[ANN] Apache Tomcat 8.5.96 available

2023-11-14 Thread Christopher Schultz
The Apache Tomcat team announces the immediate availability of Apache Tomcat 8.5.96. Apache Tomcat 8 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 8.5.96 is a bugfix and

Re: [OT] Is the HTTP/2 Rapid Reset Exploit still possible on 2.4.58?

2023-11-14 Thread Christopher Schultz
All, On 11/13/23 17:36, Chuck Caldarale wrote: You may have the wrong mailing list - this one is for Tomcat, but your query seems to be solely about Apache httpd. Also, the httpd project has stated that they were never vulnerable to CVE-2023-44487.

AW: AW: FileUpload class not working with Tomcat 10.1

2023-11-14 Thread Thomas Hoffmann (Speed4Trade GmbH)
Hi Mark! > -Ursprüngliche Nachricht- > Von: Mark Foley > Gesendet: Dienstag, 14. November 2023 18:20 > An: users@tomcat.apache.org > Betreff: Re: AW: FileUpload class not working with Tomcat 10.1 > > On Tue Nov 14 01:46:09 2023 "Thomas Hoffmann (Speed4Trade GmbH)" > wrote: > > > >

Re: CredentialHandler not working for MD5

2023-11-14 Thread Mark Thomas
You are confusing DIGEST authentication and digested passwords. The two are separate but related processes. If you use both, you do need to ensure that they are using the same digest. There is no need to modify code. This call all be controlled via configuration.

Re: Accessing Credential handler inside the web application always returns null

2023-11-14 Thread Mark Thomas
On 12/11/2023 23:01, Усманов Азат Анварович wrote: Sorry for delayed response, Once I comment out the CredentialHandler in context xml both in my app's context.xml and in global context.xml, and add realm to server.xml. CredentialHandler returns null once again. This is by design. The

Re: AW: FileUpload class not working with Tomcat 10.1

2023-11-14 Thread Mark Foley
On Tue Nov 14 01:46:09 2023 "Thomas Hoffmann (Speed4Trade GmbH)" wrote: > > Hello Mark, > > > -Ursprüngliche Nachricht- > > Von: Mark Foley > > Gesendet: Montag, 13. November 2023 23:12 > > An: users@tomcat.apache.org > > Betreff: Re: AW: FileUpload class not working with Tomcat 10.1 >

Re: Tomcat 10.1.15 JVM crashes randomly on startup

2023-11-14 Thread Suvendu Sekhar Mondal
Hello Øyvind, > While I'm waiting for my hosting provider to disable the Sentinel Agent, I'm > attaching a full crash report below, from another crash this morning. That's a good idea. After removal if JVM is not crashing abruptly, you'll be certain that Sentinel agent is the problem. You can

Re: Tomcat 10.1.15 JVM crashes randomly on startup

2023-11-14 Thread Øyvind Flatval
> From: Mark Thomas > Sent: Monday, November 13, 2023 09:15 > To: users@tomcat.apache.org > Subject: Re: Tomcat 10.1.15 JVM crashes randomly on startup >   > On 13/11/2023 07:52, Øyvind Flatval wrote: > > Greetings! > > > > We are currently experiencing a very vague problem with our Tomcat 10.1