Re: [External] Re: Tomcat upgrade from 9.0.80 to 9.0.81

2023-10-10 Thread Maxim Solodovnik
from mobile (sorry for typos ;) On Wed, Oct 11, 2023, 09:05 Amit Pande wrote: > Thank you so much for inputs. > > "If one could help with testing release candidates, it would help." > >> I was thinking about this. Is there a channel/process that we can > subscribe to get the RC candidate

RE: [External] Re: Tomcat upgrade from 9.0.80 to 9.0.81

2023-10-10 Thread Amit Pande
Thank you so much for inputs. "If one could help with testing release candidates, it would help." >> I was thinking about this. Is there a channel/process that we can subscribe >> to get the RC candidate updates? If we get to know about a RC build, we can >> perform (black box) testing and

Re: [External] Re: Tomcat upgrade from 9.0.80 to 9.0.81

2023-10-10 Thread Konstantin Kolinko
ср, 11 окт. 2023 г. в 02:31, Amit Pande : > > Thank you Konstantin for the quick update! > > Since this release contained multiple security fixes, it's important to > upgrade. However, there seem regressions too. > > What is the way forward here? Follow up version coming sooner? Or a version >

Re: [External] Re: Tomcat upgrade from 9.0.80 to 9.0.81

2023-10-10 Thread Amit Pande
Thank you Konstantin for the quick update! Since this release contained multiple security fixes, it's important to upgrade. However, there seem regressions too. What is the way forward here? Follow up version coming sooner? Or a version with just security fixes and all other changes can go in

Re: DBCP exception after Tomcat 10.1.13 -> 10.1.14 upgrade

2023-10-10 Thread Konstantin Kolinko
Hi! Thank you for the report. This issue is known and has already been fixed. See https://bz.apache.org/bugzilla/show_bug.cgi?id=67664 Best regards, Konstantin Kolinko вт, 10 окт. 2023 г. в 23:42, Michael Hayes : > > I have just upgraded a working Tomcat 10.1.13 installation to Tomcat 10.1.14,

Issues with writing to the log file

2023-10-10 Thread Shakila Rajaiah
Hello Users, I am not sure if I have set up my application correctly. The logs that I have included in my java application are not getting written to the log files. I have catalina.2023-10-10 which only contaings information about the server starting.localhost.2023-10-10 having similar

Re: Tomcat upgrade from 9.0.80 to 9.0.81

2023-10-10 Thread Konstantin Kolinko
Hi! Thank you for reporting and investigating the issue. I added your observation to https://bz.apache.org/bugzilla/show_bug.cgi?id=67670 Best regards, Konstantin Kolinko ср, 11 окт. 2023 г. в 00:01, Amit Pande : > > I am still investigating more but after upgrading from Tomcat 9.0.80 to >

Tomcat upgrade from 9.0.80 to 9.0.81

2023-10-10 Thread Amit Pande
I am still investigating more but after upgrading from Tomcat 9.0.80 to 9.0.81, many of our rest assured based tests are failing with below error ... Caused by: org.apache.http.ConnectionClosedException: Premature end of Content-Length delimited message body (expected: 4,999; received: 3,040)

DBCP exception after Tomcat 10.1.13 -> 10.1.14 upgrade

2023-10-10 Thread Michael Hayes
I have just upgraded a working Tomcat 10.1.13 installation to Tomcat 10.1.14, on Rocky Linux 9.2, PostgreSQL 11.20, JDBC driver 42.6.0, Java 17.0.8. During startup I get this exception: java.sql.SQLException at

RE: Sharing catalina home among tomcat machines in a load balanced environment gives problems with log files

2023-10-10 Thread Mcalexander, Jon J.
Could you have separate work folders but have the appbase be the in the shared folder space? Dream * Excel * Explore * Inspire Jon McAlexander Senior Infrastructure Engineer Asst. Vice President He/His Middleware Product Engineering Enterprise CIO | EAS | Middleware | Infrastructure Solutions

Re: Deploy an application (upgrade/downgrade) - Remove Cache/Directories

2023-10-10 Thread Mark Thomas
On 10/10/2023 13:38, a.grub...@bluewin.ch wrote: Dear all I have a question. When I deploy a new application (either downgrade or upgrade), what is mandatory to be done apart from ReleaseNotes for the application? I ask specific for remove certain directories from Tomcat structure, also topic

Re: Problems with tomcat-users.xml

2023-10-10 Thread Mark Thomas
On 10/10/2023 13:03, Mark Linton wrote: Hello Tomcat users. Is there a forum (like a webpage that we can search for previous questions?)... lists.apache.org I am experiencing an issue with logging on to the manager and hosts webpage(s). What issue? Please see the tomcat-users.xml

Deploy an application (upgrade/downgrade) - Remove Cache/Directories

2023-10-10 Thread a.grubner
Dear all I have a question. When I deploy a new application (either downgrade or upgrade), what is mandatory to be done apart from ReleaseNotes for the application? I ask specific for remove certain directories from Tomcat structure, also topic remove cache on the directories. Tried to

Problems with tomcat-users.xml

2023-10-10 Thread Mark Linton
Hello Tomcat users. Is there a forum (like a webpage that we can search for previous questions?)... I am experiencing an issue with logging on to the manager and hosts webpage(s). Please see the tomcat-users.xml attached: *Tomcat-users.xml* http://tomcat.apache.org/xml;

Re: Sharing catalina home among tomcat machines in a load balanced environment gives problems with log files

2023-10-10 Thread Giuseppe Sacco
Hello, Il giorno mar, 10/10/2023 alle 06.59 -0400, Christopher Schultz ha scritto: > Mark, > > On 10/10/23 06:38, Mark Thomas wrote: > > Running multiple instances of Tomcat from the same CATALINA_BASE is > > totally unsupported. This isn't one of those "We don't technically > > support that

[SECURITY] CVE-2023-45648 Apache Tomcat - Request Smuggling

2023-10-10 Thread Mark Thomas
CVE-2023-45648 Apache Tomcat - Request Smuggling Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 11.0.0-M1 to 11.0.0-M11 Apache Tomcat 10.1.0-M1 to 10.1.13 Apache Tomcat 9.0.0-M1 to 9.0.80 Apache Tomcat 8.5.0 to 8.5.93 Description: Tomcat did not

[SECURITY] CVE-2023-44487 Apache Tomcat - HTTP/2 DoS

2023-10-10 Thread Mark Thomas
CVE-2023-44487 Apache Tomcat - HTTP/2 DoS Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 11.0.0-M1 to 11.0.0-M11 Apache Tomcat 10.1.0-M1 to 10.1.13 Apache Tomcat 9.0.0-M1 to 9.0.80 Apache Tomcat 8.5.0 to 8.5.93 Description: Tomcat's HTTP/2

[SECURITY] CVE-2023-42795 Apache Tomcat - information disclosure

2023-10-10 Thread Mark Thomas
CVE-2023-42795 Apache Tomcat - information disclosure Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 11.0.0-M1 to 11.0.0-M11 Apache Tomcat 10.1.0-M1 to 10.1.13 Apache Tomcat 9.0.0-M1 to 9.0.80 Apache Tomcat 8.5.0 to 8.5.93 Description: When

[SECURITY] CVE-2023-42794 Apache Tomcat - denial of service

2023-10-10 Thread Mark Thomas
CVE-2023-42794 Apache Tomcat - denial of service Severity: Low Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 9.0.70 to 9.0.80 Apache Tomcat 8.5.85 to 8.5.93 Description: Tomcat's internal fork of a Commons FileUpload included an unreleased, in progress refactoring

[ANN] Apache Tomcat 9.0.81 available

2023-10-10 Thread Rémy Maucherat
The Apache Tomcat team announces the immediate availability of Apache Tomcat 9.0.81. Apache Tomcat 9 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 9.0.81 is a bugfix and

[ANN] Apache Tomcat 8.5.94 available

2023-10-10 Thread Christopher Schultz
The Apache Tomcat team announces the immediate availability of Apache Tomcat 8.5.94. Apache Tomcat 8 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 8.5.94 is a bugfix and

[ANN] Apache Tomcat 10.1.14 available

2023-10-10 Thread Christopher Schultz
The Apache Tomcat team announces the immediate availability of Apache Tomcat 10.1.14. Apache Tomcat 10 is an open source software implementation of the Jakarta Servlet, Jakarta Server Pages, Jakarta Expression Language, Jakarta WebSocket, Jakarta Authentication and Jakarta Annotations

Re: Sharing catalina home among tomcat machines in a load balanced environment gives problems with log files

2023-10-10 Thread Christopher Schultz
Mark, On 10/10/23 06:38, Mark Thomas wrote: Running multiple instances of Tomcat from the same CATALINA_BASE is totally unsupported. This isn't one of those "We don't technically support that but you should be OK situations". This is one of the rare "You do that and it *will* break and you

Re: Sharing catalina home among tomcat machines in a load balanced environment gives problems with log files

2023-10-10 Thread Mark Thomas
Running multiple instances of Tomcat from the same CATALINA_BASE is totally unsupported. This isn't one of those "We don't technically support that but you should be OK situations". This is one of the rare "You do that and it *will* break and you will be on your own when it does." situations.

Re: Sharing catalina home among tomcat machines in a load balanced environment gives problems with log files

2023-10-10 Thread Giuseppe Sacco
Hello Peter, Il giorno mar, 10/10/2023 alle 11.21 +0200, l...@kreuser.name ha scritto: > Guiseppe, > > did you consider the separation of CATALINA_HOME and CATALINA_BASE. Look > at the RUNNING.txt file that describes the purpose... > > Plus some symbolic links that have the really common files

Re: Sharing catalina home among tomcat machines in a load balanced environment gives problems with log files

2023-10-10 Thread logo
Guiseppe, did you consider the separation of CATALINA_HOME and CATALINA_BASE. Look at the RUNNING.txt file that describes the purpose... Plus some symbolic links that have the really common files linked to the BASE directory? HTH Peter Am 10.10.2023 um 09:53 schrieb Giuseppe Sacco :

Sharing catalina home among tomcat machines in a load balanced environment gives problems with log files

2023-10-10 Thread Giuseppe Sacco
Hello, I am testing an environment with a load balancer and two machines that host tomcat. The two machines should really be identical, and no tomcat cluster is configured (no sessions are shared between the tomcats). I would like to put the tomcat installation (catalina_home) in a shared