Re: Tomcat 9 on Debian 12

2025-03-10 Thread Chuck Caldarale
> On 2025 Mar 10, at 18:06, Jason Bailey > wrote: > > I'm running Tomcat 9 on Debian 12 to run Apache Guacamole and am trying > to get the tomcat-users.xml file to take so that I can manage the > service from the Tomcat Manager. So far I have not had luck getting the > login dialog to the manag

Tomcat 9 on Debian 12

2025-03-10 Thread Jason Bailey
I'm running Tomcat 9 on Debian 12 to run Apache Guacamole and am trying to get the tomcat-users.xml file to take so that I can manage the service from the Tomcat Manager. So far I have not had luck getting the login dialog to the manager to accept any xml file I give it. First, where should I be p

Has Tomcat 10 dropped support for using log4j2 as its default logger?

2025-03-10 Thread Bruno Melloni
*TLDR Question*:  Has Tomcat 10 dropped support for using log4j2 as its default logger? Details: I am wondering because after easily a decade of using log4j with Tomcat... it is now virtually impossible to find instructions (_that actually work_) for how to configure Tomcat 10 to use *Apache

Re: Has Tomcat 10 dropped support for using log4j2 as its default logger?

2025-03-10 Thread Piotr P. Karwasz
Hi Bruno, On 10.03.2025 18:01, Bruno Melloni wrote: I am wondering because after easily a decade of using log4j with Tomcat... it is now virtually impossible to find instructions (_that actually work_) for how to configure Tomcat 10 to use *Apache Log4j* as its default logger. Since both are T

[SECURITY] CVE-2025-24813 Potential RCE and/or information disclosure and/or information corruption with partial PUT

2025-03-10 Thread Mark Thomas
CVE-2025-24813 Potential RCE and/or information disclosure and/or information corruption with partial PUT Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 11.0.0-M1 to 11.0.2 Apache Tomcat 10.1.0-M1 to 10.1.34 Apache Tomcat 9.0.0.M1 to 9.0.98 Descrip