Re: CVE-2019-0232 & CVE-2020-1938

2024-07-15 Thread Chuck Caldarale
> On Jul 15, 2024, at 12:24, Jurevich, Aidan > wrote: > > My organization has a few devices that have the file tomcat-juli-8.5.57.jar > installed on them via the program Altair and are showing up as vulnerable to > CVE-2019-0232 and CVE-2020-1938, which according to your documentation seems

RE: Reg: tomcat CPU spikes

2024-07-15 Thread Jalaj Asher
Christopher, We ran into 2 issues 1. We needed to allocate significant amount of -XMX for heap space, if we allowed caching, since increasing memory by a few hundred MB as well was not enough. 2. Also with the setting being enabled, it generated logs stating "could not add a resource as there

Issue with JDK 11 and tomcat-embed-core 9.0.91

2024-07-15 Thread Greg Eschbacher
Hi all, I'm hoping you all can help me: Our JDK 11 application uses tomcat-embed-core, and we're upgrading from 9.0.88 to 9.0.91 and we can no longer compile. After some investigation, I believe the issue is that the tomcat-embed-core jar file no longer contains a module-info.class file. Whe

Re: [OT] CVE-2019-0232 & CVE-2020-1938

2024-07-15 Thread Christopher Schultz
All, On 7/15/24 13:24, Jurevich, Aidan wrote: Hi, My organization has a few devices that have the file tomcat-juli-8.5.57.jar installed on them via the program Altair and are showing up as vulnerable to CVE-2019-0232 and CVE-2020-1938, which according to your documentation seems to be fixed f

Re: CVE-2019-0232 & CVE-2020-1938

2024-07-15 Thread Christopher Schultz
Aiden, On 7/15/24 16:36, Christopher Schultz wrote: Aiden, On 7/15/24 13:24, Jurevich, Aidan wrote: My organization has a few devices that have the file tomcat-juli-8.5.57.jar installed on them via the program Altair and are showing up as vulnerable to CVE-2019-0232 and CVE-2020-1938, which ac

Re: CVE-2019-0232 & CVE-2020-1938

2024-07-15 Thread Christopher Schultz
Aiden, On 7/15/24 13:24, Jurevich, Aidan wrote: My organization has a few devices that have the file tomcat-juli-8.5.57.jar installed on them via the program Altair and are showing up as vulnerable to CVE-2019-0232 and CVE-2020-1938, which according to your documentation seems to be fixed for th

Re: Reg: tomcat CPU spikes

2024-07-15 Thread Christopher Schultz
Jalaj, On 7/15/24 15:03, Jalaj Asher wrote: Yeah I was wondering the same as this has been in place since a few years now atleast 4 years since cachingAllowed had some changes in tomcat 8 which was resulting in it caching all static content as well as jsps and jars and our though process was if

RE: Reg: tomcat CPU spikes

2024-07-15 Thread Jalaj Asher
Thank you Christoper for the insight. Yeah I was wondering the same as this has been in place since a few years now atleast 4 years since cachingAllowed had some changes in tomcat 8 which was resulting in it caching all static content as well as jsps and jars and our though process was if we ha

CVE-2019-0232 & CVE-2020-1938

2024-07-15 Thread Jurevich, Aidan
Hi, My organization has a few devices that have the file tomcat-juli-8.5.57.jar installed on them via the program Altair and are showing up as vulnerable to CVE-2019-0232 and CVE-2020-1938, which according to your documentation seems to be fixed for this version of the file. This seems to be an

Re: Tomcat http header size too large!

2024-07-15 Thread Konstantin Kolinko
пн, 15 июл. 2024 г. в 11:24, Mark Thomas : > > On 14/07/2024 00:28, Pradeep wrote: > > Hi, > > > > I need some tips to solve below issue. > > I am getting 431 http error in API (code running in tomcat) when header > > size crosses 8KB. Tomcat server doesn't process request if header size is > > mor

Re: Tomcat http header size too large!

2024-07-15 Thread Mark Thomas
On 14/07/2024 00:28, Pradeep wrote: Hi, I need some tips to solve below issue. I am getting 431 http error in API (code running in tomcat) when header size crosses 8KB. Tomcat server doesn't process request if header size is more than 8KB. I tried adding below properties to increase the header s