Re: [PROPOSAL] Tomcat Webinar series

Hi, Very nice idea. one more suggestion for session: Hardening Tomcat to make it more secure. Regards SJ On Sat, Nov 14, 2015 at 3:57 AM, Christopher Schultz < ch...@christopherschultz.net> wrote: > Prashant, > > On 11/13/15 12:00 PM, prashant sharma wrote: > > You mentioned about

java deserialization vulnerability for Tomcat 7/8

Hi, Would like to get your opinion on the java deserialization vulnerability issue for Tomcat. As Jboss seems to have been impacted with, is there a way to verify wether this vulnerability affects Tomcat as well? Regards SJ

Re: Tomcat threads dependency on net.core.somaxconn value on Linux

Thanks Christopher, it makes more sense now. On Fri, Apr 17, 2015 at 8:51 PM, Christopher Schultz ch...@christopherschultz.net wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Satish, On 4/17/15 7:20 AM, satish jupalli wrote: I would like to support a bust in traffic we

Tomcat threads dependency on net.core.somaxconn value on Linux

connections. Regards Satish Jupalli

Tomcat upgrades/security patching best practises

Hi, What are the best practices for upgrading the tomcat given the fact that they are no direct security patches available. Specially with the environments where there are large instances of Tomcat servers running it is challenging to upgrade these servers manually in all the systems. Are there

Re: Tomcat upgrades/security patching best practises

Thanks Mark. That helped a lot. On Mon, Feb 24, 2014 at 5:50 PM, Mark Thomas ma...@apache.org wrote: On 24/02/2014 09:20, satish jupalli wrote: Hi, What are the best practices for upgrading the tomcat given the fact that they are no direct security patches available. Specially