Re: [SECURITY] CVE-2025-24813 Potential RCE and/or information disclosure and/or information corruption with partial PUT

2025-03-12 Thread Darryl Baker
For us the CVSS score is a way to determine how deeply to investigate and more importantly to describe the criticality to management in a way they understand. Darryl Baker, GSEC, GCLD (he/him/his) Sr. System Administrator Distributed Application Platform Services Northwestern University 4th

Re: [SECURITY] CVE-2025-24813 Potential RCE and/or information disclosure and/or information corruption with partial PUT

2025-03-12 Thread Darryl Baker
Does this have a CVE score yet? Darryl Baker, GSEC, GCLD (he/him/his) Sr. System Administrator Distributed Application Platform Services Northwestern University 4th Floor 2020 Ridge Avenue Evanston, IL 60208-0801 darryl.ba...@northwestern.edu <mailto:darryl.ba...@northwestern.edu>

Re: Building tomcat-native on RHEL 8

2025-02-06 Thread Darryl Baker
Thank you. Darryl Baker, GSEC, GCLD (he/him/his) Sr. System Administrator Distributed Application Platform Services Northwestern University 4th Floor 2020 Ridge Avenue Evanston, IL 60208-0801 darryl.ba...@northwestern.edu <mailto:darryl.ba...@northwestern.edu> (847) 467-6674

Re: Building tomcat-native on RHEL 8

2025-02-06 Thread Darryl Baker
My question is why is tomcat-native dependent on APR at all? Could it be built without that dependency? Can I build tomcat native on Rocky Linux? Then could I use it on Red Hat? Has anyone tried that? Darryl Baker, GSEC, GCLD (he/him/his) Sr. System Administrator Distributed Application

Re: Building tomcat-native on RHEL 8

2025-02-05 Thread Darryl Baker
;, 'headers')) File "/root/rpmbuild/SOURCES/apr-1.6.3/build/gen-build.py", line 223, in get_files for pat in string.split(patterns): AttributeError: module 'string' has no attribute 'split' Creating build-outputs.mk failed [root@evfediamdv1 tomcat-n

Re: Building tomcat-native on RHEL 8

2025-02-05 Thread Darryl Baker
-native-2.0.8-src]# Darryl Baker, GSEC, GCLD (he/him/his) Sr. System Administrator Distributed Application Platform Services Northwestern University On 2/4/25, 4:21 PM, "Christopher Schultz" mailto:ch...@christopherschultz.net>> wrote: Darryl, On 2/3/25 1:17 PM, Da

Re: Building tomcat-native on RHEL 8

2025-02-03 Thread Darryl Baker
I knew where the general direction are already. The build fails looking for the source for APR. For RHEL 8 is mandatory to download the APR source rpm? Are the any other gotchas? I can't be the first to need the Tomcat-native for RHEL 8. Darryl Baker, GSEC, GCLD (he/him/his) Sr. S

Building tomcat-native on RHEL 8

2025-02-03 Thread Darryl Baker
Would someone please point me to the documentation on building tomcat-native on RHEL 8 using the Red Hat supplied APR package? Darryl Baker, GSEC, GCLD (he/him/his) Sr. System Administrator Distributed Application Platform Services Northwestern University 4th Floor 2020 Ridge Avenue Evanston

Re: Nothing but 404 errors

2024-09-05 Thread Darryl Baker
the link, and start up the new version. The system control file use the symbolic link so needs no changes. Darryl Baker, GSEC, GCLD (he/him/his) Sr. System Administrator Distributed Application Platform Services Northwestern University 4th Floor 2020 Ridge Avenue Evanston, IL 60208-0801

Stale tomcat.pid file prevented Tomcat from starting

2023-10-17 Thread Darryl Baker
default PID file. I looked at the Catalina.sh script and there is a bunch of logic trying to prevent this issue but somehow that failed. Is there any know issues with this logic? Darryl Baker

Re: Tomcat 10 on RHEL 8 with Java 17

2023-09-27 Thread Darryl Baker
Chris, With no logs at all check the permissions on the log directories and make sure that the user Tomcat is running as has write permissions there. This sounds very much like what I ran into my first time setting up Tomcat from scratch. Darryl Baker, GSEC, GCLD (he/him/his) Sr

Re: Best Practice to Upgrade Apache Tomcat from 9.0.56 to 9.0.74

2023-05-12 Thread Darryl Baker
I also unpack the tarball in a parallel location. Copy over the configuration files and war file to the new tree. Stop the running Tomcat. Relink the symbolic link to the new tree and restart Tomcat. Darryl Baker, GSEC, GCLD (he/him/his) Sr. System Administrator Distributed Application

Re: Unable to start application

2023-03-17 Thread Darryl Baker
Have you tried just setting the environment variable in the shell script .../bin/setenv.sh ? Darryl Baker, GSEC, GCLD (he/him/his) Sr. System Administrator Distributed Application Platform Services Northwestern University 4th Floor 2020 Ridge Avenue Evanston, IL 60208-0801 darryl.ba