-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Shanti,
On 9/21/2011 1:39 AM, Yajnik, Shanti wrote: > Thanks Chris. Do you know when 6.0.34 version of Tomcat will be > available for download? Note that there is a simple workaround with affected versions: use mod_jk's "secret" setting on all your workers and on the JK connector in Tomcat and you should be safe from this attack. - -chris -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk557cMACgkQ9CaO5/Lv0PCGqwCgvlHcsgojgZa45yhkEgpIwgZQ vRcAn0YawIl3VQVAD7uabMLFxeVdj72T =jeZx -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org