Re: potential thread? and what should we do?

2009-06-24 Thread Leon Rosenberg
The latest version of tomcat is 6.0.20 and its about one month old. http://tomcat.apache.org/download-60.cgi#6.0.20 enjoy :-) Leon On Wed, Jun 24, 2009 at 10:06 AM, Niki Diulgerovndiulge...@imx.fr wrote: Hello there, recently I'm reading in the security news channels that there are

Re: potential thread? and what should we do?

2009-06-24 Thread Niki Diulgerov
Does this means that 5.5.x is no more developed, and there will be no new versions in the 5.5 branch ? Best regards, Nikolay Diulgerov Network Administrator E-mail: ndiulge...@imx.fr Telephone : +33 4 89 87 77 77 Fax : +33 4 89 87 77 00 Web: http://www.codix-france.com Leon Rosenberg

Re: potential thread? and what should we do?

2009-06-24 Thread Leon Rosenberg
I'm probably the wrong person to answer this, but there will be patches and updates to 5.5.x as there are for even 4.1.x, but the general development is moving along to tomcat 7, so 5.5.x is an outdated model. However, for almost all webapps the migration to 6.0.x is rather smooth (I've had an

Re: potential thread? and what should we do?

2009-06-24 Thread André Warnier
Leon Rosenberg wrote: I'm probably the wrong person to answer this, ... Me too, but a pretty detailed overview of these matters is always available here : http://tomcat.apache.org/whichversion.html - To unsubscribe, e-mail:

Re: potential thread? and what should we do?

2009-06-24 Thread André Warnier
André Warnier wrote: Leon Rosenberg wrote: I'm probably the wrong person to answer this, ... Me too, but a pretty detailed overview of these matters is always available here : http://tomcat.apache.org/whichversion.html and here : http://tomcat.apache.org/security.html All these links are

Re: potential thread? and what should we do?

2009-06-24 Thread David kerber
Niki Diulgerov wrote: Hello there, recently I'm reading in the security news channels that there are discovered multiple vulnerabilities in tomcat and almost all versions are affected. For example these news from today: http://www.linuxsecurity.com/content/view/149201?rdf On the other side,

Re: potential thread? and what should we do?

2009-06-24 Thread Niki Diulgerov
After doing some reading of the documentation I found that these bugs are fixed in the SVN repository. Also checking out the latest source I can see that it is revision (Checked out revision 787991) and tomcat is with version 5.5.28. Following the simple instructions on the site

Re: potential thread? and what should we do?

2009-06-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Nikolay, On 6/24/2009 4:20 AM, Niki Diulgerov wrote: Does this means that 5.5.x is no more developed, and there will be no new versions in the 5.5 branch ? http://wiki.apache.org/tomcat/TomcatVersions - -chris -BEGIN PGP SIGNATURE-

Re: potential thread? and what should we do?

2009-06-24 Thread Mark Thomas
Niki Diulgerov wrote: After doing some reading of the documentation I found that these bugs are fixed in the SVN repository. Also checking out the latest source I can see that it is revision (Checked out revision 787991) and tomcat is with version 5.5.28. Following the simple instructions on

Re: potential thread? and what should we do?

2009-06-24 Thread Niki Diulgerov
Mark, I used the build.xml downloaded from here (http://tomcat.apache.org/tomcat-5.5-doc/build.xml). Looking at it I can see that it checks out http://svn.apache.org/repos/asf/tomcat/current/tc5.5.x (probably the latest available revision). Please advice me does it contain the latest approved

Re: potential thread? and what should we do?

2009-06-24 Thread Leon Rosenberg
A bit of advice... Its much less risky and complicated to take the last 6.0.x version, namely 6.0.20, instead of building what will become your unique personal tomcat version r-something. If your car is broken, do you buy a new one from a vendor, or do you buy a do it yourself manual and

Re: potential thread? and what should we do?

2009-06-24 Thread Mark Thomas
Niki Diulgerov wrote: Mark, I used the build.xml downloaded from here (http://tomcat.apache.org/tomcat-5.5-doc/build.xml). Looking at it I can see that it checks out http://svn.apache.org/repos/asf/tomcat/current/tc5.5.x (probably the latest available revision). Correct, that is the latest

RE: potential thread? and what should we do?

2009-06-24 Thread Caldarale, Charles R
From: Leon Rosenberg [mailto:rosenberg.l...@googlemail.com] Subject: Re: potential thread? and what should we do? If your car is broken, do you buy a new one from a vendor, or do you buy a do it yourself manual and separate parts and spend next three years in the garage assembling