Bug#854551: tomcat8 use 100% cpu time

2017-02-08 Thread Markus Koschany 
On 08.02.2017 19:12, Emmanuel Bourg wrote:
> Le 8/02/2017 à 15:52, Markus Koschany a écrit :
> 
>> it appears that Tomcat 7 and 8 in Jessie and Wheezy are affected by this
>> bug. Are you still working on it or shall I prepare updates for
>> -security based on the upstream patch from
>>
>> https://github.com/apache/tomcat80/commit/614e7f78aecc429d8740bb59900c2f9fbc86a788#diff-2aeb244142da5fcb78a54e23f717fcd2
> 
> Hi Markus,
> 
> Feel free to prepare the update, I'm rather busy atm and I won't be able
> to work on this before this weekend. I was considering uploading a
> stable update but it won't be immediately available. A security update
> would be faster but I don't know if the security team would accept it.
> 

Alright. I'll take care of it tomorrow and get in touch with the
security team.

Cheers,

Markus




signature.asc
Description: OpenPGP digital signature
__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#854551: tomcat8 use 100% cpu time

2017-02-08 Thread Markus Koschany 
On Fri, 13 Jan 2017 15:16:51 -0500 RickLinux  wrote:
> Package: tomcat8
> Version: 8.0.14-1+deb8u6
> Severity: important
> 
> Dear Maintainer,
> 
> I noticed a bump in CPU load up to 100% per CPU.
> It appear from tomcat8-8.0.14-1+deb8u4 and up.
> 
> Here how to create the bug.
> 
> http://localhost:8080, no problem.
> https://localhost:8443, no problem (need to create a certificate).
> https://localhost:8080, 100% cpu load.

Hi Emannuel,

it appears that Tomcat 7 and 8 in Jessie and Wheezy are affected by this
bug. Are you still working on it or shall I prepare updates for
-security based on the upstream patch from

https://github.com/apache/tomcat80/commit/614e7f78aecc429d8740bb59900c2f9fbc86a788#diff-2aeb244142da5fcb78a54e23f717fcd2

Regards,

Markus



signature.asc
Description: OpenPGP digital signature
__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.