All, I have started to put together some additional security pages based on httpd. I have only added text for a couple vulnerabilities but the plan is to include all those in the CVE list plus any I can find in the archives.
The draft is currently on people.a.o at http://people.apache.org/~markt/tomcat-security/security.html My plan is to commit as is and then work through the CVE list. Once I have all the CVE entries I'll remove the work in progress comment at the top of the first page and then start searching the archives and other public vulnerability databases. Any comments before I commit these changes to the live site? Mark --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
