https://bz.apache.org/bugzilla/show_bug.cgi?id=64671
Mark Thomas <ma...@apache.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|NEW |RESOLVED --- Comment #1 from Mark Thomas <ma...@apache.org> --- The NPE was detected in our CI system and fixed ~5 days ago. See https://github.com/apache/tomcat/commit/583b7ad17ff7cd67ac15a50e76cf2e0c5cd9138a The memory leak looks like CVE-2020-13934. See https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.37 and "Ensure that the HTTP/1.1 processor is correctly recycled when a direct connection to h2c is made. (markt)" in the change log. -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org