http://tomcat.apache.org/connectors-doc/miscellaneous/changelog.html Including the correction for: CVE-2008-5519: Apache Tomcat mod_jk information disclosure vulnerability