From owner-freebsd-ports-bugs@FreeBSD.ORG  Thu Aug  7 21:30:12 2003
Return-Path: <owner-freebsd-ports-bugs@FreeBSD.ORG>
Delivered-To: freebsd-ports-bugs@hub.freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 03E5737B401
	for <freebsd-ports-bugs@hub.freebsd.org>;
	Thu,  7 Aug 2003 21:30:12 -0700 (PDT)
Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 9983943FA3
	for <freebsd-ports-bugs@hub.freebsd.org>;
	Thu,  7 Aug 2003 21:30:11 -0700 (PDT)
	(envelope-from gnats@FreeBSD.org)
Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1])
	by freefall.freebsd.org (8.12.9/8.12.9) with ESMTP id h784UBUp065602
	for <freebsd-ports-bugs@freefall.freebsd.org>;
	Thu, 7 Aug 2003 21:30:11 -0700 (PDT)
	(envelope-from gnats@freefall.freebsd.org)
Received: (from gnats@localhost)
	by freefall.freebsd.org (8.12.9/8.12.9/Submit) id h784UBUR065601;
	Thu, 7 Aug 2003 21:30:11 -0700 (PDT)
Date: Thu, 7 Aug 2003 21:30:11 -0700 (PDT)
Message-Id: <200308080430.h784UBUR065601@freefall.freebsd.org>
To: freebsd-ports-bugs@FreeBSD.org
From: "Kang Liu" <lazykang@hotmail.com>
Subject: Re: ports/55362: update ports/www/jakarta-tomcat41 to 4.1.27
X-BeenThere: freebsd-ports-bugs@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: Kang Liu <lazykang@hotmail.com>
List-Id: Ports bug reports <freebsd-ports-bugs.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ports-bugs>,
	<mailto:freebsd-ports-bugs-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ports-bugs>
List-Post: <mailto:freebsd-ports-bugs@freebsd.org>
List-Help: <mailto:freebsd-ports-bugs-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ports-bugs>,
	<mailto:freebsd-ports-bugs-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 08 Aug 2003 04:30:12 -0000

The following reply was made to PR ports/55362; it has been noted by GNATS.

From: "Kang Liu" <lazykang@hotmail.com>
To: freebsd-gnats-submit@FreeBSD.org
Cc: znerd@FreeBSD.org
Subject: Re: ports/55362: update ports/www/jakarta-tomcat41 to 4.1.27
Date: Fri, 08 Aug 2003 12:29:34 +0800

 As it is said in tomcat's changelog, it is a security update.
 
 Tomcat 4.1.27 includes security fixes for:
 *Improper recycling of SSL client certificates with Coyote JK 2
 *Improper handling of invalid content lengths in requests, causing HTTP 
 processors to be left in an invalid state in Coyote HTTP/1.1, causing a DoS 
 condition
 *URI normalization bug in Coyote
 *Improper handling of certain URLs in Coyote JK 2, causing a DoS condition.
 
 _________________________________________________________________
 The new MSN 8: smart spam protection and 2 months FREE*  
 http://join.msn.com/?page=features/junkmail