-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Shanti,

On 9/21/2011 1:39 AM, Yajnik, Shanti wrote:
> Thanks Chris. Do you know when 6.0.34 version of Tomcat will be
> available for download?

Note that there is a simple workaround with affected versions: use
mod_jk's "secret" setting on all your workers and on the JK connector
in Tomcat and you should be safe from this attack.

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk557cMACgkQ9CaO5/Lv0PCGqwCgvlHcsgojgZa45yhkEgpIwgZQ
vRcAn0YawIl3VQVAD7uabMLFxeVdj72T
=jeZx
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to