Yes, it's a security fix. More details should be in the release notes, something to do with the invoker servlet. It effects all 4.x versions, so the official 4.0 release is now 4.0.5.
John > -----Original Message----- > From: Robert L Sowders [mailto:[EMAIL PROTECTED]] > Sent: Monday, September 23, 2002 10:43 PM > To: Tomcat Users List > Subject: 4.1.12 is out? > > > I see that 4.1.12 is out. Did I miss the announcement or > something? I > assume this mainly is to correct a security exploit. > > The fun never stops. > > rls > > -- > To unsubscribe, e-mail: > <mailto:[EMAIL PROTECTED]> > For additional commands, e-mail: > <mailto:[EMAIL PROTECTED]> > -- To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]> For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>
