JBOSS 4.0.5 and tomcat 5.5.28

[rozky]

Hi,

can somebody tell me what I have to do when I want to get proper tomcat 5.5.28 SAR for JBOSS 4.0.5? Is it possible to buy or what need to be done ?

Thanks Michal

[jfclere]

The security issues fixed in 5.5.28 are in the CP's of jbossas-4.0.5. You get the corrections via a subscription.

[ccorbell_pdx]

Sorry if I'm slow to the in-crowd, but can you please explain:

What are "the CP's" and "a subscription"?

I too have a major customer who is not going to use our JBoss-4.0.5-based solution unless they can verify that it's running Tomcat 5.5.28 or later with the security fixes - it's a growing IT policy issue apparently.  We embed JBoss-4.0.5 in our service, so if the "subscription" implies some kind of dynamic patching of a live deployment that's not a solution we can use...  I searched for jboss and 'CP' and 'subscription' and only found vague references.

TIA,

Chris

[jfclere]

See http://www.redhat.com/jboss/benefits/