Tomcat 8/Redhat Linux 6.6 /Kernal 2.6.32 - Memory Won't Release

2017-03-16 Thread Eric Chua
I am running tomcat 8.0.121.  When I start my tomcat, it seems to be eating up all the memory on my system.  I have 16 GB, and it keeps on going.  Then when I try to kill the process, it dies but 12 GB is still being used even though everything is turn off.  The only way to reclaim the memory

Re: Syntax change in Set-Cookie header?

2017-03-16 Thread Jim Griswold
Sure, will do! Jim On Thu, Mar 16, 2017 at 12:57 PM, Mark Thomas wrote: > On 16 March 2017 14:31:31 GMT+00:00, Jim Griswold > wrote: > >Thanks, Mark! I filed > >https://bz.apache.org/bugzilla/show_bug.cgi?id=60876 > > Thanks. I don't suppose you'd

Re: Syntax change in Set-Cookie header?

2017-03-16 Thread Mark Thomas
On 16 March 2017 14:31:31 GMT+00:00, Jim Griswold wrote: >Thanks, Mark! I filed >https://bz.apache.org/bugzilla/show_bug.cgi?id=60876 Thanks. I don't suppose you'd like to try your hand at a patch? Mark > > >Jim > >On Thu, Mar 16, 2017 at 6:15 AM, Mark Thomas

Re: CVEs Not Published

2017-03-16 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 David, On 3/16/17 10:25 AM, David Dillard wrote: > http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6816 I was working on updating this one. I've sent a notification to Mitre with all the details. - -chris -BEGIN PGP SIGNATURE-

Re: Tomcat issue

2017-03-16 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Kerapetse, On 3/16/17 9:24 AM, Kerapetse Phorano wrote: > Hello, > > Please assist. We have tomcat 9.0.0.M18 > installed and > running successfully on Ubuntu Server. We are experiencing an

Re: Tomcat 8.0.x series roadmap

2017-03-16 Thread KK Gupta
On Fri, Mar 10, 2017 at 11:35 AM, Mark Thomas wrote: > On 10/03/2017 16:21, KK Gupta wrote: > > Hi All, > > > > Our product uses Tomcat 8.0.x series and we recently upgraded to tomcat > > 8.0.41 in our product. > > > > http://tomcat.apache.org/whichversion.html shows that

Re: CVEs Not Published

2017-03-16 Thread Mark Thomas
On 16/03/17 14:25, David Dillard wrote: > Apologies if this is a duplicate, but I don't see this message in the > archive so I'm resending. > > > Hi, > > I was recently reviewing Tomcat vulnerabilities and I noticed that it > appears that several CVEs for Tomcat going back to at least September

Tomcat issue

2017-03-16 Thread Kerapetse Phorano
Hello, Please assist. We have tomcat 9.0.0.M18 installed and running successfully on Ubuntu Server. We are experiencing an issue when we try to run tomcat manager from a different PC. We receive the following error message: HTTP Status 403 –

CVEs Not Published

2017-03-16 Thread David Dillard
Apologies if this is a duplicate, but I don't see this message in the archive so I'm resending. Hi, I was recently reviewing Tomcat vulnerabilities and I noticed that it appears that several CVEs for Tomcat going back to at least September of last year have not been published by Mitre. A

Re: Syntax change in Set-Cookie header?

2017-03-16 Thread Jim Griswold
Thanks, Mark! I filed https://bz.apache.org/bugzilla/show_bug.cgi?id=60876. Jim On Thu, Mar 16, 2017 at 6:15 AM, Mark Thomas wrote: > On 15/03/17 21:56, Jim Griswold wrote: > > Hi everyone, > > > > After a recent upgrade from Tomcat 8.0.28 to 8.5.11, I've noticed a > syntax

Re: how do I know the exact commit for a particular version of tomcat?

2017-03-16 Thread Konstantin Kolinko
2017-03-16 16:45 GMT+03:00 Hoa Phan : > I have been using the > https://tomcat.apache.org/tomcat-8.0-doc/changelog.html > and try to check out the revision with same message as latest change log of > a particular version. Though it wasn't really get me the matching binary. > >

how do I know the exact commit for a particular version of tomcat?

2017-03-16 Thread Hoa Phan
I have been using the https://tomcat.apache.org/tomcat-8.0-doc/changelog.html and try to check out the revision with same message as latest change log of a particular version. Though it wasn't really get me the matching binary. Or can I find the commit hash in any file in the zip ? Thanks

Re: Syntax change in Set-Cookie header?

2017-03-16 Thread Mark Thomas
On 15/03/17 21:56, Jim Griswold wrote: > Hi everyone, > > After a recent upgrade from Tomcat 8.0.28 to 8.5.11, I've noticed a syntax > change in the Set-Cookie header generated by Tomcat, and I was hoping to > confirm whether this is intentional or if I'm doing something incorrectly. > > The