dev  

Messages by Date

• 2025/11/03 Re: [PR] AjpProcessor: fix readMessage() bounds check [tomcat] via GitHub
• 2025/11/03 (tomcat) branch 9.0.x updated: Fix SSL socket factory configuration in the JNDI realm remm
• 2025/11/03 (tomcat) branch 10.1.x updated: Fix SSL socket factory configuration in the JNDI realm remm
• 2025/11/03 (tomcat) branch 11.0.x updated: Fix SSL socket factory configuration in the JNDI realm remm
• 2025/11/03 (tomcat) branch 9.0.x updated: Fix AJP message length check remm
• 2025/11/03 (tomcat) branch 10.1.x updated: Fix AJP message length check remm
• 2025/11/03 (tomcat) branch 11.0.x updated: Fix AJP message length check remm
• 2025/11/03 (tomcat) branch main updated: Code style and fix remm
• 2025/11/03 (tomcat) branch main updated (eb076d85f0 -> d3968c5631) remm
• 2025/11/03 (tomcat) 01/01: Merge pull request #916 from MegaManSec/2 remm
• 2025/11/03 Re: [PR] AjpProcessor: fix readMessage() bounds check [tomcat] via GitHub
• 2025/11/03 (tomcat) branch main updated (a476c280c6 -> eb076d85f0) remm
• 2025/11/03 (tomcat) 01/01: Merge pull request #915 from MegaManSec/1 remm
• 2025/11/03 Re: [PR] JNDIRealm: use constructed SSLSocketFactory for StartTLS [tomcat] via GitHub
• 2025/11/03 Re: Tagging November releases Rémy Maucherat
• 2025/11/03 Tagging November releases Mark Thomas
• 2025/11/03 (tomcat) branch main updated (bea690a7ad -> a476c280c6) markt
• 2025/11/02 [PR] AjpProcessor: fix readMessage() bounds check [tomcat] via GitHub
• 2025/11/02 [PR] JNDIRealm: use constructed SSLSocketFactory for StartTLS [tomcat] via GitHub
• 2025/10/31 Re: [Proposal] Add configurable gzipLevel, gzipBufferSize, and gzipSyncFlush to Tomcat (9–11) 장성호
• 2025/10/31 [PR] Add configurable compression [tomcat] via GitHub
• 2025/10/31 Re: [PR] Fix formatValueImport to handle MessageFormat quotes and line continuations [tomcat] via GitHub
• 2025/10/31 [PR] Fix formatValueImport to handle MessageFormat quotes and line continuations [tomcat] via GitHub
• 2025/10/31 Re: [PR] Fix BZ 69866 - Use separate CertificateVerifier class to avoid strong JNI reference to OpenSSLContexts [tomcat] via GitHub
• 2025/10/31 Re: (tomcat) branch main updated: Fix consistent crash (on Unix with OpenSSL provider) in tests Rémy Maucherat
• 2025/10/31 Buildbot success in on tomcat-12.0.x buildbot
• 2025/10/31 [Bug 69866] OpenSSLContexts leak across reload through JNI global reference when using truststore bugzilla
• 2025/10/31 (tomcat) branch 9.0.x updated: Fix BZ 69866 - Use separate CertificateVerifier class to avoid strong JNI reference to OpenSSLContexts markt
• 2025/10/31 (tomcat) 02/03: Refactor AprStatus to o.a.t.jni package markt
• 2025/10/31 (tomcat) branch 10.1.x updated (c3c8d8dd7a -> 0f5fee193a) markt
• 2025/10/31 (tomcat) 03/03: Fix APR crash on shutdown markt
• 2025/10/31 (tomcat) 01/03: Fix BZ 69866 - Use separate CertificateVerifier class to avoid strong JNI reference to OpenSSLContexts markt
• 2025/10/31 (tomcat) 01/03: Fix BZ 69866 - Use separate CertificateVerifier class to avoid strong JNI reference to OpenSSLContexts markt
• 2025/10/31 (tomcat) 02/03: Refactor AprStatus to o.a.t.jni package markt
• 2025/10/31 (tomcat) 03/03: Fix APR crash on shutdown markt
• 2025/10/31 (tomcat) branch 11.0.x updated (69c23ed906 -> 650f46d413) markt
• 2025/10/31 (tomcat) 02/02: Fix APR crash on shutdown markt
• 2025/10/31 (tomcat) 01/02: Refactor AprStatus to o.a.t.jni package markt
• 2025/10/31 (tomcat) branch main updated (f996abe65a -> bea690a7ad) markt
• 2025/10/31 (tomcat) branch main updated: Revert "Fix consistent crash (on Unix with OpenSSL provider) in tests" markt
• 2025/10/31 Re: (tomcat) branch main updated: Fix consistent crash (on Unix with OpenSSL provider) in tests Mark Thomas
• 2025/10/31 Re: (tomcat) branch main updated: Fix consistent crash (on Unix with OpenSSL provider) in tests Mark Thomas
• 2025/10/31 Re: [Proposal] Add configurable gzipLevel, gzipBufferSize, and gzipSyncFlush to Tomcat (9–11) Christopher Schultz
• 2025/10/31 [Bug 69868] deployIgnore is not taking effect in descriptor deployment bugzilla
• 2025/10/31 [Bug 69868] New: deployIgnore is not taking effect in descriptor deployment bugzilla
• 2025/10/31 Re: [Proposal] Add configurable gzipLevel, gzipBufferSize, and gzipSyncFlush to Tomcat (9–11) Mark Thomas
• 2025/10/30 Re: [Proposal] Add configurable gzipLevel, gzipBufferSize, and gzipSyncFlush to Tomcat (9–11) 장성호
• 2025/10/30 [Proposal] Add configurable gzipLevel, gzipBufferSize, and gzipSyncFlush to Tomcat (9–11) 장성호
• 2025/10/30 Buildbot failure in on tomcat-9.0.x buildbot
• 2025/10/30 Re: (tomcat) branch main updated: Fix consistent crash (on Unix with OpenSSL provider) in tests Mark Thomas
• 2025/10/30 Buildbot failure in on tomcat-12.0.x buildbot
• 2025/10/30 Buildbot success in on tomcat-12.0.x buildbot
• 2025/10/30 Re: (tomcat) branch main updated: Fix consistent crash (on Unix with OpenSSL provider) in tests Mark Thomas
• 2025/10/30 (tomcat) branch 9.0.x updated: Update Maven Resolver Ant Tasks to 1.6.0. rjung
• 2025/10/30 (tomcat) branch 10.1.x updated: Update Maven Resolver Ant Tasks to 1.6.0. rjung
• 2025/10/30 (tomcat) branch 11.0.x updated: Update Maven Resolver Ant Tasks to 1.6.0. rjung
• 2025/10/30 (tomcat) branch main updated: Update Maven Resolver Ant Tasks to 1.6.0. rjung
• 2025/10/30 (tomcat) branch main updated: Fix consistent crash (on Unix with OpenSSL provider) in tests markt
• 2025/10/30 Re: [PR] Fix BZ 69866 - Use separate CertificateVerifier class to avoid strong JNI reference to OpenSSLContexts [tomcat] via GitHub
• 2025/10/30 (tomcat) branch main updated: Follow-up to PR #912 markt
• 2025/10/30 Buildbot failure in on tomcat-12.0.x buildbot
• 2025/10/30 (tomcat) branch main updated (c1fe2a7da4 -> cf94b36be8) markt
• 2025/10/30 (tomcat) 01/04: Fix BZ 69866 - Use separate CertificateVerifier class to avoid strong JNI reference to OpenSSLContexts markt
• 2025/10/30 (tomcat) 02/04: Remove unused import markt
• 2025/10/30 (tomcat) 03/04: remove OpenSSLContext.certificates now in OpenSSLCertificateVerifier markt
• 2025/10/30 Re: [PR] Fix BZ 69866 - Use separate CertificateVerifier class to avoid strong JNI reference to OpenSSLContexts [tomcat] via GitHub
• 2025/10/30 (tomcat) 04/04: make OpenSSLCertificateVerifier final markt
• 2025/10/30 (tomcat) branch 10.1.x updated: Restore deferAccept as a public method for JMX remm
• 2025/10/30 (tomcat) branch 9.0.x updated: Allow changing the server string remm
• 2025/10/30 (tomcat) branch 10.1.x updated: Allow changing the server string remm
• 2025/10/30 (tomcat) branch 11.0.x updated: Allow changing the server string remm
• 2025/10/30 Update maven-resolver-ant-tasks to 1.6.0? Rainer Jung
• 2025/10/30 (tomcat) branch main updated: Allow changing the server string remm
• 2025/10/29 Re: [PR] Fix BZ 69866 - Use separate CertificateVerifier class to avoid strong JNI reference to OpenSSLContexts [tomcat] via GitHub
• 2025/10/29 Re: [PR] Fix BZ 69866 - Use separate CertificateVerifier class to avoid strong JNI reference to OpenSSLContexts [tomcat] via GitHub
• 2025/10/29 Re: Fwd: Inquiry Regarding End of Life (EOL) Date for Apache Tomcat 9 & 10 Michael Osipov
• 2025/10/29 svn commit: r1929402 - in tomcat/site/trunk: docs xdocs markt
• 2025/10/29 Fwd: Inquiry Regarding End of Life (EOL) Date for Apache Tomcat 9 & 10 Brian Proffitt
• 2025/10/29 svn commit: r1929401 - in tomcat/site/trunk: docs xdocs markt
• 2025/10/28 svn commit: r1929395 - in tomcat/site/trunk: docs xdocs markt
• 2025/10/28 [Bug 69866] OpenSSLContexts leak across reload through JNI global reference when using truststore bugzilla
• 2025/10/28 (tomcat) branch 9.0.x updated: Update to JSign 7.4 markt
• 2025/10/28 (tomcat) branch 10.1.x updated: Update to JSign 7.4 markt
• 2025/10/28 (tomcat) branch 11.0.x updated: Update to JSign 7.4 markt
• 2025/10/28 (tomcat) branch main updated: Update to JSign 7.4 markt
• 2025/10/28 (tomcat) branch 9.0.x updated: Update to Jacoco 0.8.14 markt
• 2025/10/28 (tomcat) branch 10.1.x updated: Update to Jacoco 0.8.14 markt
• 2025/10/28 (tomcat) branch 11.0.x updated: Update to Jacoco 0.8.14 markt
• 2025/10/28 (tomcat) branch main updated: Update to Jacoco 0.8.14 markt
• 2025/10/28 (tomcat) branch 10.1.x updated: Add release date for 10.1.48 markt
• 2025/10/28 (tomcat) branch 9.0.x updated: Update to Checkstyle 12.1.1 markt
• 2025/10/28 (tomcat) branch 10.1.x updated: Update to Checkstyle 12.1.1 markt
• 2025/10/28 (tomcat) branch 11.0.x updated: Update to Checkstyle 12.1.1 markt
• 2025/10/28 (tomcat) branch main updated: Update to Checkstyle 12.1.1 markt
• 2025/10/28 Re: [PR] Fix BZ 69866 - Use separate CertificateVerifier class to avoid strong JNI reference to OpenSSLContexts [tomcat] via GitHub
• 2025/10/28 (tomcat) branch 9.0.x updated: Update to Byte Buddy 1.17.8 markt
• 2025/10/28 (tomcat) branch 10.1.x updated: Update to Byte Buddy 1.17.8 markt
• 2025/10/28 (tomcat) branch 11.0.x updated: Update to Byte Buddy 1.17.8 markt
• 2025/10/28 (tomcat) branch main updated: Update to Byte Buddy 1.17.8 markt
• 2025/10/28 (tomcat) branch 11.0.x updated: Fix back port markt
• 2025/10/28 (tomcat) branch 11.0.x updated: Update Eclipse JDT compiler to 4.37 (a.k.a. 3.43.0) markt
• 2025/10/28 (tomcat) branch main updated: Update Eclipse JDT compiler to 4.37 (a.k.a. 3.43.0) markt
• 2025/10/28 Re: [PR] Fix BZ 69866 - Use separate CertificateVerifier class to avoid strong JNI reference to OpenSSLContexts [tomcat] via GitHub
• 2025/10/28 Re: [PR] Fix BZ 69866 - Use separate CertificateVerifier class to avoid strong JNI reference to OpenSSLContexts [tomcat] via GitHub
• 2025/10/28 Re: [PR] Fix BZ 69866 - Use separate CertificateVerifier class to avoid strong JNI reference to OpenSSLContexts [tomcat] via GitHub
• 2025/10/28 Re: [PR] Fix BZ 69866 - Use separate CertificateVerifier class to avoid strong JNI reference to OpenSSLContexts [tomcat] via GitHub
• 2025/10/28 Re: [PR] Fix BZ 69866 - Use separate CertificateVerifier class to avoid strong JNI reference to OpenSSLContexts [tomcat] via GitHub
• 2025/10/28 svn commit: r80344 - in release/tomcat: tomcat-10/v10.1.47 tomcat-11/v11.0.12 tomcat-9/v9.0.110 markt
• 2025/10/28 svn commit: r1929388 - in tomcat/site/trunk: docs xdocs markt
• 2025/10/27 [Bug 69866] OpenSSLContexts leak across reload through JNI global reference when using truststore bugzilla
• 2025/10/27 [PR] Fix BZ 69866 - Use separate CertificateVerifier class to avoid strong JNI reference to OpenSSLContexts [tomcat] via GitHub
• 2025/10/27 [Bug 69866] New: OpenSSLContexts leak across reload through JNI global reference when using truststore bugzilla
• 2025/10/27 Re: Tomcat and JDK-25 and the fix of File.exists() Erwin Stadlbauer
• 2025/10/27 Re: Tomcat and JDK-25 and the fix of File.exists() Christopher Schultz
• 2025/10/27 Re: Tomcat and JDK-25 and the fix of File.exists() Mark Thomas
• 2025/10/27 [SECURITY] CVE-2025-55752 Apache Tomcat - Directory traversal via rewrite with possible RCE if PUT is enabled Mark Thomas
• 2025/10/27 [SECURITY] CVE-2025-61795 Apache Tomcat - Delayed cleaning of multipart upload temporary files may lead to DoS Mark Thomas
• 2025/10/27 svn commit: r1929379 - in tomcat/site/trunk: docs xdocs markt
• 2025/10/27 [SECURITY] CVE-2025-55754 Apache Tomcat - Console manipulation via escape sequences in log messages Mark Thomas
• 2025/10/27 Re: Tomcat and JDK-25 and the fix of File.exists() Mark Thomas
• 2025/10/27 Re: Tomcat and JDK-25 and the fix of File.exists() Erwin Stadlbauer
• 2025/10/27 (tomcat) branch main updated (894f69c8e8 -> 9921a00d3f) remm
• 2025/10/27 (tomcat) branch dependabot/github_actions/actions/upload-artifact-5 deleted (was 8294c426a6) github-bot
• 2025/10/27 (tomcat) 01/01: Merge pull request #911 from apache/dependabot/github_actions/actions/upload-artifact-5 remm
• 2025/10/27 Re: [PR] Bump actions/upload-artifact from 4 to 5 [tomcat] via GitHub
• 2025/10/27 Re: Tomcat and JDK-25 and the fix of File.exists() Mark Thomas
• 2025/10/27 (tomcat) branch dependabot/github_actions/actions/upload-artifact-5 created (now 8294c426a6) github-bot
• 2025/10/27 [PR] Bump actions/upload-artifact from 4 to 5 [tomcat] via GitHub
• 2025/10/27 (tomcat-jakartaee-migration) branch dependabot/github_actions/actions/upload-artifact-5 deleted (was d2bfc65) github-bot
• 2025/10/27 (tomcat-jakartaee-migration) branch main updated: Bump actions/upload-artifact from 4 to 5 remm
• 2025/10/27 Re: [PR] Bump actions/upload-artifact from 4 to 5 [tomcat-jakartaee-migration] via GitHub
• 2025/10/26 Tomcat and JDK-25 and the fix of File.exists() Erwin Stadlbauer
• 2025/10/26 (tomcat-jakartaee-migration) branch dependabot/github_actions/actions/upload-artifact-5 created (now d2bfc65) github-bot
• 2025/10/26 [PR] Bump actions/upload-artifact from 4 to 5 [tomcat-jakartaee-migration] via GitHub
• 2025/10/24 [Bug 69862] NullPointerException in JspServletWrapper.handleJspException masks original exception when getRootCause() returns null bugzilla
• 2025/10/24 (tomcat) 01/02: Avoid NPE on Servlet exception unwrap remm
• 2025/10/24 (tomcat) branch 9.0.x updated (686137dd8a -> 1b338d09b7) remm
• 2025/10/24 (tomcat) 02/02: Java compat remm
• 2025/10/24 (tomcat) 01/02: Avoid NPE on Servlet exception unwrap remm
• 2025/10/24 (tomcat) branch 10.1.x updated (fe5ceececf -> 060df11130) remm
• 2025/10/24 (tomcat) 02/02: Java compat remm
• 2025/10/24 (tomcat) branch 11.0.x updated: Avoid NPE on Servlet exception unwrap remm
• 2025/10/24 (tomcat) branch main updated: Avoid NPE on Servlet exception unwrap remm
• 2025/10/24 [Bug 69862] New: NullPointerException in JspServletWrapper.handleJspException masks original exception when getRootCause() returns null bugzilla
• 2025/10/22 [Bug 69861] SPAM bugzilla
• 2025/10/22 [Bug 69861] SPAM bugzilla
• 2025/10/22 [Bug 69861] SPAM bugzilla
• 2025/10/22 [Bug 69861] Google Ranking bugzilla
• 2025/10/22 [Bug 69861] New: Google Ranking bugzilla
• 2025/10/21 Buildbot success in on tomcat-10.1.x buildbot
• 2025/10/21 (tomcat) branch 9.0.x updated: Add missing items remm
• 2025/10/21 (tomcat) branch 10.1.x updated: Add missing items remm
• 2025/10/21 (tomcat) branch 11.0.x updated: Add missing items remm
• 2025/10/21 (tomcat) branch main updated: Add missing items remm
• 2025/10/21 Buildbot failure in on tomcat-10.1.x buildbot
• 2025/10/21 (tomcat) branch 9.0.x updated: Fix typo in changelog rjung
• 2025/10/21 (tomcat) branch 10.1.x updated: Fix typo in changelog rjung
• 2025/10/21 (tomcat) branch 11.0.x updated: Fix typo in changelog rjung
• 2025/10/20 Re: [PR] Use a deep copy of query stats whose values won't change during sorting. [tomcat] via GitHub
• 2025/10/20 Re: [PR] Use a deep copy of query stats whose values won't change during sorting. [tomcat] via GitHub
• 2025/10/20 Re: [PR] Use a deep copy of query stats whose values won't change during sorting. [tomcat] via GitHub
• 2025/10/20 Buildbot success in on tomcat-9.0.x buildbot
• 2025/10/20 Re: [PR] Use a deep copy of query stats whose values won't change during sorting. [tomcat] via GitHub
• 2025/10/20 Re: [PR] Use a deep copy of query stats whose values won't change during sorting. [tomcat] via GitHub
• 2025/10/20 (tomcat) branch 9.0.x updated: Add TestStartupIPv6Connectors to verify IPv6 bind dsoumis
• 2025/10/20 Re: [PR] Add TestStartupIPv6Connectors to verify IPv6 bind [tomcat] via GitHub
• 2025/10/20 [PR] Add TestStartupIPv6Connectors to verify IPv6 bind [tomcat] via GitHub
• 2025/10/20 [Bug 69852] {MD5}, {SHA} and {SSHA} not honored with Realm/CredentialHandler bugzilla
• 2025/10/20 Re: Missing ASF headers in generated documentation Mark Thomas
• 2025/10/20 [Bug 69852] {MD5}, {SHA} and {SSHA} not honored with Realm/CredentialHandler bugzilla
• 2025/10/19 Re: [PR] Use a deep copy of query stats whose values won't change during sorting. [tomcat] via GitHub
• 2025/10/19 [Bug 69856] SPAM SPAM SPAM SPAM bugzilla
• 2025/10/19 [Bug 69856] Transform your space with Tapron’s luxury bathroom and kitchen fittings—where timeless design meets unmatched quality. bugzilla
• 2025/10/19 [Bug 69856] Transform your space with Tapron’s luxury bathroom and kitchen fittings—where timeless design meets unmatched quality. bugzilla
• 2025/10/19 [Bug 69856] New: Transform your space with Tapron’s luxury bathroom and kitchen fittings—where timeless design meets unmatched quality. bugzilla
• 2025/10/18 Re: [PR] add a shared, file based jar cache to improve performance of follow on runs of the tool [tomcat-jakartaee-migration] via GitHub
• 2025/10/18 Buildbot success in on tomcat-11.0.x buildbot
• 2025/10/18 (tomcat) 06/07: Ehnance tests and fix various issues in TestOcspIntegration tests dsoumis
• 2025/10/18 (tomcat) branch 9.0.x updated: Fix back-port markt
• 2025/10/18 [Bug 69837] JavaCompiler invalid compile classpath composing bugzilla
• 2025/10/18 [Bug 69839] Changing SessionId creates eternal Single Sign On sessions bugzilla
• 2025/10/18 (tomcat) branch main updated: Fix distro line endings for new llm files markt
• 2025/10/18 (tomcat) branch 9.0.x updated: Fix race condition. markt
• 2025/10/18 (tomcat) branch main updated: Remove unnecessary @SuppressWarnings markt
• 2025/10/18 (tomcat) branch 10.1.x updated (dee994384c -> c345241d1a) dsoumis
• 2025/10/18 [Bug 69839] Changing SessionId creates eternal Single Sign On sessions bugzilla
• 2025/10/18 Buildbot failure in on tomcat-12.0.x buildbot
• 2025/10/18 Re: [VOTE][RE-VOTEx2] Release Apache Tomcat 10.1.48 Igal Sapir
• 2025/10/18 (tomcat) branch 10.1.x updated: Treat new test password files as text files for line-endings markt
• 2025/10/18 svn commit: r1929002 - in tomcat/site/trunk: . docs docs/tomcat-10.1-doc docs/tomcat-10.1-doc/annotationapi docs/tomcat-10.1-doc/annotationapi/jakarta/annotation docs/tomcat-10.1-doc/annotationapi/jakarta/annotation/security docs/tomcat-10.1-doc/annota... schultz
• 2025/10/18 (tomcat) branch 11.0.x updated: Deprecate RemoteAddr[Filter|Valve] in favour of RemoteCIDR[Filter|Valve] markt
• 2025/10/18 (tomcat) branch main updated: Add back OpenSSL 1.1.1 compatibility remm
• 2025/10/18 (tomcat) branch 9.0.x updated: Fix BZ 69848 - Correct copy/paste error when refactoring method names markt

• Later messages