RE: [SECURITY] CVE-2021-42340 Apache Tomcat DoS [EXTERNAL]

2021-12-06 Thread Beard, Shawn
It has to do with not releasing http websocket connections properly. So its both. We just had to upgrade to 9.0.53 on everything because of this. ​ Shawn Beard• Sr. Systems Engineer Middleware Engineering [cid:image852868.png@BE68D2F7.0F762FA2] 3840 109th Street , Urbandale

Re: [SECURITY] CVE-2021-42340 Apache Tomcat DoS

2021-12-06 Thread James H. H. Lampert
On 10/14/21 7:12 AM, Mark Thomas wrote: The fix for bug 63362 introduced a memory leak. The object introduced to collect metrics for HTTP upgrade connections was not released for WebSocket connections once the WebSocket connection was closed. This created a memory leak that, over time, could le

Re: RemoveAbandoned Problems

2021-12-06 Thread Phil Steitz
Sorry again.  Docs are here (at the bottom in the abandoned config section): https://commons.apache.org/proper/commons-dbcp/configuration.html On 12/6/21 10:01 AM, Phil Steitz wrote: On 12/5/21 2:34 PM, Jerry Malcolm wrote: Phil, Thanks for the response.  I saw that note in the docs that sa

Re: RemoveAbandoned Problems

2021-12-06 Thread Phil Steitz
On 12/5/21 2:34 PM, Jerry Malcolm wrote: Phil, Thanks for the response.  I saw that note in the docs that said the removeAbandonedOnMaintenance wouldn't do anything without an evictor service.  But removeAbandonedOnBorrow also requires an evictor service to run in order remove on borrow? 

thread pool count never goes down

2021-12-06 Thread Jonathan Yom-Tov
hi, I have a single instance of Tomcat (version 9.0.54) in which the thread count on a connector thread pool doesn't reduce despite most of the threads (198/200) being idle. If I understand correctly the default idle time before a thread is reaped is 60 seconds, but this situation persists for hou

Re: Tomcat Service Update throws Application System Error - Error Parsing Command Line

2021-12-06 Thread Konstantin Kolinko
пн, 6 дек. 2021 г. в 12:28, Ponnusamy, Prabhakar : > > Tomcat User Community, > > > > I am trying to update the options of tomcat using the //US command line > option, but getting this error - Application System Error - Error Parsing > Command Line, below is how I was trying to run the commands,

Tomcat Service Update throws Application System Error - Error Parsing Command Line

2021-12-06 Thread Ponnusamy, Prabhakar
Tomcat User Community, I am trying to update the options of tomcat using the //US command line option, but getting this error - Application System Error - Error Parsing Command Line, below is how I was trying to run the commands, but no success. Both in tomcat7 and tomcat9, I am getting the sam