Re: Websocket semaphore lock on close() blocks all tomcat threads

2020-07-14 Thread Mark Thomas
On 14/07/2020 21:08, Mark Thomas wrote: > On 14/07/2020 20:57, Sridhar Rao wrote: >> >> We notice a behavior with tomcat where it becomes unresponsive and all >> http threads go into a timed wait state and the node becomes unresponsive. >> >> Tomcat Version: 8.5.47 > > > >> Could this be a

Re: Websocket semaphore lock on close() blocks all tomcat threads

2020-07-14 Thread Mark Thomas
On 14/07/2020 20:57, Sridhar Rao wrote: > > We notice a behavior with tomcat where it becomes unresponsive and all > http threads go into a timed wait state and the node becomes unresponsive. > > Tomcat Version: 8.5.47 > Could this be a tomcat defect? Possibly. Let me take a look. I don't

Re: tomcat can't find suitable driver for mysql

2020-07-14 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jon, On 7/13/20 19:27, jonmcalexan...@wellsfargo.com.INVALID wrote: > Yes, that also works, however it's just as easy to do that in a > setenv.sh file in the bin folder. Its actually much better to do it in setenv.sh for a few reasons: 1.

[SECURITY] CVE-2020-13935 Apache Tomcat WebSocket Denial of Service

2020-07-14 Thread Mark Thomas
CVE-2020-13935 Apache Tomcat WebSocket Denial of Service Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 10.0.0-M1 to 10.0.0-M6 Apache Tomcat 9.0.0.M1 to 9.0.36 Apache Tomcat 8.5.0 to 8.5.56 Apache Tomcat 7.0.27 to 7.0.104 Description: The payload

[SECURITY] CVE-2020-13934 Apache Tomcat HTTP/2 Denial of Service

2020-07-14 Thread Mark Thomas
CVE-2020-13934 Apache Tomcat HTTP/2 Denial of Service Severity: Moderate Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 10.0.0-M1 to 10.0.0-M6 Apache Tomcat 9.0.0.M5 to 9.0.36 Apache Tomcat 8.5.1 to 8.5.56 Description: An h2c direct connection did not release the

Re: file ownership of webapps and below

2020-07-14 Thread Olaf Kock
On 14.07.20 11:12, Christoph Kukulies wrote: > I found there are some mismatches in file ownership from manual installation > and moving around webapps trees from different tomcat versions. > My current tomcat (9) runs under user.group tomcat.tomcat. A couple of files > have ownership > >

file ownership of webapps and below

2020-07-14 Thread Christoph Kukulies
I found there are some mismatches in file ownership from manual installation and moving around webapps trees from different tomcat versions. My current tomcat (9) runs under user.group tomcat.tomcat. A couple of files have ownership root.tomcat tomcat8. Would it be ok to chown all files