So far the changes in 3.3 tree were only bug fixes and what I've seen so far was pretty clear and simple - I think the head of 3.3 is as good or better than 3.3.0.
We could also take 3.3.0, replace tomcat_utils.jar and label it 3.3.1 - and then in 2-3 weeks release 3.3.2 with te head. But I'm +1 on whatever you choose. Let me know if/how I can help - I don't have time but I could sleep less :-) Costin On Wed, 9 Jan 2002, Larry Isaacs wrote: > Hi All, > > With the amount of spare time I have at the moment, I am not > able to put together a Tomcat 3.3.1 release in short order. > Doing things quickly is not my forte and the earliest I could > do a 3.3.1-beta1 would be the following weekend, i.e. > the weekend of the 20th. > > In addition, I would rather not leave Tomcat 3.3 with the > "aux.jsp" DOS problem for that duration. I propose to add > to the site an updated tomcat_util.jar and tomcat_modules.jar > that fix the problem based the changes used in Tomcat 3.3.1. > The updated source files would be made available as well > on the site. Following the patch, I would announce its > availability and reason for existence on the usual mailing lists. > > Since, IMHO, it makes no sense to do any branching on the > Tomcat 3.3 track, I propose to add a "patches/tomcat33" > folder under "proposals" and use it as the location in CVS > in which to keep the 3.3 updated Java files. I'm not > a CVS guru, so let me know if there is a better way to > deal with files like this. > > Does anyone have a better suggestion about dealing with > the current DOS vunlerability in Tomcat 3.3 (and/or > has more time than I do and wants to volunteer to be > release manager :-) )? > > If there are no objections or other suggestions, I'll proceed > with the Tomcat 3.3 patch and then start preparing a 3.3.1 > release plan. > > Cheers, > Larry Isaacs > > > > -- > To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]> > For additional commands, e-mail: <mailto:[EMAIL PROTECTED]> > -- To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]> For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>
