Re: Alternative Windows service installer package

2019-12-18 Thread Bill Stewart
> Mark Thomas wrote: > Generally, Tomcat's source code is provided under the ALv2. Normally, > the answer would be "The ALv2 gives you all the permissions you need.". > However..., those files all contain the Tomcat logo which is a trademark > so section 6 applies which means the ALv2 does not giv

Re: Alternative Windows service installer package

2019-12-18 Thread Bill Stewart
On Wed, Dec 18, 2019 at 8:21 AM Mark Thomas wrote: > No need to be a commmitter. Your message has been moderate through. > Expect the PMC to discuss it and then respond. Understood; thank you. > The upgrades looked to be the most obvious feature difference. That > raises questions about whether

[ANN] Apache Tomcat 7.0.99 released

2019-12-18 Thread Violeta Georgieva
The Apache Tomcat team announces the immediate availability of Apache Tomcat 7.0.99. Apache Tomcat is an open source software implementation of the Java Servlet, JavaServer Pages, Java Expression Language and Java WebSocket technologies. This release contains a number of bug fixes and improvement

[SECURITY] CVE-2019-17563 Session fixation

2019-12-18 Thread Mark Thomas
CVE-2019-17563 Session fixation Severity: Low Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 9.0.0.M1 to 9.0.29 Apache Tomcat 8.5.0 to 8.5.49 Apache Tomcat 7.0.0 to 7.0.98 Description: When using FORM authentication there was a narrow window where an attacker could perf

[SECURITY] CVE-2019-12418 Local Privilege Escalation

2019-12-18 Thread Mark Thomas
CVE-2019-12418 Local Privilege Escalation Severity: Moderate Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 9.0.0.M1 to 9.0.28 Apache Tomcat 8.5.0 to 8.5.47 Apache Tomcat 7.0.0 to 7.0.97 Description: When Tomcat is configured with the JMX Remote Lifecycle Listener, a lo

Re: Alternative Windows service installer package

2019-12-18 Thread Mark Thomas
On 18/12/2019 15:14, Bill Stewart wrote: > Mark Thomas wrote: > >>> Question 1: Do I need to get permission to use these images from ASF if > I >>> host the installer publicly, and if so how would I do that? >> >> Generally, Tomcat's source code is provided under the ALv2. Normally, >> the answer

Re: Alternative Windows service installer package

2019-12-18 Thread Bill Stewart
Mark Thomas wrote: > > Question 1: Do I need to get permission to use these images from ASF if I > > host the installer publicly, and if so how would I do that? > > Generally, Tomcat's source code is provided under the ALv2. Normally, > the answer would be "The ALv2 gives you all the permissions y

Re: Avoiding service/web fragment

2019-12-18 Thread newbeewan
Le 17/12/2019 à 19:25, Christopher Schultz a écrit : -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 C. Mourad, On 12/17/19 04:20, newbee...@nativobject.net wrote: Hi, We are trying to use websphere 9 client form connecting to an IBM solution. This dependencies are working in java standalone