Hi All, With the amount of spare time I have at the moment, I am not able to put together a Tomcat 3.3.1 release in short order. Doing things quickly is not my forte and the earliest I could do a 3.3.1-beta1 would be the following weekend, i.e. the weekend of the 20th. In addition, I would rather not leave Tomcat 3.3 with the "aux.jsp" DOS problem for that duration. I propose to add to the site an updated tomcat_util.jar and tomcat_modules.jar that fix the problem based the changes used in Tomcat 3.3.1. The updated source files would be made available as well on the site. Following the patch, I would announce its availability and reason for existence on the usual mailing lists. Since, IMHO, it makes no sense to do any branching on the Tomcat 3.3 track, I propose to add a "patches/tomcat33" folder under "proposals" and use it as the location in CVS in which to keep the 3.3 updated Java files. I'm not a CVS guru, so let me know if there is a better way to deal with files like this. Does anyone have a better suggestion about dealing with the current DOS vunlerability in Tomcat 3.3 (and/or has more time than I do and wants to volunteer to be release manager :-) )? If there are no objections or other suggestions, I'll proceed with the Tomcat 3.3 patch and then start preparing a 3.3.1 release plan. Cheers, Larry Isaacs
-- To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]> For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>
