On 01/12/2019 17:03, Arief Hasani wrote: >> Hi, >> Strangely I can not upload big file (~20Mb) when using http2 using curl >> with \ >> unexpected EOF error, whereas the upload was successful when forcing curl to >> use \ >> http1.1 protocol so I assume code and configuration should be correctI am >> using \ >> tomcat 9.0.29
> Which version of curl? > I recommend you read through this issue: > https://bz.apache.org/bugzilla/show_bug.cgi?id=63948 > MarkHi Mark,That does it, thanks. So how does disabling those three > configurations affect the mitigation of the vulnerabilities explained in > https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md CheersSorry, was unable to reply to original thread, somehow it was not delivered to my inbox