A

[GUMP] Build Failure - jakarta-tomcat-catalina

2003-01-25 Thread bobh
This email is autogenerated from the output from: Buildfile: build.xml deploy-prepare: [mkdir] Created dir: /ho

[GUMP] Build Failure - jakarta-tomcat-jk-ant

2003-01-25 Thread Craig McClanahan
This email is autogenerated from the output from: Buildfile: build.xml does not exist! Build failed -- To unsubscribe