https://bugzilla.redhat.com/show_bug.cgi?id=1441205
--- Comment #11 from Timothy Walsh <twalsh(a)redhat.com> ---
Mitigation:
The AJP connector does not support the sendfile capability. A server
configured to only use the AJP connector (disable HTTP Connector) is not
affected by this vulnerability.
Disable the sendfile capability by setting useSendfile="false" in the HTTP
connector configuration. Note: Disabling sendfile, may impact performance on
large files.
--
You are receiving this mail because:
You are on the CC list for the bug.