Performance improvement consultancy

2024-05-08 Thread Mandar K
Dear All, Greetings.

We are looking for formal performance improvement assistance. Anyone who
has optimized it can reach out to me directly for formal consultancy.

Thanks and have a nice day

-- 
Regards
Mandar K
Adaptability is the whole mystery of life - Swami Vivekanand


CVE-2024-32113: Apache OFBiz: Path traversal leading to RCE

2024-05-08 Thread Jacques Le Roux
Severity: important

Affected versions:

- Apache OFBiz before 18.12.13

Description:

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 
vulnerability in Apache OFBiz.This issue affects Apache OFBiz: before 18.12.13.

Users are recommended to upgrade to version 18.12.13, which fixes the issue.

Credit:

Qiyi Zhang (RacerZ) @secsys from Fudan (finder)

References:

https://ofbiz.apache.org/download.html
https://ofbiz.apache.org/security.html
https://issues.apache.org/jira/browse/OFBIZ-13006
https://lists.apache.org/thread/np8vgzr06z6cwm3tz7cs3609bdrj8526
https://ofbiz.apache.org/
https://www.cve.org/CVERecord?id=CVE-2024-32113



Performance scale up Thread

2024-05-08 Thread Mandar K
Dear All, related to performance scale up thread wanted to share one
observation :

Everytime there is an increase in memory it gets filled up. This may be due
to a memory management bug in any code. Some processes are creating a lot
of objects and not clearing afterwards.

Requesting inputs on the below

1. How to identify those objects / code which is causing memory leak
2. Any suggestions for GC

We are facing a challenge on the performance issue. Any strong assistance
will really help.

Thanks a lot.

-- 
Regards
Mandar K


Re: Performance scale up Thread

2024-05-08 Thread Jacques Le Roux

I suggest you use YourKit Java Profiler

BTW, it's free for Apache committers
https://svn.apache.org/repos/private/committers/donated-licenses/yourkit-java-profiler.txt

HTH

Jacques

Le 08/05/2024 à 20:30, Mandar K a écrit :

Dear All, related to performance scale up thread wanted to share one
observation :

Everytime there is an increase in memory it gets filled up. This may be due
to a memory management bug in any code. Some processes are creating a lot
of objects and not clearing afterwards.

Requesting inputs on the below

1. How to identify those objects / code which is causing memory leak
2. Any suggestions for GC

We are facing a challenge on the performance issue. Any strong assistance
will really help.

Thanks a lot.



Re: An odd behavior in Payments

2024-05-08 Thread Jacques Le Roux

Hi Emad,

Please open a Jira issue
https://cwiki.apache.org/confluence/display/OFBIZ/OFBiz+Contributors+Best+Practices

TIA

Jacques

Le 27/04/2024 à 13:28, Emad Radwan a écrit :

Hello Community,

While creating a new incoming payment if the 'Payment Method Id' dropdown I
select one that is linked to a financial account, a financial account
transaction is created which is fine. But if I try to create a payment
where the paymentMethodId is not linked to a financial account - like Cash
- then no financial account transaction is created which is also fine till
now. The issue is that Ofbiz after creating the payment displays the 'edit'
form for the payment allowing a user to change the paymentMethodId which if
was created with "Cash' and then changed to a one based on a Financial
Account, then no financial account transaction is created.

Regards,
Emad