http://tomcat.apache.org/ 参考官方网站内容, 下载11.30版本即可修正.

Tomcat Native 1.1.30 Released

The Apache Tomcat Project is proud to announce the release of version 1.1.30 of Tomcat Native. The notable changes since 1.1.29 include:

  • Windows binaries are linked with OpenSSL 1.0.1g. This provides a fix for CVE-2014-0160 (Heartbleed) SSL vulnerability.
  • Add support for ECDHE ciphers. (55915)
Download ChangeLog for 1.1.30

转载请注明:WebLogic Android 博客 » Tomcat Native的Heartbleed漏洞