You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by "LQxdu (via GitHub)" <gi...@apache.org> on 2024/10/10 03:14:10 UTC
[PR] Report HTTP/2 header parsing errors earlier [tomcat]
LQxdu opened a new pull request, #762:
URL: https://github.com/apache/tomcat/pull/762
We found that the 10.0.x branch is also affected by CVE-2024-24549(https://github.com/advisories/GHSA-7w75-32cg-r6g2), but it has not been fixed yet. Therefore, we have created this patch for 10.0.x based on the fixes applied in other branches.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
Re: [PR] Report HTTP/2 header parsing errors earlier [tomcat]
Posted by "LQxdu (via GitHub)" <gi...@apache.org>.
LQxdu commented on PR #762:
URL: https://github.com/apache/tomcat/pull/762#issuecomment-2404037105
During a recent network asset mapping assessment, we identified that a significant number of services are still deployed on Tomcat 10.0.x. Given the continued widespread use of this version, we think it is valuable to provide patch support for these legacy deployments as well.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
Re: [PR] Report HTTP/2 header parsing errors earlier [tomcat]
Posted by "n828cl (via GitHub)" <gi...@apache.org>.
n828cl commented on PR #762:
URL: https://github.com/apache/tomcat/pull/762#issuecomment-2404044482
As previously stated, the 10.0.x branch is well past end-of-life (over three years ago); there will be no further updates to this level. Anyone not updating a product in that length of time clearly has no interest in security, regardless of whatever lip service they might pay.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
Re: [PR] Report HTTP/2 header parsing errors earlier [tomcat]
Posted by "n828cl (via GitHub)" <gi...@apache.org>.
n828cl closed pull request #762: Report HTTP/2 header parsing errors earlier
URL: https://github.com/apache/tomcat/pull/762
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
Re: [PR] Report HTTP/2 header parsing errors earlier [tomcat]
Posted by "isapir (via GitHub)" <gi...@apache.org>.
isapir commented on PR #762:
URL: https://github.com/apache/tomcat/pull/762#issuecomment-2403933166
Is there a reason you are using Tomcat 10.0 and not Tomcat 10.1? Tomcat 10.0 is no longer supported
See https://tomcat.apache.org/tomcat-10.0-eol.html
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org