https://bz.apache.org/bugzilla/show_bug.cgi?id=64671
--- Comment #3 from Raghavendran V <raghavendra...@ericsson.com> --- As the heap issue (CVE-2020-13934) is a bit critical, we are planning to take 9.0.37 for time being. For that, a few more inputs we need on the NPE bug fix. 1. If the NPE issue fix is not included in the production (i.e., if we go with 9.0.37), is it only the logs that will be flooded with NPE, or are you seeing any other critical side effects (say memory leaks, etc.) due to the NPE issue? 2. Will this NPE fix be included in the 9.0.38 build (Sept release)? 3. You've indicated that 9.0.38 will be available in early September. Is there a tentative date? Thanks a ton for the support, in advance. -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
