*** mick_lap1op has quit (*.net *.split) | 11:26 | |
*** mick_lap1op (~mick@mickweiss.com) has joined #wikid | 11:32 | |
*** nowen (~nowen@adsl-74-176-212-133.asm.bellsouth.net) has joined #wikid | 13:35 | |
*** jY has quit (Ping timeout: 244 seconds) | 17:40 | |
*** jY (~jy@photoblog.com) has joined #wikid | 17:43 | |
*** perestrelka has quit (*.net *.split) | 18:03 | |
*** jY has quit (*.net *.split) | 18:03 | |
*** mick_lap1op has quit (*.net *.split) | 18:03 | |
*** nowen has quit (Excess Flood) | 18:05 | |
*** mick_lap1op (~mick@mickweiss.com) has joined #wikid | 18:08 | |
*** jY (~jy@photoblog.com) has joined #wikid | 18:08 | |
*** perestrelka (~vladdy@194.242.5.47) has joined #wikid | 18:08 | |
*** nowen (~nowen@adsl-74-176-212-133.asm.bellsouth.net) has joined #wikid | 18:09 | |
ionepoch | hi nick | 18:14 |
---|---|---|
nowen | hi | 18:14 |
ionepoch | any ideas on upgrading tomcat ourselves to 6.x or 7.x? | 18:14 |
ionepoch | i saw some other feedback in the forums regarding tomcat 5 an auditors complaing (blah blah blah) | 18:17 |
nowen | huh, haven't had anyone complain about 6 | 18:18 |
ionepoch | hmm | 18:18 |
nowen | is there an issue I should know about? | 18:18 |
ionepoch | is it on 6 now? | 18:18 |
ionepoch | forgive me | 18:18 |
ionepoch | i was trying to run the version script | 18:18 |
ionepoch | but it wouldn't load.. | 18:18 |
ionepoch | the readme must be stale | 18:18 |
ionepoch | Apache Tomcat Version 5.5.30 | 18:19 |
ionepoch | wikid-server-enterprise-3.4.87-b1092 | 18:19 |
ionepoch | what version is contained in wikid-server-enterprise-3.4.87-b1092 | 18:19 |
ionepoch | ? | 18:19 |
nowen | oh, yeah, you're right | 18:19 |
nowen | 5.5. | 18:19 |
ionepoch | so to confirm | 18:19 |
ionepoch | it is 5.5 correct? | 18:19 |
nowen | where did you see that in the forums? | 18:20 |
nowen | yes, it is 5.5 | 18:20 |
ionepoch | just a sec... digging it up | 18:20 |
ionepoch | http://wikid-strong-authentication-forums.1491522.n2.nabble.com/Upgrading-Tomcat-td5275803.html | 18:21 |
ionepoch | http://tomcat.apache.org/security-5.html#Fixed_in_Apache_Tomcat_5.5.28 | 18:21 |
ionepoch | Note: Vulnerabilities that are not Tomcat vulnerabilities but have either been incorrectly reported against Tomcat or where Tomcat provides a workaround are listed at the end of this page. | 18:21 |
ionepoch | Please note that Tomcat 5.0.x is no longer supported. Further vulnerabilities in the 5.0.x branch will not be fixed. Users should upgrade to 5.5.x, 6.x or 7.x to obtain security fixes. Vulnerabilities fixed in Tomcat 5.5.26 onwards have not been assessed to determine if they are present in the 5.0.x branch. | 18:21 |
ionepoch | so.. it looks like 5.5 is ok... we're just a few cve's behind | 18:22 |
ionepoch | do you know of anyone that has tried to upgrade this to a newer tomcat successfully? | 18:23 |
nowen | I think we have 6 running on our demo box | 18:24 |
ionepoch | since we are new to wikid | 18:24 |
ionepoch | what would you recommend? | 18:24 |
ionepoch | should we wait and follow the official builds you guys release | 18:24 |
nowen | I'll see about getting it upgraded in the rpm | 18:24 |
nowen | yes, I think so. it should not take long | 18:24 |
ionepoch | and deb ;) | 18:24 |
ionepoch | are you guys running centos as your default OS of choice? | 18:25 |
nowen | yes ;) | 18:25 |
nowen | yes | 18:25 |
ionepoch | cool | 18:25 |
ionepoch | alright | 18:25 |
ionepoch | as usual | 18:25 |
ionepoch | thanks for all your help! | 18:25 |
nowen | np, thanks for the feedback :) | 18:26 |
*** nowen has quit (Quit: Leaving.) | 23:30 |
Generated by irclog2html.py 2.11.0 by Marius Gedminas - find it at mg.pov.lt!