All,
Given the fact that tcnative 1.2.32 was released to include a
freshly-patched, statically-linked openssl binary, I plan on rolling
8.5.78 next Thursday, March 31st. (I would have done Friday but I don't
want any confusion over the use of April 1st as a day to announce
anything.) This will give Windows admins a chance to have a package they
can install without having to juggle a Tomcat release separately from a
tcnative release.
I would like to take this opportunity to remind any Windows admins out
there that there is also a new binary release of Apache httpd available
from Apache Lounge[1] which includes all the latest CVEs reported
against httpd itself as well as OpenSSL. I would make that a priority if
I were you.
-chris
[1] https://www.apachelounge.com/download/
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
