RE: CVE-2020-1935

2020-07-27 Thread George Stanchev
Hi Mark, Thank you for the detailed answer. I really appreciate your response. As someone who handles security at work I can empathize and agree with all the points you are making. In previous security disclosures it has been pretty easy for me to assess the risk of a vulnerability with either

Re: Question regarding servlet lifecycle and connection pooling ..

2020-07-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 John, On 7/25/20 11:25, John Dale wrote: > We've wrapped my connection pool interface in a Factory. Can you > confirm how the current request's thread is used by JDBC > connection pooling to MySQL? Are you using Tomcat to manage your DataSource

Re: Upgrade: tomcat8w.exe //ES//example - dump Java Options and other information to tomcat9

2020-07-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, On 7/27/20 10:43, Bill Stewart wrote: > On Mon, Jul 27, 2020 at 12:22 AM Hans Schou wrote: > > Yes I can add and change information, but how can I get the > information out >> so I can use that for an upgrade to a new major version? >> > >

Re: Upgrade: tomcat8w.exe //ES//example - dump Java Options and other information to tomcat9

2020-07-27 Thread Bill Stewart
On Mon, Jul 27, 2020 at 12:22 AM Hans Schou wrote: Yes I can add and change information, but how can I get the information out > so I can use that for an upgrade to a new major version? > >From an elevated command line, run: tomcat8w.exe "//ES//servicename" This displays the GUI configuration

SV: Upgrade: tomcat8w.exe //ES//example - dump Java Options and other information to tomcat9

2020-07-27 Thread Hans Schou
> Fra: Christopher Schultz > Note that everything you can configure using tomcatXw.exe //ES/svcname > you can also install from the command-line. Yes I can add and change information, but how can I get the information out so I can use that for an upgrade to a new major version? To change I run