dev  

Messages by Date

• 2026/10/18 (tomcat) 13/18: Evaluate each expression once for EL method references remm
• 2026/10/18 (tomcat) 11/18: Report inaccessible methods in BeanELResolver as MethodNotFoundException remm
• 2026/10/18 (tomcat) 08/18: Correct the EL empty operator for empty primitive arrays remm
• 2026/10/18 (tomcat) 01/18: Correct equals() implementations in method expression classes remm
• 2026/10/18 (tomcat) branch 11.0.x updated (6b74ebe19a -> a55335a7a7) remm
• 2026/10/18 (tomcat) 06/17: Reject multiple parameter sets for EL constructor and static calls remm
• 2026/10/18 (tomcat) 03/17: Surface EL arithmetic and comparison errors as ELException remm
• 2026/10/18 (tomcat) 09/17: Coerce strings correctly for the EL unary minus operator remm
• 2026/10/18 (tomcat) 01/17: Correct equals() implementations in method expression classes remm
• 2026/10/18 (tomcat) 05/17: Pass empty array for empty EL function varargs remm
• 2026/10/18 (tomcat) 12/17: Evaluate each expression once for EL method references remm
• 2026/10/18 (tomcat) 13/17: Reduce the cost of parsing EL expressions with long tokens remm
• 2026/10/18 (tomcat) 11/17: Accept zero varargs elements in EL method expression calls remm
• 2026/10/18 (tomcat) 10/17: Report inaccessible methods in BeanELResolver as MethodNotFoundException remm
• 2026/10/18 (tomcat) 08/17: Resolve imported identifiers in AstIdentifier.getType() remm
• 2026/10/18 (tomcat) 07/17: Correct the EL empty operator for empty primitive arrays remm
• 2026/10/18 (tomcat) 02/17: Pin serialVersionUID in EL expression classes remm
• 2026/10/18 (tomcat) branch main updated (0f33a458ad -> 281d550adf) remm
• 2026/10/18 (tomcat) 16/17: Follow the EL specification for substream with a negative start remm
• 2026/10/18 (tomcat) 14/17: Coerce EL stream predicate results in the match operations remm
• 2026/10/18 (tomcat) 15/17: Accept null results from EL stream comparator lambdas remm
• 2026/10/18 (tomcat) 04/17: Report accurate result type for EL concatenation expressions remm
• 2026/10/17 (tomcat) 05/17: Reject the permessage-deflate compressed bit on continuation frames remm
• 2026/10/17 (tomcat) 11/17: Fix 32-bit truncation of the WebSocket client I/O timeout remm
• 2026/10/17 (tomcat) 09/17: Validate the WebSocket maximum message buffer size remm
• 2026/10/17 (tomcat) 10/17: Fix 32-bit truncation of the session close timeout remm
• 2026/10/17 (tomcat) 04/17: Use UTF-8 for WebSocket client basic authentication credentials remm
• 2026/10/17 (tomcat) 08/17: Fix resource bundle key used by WsFrameClient remm
• 2026/10/17 (tomcat) 03/16: Reject digest challenges without a realm in WebSocket client remm
• 2026/10/17 (tomcat) 17/17: EE compatibility remm
• 2026/10/17 (tomcat) 06/17: Report primitive message decode failures as DecodeException remm
• 2026/10/17 (tomcat) 12/17: Fix NPE handling connections to a POJO endpoint with no annotated methods remm
• 2026/10/17 (tomcat) 14/17: Fix covariant return type overrides of annotated POJO lifecycle methods wrongly rejected as duplicates remm
• 2026/10/17 (tomcat) 01/17: Honor the write timeout in AsyncChannelWrapperSecure remm
• 2026/10/17 (tomcat) 13/17: Reject @OnMessage methods with a primitive payload and boolean last flag remm
• 2026/10/17 (tomcat) 02/17: Fix WebSocket client digest response calculation for qop auth-int remm
• 2026/10/17 (tomcat) 05/17: Reject the permessage-deflate compressed bit on continuation frames remm
• 2026/10/17 (tomcat) branch 9.0.x updated (a4455babf6 -> 057c73d26f) remm
• 2026/10/17 (tomcat) 09/16: Validate the WebSocket maximum message buffer size remm
• 2026/10/17 (tomcat) 15/17: Reject WebSocket upgrade requests with an invalid percent-escape sequence in the query string with a 400 response remm
• 2026/10/17 (tomcat) 16/17: Remove stray raw path entry added to the WebSocket template match map when a programmatic registration duplicates an annotated POJO template path remm
• 2026/10/17 (tomcat) 07/17: Make TransformationFactory thread-safe for concurrent registration remm
• 2026/10/17 (tomcat) 03/17: Reject digest challenges without a realm in WebSocket client remm
• 2026/10/17 (tomcat) 08/16: Fix resource bundle key used by WsFrameClient remm
• 2026/10/17 (tomcat) 05/16: Reject the permessage-deflate compressed bit on continuation frames remm
• 2026/10/17 (tomcat) 13/16: Reject @OnMessage methods with a primitive payload and boolean last flag remm
• 2026/10/17 (tomcat) 14/16: Fix covariant return type overrides of annotated POJO lifecycle methods wrongly rejected as duplicates remm
• 2026/10/17 (tomcat) 16/16: Remove stray raw path entry added to the WebSocket template match map when a programmatic registration duplicates an annotated POJO template path remm
• 2026/10/17 (tomcat) 15/16: Reject WebSocket upgrade requests with an invalid percent-escape sequence in the query string with a 400 response remm
• 2026/10/17 (tomcat) 11/16: Fix 32-bit truncation of the WebSocket client I/O timeout remm
• 2026/10/17 (tomcat) 12/16: Fix NPE handling connections to a POJO endpoint with no annotated methods remm
• 2026/10/17 (tomcat) 10/16: Fix 32-bit truncation of the session close timeout remm
• 2026/10/17 (tomcat) 04/16: Use UTF-8 for WebSocket client basic authentication credentials remm
• 2026/10/17 (tomcat) 07/16: Make TransformationFactory thread-safe for concurrent registration remm
• 2026/10/17 (tomcat) branch 10.1.x updated (e732b3bcfa -> f5c38da8dd) remm
• 2026/10/17 (tomcat) 08/16: Fix resource bundle key used by WsFrameClient remm
• 2026/10/17 (tomcat) 06/16: Report primitive message decode failures as DecodeException remm
• 2026/10/17 (tomcat) 02/16: Fix WebSocket client digest response calculation for qop auth-int remm
• 2026/10/17 (tomcat) 01/16: Honor the write timeout in AsyncChannelWrapperSecure remm
• 2026/10/17 (tomcat) 11/16: Fix 32-bit truncation of the WebSocket client I/O timeout remm
• 2026/10/17 (tomcat) 12/16: Fix NPE handling connections to a POJO endpoint with no annotated methods remm
• 2026/10/17 (tomcat) 10/16: Fix 32-bit truncation of the session close timeout remm
• 2026/10/17 (tomcat) 03/16: Reject digest challenges without a realm in WebSocket client remm
• 2026/10/17 (tomcat) 16/16: Remove stray raw path entry added to the WebSocket template match map when a programmatic registration duplicates an annotated POJO template path remm
• 2026/10/17 (tomcat) 06/16: Report primitive message decode failures as DecodeException remm
• 2026/10/17 (tomcat) 13/16: Reject @OnMessage methods with a primitive payload and boolean last flag remm
• 2026/10/17 (tomcat) 07/16: Make TransformationFactory thread-safe for concurrent registration remm
• 2026/10/17 (tomcat) 15/16: Reject WebSocket upgrade requests with an invalid percent-escape sequence in the query string with a 400 response remm
• 2026/10/17 (tomcat) 09/16: Validate the WebSocket maximum message buffer size remm
• 2026/10/17 (tomcat) 14/16: Fix covariant return type overrides of annotated POJO lifecycle methods wrongly rejected as duplicates remm
• 2026/10/17 (tomcat) 04/16: Use UTF-8 for WebSocket client basic authentication credentials remm
• 2026/10/17 (tomcat) 05/16: Reject the permessage-deflate compressed bit on continuation frames remm
• 2026/10/17 (tomcat) branch 11.0.x updated (378b80fc0a -> 6b74ebe19a) remm
• 2026/10/17 (tomcat) 01/16: Honor the write timeout in AsyncChannelWrapperSecure remm
• 2026/10/17 (tomcat) 02/16: Fix WebSocket client digest response calculation for qop auth-int remm
• 2026/10/17 (tomcat) 17/17: Merge branch 'main' of [email protected]:apache/tomcat.git into main remm
• 2026/10/17 (tomcat) 07/17: Make TransformationFactory thread-safe for concurrent registration remm
• 2026/10/17 (tomcat) 14/17: Fix covariant return type overrides of annotated POJO lifecycle methods wrongly rejected as duplicates remm
• 2026/10/17 (tomcat) 10/17: Fix 32-bit truncation of the session close timeout remm
• 2026/10/17 (tomcat) 13/17: Reject @OnMessage methods with a primitive payload and boolean last flag remm
• 2026/10/17 (tomcat) 04/17: Use UTF-8 for WebSocket client basic authentication credentials remm
• 2026/10/17 (tomcat) branch main updated (247a8884e1 -> 0f33a458ad) remm
• 2026/10/17 (tomcat) 02/17: Fix WebSocket client digest response calculation for qop auth-int remm
• 2026/10/17 (tomcat) 06/17: Report primitive message decode failures as DecodeException remm
• 2026/10/17 (tomcat) 12/17: Fix NPE handling connections to a POJO endpoint with no annotated methods remm
• 2026/10/17 (tomcat) 09/17: Validate the WebSocket maximum message buffer size remm
• 2026/10/17 (tomcat) 15/17: Reject WebSocket upgrade requests with an invalid percent-escape sequence in the query string with a 400 response remm
• 2026/10/17 (tomcat) 08/17: Fix resource bundle key used by WsFrameClient remm
• 2026/10/17 (tomcat) 16/17: Remove stray raw path entry added to the WebSocket template match map when a programmatic registration duplicates an annotated POJO template path remm
• 2026/10/17 (tomcat) 11/17: Fix 32-bit truncation of the WebSocket client I/O timeout remm
• 2026/10/17 (tomcat) 01/17: Honor the write timeout in AsyncChannelWrapperSecure remm
• 2026/10/17 (tomcat) 03/17: Reject digest challenges without a realm in WebSocket client remm
• 2026/10/17 [PR] Fix BZ 69902 - set file permissions in the ZIP distribution [tomcat] via GitHub
• 2026/10/17 [PR] Document that request header buffers are retained by the processor cache [tomcat] via GitHub
• 2026/10/17 Re: certificates from windows cert store with autoenrollment from AD CS Christopher Schultz
• 2026/10/17 Re: [PR] Add a certificateSelectByKeyUsage attribute for JSSE [tomcat] via GitHub
• 2026/10/17 Re: [PR] Add a certificateSelectByKeyUsage attribute for JSSE [tomcat] via GitHub
• 2026/10/17 [Bug 64771] Windows CPU processor always running by a thread reading request body from https connection bugzilla
• 2026/10/17 Re: [PR] Add a certificateSelectByKeyUsage attribute for JSSE [tomcat] via GitHub
• 2026/10/17 Re: [PR] Report the correct length in Asn1Parser.parseLength() error messages [tomcat] via GitHub
• 2026/10/17 Re: [PR] Report the correct length in Asn1Parser.parseLength() error messages [tomcat] via GitHub
• 2026/10/17 Re: [PR] Report the correct length in Asn1Parser.parseLength() error messages [tomcat] via GitHub
• 2026/10/17 (tomcat) branch 9.0.x updated: Report the correct length in Asn1Parser.parseLength() error messages remm
• 2026/10/17 (tomcat) branch 10.1.x updated: Report the correct length in Asn1Parser.parseLength() error messages remm
• 2026/10/17 (tomcat) branch 11.0.x updated: Report the correct length in Asn1Parser.parseLength() error messages remm
• 2026/10/17 (tomcat) branch main updated: Report the correct length in Asn1Parser.parseLength() error messages remm
• 2026/10/17 [Bug 64771] Windows CPU processor always running by a thread reading request body from https connection bugzilla
• 2026/10/17 [Bug 70278] HTTP 500 when user knows too many languages bugzilla
• 2026/10/16 [Bug 70278] New: HTTP 500 when user knows too many languages bugzilla
• 2026/10/16 [PR] Report the correct length in Asn1Parser.parseLength() error messages [tomcat] via GitHub
• 2026/10/16 Re: certificates from windows cert store with autoenrollment from AD CS Dimitris Soumis
• 2026/10/16 [PR] Add a certificateSelectByKeyUsage attribute for JSSE [tomcat] via GitHub
• 2026/10/16 (tomcat) 15/25: Ignore extra close() calls in ReferenceCountedJar remm
• 2026/10/16 Re: [PR] Reuse UDP sender channels between messages [tomcat] via GitHub
• 2026/10/16 (tomcat) 23/25: Shut down the internal virtual thread executor when the endpoint stops remm
• 2026/10/16 (tomcat) 14/25: Keep streams returned from ReferenceCountedJar open remm
• 2026/10/16 (tomcat) 07/25: Validate the protocol of OCSP URLs from a client certificate AIA extension remm
• 2026/10/16 (tomcat) 24/25: Java compatibility remm
• 2026/10/16 (tomcat) 20/25: Keep the acquisition count of LimitLatch stable across releaseAll() remm
• 2026/10/16 (tomcat) 16/25: Resolve nested JAR entries in JarFileUrlNestedJar using the JarURLConnection remm
• 2026/10/16 (tomcat) 22/25: Fix submitted task count drift in ThreadPoolExecutor remm
• 2026/10/16 (tomcat) 06/25: Account for the array offset when copying between OpenSSL FFM engine buffers and heap ByteBuffers remm
• 2026/10/16 (tomcat) 19/25: Avoid busy spin in TaskQueue.take() when the keep-alive time is zero remm
• 2026/10/16 (tomcat) 25/25: Java compatibility remm
• 2026/10/16 (tomcat) 21/25: Fix premature termination of InlineExecutorService remm
• 2026/10/16 (tomcat) 18/25: Require at least one iteration when computing message digests remm
• 2026/10/16 (tomcat) 10/25: Correct the OpenSSL 3 version boundary in the FFM compatibility layer remm
• 2026/10/16 (tomcat) 12/25: Harmonize resource bundle processing in ProxyErrorReportValve remm
• 2026/10/16 (tomcat) 03/25: Match OpenSSL semantics for AND cipher expressions with unknown terms remm
• 2026/10/16 (tomcat) 08/25: Correct the FILE check for SSL_CONF commands in the OpenSSL FFM code remm
• 2026/10/16 (tomcat) 04/25: Exclude unimplemented SSLv2 ciphers when converting OpenSSL cipher names to JSSE names remm
• 2026/10/16 (tomcat) 01/25: Account for TLS 1.3 in the enabled protocol management of the JNI OpenSSL SSLEngine remm
• 2026/10/16 (tomcat) 13/25: Correct the selection of multi-release JAR entries in JarFileUrlJar remm
• 2026/10/16 (tomcat) 11/25: Bind the nonce value parameter of OCSP_request_add1_nonce as a pointer remm
• 2026/10/16 (tomcat) 17/25: Report the resource path when a WEB-INF/lib JAR cannot be scanned remm
• 2026/10/16 (tomcat) branch 9.0.x updated (125fee6101 -> 06e2daaa19) remm
• 2026/10/16 (tomcat) 05/25: Correct the cipher authentication method computation of the OpenSSL FFM implementation remm
• 2026/10/16 (tomcat) 09/25: Check for NULL after SSL_CTX_new() and SSL_new() in the OpenSSL FFM code remm
• 2026/10/16 (tomcat) 02/25: Make the lazily parsed wrapped certificate field volatile in OpenSSLX509Certificate remm
• 2026/10/16 [PR] Reuse UDP sender channels between messages [tomcat] via GitHub
• 2026/10/16 Re: [PR] Reuse UDP sender channels between messages [tomcat] via GitHub
• 2026/10/16 Re: [PR] Document attribute listener removal fix [tomcat] via GitHub
• 2026/10/16 Re: [PR] Document attribute listener removal fix [tomcat] via GitHub
• 2026/10/16 (tomcat) 14/24: Keep streams returned from ReferenceCountedJar open remm
• 2026/10/16 (tomcat) 18/24: Require at least one iteration when computing message digests remm
• 2026/10/16 (tomcat) 20/24: Keep the acquisition count of LimitLatch stable across releaseAll() remm
• 2026/10/16 (tomcat) 04/24: Exclude unimplemented SSLv2 ciphers when converting OpenSSL cipher names to JSSE names remm
• 2026/10/16 (tomcat) 23/24: Shut down the internal virtual thread executor when the endpoint stops remm
• 2026/10/16 (tomcat) 21/24: Fix premature termination of InlineExecutorService remm
• 2026/10/16 (tomcat) 06/24: Account for the array offset when copying between OpenSSL FFM engine buffers and heap ByteBuffers remm
• 2026/10/16 (tomcat) 10/24: Correct the OpenSSL 3 version boundary in the FFM compatibility layer remm
• 2026/10/16 (tomcat) 01/24: Account for TLS 1.3 in the enabled protocol management of the JNI OpenSSL SSLEngine remm
• 2026/10/16 (tomcat) 16/24: Resolve nested JAR entries in JarFileUrlNestedJar using the JarURLConnection remm
• 2026/10/16 (tomcat) 24/24: Java compatibility remm
• 2026/10/16 (tomcat) 13/24: Correct the selection of multi-release JAR entries in JarFileUrlJar remm
• 2026/10/16 (tomcat) 12/24: Harmonize resource bundle processing in ProxyErrorReportValve remm
• 2026/10/16 (tomcat) 19/24: Avoid busy spin in TaskQueue.take() when the keep-alive time is zero remm
• 2026/10/16 (tomcat) 17/24: Report the resource path when a WEB-INF/lib JAR cannot be scanned remm
• 2026/10/16 (tomcat) 15/24: Ignore extra close() calls in ReferenceCountedJar remm
• 2026/10/16 (tomcat) branch 10.1.x updated (d793dcc411 -> 9ca3d0bfbc) remm
• 2026/10/16 (tomcat) 22/24: Fix submitted task count drift in ThreadPoolExecutor remm
• 2026/10/16 (tomcat) 09/24: Check for NULL after SSL_CTX_new() and SSL_new() in the OpenSSL FFM code remm
• 2026/10/16 (tomcat) 03/24: Match OpenSSL semantics for AND cipher expressions with unknown terms remm
• 2026/10/16 (tomcat) 05/24: Correct the cipher authentication method computation of the OpenSSL FFM implementation remm
• 2026/10/16 (tomcat) 11/24: Bind the nonce value parameter of OCSP_request_add1_nonce as a pointer remm
• 2026/10/16 (tomcat) 07/24: Validate the protocol of OCSP URLs from a client certificate AIA extension remm
• 2026/10/16 (tomcat) 02/24: Make the lazily parsed wrapped certificate field volatile in OpenSSLX509Certificate remm
• 2026/10/16 (tomcat) 08/24: Correct the FILE check for SSL_CONF commands in the OpenSSL FFM code remm
• 2026/10/16 (tomcat) 12/23: Harmonize resource bundle processing in ProxyErrorReportValve remm
• 2026/10/16 (tomcat) 08/23: Correct the FILE check for SSL_CONF commands in the OpenSSL FFM code remm
• 2026/10/16 (tomcat) 17/23: Report the resource path when a WEB-INF/lib JAR cannot be scanned remm
• 2026/10/16 (tomcat) 16/23: Resolve nested JAR entries in JarFileUrlNestedJar using the JarURLConnection remm
• 2026/10/16 (tomcat) 06/23: Account for the array offset when copying between OpenSSL FFM engine buffers and heap ByteBuffers remm
• 2026/10/16 (tomcat) 15/23: Ignore extra close() calls in ReferenceCountedJar remm
• 2026/10/16 (tomcat) 11/23: Bind the nonce value parameter of OCSP_request_add1_nonce as a pointer remm
• 2026/10/16 (tomcat) 07/23: Validate the protocol of OCSP URLs from a client certificate AIA extension remm
• 2026/10/16 (tomcat) 21/23: Fix premature termination of InlineExecutorService remm
• 2026/10/16 (tomcat) 14/23: Keep streams returned from ReferenceCountedJar open remm
• 2026/10/16 (tomcat) 22/23: Fix submitted task count drift in ThreadPoolExecutor remm
• 2026/10/16 (tomcat) 01/23: Account for TLS 1.3 in the enabled protocol management of the JNI OpenSSL SSLEngine remm
• 2026/10/16 (tomcat) 19/23: Avoid busy spin in TaskQueue.take() when the keep-alive time is zero remm
• 2026/10/16 (tomcat) 05/23: Correct the cipher authentication method computation of the OpenSSL FFM implementation remm
• 2026/10/16 (tomcat) 23/23: Shut down the internal virtual thread executor when the endpoint stops remm
• 2026/10/16 (tomcat) 09/23: Check for NULL after SSL_CTX_new() and SSL_new() in the OpenSSL FFM code remm
• 2026/10/16 (tomcat) 13/23: Correct the selection of multi-release JAR entries in JarFileUrlJar remm
• 2026/10/16 (tomcat) 02/23: Make the lazily parsed wrapped certificate field volatile in OpenSSLX509Certificate remm
• 2026/10/16 (tomcat) 18/23: Require at least one iteration when computing message digests remm
• 2026/10/16 (tomcat) 20/23: Keep the acquisition count of LimitLatch stable across releaseAll() remm
• 2026/10/16 (tomcat) 10/23: Correct the OpenSSL 3 version boundary in the FFM compatibility layer remm
• 2026/10/16 (tomcat) 03/23: Match OpenSSL semantics for AND cipher expressions with unknown terms remm
• 2026/10/16 (tomcat) 04/23: Exclude unimplemented SSLv2 ciphers when converting OpenSSL cipher names to JSSE names remm
• 2026/10/16 (tomcat) branch 11.0.x updated (8e1f20ff43 -> 93dea1dc4d) remm
• 2026/10/16 (tomcat) 11/24: Bind the nonce value parameter of OCSP_request_add1_nonce as a pointer remm
• 2026/10/16 (tomcat) 22/24: Fix submitted task count drift in ThreadPoolExecutor remm
• 2026/10/16 (tomcat) 15/24: Ignore extra close() calls in ReferenceCountedJar remm
• 2026/10/16 (tomcat) 18/24: Require at least one iteration when computing message digests remm
• 2026/10/16 (tomcat) 21/24: Fix premature termination of InlineExecutorService remm
• 2026/10/16 (tomcat) 19/24: Avoid busy spin in TaskQueue.take() when the keep-alive time is zero remm
• 2026/10/16 (tomcat) 02/24: Make the lazily parsed wrapped certificate field volatile in OpenSSLX509Certificate remm
• 2026/10/16 (tomcat) 14/24: Keep streams returned from ReferenceCountedJar open remm

• Earlier messages
• Later messages