You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ofbiz.apache.org by "Erwan de FERRIERES (JIRA)" <ji...@apache.org> on 2010/02/21 20:31:28 UTC

[jira] Updated: (OFBIZ-3424) Upgrade Tomcat version to 6.0.24

     [ https://issues.apache.org/jira/browse/OFBIZ-3424?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Erwan de FERRIERES updated OFBIZ-3424:
--------------------------------------

    Attachment: OFBIZ-3424.diff

A first patch, but some INFO messages are now in the console when lauching OFBiz such as 
{code}
INFO: This Realm has already been started
Feb 21, 2010 7:02:49 PM org.apache.catalina.startup.ContextConfig defaultWebConfig
INFO: No default web.xml
2010-02-21 19:02:49,339 (main) [  GenericDispatcher.java:62 :INFO ] Creating new dispatcher [myportal] (main)
2010-02-21 19:02:49,340 (main) [     ControlServlet.java:73 :INFO ] LOADING WEBAPP [myportal] Open For Business - My Page, located at /home/erwan/workspace/ofbiz/specialpurpose/myportal/webapp/myportal/
2010-02-21 19:02:49,345 (main) [    ConfigXMLReader.java:120:INFO ] controller loaded: 0.0s, 5 requests, 5 views in file:/home/erwan/workspace/ofbiz/specialpurpose/myportal/webapp/myportal/WEB-INF/controller.xml
Feb 21, 2010 7:02:49 PM org.apache.catalina.realm.RealmBase start
INFO: This Realm has already been started
Feb 21, 2010 7:02:49 PM org.apache.catalina.startup.ContextConfig defaultWebConfig
INFO: No default web.xml
2010-02-21 19:02:49,490 (main) [  GenericDispatcher.java:62 :INFO ] Creating new dispatcher [order] (main)
2010-02-21 19:02:49,504 (main) [     ControlServlet.java:73 :INFO ] LOADING WEBAPP [ordermgr] Open For Business - Order Manager, located at /home/erwan/workspace/ofbiz/applications/order/webapp/ordermgr/
Feb 21, 2010 7:02:49 PM org.apache.catalina.connector.Connector initialize
INFO: The connector has already been initialized
Feb 21, 2010 7:02:49 PM org.apache.jk.common.ChannelSocket init
INFO: JK: ajp13 listening on /0.0.0.0:8009
Feb 21, 2010 7:02:49 PM org.apache.jk.server.JkMain start
INFO: Jk running ID=0 time=7/76  config=null
Feb 21, 2010 7:02:49 PM org.apache.catalina.connector.Connector initialize
INFO: The connector has already been initialized
Feb 21, 2010 7:02:49 PM org.apache.coyote.http11.Http11Protocol start
INFO: Starting Coyote HTTP/1.1 on http-0.0.0.0-8080
Feb 21, 2010 7:02:49 PM org.apache.catalina.connector.Connector initialize
INFO: The connector has already been initialized
Feb 21, 2010 7:02:49 PM org.apache.coyote.http11.Http11Protocol start
INFO: Starting Coyote HTTP/1.1 on http-0.0.0.0-8443

{code}

> Upgrade Tomcat version to 6.0.24
> --------------------------------
>
>                 Key: OFBIZ-3424
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-3424
>             Project: OFBiz
>          Issue Type: Improvement
>          Components: ALL APPLICATIONS
>    Affects Versions: SVN trunk
>            Reporter: Erwan de FERRIERES
>            Priority: Blocker
>             Fix For: SVN trunk
>
>         Attachments: OFBIZ-3424.diff
>
>
> 3 security issues have been released today for Tomcat, asking to migrate to the latest version :
> CVE-2009-2902: Apache Tomcat unexpected file deletion in work directory
> CVE-2009-2901: Apache Tomcat insecure partial deploy after failed undeploy
> CVE-2009-3548: Apache Tomcat unexpected file deletion and/or alteration

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.