opsie.. I suppose they can find a workaround for their solution....

On Tue, Feb 11, 2025 at 8:55 PM Christopher Schultz
<ch...@christopherschultz.net> wrote:
>
> Jason,
>
> On 2/7/25 6:53 AM, Jason Wee wrote:
> > Why not use releaseTag with 2 arguments? That 3 arguments method is
> > deprecated in tomcat9.0.98 anyway...sooner it will be removed...
>
> This isn't really an application issue. The application isn't calling
> releaseTag() itself; the JSP compiler generated that code from the
> application's JSP source.
>
> It's an issue with Tomcat changing the way a specific method-call is
> generated by the JSP compiler, and the operators not re-pre-compiling
> their JSPs for the new version of Tomcat. The solution is to
> force-recompile the JSP.
>
> No error would be occurring if we (Tomcat) had been more careful about
> making this change.
>
> -chris
>
> > On Fri, Feb 7, 2025 at 5:55 PM Konstantin Kolinko
> > <knst.koli...@gmail.com> wrote:
> >>
> >> чт, 6 февр. 2025 г. в 16:42, Divyabharathi Sundaram
> >> <ext_divyabharathi.sunda...@malaysiaairlines.com.invalid>:
> >>>
> >>> Stacktraces
> >>> org.apache.jasper.JasperException: javax.servlet.ServletException: 
> >>> java.lang.NoSuchMethodError: 
> >>> org.apache.jasper.runtime.JspRuntimeLibrary.releaseTag(Ljavax/servlet/jsp/tagext/Tag;Lorg/apache/tomcat/InstanceManager;Z)V
> >>>      
> >>> org.apache.jasper.servlet.JspServletWrapper.handleJspException(JspServletWrapper.java:623)
> >>
> >> If your team has observed the above NoSuchMethodError, it is a symptom
> >> that their update procedure is flawed: they forget to recompile their
> >> JSPsfor the new version of Tomcat.
> >>
> >> In essence that means that any changes that affect java code
> >> generation for JSPs in the Jasper component (the JSP engine) of Tomcat
> >> are not picked up by your upgrade procedure. Those include a bug that
> >> introduced CVE-2024-52318 as well as a fix for it.
> >>
> >> See:
> >> https://tomcat.apache.org/security-9.html
> >>
> >> Best regards,
> >> Konstantin Kolinko
> >>
> >> ---------------------------------------------------------------------
> >> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> >> For additional commands, e-mail: users-h...@tomcat.apache.org
> >>
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> > For additional commands, e-mail: users-h...@tomcat.apache.org
> >
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to