https://bz.apache.org/bugzilla/show_bug.cgi?id=68500
Bug ID: 68500
Summary: occur a security vulnerable SSL connection(TLS1.1)
when send a packet for heartbeat in k8s tribes
Product: Tomcat 9
Version: 9.0.52
Hardware: Other
This question belongs on the users mailing list, not the dev list.
Mark
On 18/01/2024 06:24, 2460873257 wrote:
Hi Tomcat Experts：
I'm trying to Looking for a solution to disable the tomcat *
Options request, but upon checking the source code, it seems that it is
directly defined in th
https://bz.apache.org/bugzilla/show_bug.cgi?id=68500
Mark Thomas changed:
What|Removed |Added
Resolution|--- |INVALID
Status|NEW
https://bz.apache.org/bugzilla/show_bug.cgi?id=68500
--- Comment #2 from Remy Maucherat ---
SSLContext.getInstance("TLS") is the correct way.
Please go to the users mailing list to investigate.
https://tomcat.apache.org/lists.html#tomcat-users
--
You are receiving this mail because:
You are the
Hi all,
after the refactorings for the testing of the forbidden client initiated
renegotiations, these unit tests fail for me for the last tags of TC 8.5
and 9, but not for 10.1 and 11. I am using JSSE and the tests fail
consistently for all four JDK vendors I am testing against on all linux
This is an automated email from the ASF dual-hosted git repository.
remm pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/main by this push:
new 160cc59e7b Remove sync
160cc59e7b is described below
This is an automated email from the ASF dual-hosted git repository.
remm pushed a commit to branch 10.1.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/10.1.x by this push:
new 00c06bb081 Remove sync
00c06bb081 is described bel
This is an automated email from the ASF dual-hosted git repository.
remm pushed a commit to branch 9.0.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/9.0.x by this push:
new 344733bfc7 Remove sync
344733bfc7 is described below
This is an automated email from the ASF dual-hosted git repository.
remm pushed a commit to branch 8.5.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/8.5.x by this push:
new 8e0a8485b5 Remove sync
8e0a8485b5 is described below
This is an automated email from the ASF dual-hosted git repository.
remm pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/main by this push:
new 54012bd3b8 Remove useless synchronized
54012bd3b8 is d
This is an automated email from the ASF dual-hosted git repository.
remm pushed a commit to branch 10.1.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/10.1.x by this push:
new c9b64e9b6f Remove useless synchronized
c9b64e9b6f
This is an automated email from the ASF dual-hosted git repository.
remm pushed a commit to branch 9.0.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/9.0.x by this push:
new 46ffe71676 Remove useless synchronized
46ffe71676 is
This is an automated email from the ASF dual-hosted git repository.
remm pushed a commit to branch 8.5.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/8.5.x by this push:
new b70c765a2b Remove useless synchronized
b70c765a2b is
markt-asf commented on PR #683:
URL: https://github.com/apache/tomcat/pull/683#issuecomment-1898765701
No evidence provided to support claim of a leak.
No leak observed when testing with profiler.
No obvious reason that proposed patch would impact `UpgradeProcessor`
instances (or anyth
markt-asf closed pull request #683: Fix websocket processor leaks when
WsSession expires and server sends close message by WsBackgroundThread
URL: https://github.com/apache/tomcat/pull/683
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to
imario42 commented on PR #683:
URL: https://github.com/apache/tomcat/pull/683#issuecomment-1898787616
@markt-asf : He described his findings in that tomcat-user post
[https://lists.apache.org/thread/vyog0dyxwq3hlpjgt2vb1wkrxw6x2h1k](url)
However, I do not know if his patch works.
markt-asf commented on PR #683:
URL: https://github.com/apache/tomcat/pull/683#issuecomment-1898853883
Thanks. The reference to the description on the users list helps. I'll look
at this again.
--
This is an automated message from the Apache Git Service.
To respond to the message, please
markt-asf commented on PR #683:
URL: https://github.com/apache/tomcat/pull/683#issuecomment-189414
The description of the problem and the analysis of the root cause (the BZ
66508 fix) is correct but the proposed fix is not. It will probably work the
majority of the time but there is a t
Build status: BUILD FAILED: failed compile (failure)
Worker used: bb_worker2_ubuntu
URL: https://ci2.apache.org/#builders/37/builds/821
Blamelist: remm
Build Text: failed compile (failure)
Status Detected: new failure
Build Source Stamp: [branch 9.0.x] 46ffe71676e4d9ca689b5657a462b09dd10f9373
St
This is an automated email from the ASF dual-hosted git repository.
markt pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/main by this push:
new 80d221b8f2 Correct a regression in the fix for BZ 665
This is an automated email from the ASF dual-hosted git repository.
markt pushed a commit to branch 10.1.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/10.1.x by this push:
new 1786df8027 Correct a regression in the fix for BZ
This is an automated email from the ASF dual-hosted git repository.
markt pushed a commit to branch 10.1.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/10.1.x by this push:
new 67638c17e7 Fix backport of BZ 66508 regression fi
This is an automated email from the ASF dual-hosted git repository.
markt pushed a commit to branch 9.0.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/9.0.x by this push:
new 2398282835 Correct a regression in the fix for BZ 6
This is an automated email from the ASF dual-hosted git repository.
markt pushed a commit to branch 8.5.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/8.5.x by this push:
new 1e05044348 Correct a regression in the fix for BZ 6
markt-asf closed pull request #683: Fix websocket processor leaks when
WsSession expires and server sends close message by WsBackgroundThread
URL: https://github.com/apache/tomcat/pull/683
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to
markt-asf commented on PR #683:
URL: https://github.com/apache/tomcat/pull/683#issuecomment-1899074074
Fixed and back-ported. Will be in the February releases.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL ab
markt-asf merged PR #682:
URL: https://github.com/apache/tomcat/pull/682
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.o
This is an automated email from the ASF dual-hosted git repository.
markt pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/main by this push:
new 9728722f28 Fix HTTP/2 support wording in HTTP docs
97
markt-asf commented on PR #682:
URL: https://github.com/apache/tomcat/pull/682#issuecomment-1899075283
Tx. I'll back-port this fix shortly.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the spe
This is an automated email from the ASF dual-hosted git repository.
markt pushed a commit to branch 10.1.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/10.1.x by this push:
new 63a7558c3f Fix HTTP/2 support wording in HTTP doc
This is an automated email from the ASF dual-hosted git repository.
markt pushed a commit to branch 9.0.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/9.0.x by this push:
new 2fe1481e3f Fix HTTP/2 support wording in HTTP docs
This is an automated email from the ASF dual-hosted git repository.
markt pushed a commit to branch 8.5.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/8.5.x by this push:
new 9152c1a22b Fix HTTP/2 support wording in HTTP docs
Build status: BUILD FAILED: failed compile (failure)
Worker used: bb_worker2_ubuntu
URL: https://ci2.apache.org/#builders/44/builds/1106
Blamelist: Mark Thomas
Build Text: failed compile (failure)
Status Detected: new failure
Build Source Stamp: [branch 10.1.x] 67638c17e7c19a0280ccafa340183fb179af
On 18/01/2024 12:33, Rainer Jung wrote:
Hi all,
after the refactorings for the testing of the forbidden client initiated
renegotiations, these unit tests fail for me for the last tags of TC 8.5
and 9, but not for 10.1 and 11. I am using JSSE and the tests fail
consistently for all four JDK ve
Build status: Build succeeded!
Worker used: bb_worker2_ubuntu
URL: https://ci2.apache.org/#builders/44/builds/1107
Blamelist: Jan Brasna <1784648+janbra...@users.noreply.github.com>, Mark Thomas
Build Text: build successful
Status Detected: restored build
Build Source Stamp: [branch 10.1.x] 63a75
Build status: Build succeeded!
Worker used: bb_worker2_ubuntu
URL: https://ci2.apache.org/#builders/37/builds/822
Blamelist: Jan Brasna <1784648+janbra...@users.noreply.github.com>, Mark Thomas
, remm
Build Text: build successful
Status Detected: restored build
Build Source Stamp: [branch 9.0.x]
To whom it may concern,
On 1/18/24 01:24, 2460873257 wrote:
Hi Tomcat Experts：
I'm trying to Looking for a solution to disable the tomcat *
Options request, but upon checking the source code, it seems that it is
directly defined in the code. Is there a configuration provided to
disable
imario42 commented on PR #683:
URL: https://github.com/apache/tomcat/pull/683#issuecomment-1899854047
Thanks a lot @markt-asf for tackling and fixing it and @lbliangbin for the
analysis. 👍😎
--
This is an automated message from the Apache Git Service.
To respond to the message, please log
38 matches
Mail list logo
