Re: [ANN] Apache Tomcat 5.5.25 released

2007-09-09 Thread Mark Thomas
Timothy Wonil Lee wrote: > I am especially interested in those two session hijacking vulnerability > fixes. Are they included in 5.5.25? Yes. > Second question is: if they are fixed in 5.5.25, is it possible to just drop > in the Jar files (catalina.jar?) to the current production Tomcat server/li

RE: [ANN] Apache Tomcat 5.5.25 released

2007-09-09 Thread Timothy Wonil Lee
al Message- From: Filip Hanik - Dev Lists [mailto:[EMAIL PROTECTED] Sent: Sunday, 9 September 2007 4:08 AM To: Tomcat Users List Cc: Tomcat Developers List Subject: Re: [ANN] Apache Tomcat 5.5.25 released Thanks, it's underway, syncing to mirrors as we speak Filip RuiXian BAO wrote: > On 9

Re: [ANN] Apache Tomcat 5.5.25 released

2007-09-08 Thread Filip Hanik - Dev Lists
Thanks, it's underway, syncing to mirrors as we speak Filip RuiXian BAO wrote: On 9/8/07, Filip Hanik - Dev Lists <[EMAIL PROTECTED]> wrote: The Apache Tomcat team announces the immediate availability of Apache Tomcat 5.5.25 stable. Apache Tomcat 5.5.25 incorporates numerous security updat

Re: [ANN] Apache Tomcat 5.5.25 released

2007-09-08 Thread RuiXian BAO
On 9/8/07, Filip Hanik - Dev Lists <[EMAIL PROTECTED]> wrote: > > The Apache Tomcat team announces the immediate availability of Apache > Tomcat 5.5.25 stable. > > Apache Tomcat 5.5.25 incorporates numerous security updates and bug fixes. > Please refer to the change log for the list of changes: >

[ANN] Apache Tomcat 5.5.25 released

2007-09-08 Thread Filip Hanik - Dev Lists
The Apache Tomcat team announces the immediate availability of Apache Tomcat 5.5.25 stable. Apache Tomcat 5.5.25 incorporates numerous security updates and bug fixes. Please refer to the change log for the list of changes: http://tomcat.apache.org/tomcat-5.5-doc/changelog.html Downloads: http://