Re: [SECURITY] CVE-2014-0230: Apache Tomcat DoS

2015-05-06 Thread Jose María Zaragoza
2015-05-06 0:53 GMT+02:00 Mark Thomas ma...@apache.org: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 CVE-2014-0230 Denial of Service Severity: Low Vendor: The Apache Software Foundation Versions Affected: - - Apache Tomcat 8.0.0-RC1 to 8.0.8 - - Apache Tomcat 7.0.0 to 7.0.54 - -

Re: [SECURITY] CVE-2014-0230: Apache Tomcat DoS

2015-05-06 Thread André Warnier
Jose María Zaragoza wrote: 2015-05-06 0:53 GMT+02:00 Mark Thomas ma...@apache.org: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 CVE-2014-0230 Denial of Service Severity: Low Vendor: The Apache Software Foundation Versions Affected: - - Apache Tomcat 8.0.0-RC1 to 8.0.8 - - Apache Tomcat

ant test on Tomcat 7.0.59 is failing due to exceptions

2015-05-06 Thread Arjit Gupta
Hello Tomcat Community, I am building tomcat 7.0.59 with java7 on HP-UX(OS) itanium(IA64) processor. After building it successful I am running *ant test*. Which is failing due to exception which is as below: Testcase: testSimpleSsl took 4.085 sec Caused an ERROR

Re: High cpu on Tomcat 8

2015-05-06 Thread Greg Huber
When the CPU usage goes high, does the server actually slow down? I do not think so, it makes the server slowdown Sounds like you're contradicting yourself; you do not think it slows down, or it does slow down? It would slow down as the server is at 80%, but if it was the webapp in a

Tomcat 6.0.37 - catalina.out is not rotated

2015-05-06 Thread Radha Krishna Meduri -X (radmedur - HCL TECHNOLOGIES LIMITED at Cisco)
Hi, We are using tomcat 6.0.37 on RED Hat Linux platform. All of sudden what we observed is catalina.out.1 file is not rotated properly and grows till 170 GB. Please see following screenshot . Is there any rotation mechanism available for the log files? If yes, any known issue in this tomcat

Re: Officially released Apache tomcat version with CVE-2014-0230

2015-05-06 Thread Raghavendra Nilekani
Hi. Thanks for the information. This is useful. I feel I should take the latest available version and upgrade. Once the new version (6.0.44) with fix is available, I can upgrade once again. Can I know the tentative data (month) during which we get the official release of the version 6.0.44 ?

Re: [SECURITY] CVE-2014-0230: Apache Tomcat DoS

2015-05-06 Thread Mark Thomas
On 06/05/2015 09:14, André Warnier wrote: Jose María Zaragoza wrote: 2015-05-06 0:53 GMT+02:00 Mark Thomas ma...@apache.org: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 CVE-2014-0230 Denial of Service Severity: Low Vendor: The Apache Software Foundation Versions Affected: - -

Re: ant test on Tomcat 7.0.59 is failing due to exceptions

2015-05-06 Thread Mark Thomas
On 06/05/2015 10:43, Arjit Gupta wrote: Hello Tomcat Community, I am building tomcat 7.0.59 with java7 on HP-UX(OS) itanium(IA64) processor. After building it successful I am running *ant test*. Which is failing due to exception which is as below: Testcase: testSimpleSsl took 4.085 sec

Re: Tomcat 6.0.37 - catalina.out is not rotated

2015-05-06 Thread Mark Thomas
On 06/05/2015 08:02, Radha Krishna Meduri -X (radmedur - HCL TECHNOLOGIES LIMITED at Cisco) wrote: Hi, We are using tomcat 6.0.37 on RED Hat Linux platform. All of sudden what we observed is catalina.out.1 file is not rotated properly and grows till 170 GB. Please see following

Re: Officially released Apache tomcat version with CVE-2014-0230

2015-05-06 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Raghavendra, On 5/6/15 2:19 AM, Raghavendra Nilekani wrote: Thanks for the information. This is useful. I feel I should take the latest available version and upgrade. Once the new version (6.0.44) with fix is available, I can upgrade once again.

Re: ant test on Tomcat 7.0.59 is failing due to exceptions

2015-05-06 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 5/6/15 8:03 AM, Mark Thomas wrote: On 06/05/2015 10:43, Arjit Gupta wrote: Hello Tomcat Community, I am building tomcat 7.0.59 with java7 on HP-UX(OS) itanium(IA64) processor. After building it successful I am running *ant test*.

Re: ant test on Tomcat 7.0.59 is failing due to exceptions

2015-05-06 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 5/6/15 9:01 AM, Mark Thomas wrote: On 06/05/2015 13:52, Christopher Schultz wrote: Mark, On 5/6/15 8:03 AM, Mark Thomas wrote: On 06/05/2015 10:43, Arjit Gupta wrote: Hello Tomcat Community, I am building tomcat 7.0.59 with java7

Re: typesafe-config reference.conf file not found in a .jar in WEB_INF/lib

2015-05-06 Thread Konstantin Kolinko
2015-05-06 17:22 GMT+03:00 Walend, David david_wal...@hms.harvard.edu: So your WAR file looks like this: /WEB-INF /WEB-INF/lib /WEB-INF/lib/akka-actor.2.11-2.3.8.jar (plus other stuff) Then, akka-actor.2.11-2.8.8.jar contains: /reference.conf (plus other stuff) Do I have that right? Exactly

Re: typesafe-config reference.conf file not found in a .jar in WEB_INF/lib

2015-05-06 Thread Walend, David
Chris, Thanks for the reply. Response interlaced: On 5/5/15, 4:35 PM, Christopher Schultz ch...@christopherschultz.net wrote: Which exact version of Tomcat are you using? Server version:Apache Tomcat/7.0.59 On 5/5/15 4:30 PM, Walend, David wrote: typesafe config's loader isn't

Re: [SECURITY] CVE-2014-0230: Apache Tomcat DoS

2015-05-06 Thread Jose María Zaragoza
2015-05-06 13:59 GMT+02:00 Mark Thomas ma...@apache.org: On 06/05/2015 09:14, André Warnier wrote: Jose María Zaragoza wrote: 2015-05-06 0:53 GMT+02:00 Mark Thomas ma...@apache.org: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 CVE-2014-0230 Denial of Service Severity: Low Vendor: The

Re: Tomcat 6.0.37 - catalina.out is not rotated

2015-05-06 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Radha, On 5/6/15 3:02 AM, Radha Krishna Meduri -X (radmedur - HCL TECHNOLOGIES LIMITED at Cisco) wrote: We are using tomcat 6.0.37 on RED Hat Linux platform. All of sudden what we observed is catalina.out.1 file is not rotated properly and grows

Re: ant test on Tomcat 7.0.59 is failing due to exceptions

2015-05-06 Thread Mark Thomas
On 06/05/2015 13:52, Christopher Schultz wrote: Mark, On 5/6/15 8:03 AM, Mark Thomas wrote: On 06/05/2015 10:43, Arjit Gupta wrote: Hello Tomcat Community, I am building tomcat 7.0.59 with java7 on HP-UX(OS) itanium(IA64) processor. After building it successful I am running *ant test*.

Re: ant test on Tomcat 7.0.59 is failing due to exceptions

2015-05-06 Thread Konstantin Kolinko
2015-05-06 15:52 GMT+03:00 Christopher Schultz Mark, On 5/6/15 8:03 AM, Mark Thomas wrote: On 06/05/2015 10:43, Arjit Gupta wrote: Hello Tomcat Community, I am building tomcat 7.0.59 with java7 on HP-UX(OS) itanium(IA64) processor. After building it successful I am running *ant test*.

Re: ant test on Tomcat 7.0.59 is failing due to exceptions

2015-05-06 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Konstantin, On 5/6/15 9:25 AM, Konstantin Kolinko wrote: 2015-05-06 15:52 GMT+03:00 Christopher Schultz Mark, On 5/6/15 8:03 AM, Mark Thomas wrote: On 06/05/2015 10:43, Arjit Gupta wrote: Hello Tomcat Community, I am building tomcat

Re: ant test on Tomcat 7.0.59 is failing due to exceptions

2015-05-06 Thread Arjit Gupta
Thanks Tomcat Community for the quick reply. As answer provided by Mark the test certificate used by unit tests have been expired, So please provide me any link where I could download the certificates in order to test these unit tests successful. Thanks in Advance. Arjit Kumar On Wed, May 6,

Issues with Tomcat 7.0.57 not loading ActionServlets

2015-05-06 Thread Raj
I upgraded my application from tomcat 5.5.15, JDK 1.5, Struts 1.1 on Debian 2.6.32 to tomcat 7.0.57, JDK 1.6, struts 1.1 on ubuntu14.04 and Action Servlets are not loading. I am thinking of this is something to do with version conflict. Please let me know what I am missing. Below is the error