Author: markt Date: Mon Mar 25 09:26:32 2019 New Revision: 1856174 URL: http://svn.apache.org/viewvc?rev=1856174&view=rev Log: Add details for CVE-2019-0199
Modified: tomcat/site/trunk/docs/bugreport.html tomcat/site/trunk/docs/ci.html tomcat/site/trunk/docs/conference.html tomcat/site/trunk/docs/contact.html tomcat/site/trunk/docs/download-70.html tomcat/site/trunk/docs/download-90.html tomcat/site/trunk/docs/download-connectors.html tomcat/site/trunk/docs/download-native.html tomcat/site/trunk/docs/download-taglibs.html tomcat/site/trunk/docs/findhelp.html tomcat/site/trunk/docs/getinvolved.html tomcat/site/trunk/docs/heritage.html tomcat/site/trunk/docs/irc.html tomcat/site/trunk/docs/legal.html tomcat/site/trunk/docs/lists.html tomcat/site/trunk/docs/maven-plugin.html tomcat/site/trunk/docs/migration-6.html tomcat/site/trunk/docs/migration-8.html tomcat/site/trunk/docs/migration-9.html tomcat/site/trunk/docs/migration.html tomcat/site/trunk/docs/oldnews-2010.html tomcat/site/trunk/docs/oldnews-2012.html tomcat/site/trunk/docs/oldnews-2013.html tomcat/site/trunk/docs/oldnews-2014.html tomcat/site/trunk/docs/oldnews-2016.html tomcat/site/trunk/docs/oldnews-2017.html tomcat/site/trunk/docs/presentations.html tomcat/site/trunk/docs/resources.html tomcat/site/trunk/docs/security-3.html tomcat/site/trunk/docs/security-4.html tomcat/site/trunk/docs/security-5.html tomcat/site/trunk/docs/security-6.html tomcat/site/trunk/docs/security-7.html tomcat/site/trunk/docs/security-8.html tomcat/site/trunk/docs/security-9.html tomcat/site/trunk/docs/security-impact.html tomcat/site/trunk/docs/security-jk.html tomcat/site/trunk/docs/security-native.html tomcat/site/trunk/docs/security-taglibs.html tomcat/site/trunk/docs/security.html tomcat/site/trunk/docs/source.html tomcat/site/trunk/docs/taglibs.html tomcat/site/trunk/docs/tomcat-55-eol.html tomcat/site/trunk/docs/tomcat-60-eol.html tomcat/site/trunk/docs/tomcat-80-eol.html tomcat/site/trunk/docs/tools.html tomcat/site/trunk/docs/whoweare.html tomcat/site/trunk/xdocs/security-8.xml tomcat/site/trunk/xdocs/security-9.xml tomcat/site/trunk/xdocs/stylesheets/tomcat-site.xsl Modified: tomcat/site/trunk/docs/bugreport.html URL: http://svn.apache.org/viewvc/tomcat/site/trunk/docs/bugreport.html?rev=1856174&r1=1856173&r2=1856174&view=diff ============================================================================== --- tomcat/site/trunk/docs/bugreport.html (original) +++ tomcat/site/trunk/docs/bugreport.html Mon Mar 25 09:26:32 2019 @@ -1,587 +1,580 @@ <!DOCTYPE html SYSTEM "about:legacy-compat"> <html lang="en"> - <head> - <META http-equiv="Content-Type" content="text/html; charset=UTF-8"> - <meta name="viewport" content="width=device-width, initial-scale=1"> - <link href="res/css/tomcat.css" rel="stylesheet" type="text/css"> - <link href="res/css/fonts/fonts.css" rel="stylesheet" type="text/css"> - <title>Apache Tomcat® - Reporting Bugs</title> - <meta name="author" content="Glenn L. Nielsen"> - </head> - <body> - <div id="wrapper"> - <header id="header"> - <div class="clearfix"> - <div class="menu-toggler pull-left" tabindex="1"> - <div class="hamburger"></div> - </div> - <a href="http://tomcat.apache.org/"><img class="tomcat-logo pull-left noPrint" alt="Tomcat Home" src="res/images/tomcat.png"></a> - <h1 class="pull-left"> - Apache Tomcat<sup>®</sup> - </h1> - <div class="asf-logos pull-right"> - <a href="https://www.apache.org/foundation/contributing.html" target="_blank" class="pull-left"><img src="https://www.apache.org/images/SupportApache-small.png" class="support-asf" alt="Support Apache"></a><a href="http://www.apache.org/" target="_blank" class="pull-left"><img src="res/images/asf_logo.svg" class="asf-logo" alt="The Apache Software Foundation"></a> - </div> - </div> - </header> - <main id="middle"> - <div> - <div id="mainLeft"> - <div id="nav-wrapper"> - <form action="https://www.google.com/search" method="get"> - <div class="searchbox"> - <input value="tomcat.apache.org" name="sitesearch" type="hidden"><input placeholder="Search…" required="required" name="q" id="query" type="search"><button>GO</button> - </div> - </form> - <nav> - <div> - <h2>Apache Tomcat</h2> - <ul> - <li> - <a href="./index.html">Home</a> - </li> - <li> - <a href="./taglibs.html">Taglibs</a> - </li> - <li> - <a href="./maven-plugin.html">Maven Plugin</a> - </li> - </ul> - </div> - <div> - <h2>Download</h2> - <ul> - <li> - <a href="./whichversion.html">Which version?</a> - </li> - <li> - <a href="https://tomcat.apache.org/download-90.cgi">Tomcat 9</a> - </li> - <li> - <a href="https://tomcat.apache.org/download-80.cgi">Tomcat 8</a> - </li> - <li> - <a href="https://tomcat.apache.org/download-70.cgi">Tomcat 7</a> - </li> - <li> - <a href="https://tomcat.apache.org/download-connectors.cgi">Tomcat Connectors</a> - </li> - <li> - <a href="https://tomcat.apache.org/download-native.cgi">Tomcat Native</a> - </li> - <li> - <a href="https://tomcat.apache.org/download-taglibs.cgi">Taglibs</a> - </li> - <li> - <a href="https://archive.apache.org/dist/tomcat/">Archives</a> - </li> - </ul> - </div> - <div> - <h2>Documentation</h2> - <ul> - <li> - <a href="./tomcat-9.0-doc/index.html">Tomcat 9.0</a> - </li> - <li> - <a href="./tomcat-8.5-doc/index.html">Tomcat 8.5</a> - </li> - <li> - <a href="./tomcat-7.0-doc/index.html">Tomcat 7.0</a> - </li> - <li> - <a href="./connectors-doc/">Tomcat Connectors</a> - </li> - <li> - <a href="./native-doc/">Tomcat Native</a> - </li> - <li> - <a href="https://wiki.apache.org/tomcat/FrontPage">Wiki</a> - </li> - <li> - <a href="./migration.html">Migration Guide</a> - </li> - <li> - <a href="./presentations.html">Presentations</a> - </li> - </ul> - </div> - <div> - <h2>Problems?</h2> - <ul> - <li> - <a href="./security.html">Security Reports</a> - </li> - <li> - <a href="./findhelp.html">Find help</a> - </li> - <li> - <a href="https://wiki.apache.org/tomcat/FAQ">FAQ</a> - </li> - <li> - <a href="./lists.html">Mailing Lists</a> - </li> - <li> - <a href="./bugreport.html">Bug Database</a> - </li> - <li> - <a href="./irc.html">IRC</a> - </li> - </ul> - </div> - <div> - <h2>Get Involved</h2> - <ul> - <li> - <a href="./getinvolved.html">Overview</a> - </li> - <li> - <a href="./source.html">Source code</a> - </li> - <li> - <a href="./ci.html">Buildbot</a> - </li> - <li> - <a href="./tools.html">Tools</a> - </li> - </ul> - </div> - <div> - <h2>Media</h2> - <ul> - <li> - <a href="https://twitter.com/theapachetomcat">Twitter</a> - </li> - <li> - <a href="https://www.youtube.com/c/ApacheTomcatOfficial">YouTube</a> - </li> - <li> - <a href="https://blogs.apache.org/tomcat/">Blog</a> - </li> - </ul> - </div> - <div> - <h2>Misc</h2> - <ul> - <li> - <a href="./whoweare.html">Who We Are</a> - </li> - <li> - <a href="https://www.redbubble.com/people/comdev/works/30885254-apache-tomcat">Swag</a> - </li> - <li> - <a href="./heritage.html">Heritage</a> - </li> - <li> - <a href="http://www.apache.org">Apache Home</a> - </li> - <li> - <a href="./resources.html">Resources</a> - </li> - <li> - <a href="./contact.html">Contact</a> - </li> - <li> - <a href="./legal.html">Legal</a> - </li> - <li> - <a href="https://www.apache.org/foundation/contributing.html">Support Apache</a> - </li> - <li> - <a href="https://www.apache.org/foundation/sponsorship.html">Sponsorship</a> - </li> - <li> - <a href="http://www.apache.org/foundation/thanks.html">Thanks</a> - </li> - <li> - <a href="http://www.apache.org/licenses/">License</a> - </li> - </ul> - </div> - </nav> - </div> - </div> - <div id="mainRight"> - <div id="content"> - <h2 style="display: none;">Content</h2> - <h3 id="Table_of_Contents">Table of Contents</h3> - <div class="text"> - - <ul> - <li> - <a href="#Before_you_report_a_bug">Before you report a bug</a> - <ol> - <li> - <a href="#Bugzilla_is_not_a_support_forum">Bugzilla is not a support forum</a> - </li> - </ol> - </li> - <li> - <a href="#Resources_to_help_resolve_Apache_Tomcat_problems">Resources to help resolve Apache Tomcat problems</a> - <ol> - <li> - <a href="#Problem_troubleshooting">Problem troubleshooting</a> - </li> - <li> - <a href="#Apache_Tomcat_discussion_lists">Apache Tomcat discussion lists</a> - </li> - <li> - <a href="#Known_issues">Known issues</a> - </li> - <li> - <a href="#Recent_version">Recent version</a> - </li> - </ol> - </li> - <li> - <a href="#Looking_for_known_issues">Looking for known issues</a> - <ol> - <li> - <a href="#Search_the_bug_database">Search the bug database</a> - </li> - <li> - <a href="#Changelog">Changelog</a> - </li> - <li> - <a href="#Third_party_components">Third party components</a> - </li> - </ol> - </li> - <li> - <a href="#Reporting_Apache_Tomcat_bugs">Reporting Apache Tomcat bugs</a> - <ol> - <li> - <a href="#How_to_write_a_bug_report">How to write a bug report</a> - </li> - <li> - <a href="#How_to_submit_patches_and_enhancement_requests">How to submit patches and enhancement requests</a> - </li> - <li> - <a href="#Security_Issues">Security Issues</a> - </li> - </ol> - </li> - </ul> - - </div> - <h3 id="Before_you_report_a_bug">Before you report a bug</h3> - <div class="text"> - - <p>The Apache Tomcat community consists of those who use Apache Tomcat, help answer +<head> +<META http-equiv="Content-Type" content="text/html; charset=UTF-8"> +<meta name="viewport" content="width=device-width, initial-scale=1"> +<link href="res/css/tomcat.css" rel="stylesheet" type="text/css"> +<link href="res/css/fonts/fonts.css" rel="stylesheet" type="text/css"> +<title>Apache Tomcat® - Reporting Bugs</title> +<meta name="author" content="Glenn L. Nielsen"> +</head> +<body> +<div id="wrapper"> +<header id="header"> +<div class="clearfix"> +<div class="menu-toggler pull-left" tabindex="1"> +<div class="hamburger"></div> +</div> +<a href="http://tomcat.apache.org/"><img class="tomcat-logo pull-left noPrint" alt="Tomcat Home" src="res/images/tomcat.png"></a> +<h1 class="pull-left">Apache Tomcat<sup>®</sup> +</h1> +<div class="asf-logos pull-right"> +<a href="https://www.apache.org/foundation/contributing.html" target="_blank" class="pull-left"><img src="https://www.apache.org/images/SupportApache-small.png" class="support-asf" alt="Support Apache"></a><a href="http://www.apache.org/" target="_blank" class="pull-left"><img src="res/images/asf_logo.svg" class="asf-logo" alt="The Apache Software Foundation"></a> +</div> +</div> +</header> +<main id="middle"> +<div> +<div id="mainLeft"> +<div id="nav-wrapper"> +<form action="https://www.google.com/search" method="get"> +<div class="searchbox"> +<input value="tomcat.apache.org" name="sitesearch" type="hidden"><input placeholder="Search…" required="required" name="q" id="query" type="search"><button>GO</button> +</div> +</form> +<nav> +<div> +<h2>Apache Tomcat</h2> +<ul> +<li> +<a href="./index.html">Home</a> +</li> +<li> +<a href="./taglibs.html">Taglibs</a> +</li> +<li> +<a href="./maven-plugin.html">Maven Plugin</a> +</li> +</ul> +</div> +<div> +<h2>Download</h2> +<ul> +<li> +<a href="./whichversion.html">Which version?</a> +</li> +<li> +<a href="https://tomcat.apache.org/download-90.cgi">Tomcat 9</a> +</li> +<li> +<a href="https://tomcat.apache.org/download-80.cgi">Tomcat 8</a> +</li> +<li> +<a href="https://tomcat.apache.org/download-70.cgi">Tomcat 7</a> +</li> +<li> +<a href="https://tomcat.apache.org/download-connectors.cgi">Tomcat Connectors</a> +</li> +<li> +<a href="https://tomcat.apache.org/download-native.cgi">Tomcat Native</a> +</li> +<li> +<a href="https://tomcat.apache.org/download-taglibs.cgi">Taglibs</a> +</li> +<li> +<a href="https://archive.apache.org/dist/tomcat/">Archives</a> +</li> +</ul> +</div> +<div> +<h2>Documentation</h2> +<ul> +<li> +<a href="./tomcat-9.0-doc/index.html">Tomcat 9.0</a> +</li> +<li> +<a href="./tomcat-8.5-doc/index.html">Tomcat 8.5</a> +</li> +<li> +<a href="./tomcat-7.0-doc/index.html">Tomcat 7.0</a> +</li> +<li> +<a href="./connectors-doc/">Tomcat Connectors</a> +</li> +<li> +<a href="./native-doc/">Tomcat Native</a> +</li> +<li> +<a href="https://wiki.apache.org/tomcat/FrontPage">Wiki</a> +</li> +<li> +<a href="./migration.html">Migration Guide</a> +</li> +<li> +<a href="./presentations.html">Presentations</a> +</li> +</ul> +</div> +<div> +<h2>Problems?</h2> +<ul> +<li> +<a href="./security.html">Security Reports</a> +</li> +<li> +<a href="./findhelp.html">Find help</a> +</li> +<li> +<a href="https://wiki.apache.org/tomcat/FAQ">FAQ</a> +</li> +<li> +<a href="./lists.html">Mailing Lists</a> +</li> +<li> +<a href="./bugreport.html">Bug Database</a> +</li> +<li> +<a href="./irc.html">IRC</a> +</li> +</ul> +</div> +<div> +<h2>Get Involved</h2> +<ul> +<li> +<a href="./getinvolved.html">Overview</a> +</li> +<li> +<a href="./source.html">Source code</a> +</li> +<li> +<a href="./ci.html">Buildbot</a> +</li> +<li> +<a href="./tools.html">Tools</a> +</li> +</ul> +</div> +<div> +<h2>Media</h2> +<ul> +<li> +<a href="https://twitter.com/theapachetomcat">Twitter</a> +</li> +<li> +<a href="https://www.youtube.com/c/ApacheTomcatOfficial">YouTube</a> +</li> +<li> +<a href="https://blogs.apache.org/tomcat/">Blog</a> +</li> +</ul> +</div> +<div> +<h2>Misc</h2> +<ul> +<li> +<a href="./whoweare.html">Who We Are</a> +</li> +<li> +<a href="https://www.redbubble.com/people/comdev/works/30885254-apache-tomcat">Swag</a> +</li> +<li> +<a href="./heritage.html">Heritage</a> +</li> +<li> +<a href="http://www.apache.org">Apache Home</a> +</li> +<li> +<a href="./resources.html">Resources</a> +</li> +<li> +<a href="./contact.html">Contact</a> +</li> +<li> +<a href="./legal.html">Legal</a> +</li> +<li> +<a href="https://www.apache.org/foundation/contributing.html">Support Apache</a> +</li> +<li> +<a href="https://www.apache.org/foundation/sponsorship.html">Sponsorship</a> +</li> +<li> +<a href="http://www.apache.org/foundation/thanks.html">Thanks</a> +</li> +<li> +<a href="http://www.apache.org/licenses/">License</a> +</li> +</ul> +</div> +</nav> +</div> +</div> +<div id="mainRight"> +<div id="content"> +<h2 style="display: none;">Content</h2> +<h3 id="Table_of_Contents">Table of Contents</h3> +<div class="text"> + +<ul> +<li> +<a href="#Before_you_report_a_bug">Before you report a bug</a> +<ol> +<li> +<a href="#Bugzilla_is_not_a_support_forum">Bugzilla is not a support forum</a> +</li> +</ol> +</li> +<li> +<a href="#Resources_to_help_resolve_Apache_Tomcat_problems">Resources to help resolve Apache Tomcat problems</a> +<ol> +<li> +<a href="#Problem_troubleshooting">Problem troubleshooting</a> +</li> +<li> +<a href="#Apache_Tomcat_discussion_lists">Apache Tomcat discussion lists</a> +</li> +<li> +<a href="#Known_issues">Known issues</a> +</li> +<li> +<a href="#Recent_version">Recent version</a> +</li> +</ol> +</li> +<li> +<a href="#Looking_for_known_issues">Looking for known issues</a> +<ol> +<li> +<a href="#Search_the_bug_database">Search the bug database</a> +</li> +<li> +<a href="#Changelog">Changelog</a> +</li> +<li> +<a href="#Third_party_components">Third party components</a> +</li> +</ol> +</li> +<li> +<a href="#Reporting_Apache_Tomcat_bugs">Reporting Apache Tomcat bugs</a> +<ol> +<li> +<a href="#How_to_write_a_bug_report">How to write a bug report</a> +</li> +<li> +<a href="#How_to_submit_patches_and_enhancement_requests">How to submit patches and enhancement requests</a> +</li> +<li> +<a href="#Security_Issues">Security Issues</a> +</li> +</ol> +</li> +</ul> + +</div> +<h3 id="Before_you_report_a_bug">Before you report a bug</h3> +<div class="text"> + +<p>The Apache Tomcat community consists of those who use Apache Tomcat, help answer questions on discussions lists, contribute documentation and patches, and those who develop and maintain the code for Apache Tomcat. Almost all those who assist on a day to day basis resolving bug reports do this for a wide variety of reasons, and almost all of them do this on their own time.</p> - - <p>Many bugs reported end up not being a bug in the Apache Tomcat code, but are + + +<p>Many bugs reported end up not being a bug in the Apache Tomcat code, but are due to misconfiguration, problems caused by installed applications, the operating system, etc.</p> - - <div style="margin-left: 2em"> - - <p> - <b>Before reporting a bug please make every effort to resolve the problem + + +<div style="margin-left: 2em"> + +<p> +<b>Before reporting a bug please make every effort to resolve the problem yourself.</b> - </p> - - <p> - If you need help, ask on the <b>users</b> - <a href="lists.html#tomcat-users">mailing list</a>. - </p> - - </div> - - <p>The remainder of this document points you toward resources you can use to +</p> + + +<p>If you need help, ask on the <b>users</b> + <a href="lists.html#tomcat-users">mailing list</a>.</p> + +</div> + + +<p>The remainder of this document points you toward resources you can use to resolve the problem you are having. </p> - - <div class="subsection"> - <h4 id="Bugzilla_is_not_a_support_forum">Bugzilla is not a support forum</h4> - <div class="text"> - - <p> - Bugzilla is a tool to track bug reports and feature requests. It is used + + +<div class="subsection"> +<h4 id="Bugzilla_is_not_a_support_forum">Bugzilla is not a support forum</h4> +<div class="text"> + +<p>Bugzilla is a tool to track bug reports and feature requests. It is used to <b>organize</b> work on Apache Tomcat projects, so that such issues are not forgotten and to document how they were resolved. + </p> + - </p> - - <p> - Bugzilla <b>is not</b> a place to ask questions on how to configure your +<p>Bugzilla <b>is not</b> a place to ask questions on how to configure your own system, or how to interpret some error message or behaviour that you do not understand. If you have questions, please ask on the <b>users</b> <a href="lists.html#tomcat-users">mailing list</a>. + </p> + - </p> - - <p> - When you have gathered enough information to diagnose your problem, +<p>When you have gathered enough information to diagnose your problem, and it is indeed a bug that can be fixed in Apache Tomcat, feel free to create or reopen your Bugzilla issue for it. You can find a link to your discussion in the <a href="lists.html">mailing list archives</a> and include it in your bug report. + </p> - </p> - - </div> - </div> - - </div> - <h3 id="Resources_to_help_resolve_Apache_Tomcat_problems">Resources to help resolve Apache Tomcat problems</h3> - <div class="text"> - - <p>Here are some resources you can use to help you resolve the +</div> +</div> + +</div> +<h3 id="Resources_to_help_resolve_Apache_Tomcat_problems">Resources to help resolve Apache Tomcat problems</h3> +<div class="text"> + +<p>Here are some resources you can use to help you resolve the problem you are having before reporting a bug.</p> - - <div class="subsection"> - <h4 id="Problem_troubleshooting">Problem troubleshooting</h4> - <div class="text"> - - <ul> - - <li> - <b>Documentation</b> – Review the documentation for the version + + +<div class="subsection"> +<h4 id="Problem_troubleshooting">Problem troubleshooting</h4> +<div class="text"> + +<ul> + +<li> +<b>Documentation</b> – Review the documentation for the version of Apache Tomcat that you are using. The problem that you are facing may already be addressed in the docs. Note, that documentation - is searchable. - </li> - - <li> - <b>Logs</b> – The logs which Apache Tomcat generates can be a valuable + is searchable.</li> + +<li> +<b>Logs</b> – The logs which Apache Tomcat generates can be a valuable resource when trying to diagnose a problem. Please review them. You may want to enable debug output in your Apache Tomcat configuration so that you have more information to help diagnose the problem. You may want to configure an Access Log (a valve) to log what requests reached Tomcat and what was Tomcat's response to them. + </li> - </li> - - <li> - <b>Wiki</b> – Search the +<li> +<b>Wiki</b> – Search the <a href="https://wiki.apache.org/tomcat/FrontPage">Wiki</a>. That is unofficial documentation to which everyone can contribute. + </li> + +<li> +<b>FAQ's</b> – Search the <a href="https://wiki.apache.org/tomcat/FAQ"> + Tomcat Frequently Asked Questions</a> that is part of the Wiki.</li> - </li> - - <li> - <b>FAQ's</b> – Search the <a href="https://wiki.apache.org/tomcat/FAQ"> - Tomcat Frequently Asked Questions</a> that is part of the Wiki. - </li> - - </ul> - - </div> - </div> - - <div class="subsection"> - <h4 id="Apache_Tomcat_discussion_lists">Apache Tomcat discussion lists</h4> - <div class="text"> - - <p>It is very likely you are not the first to run into a problem. +</ul> + +</div> +</div> + + +<div class="subsection"> +<h4 id="Apache_Tomcat_discussion_lists">Apache Tomcat discussion lists</h4> +<div class="text"> + +<p>It is very likely you are not the first to run into a problem. Others may have already found a solution. The mailing list archives may contain discussions which will help you resolve the problem. </p> - - <p> - See the <a href="lists.html">mailing lists</a> page for the further - information on the lists. - </p> - - <p> - See also the <a href="findhelp.html">Find help</a> page. - </p> - - </div> - </div> - - <div class="subsection"> - <h4 id="Known_issues">Known issues</h4> - <div class="text"> - - <p>Please search the bug database to see if the bug you are seeing has + +<p>See the <a href="lists.html">mailing lists</a> page for the further + information on the lists.</p> + +<p>See also the <a href="findhelp.html">Find help</a> page.</p> + +</div> +</div> + + +<div class="subsection"> +<h4 id="Known_issues">Known issues</h4> +<div class="text"> + +<p>Please search the bug database to see if the bug you are seeing has already been reported. Please look at the changelog page for the bugs that have already been fixed. The changelogs for not-yet-released versions of Tomcat are also available. More details are below. </p> - - </div> - </div> - - <div class="subsection"> - <h4 id="Recent_version">Recent version</h4> - <div class="text"> - - <p>Try to reproduce your problem with the latest released version of + +</div> +</div> + + +<div class="subsection"> +<h4 id="Recent_version">Recent version</h4> +<div class="text"> + +<p>Try to reproduce your problem with the latest released version of Apache Tomcat.</p> - - </div> - </div> - - </div> - <h3 id="Looking_for_known_issues">Looking for known issues</h3> - <div class="text"> - - <div class="subsection"> - <h4 id="Search_the_bug_database">Search the bug database</h4> - <div class="text"> - - <p>Please search the bug database to see if the bug you are + + +</div> +</div> + +</div> +<h3 id="Looking_for_known_issues">Looking for known issues</h3> +<div class="text"> + + +<div class="subsection"> +<h4 id="Search_the_bug_database">Search the bug database</h4> +<div class="text"> + +<p>Please search the bug database to see if the bug you are seeing has already been reported. </p> - - <ul> - - <li>The bug may have already been fixed and is available in a later + +<ul> + +<li>The bug may have already been fixed and is available in a later version or nightly build.</li> - - <li>Someone else may have reported the bug, you could add supporting + +<li>Someone else may have reported the bug, you could add supporting information to help reproduce and resolve the bug.</li> - - </ul> - - <p> - The search page is + +</ul> + +<p>The search page is <a href="https://bz.apache.org/bugzilla/query.cgi">here</a>. There is also <a href="https://bz.apache.org/bugzilla/query.cgi?format=advanced">advanced</a> search page. + </p> - </p> - - <p>Here are some search tips.</p> - - <ol> - - <li> - <p>Search for closed bugs as well as for the open ones.</p> - - <p>On the advanced search page you can clear the "Status" field to +<p>Here are some search tips.</p> + +<ol> + +<li> +<p>Search for closed bugs as well as for the open ones.</p> + +<p>On the advanced search page you can clear the "Status" field to avoid filtering by status.</p> - - </li> - - <li> - <p>Search across different versions of Tomcat.</p> - - <p>In the bug database Tomcat is represented by several "products". + +</li> + +<li> +<p>Search across different versions of Tomcat.</p> + +<p>In the bug database Tomcat is represented by several "products". The same problem should be reported only once, but the fix may be applied to different Tomcat versions. While doing so, the bug report is moved between different products. A bug that is originally reported against Tomcat 9 is moved to Tomcat 8 and maybe later to Tomcat 7. So it makes sense to search all the versions at once.</p> - - <p>Here is a quick list of supported products:</p> - - <ul> - - <li> - <b>Tomcat 9</b>, <b>Tomcat 8</b> and <b>Tomcat 7</b> - – Tomcat 9.0.x, 8.5.x and 7.0.x - </li> - - <li> - <b>Tomcat Connectors</b> – Integration of Tomcat with other Web servers - </li> - - <li> - <b>Tomcat Native</b> – APR based native HTTP and AJP connectors for Tomcat - </li> - - <li> - <b>Tomcat Modules</b> – Additional Tomcat components - </li> - - <li> - <b>Taglibs</b> – Apache <a href="/taglibs/">Taglibs</a> subproject - </li> - - </ul> - - </li> - - <li> - <p>Search not only Summary field, but also the Comment one</p> - - <p>On the advanced search page open "Detailed Bug Information", + + +<p>Here is a quick list of supported products:</p> + +<ul> + +<li> +<b>Tomcat 9</b>, <b>Tomcat 8</b> and <b>Tomcat 7</b> + – Tomcat 9.0.x, 8.5.x and 7.0.x</li> + +<li> +<b>Tomcat Connectors</b> – Integration of Tomcat with other Web servers</li> + +<li> +<b>Tomcat Native</b> – APR based native HTTP and AJP connectors for Tomcat</li> + +<li> +<b>Tomcat Modules</b> – Additional Tomcat components</li> + +<li> +<b>Taglibs</b> – Apache <a href="/taglibs/">Taglibs</a> subproject</li> + +</ul> + + +</li> + +<li> +<p>Search not only Summary field, but also the Comment one</p> + +<p>On the advanced search page open "Detailed Bug Information", then type your query into the "Comment" field. </p> - - </li> - - <li> - <p>You can limit results to the issues that were changed recently.</p> - - <p> - On the advanced search page open "Search by Change History", + +</li> + +<li> +<p>You can limit results to the issues that were changed recently.</p> + +<p>On the advanced search page open "Search by Change History", then type "<code>-2m</code>" into the first field in the pair of "between" fields to limit results to the issues changed in the last - 2 months. - </p> - - </li> - - <li> - <p>Some bugs do not belong to Tomcat.</p> - - <p>Tomcat bundles libraries from several other projects. You can see + 2 months.</p> + +</li> + +<li> +<p>Some bugs do not belong to Tomcat.</p> + +<p>Tomcat bundles libraries from several other projects. You can see RELEASE-NOTES and NOTICE files in your distribution for details. More details are in a separate section below.</p> - - </li> - - </ol> - - </div> - </div> - - <div class="subsection"> - <h4 id="Changelog">Changelog</h4> - <div class="text"> - - <p>If you are looking for the recently fixed issues there are several + +</li> + +</ol> + +</div> +</div> + + +<div class="subsection"> +<h4 id="Changelog">Changelog</h4> +<div class="text"> + + +<p>If you are looking for the recently fixed issues there are several places to look at.</p> - - <ul> - - <li> - <p>Changelog files for released versions</p> - - <p>These are published on the Tomcat website.</p> - - </li> - - <li> - <p> - Changelog files for <em>not-yet-released</em> versions - </p> - - <p>These are available in the source code.</p> - - <p>They are in XML format with style sheets attached. Thus + + +<ul> + +<li> +<p>Changelog files for released versions</p> + +<p>These are published on the Tomcat website.</p> + +</li> + +<li> +<p>Changelog files for <em>not-yet-released</em> versions</p> + +<p>These are available in the source code.</p> + +<p>They are in XML format with style sheets attached. Thus modern web browsers can display them nicely.</p> - - <p> - The files are also available in nightly documentation builds. - See <a href="ci.html">Buildbot</a> page for details. - </p> - - </li> - - </ul> - - <p>Links:</p> - - <table class="detail-table"> - - <tr> - <th><strong>Product</strong></th> + +<p>The files are also available in nightly documentation builds. + See <a href="ci.html">Buildbot</a> page for details.</p> + +</li> + +</ul> + + +<p>Links:</p> + + +<table class="detail-table"> + +<tr> + +<th><strong>Product</strong></th> <th><strong>Changelog (released)</strong></th> <th><strong>Changelog (unreleased)</strong></th> - </tr> - - <tr> - <td>Tomcat 9.0 (trunk)</td> +</tr> + + +<tr> + +<td>Tomcat 9.0 (trunk)</td> <td> <a href="https://tomcat.apache.org/tomcat-9.0-doc/changelog.html">changelog.html</a> </td> @@ -589,10 +582,12 @@ problem you are having before reporting <a href="https://ci.apache.org/projects/tomcat/tomcat9/docs/changelog.html">changelog.html - CI</a> </td> - </tr> - - <tr> - <td>Tomcat 8.5</td> +</tr> + + +<tr> + +<td>Tomcat 8.5</td> <td> <a href="https://tomcat.apache.org/tomcat-8.5-doc/changelog.html">changelog.html</a> </td> @@ -600,10 +595,12 @@ problem you are having before reporting <a href="https://ci.apache.org/projects/tomcat/tomcat85/docs/changelog.html">changelog.html - CI</a> </td> - </tr> - - <tr> - <td>Tomcat 7.0</td> +</tr> + + +<tr> + +<td>Tomcat 7.0</td> <td> <a href="https://tomcat.apache.org/tomcat-7.0-doc/changelog.html">changelog.html</a> </td> @@ -611,10 +608,12 @@ problem you are having before reporting <a href="https://ci.apache.org/projects/tomcat/tomcat7/docs/changelog.html">changelog.html - CI</a> </td> - </tr> - - <tr> - <td>Tomcat Connectors</td> +</tr> + + +<tr> + +<td>Tomcat Connectors</td> <td> <a href="https://tomcat.apache.org/connectors-doc/miscellaneous/changelog.html">changelog.html</a> </td> @@ -622,10 +621,12 @@ problem you are having before reporting <a href="https://svn.apache.org/repos/asf/tomcat/jk/trunk/xdocs/miscellaneous/changelog.xml">changelog.xml</a> </td> - </tr> - - <tr> - <td>Tomcat Native</td> +</tr> + + +<tr> + +<td>Tomcat Native</td> <td> <a href="https://tomcat.apache.org/native-doc/miscellaneous/changelog.html">changelog.html</a> </td> @@ -633,286 +634,255 @@ problem you are having before reporting <a href="https://svn.apache.org/repos/asf/tomcat/native/trunk/xdocs/miscellaneous/changelog.xml">changelog.xml</a> </td> - </tr> - - </table> - - </div> - </div> - - <div class="subsection"> - <h4 id="Third_party_components">Third party components</h4> - <div class="text"> - - <p> - Tomcat bundles libraries from several other projects. See +</tr> + +</table> + +</div> +</div> + + +<div class="subsection"> +<h4 id="Third_party_components">Third party components</h4> +<div class="text"> + +<p>Tomcat bundles libraries from several other projects. See RELEASE-NOTES and NOTICE files in your distribution for details. The versions of the components that were used to build Tomcat are defined in the <code>build.properties.default</code> file in the source - distribution. - </p> - - <p>Notable components are:</p> - - <ul> - - <li> - <p> - Tomcat service launcher – + distribution.</p> + + +<p>Notable components are:</p> + +<ul> + +<li> +<p>Tomcat service launcher – <code>commons-daemon-*</code>, <code>tomcatN.exe</code>, <code>tomcatNw.exe</code> - </p> - - <p> - The service launcher is provided by +</p> + +<p>The service launcher is provided by <a href="http://commons.apache.org/daemon/">Apache Commons Daemon</a> - project. - </p> - - <p> - Using the terminology from that project, the *nixes launcher is + project.</p> + +<p>Using the terminology from that project, the *nixes launcher is called <code>jsvc</code> and the Windows launcher is called <code>procrun</code>. The <code>tomcatN.exe</code> and <code>tomcatNw.exe</code> programs in Tomcat distributions are just renamed <code>prunsrv.exe</code> and <code>prunmgr.exe</code> from Apache Commons Daemon binaries distribution. + </p> + +</li> + - </p> - - </li> - - <li> - <p> - DBCP Database Pool implementation – +<li> +<p>DBCP Database Pool implementation – <code>tomcat-dbcp.jar</code>. + </p> - </p> - - <p> - This pool implementation is provided by +<p>This pool implementation is provided by <a href="http://commons.apache.org/pool/">Apache Commons Pool</a> and <a href="http://commons.apache.org/dbcp/">Apache Commons DBCP</a> - projects. - </p> - - <p>The classes from these two projects are renamed into a different + projects.</p> + +<p>The classes from these two projects are renamed into a different package, to avoid conflicts if the same libraries are used by web applications, recompiled and packed into a single JAR file.</p> - </li> - - <li> - <p> - JDBC Database Pool implementation – +</li> + + +<li> +<p>JDBC Database Pool implementation – <code>tomcat-jdbc.jar</code>. + </p> - </p> - - <p> - This pool implementation is available with Tomcat 7 and later and +<p>This pool implementation is available with Tomcat 7 and later and it comes from <b>jdbc-pool</b> project that is part of <b>Tomcat Modules</b>. This library is developed alongside the main Tomcat. - - </p> - - </li> - - <li> - <p> - Tomcat + </p> + +</li> + + +<li> +<p>Tomcat <a href="http://tomcat.apache.org/maven-plugin.html">Maven plugin</a> subproject tracks its issues in <a href="https://bz.apache.org/jira/browse/MTOMCAT">JIRA database</a>. - - </p> - - </li> - - </ul> - - </div> - </div> - - </div> - <h3 id="Reporting_Apache_Tomcat_bugs">Reporting Apache Tomcat bugs</h3> - <div class="text"> - - <p>Please make sure the problem is a bug in Apache Tomcat and not a + </p> + +</li> + + + +</ul> + +</div> +</div> + + +</div> +<h3 id="Reporting_Apache_Tomcat_bugs">Reporting Apache Tomcat bugs</h3> +<div class="text"> + +<p>Please make sure the problem is a bug in Apache Tomcat and not a bug in your web application.</p> - - <p> - Note, that <a href="security.html">security-related</a> issues should -<b>not</b> be reported through Bugzilla. - </p> - - <div class="subsection"> - <h4 id="How_to_write_a_bug_report">How to write a bug report</h4> - <div class="text"> - - <p> - Please provide as much information as possible. It is + +<p>Note, that <a href="security.html">security-related</a> issues should +<b>not</b> be reported through Bugzilla.</p> + + +<div class="subsection"> +<h4 id="How_to_write_a_bug_report">How to write a bug report</h4> +<div class="text"> + +<p>Please provide as much information as possible. It is very hard to fix a bug if the person looking into the problem cannot reproduce it. See also <a href="https://bz.apache.org/bugzilla/page.cgi?id=bug-writing.html">Bug Writing Guidelines</a>. + </p> + - </p> - - <p> - Bug submission starts +<p>Bug submission starts <a href="https://bz.apache.org/bugzilla/enter_bug.cgi">here</a>. - You have to include the following information in your bug report: - </p> - - <ul> - - <li> - <p> - <b>Product</b>. Here is a list of supported products: - </p> - - <ul> - - <li> - <b>Tomcat 9</b> – Tomcat 9.0.x and tomcat.apache.org web site - </li> - - <li> - <b>Tomcat 8</b> – Tomcat 8.5.x - </li> - - <li> - <b>Tomcat 7</b> – Tomcat 7.0.x - </li> - - <li> - <b>Tomcat Connectors</b> – Integration of Tomcat with other Web servers. + You have to include the following information in your bug report:</p> + +<ul> + +<li> +<p> +<b>Product</b>. Here is a list of supported products:</p> + +<ul> + +<li> +<b>Tomcat 9</b> – Tomcat 9.0.x and tomcat.apache.org web site</li> + +<li> +<b>Tomcat 8</b> – Tomcat 8.5.x</li> + +<li> +<b>Tomcat 7</b> – Tomcat 7.0.x</li> + +<li> +<b>Tomcat Connectors</b> – Integration of Tomcat with other Web servers. The <b>mod_jk</b> module for <a href="http://httpd.apache.org/">Apache HTTPD</a> - and other web servers. - </li> - - <li> - <b>Tomcat Native</b> – HTTP and AJP connectors for Tomcat - using native code and linked with Apache APR and OpenSSL libraries - </li> - - <li> - <b>Tomcat Modules</b> – Additional Tomcat components, such as <b>jdbc-pool</b> - </li> - - <li> - <b>Taglibs</b> – Apache <a href="/taglibs/">Taglibs</a> subproject - </li> - - </ul> - - </li> - - <li> - <p> - <b>Version</b> – Apache Tomcat version. - </p> - - <p>Please not only select it from the list, but also mention it in + and other web servers.</li> + +<li> +<b>Tomcat Native</b> – HTTP and AJP connectors for Tomcat + using native code and linked with Apache APR and OpenSSL libraries</li> + +<li> +<b>Tomcat Modules</b> – Additional Tomcat components, such as <b>jdbc-pool</b> +</li> + +<li> +<b>Taglibs</b> – Apache <a href="/taglibs/">Taglibs</a> subproject</li> + +</ul> + +</li> + +<li> +<p> +<b>Version</b> – Apache Tomcat version.</p> + +<p>Please not only select it from the list, but also mention it in your text. The bug description can be updated, so it is important to mention the version in the text as well. </p> - </li> - - <li> - <p> - <b>Component</b> – The component which has the bug. - </p> - - <p>If you do not know, just guess.</p> - </li> - - <li> - <p> - <b>Platform</b> and <b>OS</b> – Hardware platform and - operating system Tomcat is running on. - </p> - </li> - - <li> - <p> - <b>Severity</b> – This is <code>normal</code> for usual - bug reports and <code>enhancement</code> for enhancement requests. - </p> - - <p> - If you tend to mark it as <code>critical</code>, you are probably +</li> + +<li> +<p> +<b>Component</b> – The component which has the bug.</p> + +<p>If you do not know, just guess.</p> +</li> + +<li> +<p> +<b>Platform</b> and <b>OS</b> – Hardware platform and + operating system Tomcat is running on.</p> +</li> + +<li> +<p> +<b>Severity</b> – This is <code>normal</code> for usual + bug reports and <code>enhancement</code> for enhancement requests.</p> + +<p>If you tend to mark it as <code>critical</code>, you are probably doing it wrong. It is likely that the issue is already known and fixed, - or it is not an issue at all. - </p> - - </li> - - <li> - <p>Configuration details</p> - - <p>Please mention these in your text:</p> - - <ul> - - <li>Java version – Vendor and version of your Java + or it is not an issue at all.</p> + +</li> + +<li> +<p>Configuration details</p> + +<p>Please mention these in your text:</p> + +<ul> + +<li>Java version – Vendor and version of your Java Runtime Environment used to run Tomcat.</li> - - <li> - If Tomcat is used behind + +<li>If Tomcat is used behind <a href="http://httpd.apache.org/">Apache HTTPD</a> or other web - server – its version and how it is configured. - </li> - - <li>Tomcat Connector that is being used. + server – its version and how it is configured.</li> + +<li>Tomcat Connector that is being used. There are several implementations of Connectors in Tomcat. Which one is being used is shown in the logs during Tomcat startup. </li> - - </ul> - - </li> - - <li> - <p>Attachments</p> - - <p>Attach configuration files and Tomcat log files if they would help + +</ul> + +</li> + +<li> +<p>Attachments</p> + +<p>Attach configuration files and Tomcat log files if they would help to track down the bug.</p> - - </li> - - <li> - <p>Reproducer</p> - - <p> - Please describe how to reproduce your problem on a clean Tomcat + +</li> + +<li> +<p>Reproducer</p> + +<p>Please describe how to reproduce your problem on a clean Tomcat installation. If you can please provide a <b>simple</b> sample web application that demonstrates the issue. - - </p> - - </li> - - </ul> - - </div> - </div> - - <div class="subsection"> - <h4 id="How_to_submit_patches_and_enhancement_requests">How to submit patches and enhancement requests</h4> - <div class="text"> - - <p> - Enhancement requests for Tomcat are submitted using the same procedure + </p> + +</li> + +</ul> + +</div> +</div> + + +<div class="subsection"> +<h4 id="How_to_submit_patches_and_enhancement_requests">How to submit patches and enhancement requests</h4> +<div class="text"> + +<p>Enhancement requests for Tomcat are submitted using the same procedure as bug reports, but in the <b>Severity</b> field you will select the value "<code>enhancement</code>". + </p> + - </p> - - <p> - For components available via GitHub you may provide a proposed patch as a +<p>For components available via GitHub you may provide a proposed patch as a pull request. Alternatively, you can attach your proposed patch to a Bugzilla issue. When providing a patch, please mention to which version of the source code it @@ -920,108 +890,103 @@ bug in your web application.</p> <a href="http://en.wikipedia.org/wiki/Diff#Unified_format" rel="nofollow"> Unified Diff</a> format. Those can be generated using <code>diff -u</code> command or <code>svn diff</code> or <code>git diff</code> command. + </p> + + +<p>To patch and build Apache Tomcat see the following references:</p> + + +<ul> + +<li> +<a href="source.html">Repository access </a> for Apache Tomcat</li> + +<li>Read BUILDING.txt in the source distribution</li> - </p> - - <p>To patch and build Apache Tomcat see the following references:</p> - - <ul> - - <li> - <a href="source.html">Repository access </a> for Apache Tomcat - </li> - - <li>Read BUILDING.txt in the source distribution</li> - - </ul> - - <p>To prepare a documentation patch:</p> - - <p> - Read section on building the documentation in BUILDING.txt file +</ul> + + +<p>To prepare a documentation patch:</p> + + +<p>Read section on building the documentation in BUILDING.txt file in the source distribution. Usually the documentation for a version of Tomcat is located in <code>webapps/docs/</code> directory in the source code and - can be built with <code>ant build-docs</code> command. - </p> - - <p> - To build documentation it should be sufficient to have a Java runtime + can be built with <code>ant build-docs</code> command.</p> + + +<p>To build documentation it should be sufficient to have a Java runtime and a copy of <a href="http://ant.apache.org/">Apache Ant</a>. Compiling Tomcat code should be unnecessary. + </p> + - </p> - - <p>Generic references:</p> - - <ul> - - <li> - <p>Apache Software Foundation guildelines:</p> - - <ul> - - <li> - General <a href="http://www.apache.org/dev/version-control.html#anon-svn">Apache +<p>Generic references:</p> + +<ul> + +<li> +<p>Apache Software Foundation guildelines:</p> + +<ul> + +<li>General <a href="http://www.apache.org/dev/version-control.html#anon-svn">Apache guidance for Subversion</a> - </li> - - <li> - Sending in Patches chapter of +</li> + +<li>Sending in Patches chapter of <a href="http://www.apache.org/dev/contributors.html#patches">Contributors Tech Guide</a> - </li> - - </ul> - - </li> - - <li> - <p>General Subversion documentation:</p> - - <ul> - - <li> - The <a href="http://svnbook.red-bean.com/index.en.html">Subversion Book</a> - </li> - - </ul> - - </li> - - </ul> - - </div> - </div> - - <div class="subsection"> - <h4 id="Security_Issues">Security Issues</h4> - <div class="text"> - - <p> - Security-related bugs are of special concern. If you have a verified +</li> + +</ul> + +</li> + +<li> +<p>General Subversion documentation:</p> + +<ul> + +<li>The <a href="http://svnbook.red-bean.com/index.en.html">Subversion Book</a> +</li> + +</ul> + +</li> + +</ul> + +</div> +</div> + + +<div class="subsection"> +<h4 id="Security_Issues">Security Issues</h4> +<div class="text"> + +<p>Security-related bugs are of special concern. If you have a verified security bug to report please neither post it to public email lists nor submit a bug report. -See <a href="security.html">Security Reports</a> page on how to report them. - </p> - - </div> - </div> - - </div> - </div> - </div> - </div> - </main> - <footer id="footer"> - Copyright © 1999-2019, The Apache Software Foundation - - <br> - Apache Tomcat, Tomcat, Apache, the Apache feather, and the Apache Tomcat +See <a href="security.html">Security Reports</a> page on how to report them.</p> + +</div> +</div> + + +</div> +</div> +</div> +</div> +</main> +<footer id="footer"> + Copyright © 1999-2019, The Apache Software Foundation + <br> + Apache Tomcat, Tomcat, Apache, the Apache feather, and the Apache Tomcat project logo are either registered trademarks or trademarks of the Apache Software Foundation. - - </footer> - </div> - <script src="res/js/tomcat.js"></script> - </body> + </footer> +</div> +<script src="res/js/tomcat.js"></script> +</body> </html> --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org