CVE-2013-2071 Request mix-up if AsyncListener method throws RuntimeException

2013-05-10 Thread Mark Thomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 CVE-2013-2071 Request mix-up if AsyncListener method throws RuntimeException Severity: Moderate Vendor: The Apache Software Foundation Versions Affected: - - Tomcat 7.0.0 to 7.0.39 Description: Bug 54178 described a scenario where

[ANN] Apache Tomcat 7.0.40 released

2013-05-10 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat 7.0.40. Apache Tomcat is an open source software implementation of the Java Servlet, JavaServer Pages and Java Expression Language technologies. This release contains a security fix and a number of bug fixes and

[SECURITY] CVE-2013-2067 Session fixation with FORM authenticator

2013-05-10 Thread Mark Thomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 CVE-2013-2067 Session fixation with FORM authenticator Severity: Important Vendor: The Apache Software Foundation Versions Affected: - - Tomcat 7.0.0 to 7.0.32 - - Tomcat 6.0.21 to 6.0.36 Description: FORM authentication associates the most recent

[SECURITY] CVE-2012-3544 Chunked transfer encoding extension size is not limited

2013-05-10 Thread Mark Thomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 CVE-2012-3544 Chunked transfer encoding extension size is not limited Severity: Important Vendor: The Apache Software Foundation Versions Affected: - - Tomcat 7.0.0 to 7.0.29 - - Tomcat 6.0.0 to 6.0.36 Description: When processing a request

Re: Print parameters in Tomcat JDBC Pool's SlowQueryReport

2013-05-10 Thread Michael-O
Am 2013-05-08 19:42, schrieb Christopher Schultz: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Michael, On 5/8/13 1:14 PM, Michael-O wrote: Christopher, Am 2013-05-08 13:54, schrieb Christopher Schultz: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Michael, On 5/8/13 3:01 AM,

DRIVER ERROR

2013-05-10 Thread Jeny V
Hi , I'm having some real issues , running programs in Tomcat on my machine. I just copied a jakarta folder named jakarta-tomcat-3.3.1a on to my D: drive (Path : D:\Program Files\jakarta-tomcat-3.3.1a) . The folder includes the following SUBFOLDERS :

RE: DRIVER ERROR

2013-05-10 Thread Caldarale, Charles R
From: Jeny V [mailto:v_je...@yahoo.in] Subject: DRIVER ERROR I just copied a jakarta folder named jakarta-tomcat-3.3.1a Stop right there. That version of Tomcat is over ten years old and has not been supported for more than half that time. It is absolutely unconscionable to attempt to use

[OT] Querstion about Class.forName() re. ClassLoaders

2013-05-10 Thread Konstantin Preißer
Hi all, I apologize for being completely off-topic (this question has nothing to do with Tomcat), but I thought there may be some guys here that are experts in class loading and are able to answer my question. You probably know the method java.lang.Class.forName(String name) which returns a

maxIdleTime + Tomcat 6.0.23

2013-05-10 Thread Jose María Zaragoza
Hello: I'm using Tomcat 6.0.23 and I'm looking info about threads created by Tomcat HTTP Connector for processing requests. I've seen that - I cannot define a minSpareThread in Connector , in server.xml . And default value is 0 I have to create a Executor to be able to define a minSpareThread

Re: maxIdleTime + Tomcat 6.0.23

2013-05-10 Thread Mark Thomas
On 10/05/2013 20:13, Jose María Zaragoza wrote: Hello: I'm using Tomcat 6.0.23 and I'm looking info about threads created by Tomcat HTTP Connector for processing requests. I've seen that - I cannot define a minSpareThread in Connector , in server.xml . And default value is 0 I have

Re: [OT] Querstion about Class.forName() re. ClassLoaders

2013-05-10 Thread Konstantin Kolinko
2013/5/10 Konstantin Preißer verlag.preis...@t-online.de: Hi all, I apologize for being completely off-topic (this question has nothing to do with Tomcat), but I thought there may be some guys here that are experts in class loading and are able to answer my question. You probably know

RE: [OT] Querstion about Class.forName() re. ClassLoaders

2013-05-10 Thread Konstantin Preißer
Hi Konstantin, -Original Message- From: Konstantin Kolinko [mailto:knst.koli...@gmail.com] Sent: Friday, May 10, 2013 11:46 PM Yes, the same. BTW, Oracle JDKs come with source code for their public classes, On Windows that is %JAVA_HOME%/src.zip. Do you have such file? Thank