ServerBuddies Support Blog

Apache Tomcat Versions

Apache Tomcat is an open source software implementation of the Java Servlet and JavaServer Pages technologies. Different versions of Apache Tomcat are available for different versions of the Servlet and JSP specifications. The mapping between the specifications and the respective Apache Tomcat versions is:

More details about each release can be found in the associated release notes.

Apache Tomcat 7.x

Apache Tomcat 7.x is the current focus of development. It builds upon the improvements made in Tomcat 6.0.x and implements the Servlet 3.0, JSP 2.2 and EL 2.2 specifications. In addition to that, it includes the following

improvements:

. Web application memory leak detection and prevention.
. Improved security for the Manager and Host Manager applications.
. Generic CSRF protection.
. Support for including external content directly in a web application.
. Refactoring (connectors, lifecycle) and lots of internal code clean-up.

Red Hat Enterprise Linux 6 FCoE Support.

FCoE Support in the Kickstart File

When using a kickstart file to install Red Hat Enterprise Linux 6.4, with the new fcoe kickstart option you can specify which Fibre Channel over Ethernet (FCoE) devices should be activated automatically in addition to those discovered by Enhanced Disk Drive (EDD) services.

Red Hat Enterprise Linux 6 Installation Guide has more Kickstart Options.

Cross-site Request Forgery (XSRF) Attacks

Cross-site request forgeries (XSRF) occur when a malicious user exploits the trust between a website and a user’s browser. By exploiting that trust, malicious users can execute unauthorized commands on a website.

XSRF attacks rely on 2 items:

Access to authentication credentials
Surreptitious execution of a command via a URL

For more information about XSRF attacks, as well as a few examples, you can visit this Wikipedia page.
http://en.wikipedia.org/wiki/XSRF

CSF - ConfigServer Services

To test CSF run the following command.