[Bug 59697] tomcat cache DNS forever
https://bz.apache.org/bugzilla/show_bug.cgi?id=59697 Remy Maucherat changed: What|Removed |Added Resolution|--- |INVALID Status|NEW |RESOLVED --- Comment #1 from Remy Maucherat --- I fail to see how Tomcat interacts with this. Tomcat doesn't maintain a DNS cache of its own. I see an email on the user mailing this about this posted two hours before this bugzilla, that's where support questions should go to. Bugzilla is not a support forum. Even if a support question doesn't get answered fast enough for your liking, it is not an excuse to file a bugzilla about it. -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
svn commit: r13993 - in /release/tomcat/tomcat-9/v9.0.0.M8/bin: apache-tomcat-9.0.0.M8.tar.gz.asc apache-tomcat-9.0.0.M8.zip.asc
Author: markt Date: Tue Jun 14 07:54:50 2016 New Revision: 13993 Log: Add missing signatures Added: release/tomcat/tomcat-9/v9.0.0.M8/bin/apache-tomcat-9.0.0.M8.tar.gz.asc release/tomcat/tomcat-9/v9.0.0.M8/bin/apache-tomcat-9.0.0.M8.zip.asc Added: release/tomcat/tomcat-9/v9.0.0.M8/bin/apache-tomcat-9.0.0.M8.tar.gz.asc == --- release/tomcat/tomcat-9/v9.0.0.M8/bin/apache-tomcat-9.0.0.M8.tar.gz.asc (added) +++ release/tomcat/tomcat-9/v9.0.0.M8/bin/apache-tomcat-9.0.0.M8.tar.gz.asc Tue Jun 14 07:54:50 2016 @@ -0,0 +1,17 @@ +-BEGIN PGP SIGNATURE- +Version: GnuPG v2 + +iQIcBAABCAAGBQJXX7gkAAoJEBDAHFovYFnnppoQAMT/mkfTBIsIkfW80dHYBF58 +Lvn+UkqujDrGuXQrRB5tUJ1X6dI5TQE5jcUKKWY3BJgjD+4mLOmn2Sa2OrEML+Ul +tNrdukzMVbDpUe6Y8RL/GE3o0DDbb//AYhTRZQFCoFLvknks/B4X9XVjbLbY6ws5 +6C1mQ2DqaInRKrmYBNUQgtV25m9jypBZzms/bwCmx1RneCTYUUZGpnGDHogQqXPj +XFx0yCpNYQn5gVFEBu8NnK2VSbnPCOAD51qb9OxGIC94qHzH5yfeWCeAxn8nJ1kv +8Di7kYNwQXVwToyfuVZHcNjP3aSwGbBAOHpPm9WZRy2OHOoSiERO4vl1tOa7dk3V +x6p8IFiRM2iLARu1OdwGCHtuMPI3rqZvdsZHWKQo8a2PBPFdfZb67zMys1FVnJLJ +am61jfx7lURed0JZujTvz1qBDe+1cyG1U4v9J1+4RS9jNunM6g3O4OS3Ms8ZjVfE +iMKfx71btaW9sEgj93XHOe77moc1E8CqU2keV5Ttuy/Cp/ber1ST3dZxpQVRX69x +VY6q18O15W+DIDuypqZRi4vDKZlqXC0cPIGez08Kon8jyBT3r+Ad7euCyd5l4w8o +jZg6moMxBkO4u8c+tEB0PJGHBqLORMfF73XcP4C/buJQGZ3rzqURlaWlI6c/cYyK +hU4PLcxKtNMY7oQN6Shx +=wlOL +-END PGP SIGNATURE- Added: release/tomcat/tomcat-9/v9.0.0.M8/bin/apache-tomcat-9.0.0.M8.zip.asc == --- release/tomcat/tomcat-9/v9.0.0.M8/bin/apache-tomcat-9.0.0.M8.zip.asc (added) +++ release/tomcat/tomcat-9/v9.0.0.M8/bin/apache-tomcat-9.0.0.M8.zip.asc Tue Jun 14 07:54:50 2016 @@ -0,0 +1,17 @@ +-BEGIN PGP SIGNATURE- +Version: GnuPG v2 + +iQIcBAABCAAGBQJXX7glAAoJEBDAHFovYFnnNeYP/jHXNiJVuuIE6FXuTgAJxFw5 +r4uRsnyiDbkZQ4QS8lEhQze6G0/ptMiV/8GtPucAQULtvFeLjWpafP3r477t5n6X +bKLdf1qOKjMxzwRM0QhZrnZfBBI/4dY5oDcf4LRSYGlz9xKqg/wpvMsuqW1h1EW7 +xxyTCpoCQgFCpO49Y7ag3NOJUgcmAbWtzlPdxjDrdCCA7mIAhI5FYdLHGTAKpgkM +9VRDDsTwvLosL2zk3iwB9DrCx78Rz/8F4r+pvFQ1MgFfMaORCW96NiDI4pUmfmgl +en9dYSVuLGlAItiomQ+9/SITCfAqcOT5ZvBVjnlRICnc03hLYRhLGEK8cg+ll9UV +KOSriKGuzmX5p/OUWRZe5WQ2b3ohfwsr5GrnM9S+qNByt+MyJMfNLFDYmeFVfCGF +HGlYQydIT0YTxLof0piO8ZSsBfbWulQriD+6yC27F9vivj/i8IqHrBgAsF4ZY7Zm +O8dCozVUKjuJ//Ilel3hj3kJFXJImwgzaxEKQ517kL1Md98b9Fc02qrEJEtaMnxO +TfFpCqcN3nbXTyi33WQDFfkyMG4mX5dKfIW04AHnd5sqeek7Z8erFzOvAIXL3yfB +f+bCLHUDSqrlQPIlP20vMbFp7dYetKbcC7DZQwwVXdQQusg9cTy2cFX1jCVWexT5 +4qEz7tfH7tRpfYTTeF0w +=9SP5 +-END PGP SIGNATURE- - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
[Bug 59699] New: Caching issue in ELContext / ImportHandler
https://bz.apache.org/bugzilla/show_bug.cgi?id=59699 Bug ID: 59699 Summary: Caching issue in ELContext / ImportHandler Product: Tomcat 8 Version: 8.5.x-trunk Hardware: PC Status: NEW Severity: normal Priority: P2 Component: EL Assignee: dev@tomcat.apache.org Reporter: benjamin.da...@gmail.com Hi, We have just migrated from Glassfish 3 to Jetty 9.3.8 which uses Tomcat javax.el implementation. Just after the migration, we saw huge performance drops. After some investigation (thread dumps,...), most of the code was busy loading classes through javax.el.ImportHandler class. This class seems to have been designed to be thread-afe (use of ConcurrentHashMap), but gets instanciated for every expression being evaluated. This is beacuse javax.el.ELContext class creates new instances of javax.el.ImportHandler every time it gets instanciated. Most the EL expressions "stuck" in this class loading phase were looking for empty attributes. I applied a quick fix, and the performances went back to normal (time divided by 2). I think the javax.el.ImportHandler class ought to be used as a singleton. I understand the problems with caching all classes, but by caching only the ClassNotFound, the problem also goes away. I am happy to provide some help (and code), if you think this fix is a good idea. Thanks, Benjamin -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
Re: Timescale for 8.0.x EOL
Le 13/06/2016 à 17:47, Mark Thomas a écrit : > Now we have a stable release of 8.5.x, I'd like to finialise the end of > life date for 8.0.x so we can publish it. > > We originally said we'd do parallel releases for 6 months. That gives an > EOL date of 30 September 2016 for 8.0.x which seems reasonable to me. > > Any objections to that date or suggestions for a better one? Hi, Just a word with my Debian maintainer hat on, Tomcat 8.0.x was shipped with Debian 8 Jessie with the expectation it would be supported during the lifetime of this release (until May 2018). I'm currently maintaining with other volunteers a stable version based on 8.0.14 (with backported security patches). Canonical does a similar job for Ubuntu 16.04 LTS based on Tomcat 8.0.32. The early EOL of 8.0.x is impractical because, at least in Debian, major updates like the switch to 8.5 aren't allowed for the stable distribution. I understand you can't maintain so many branches for a long time, but if Tomcat 8.0.x could be security supported at least until the Debian 9 release (~April/May 2017) it would allow users following the stable distribution to remain on a supported version of Tomcat (Debian 9 will include Tomcat 8.5). If this isn't possible I'm crossing my fingers and hoping that the 8.5 security patches will remain backportable to 8.0.x, and that 8.0.x will not be affected by security issues not found in 8.5.x. Emmanuel Bourg - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
[Bug 59699] Caching issue in ELContext / ImportHandler
https://bz.apache.org/bugzilla/show_bug.cgi?id=59699 Mark Thomas changed: What|Removed |Added Version|8.5.x-trunk |8.0.27 OS||All Status|NEW |RESOLVED Resolution|--- |DUPLICATE --- Comment #1 from Mark Thomas --- Correcting the Tomcat version. Jetty 9.3.8 depends on Tomcat 8.0.27. You don't see the performance issues in Glassfish because it doesn't fully implement the spec (despite it being the reference implementation). If you want to understand the background to waht is going on, have a read through the mail threads linked from the duplicate. *** This bug has been marked as a duplicate of bug 57583 *** -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
[Bug 57583] Performance issue evaluating EL in custom tags (tagx) due to inefficient calls to java.lang.Class.forName()
https://bz.apache.org/bugzilla/show_bug.cgi?id=57583 Mark Thomas changed: What|Removed |Added CC||benjamin.da...@gmail.com --- Comment #11 from Mark Thomas --- *** Bug 59699 has been marked as a duplicate of this bug. *** -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
Re: Timescale for 8.0.x EOL
On 14/06/2016 09:00, Emmanuel Bourg wrote: > Le 13/06/2016 à 17:47, Mark Thomas a écrit : >> Now we have a stable release of 8.5.x, I'd like to finialise the end of >> life date for 8.0.x so we can publish it. >> >> We originally said we'd do parallel releases for 6 months. That gives an >> EOL date of 30 September 2016 for 8.0.x which seems reasonable to me. >> >> Any objections to that date or suggestions for a better one? > > Hi, > > Just a word with my Debian maintainer hat on, Tomcat 8.0.x was shipped > with Debian 8 Jessie with the expectation it would be supported during > the lifetime of this release (until May 2018). I'm currently maintaining > with other volunteers a stable version based on 8.0.14 (with backported > security patches). Canonical does a similar job for Ubuntu 16.04 LTS > based on Tomcat 8.0.32. > > The early EOL of 8.0.x is impractical because, at least in Debian, major > updates like the switch to 8.5 aren't allowed for the stable distribution. > > I understand you can't maintain so many branches for a long time, but if > Tomcat 8.0.x could be security supported at least until the Debian 9 > release (~April/May 2017) it would allow users following the stable > distribution to remain on a supported version of Tomcat (Debian 9 will > include Tomcat 8.5). That is unlikely unless someone volunteers for that task. > If this isn't possible I'm crossing my fingers and hoping that the 8.5 > security patches will remain backportable to 8.0.x, and that 8.0.x will > not be affected by security issues not found in 8.5.x. That should be fairly simple. You might need to choose between back-porting from 8.5.x and forward porting from 7.0.x depending on where the the problem lies to get the simplest patch but you can always ask here if you need help. Mark - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
svn commit: r1748365 - in /tomcat/site/trunk: ./ docs/ xdocs/
Author: markt Date: Tue Jun 14 09:19:26 2016 New Revision: 1748365 URL: http://svn.apache.org/viewvc?rev=1748365&view=rev Log: Update site for 9.0.0.M8 release excluding docs Modified: tomcat/site/trunk/build.properties.default tomcat/site/trunk/docs/download-90.html tomcat/site/trunk/docs/index.html tomcat/site/trunk/docs/migration-9.html tomcat/site/trunk/docs/oldnews.html tomcat/site/trunk/docs/whichversion.html tomcat/site/trunk/xdocs/download-90.xml tomcat/site/trunk/xdocs/index.xml tomcat/site/trunk/xdocs/migration-9.xml tomcat/site/trunk/xdocs/oldnews.xml tomcat/site/trunk/xdocs/whichversion.xml Modified: tomcat/site/trunk/build.properties.default URL: http://svn.apache.org/viewvc/tomcat/site/trunk/build.properties.default?rev=1748365&r1=1748364&r2=1748365&view=diff == --- tomcat/site/trunk/build.properties.default (original) +++ tomcat/site/trunk/build.properties.default Tue Jun 14 09:19:26 2016 @@ -40,7 +40,7 @@ tomcat60=6.0.45 tomcat70=7.0.69 tomcat80=8.0.35 tomcat85=8.5.2 -tomcat90=9.0.0.M6 +tomcat90=9.0.0.M8 # - Download destination - tomcat-site-docs.home=${base.path}/tomcat-site-docs/ Modified: tomcat/site/trunk/docs/download-90.html URL: http://svn.apache.org/viewvc/tomcat/site/trunk/docs/download-90.html?rev=1748365&r1=1748364&r2=1748365&view=diff == --- tomcat/site/trunk/docs/download-90.html (original) +++ tomcat/site/trunk/docs/download-90.html Tue Jun 14 09:19:26 2016 @@ -222,7 +222,7 @@ Quick Navigation -[define v]9.0.0.M6[end] +[define v]9.0.0.M8[end] https://www.apache.org/dist/tomcat/tomcat-9/KEYS";>KEYS | [v] | Browse | Modified: tomcat/site/trunk/docs/index.html URL: http://svn.apache.org/viewvc/tomcat/site/trunk/docs/index.html?rev=1748365&r1=1748364&r2=1748365&view=diff == --- tomcat/site/trunk/docs/index.html (original) +++ tomcat/site/trunk/docs/index.html Tue Jun 14 09:19:26 2016 @@ -320,29 +320,26 @@ changelog. - -2016-05-16 Tomcat 9.0.0.M6 (alpha) Released + +2016-06-13 Tomcat 9.0.0.M8 (alpha) Released -The Apache Tomcat Project is proud to announce the release of version 9.0.0.M6 +The Apache Tomcat Project is proud to announce the release of version 9.0.0.M8 (alpha) of Apache Tomcat. The is a milestone release of the 9.0.x branch and has been made to provide users with early access to the new features in Apache Tomcat 9.0.x so that they may provide feedback. The notable changes compared to -9.0.0.M4 include: +9.0.0.M6 include: -Add direct HTTP/2 connection support +Improvements to memory leak detection and prevention including the change +RMI memory leaks are now correctly treated as application bugs rather than a +JRE bug. -Update the implementation of the the proposed Servlet 4.0 API to provide -mapping type information for the current request to reflect discussions -within the EG. +Fix a couple of memory leaks found in Tomcat. -Update the packaged version of the Tomcat Native Library to 1.2.7 to pick up -the Windows binaries that are based on OpenSSL 1.0.2h and APR 1.5.2. - -Improve default configuration for TLS connectors. +The HTTP Server header is no longer set by default. Modified: tomcat/site/trunk/docs/migration-9.html URL: http://svn.apache.org/viewvc/tomcat/site/trunk/docs/migration-9.html?rev=1748365&r1=1748364&r2=1748365&view=diff == --- tomcat/site/trunk/docs/migration-9.html (original) +++ tomcat/site/trunk/docs/migration-9.html Tue Jun 14 09:19:26 2016 @@ -639,7 +639,8 @@ of Apache Tomcat. "9.0.0.M1":"1714130", "9.0.0.M3":"1728005", "9.0.0.M4":"1734692", - "9.0.0.M6":"1743436" + "9.0.0.M6":"1743436", + "9.0.0.M8":"1747242" }; formSubmit.action = "http://svn.apache.org/viewvc/tomcat/trunk/"; + @@ -672,14 +673,16 @@ of Apache Tomcat. 9.0.0.M1 9.0.0.M3 -9.0.0.M4 -9.0.0.M6 +9.0.0.M4 +9.0.0.M6 +9.0.0.M8 , new version: 9.0.0.M1 9.0.0.M3 9.0.0.M4 -9.0.0.M6 +9.0.0.M6 +9.0.0.M8 trunk (unreleased) Modified: tomcat/site/trunk/docs/oldnews.html URL: http://svn.apache.org/viewvc/tomcat/site/trunk/docs/oldnews.html?rev=1748365&r1=1748364&r2=1748365&view=diff == --- tomcat/site/trunk/docs/oldnews.html (original) +++ tomcat/site/trunk/docs/oldnews.html Tue Jun 14 09:19:26 2016 @@ -245,6 +245,47 @@ + +2016-05-16 Tomcat 9.0.0.M6 (alpha) Released + + + +The Apache Tomcat Project is proud to announce the release of version 9.0.0.M6 +(alpha) of Apache Tomcat. The is a milest
svn commit: r1748367 - in /tomcat/site/trunk/docs/tomcat-9.0-doc: ./ api/ api/org/apache/catalina/ api/org/apache/catalina/ant/ api/org/apache/catalina/ant/jmx/ api/org/apache/catalina/authenticator/
Author: markt Date: Tue Jun 14 09:30:55 2016 New Revision: 1748367 URL: http://svn.apache.org/viewvc?rev=1748367&view=rev Log: Update docs for 9.0.0.M8 release [This commit notification would consist of 71 parts, which exceeds the limit of 50 ones, so it was shortened to the summary.] - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
svn commit: r1748369 - in /tomcat/site/trunk: docs/index.html xdocs/index.xml
Author: markt Date: Tue Jun 14 09:37:52 2016 New Revision: 1748369 URL: http://svn.apache.org/viewvc?rev=1748369&view=rev Log: Add a missing version update Modified: tomcat/site/trunk/docs/index.html tomcat/site/trunk/xdocs/index.xml Modified: tomcat/site/trunk/docs/index.html URL: http://svn.apache.org/viewvc/tomcat/site/trunk/docs/index.html?rev=1748369&r1=1748368&r2=1748369&view=diff == --- tomcat/site/trunk/docs/index.html (original) +++ tomcat/site/trunk/docs/index.html Tue Jun 14 09:37:52 2016 @@ -346,7 +346,7 @@ Tomcat 9.0.x so that they may provide fe Full details of these changes, and all the other changes, are available in the -Tomcat 9 +Tomcat 9 changelog. Modified: tomcat/site/trunk/xdocs/index.xml URL: http://svn.apache.org/viewvc/tomcat/site/trunk/xdocs/index.xml?rev=1748369&r1=1748368&r2=1748369&view=diff == --- tomcat/site/trunk/xdocs/index.xml (original) +++ tomcat/site/trunk/xdocs/index.xml Tue Jun 14 09:37:52 2016 @@ -107,7 +107,7 @@ Tomcat 9.0.x so that they may provide fe Full details of these changes, and all the other changes, are available in the -Tomcat 9 +Tomcat 9 changelog. - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
svn commit: r1748370 - in /tomcat/site/trunk: ./ docs/ xdocs/
Author: markt Date: Tue Jun 14 09:41:45 2016 New Revision: 1748370 URL: http://svn.apache.org/viewvc?rev=1748370&view=rev Log: Update site for 8.5.3 release excluding docs. Since 8.5.3 is now stable, list 8.5.3 before 8.0.35 on the Tomcat 8 download page Modified: tomcat/site/trunk/build.properties.default tomcat/site/trunk/docs/download-80.html tomcat/site/trunk/docs/index.html tomcat/site/trunk/docs/migration-85.html tomcat/site/trunk/docs/oldnews.html tomcat/site/trunk/docs/whichversion.html tomcat/site/trunk/xdocs/download-80.xml tomcat/site/trunk/xdocs/index.xml tomcat/site/trunk/xdocs/migration-85.xml tomcat/site/trunk/xdocs/oldnews.xml tomcat/site/trunk/xdocs/whichversion.xml Modified: tomcat/site/trunk/build.properties.default URL: http://svn.apache.org/viewvc/tomcat/site/trunk/build.properties.default?rev=1748370&r1=1748369&r2=1748370&view=diff == --- tomcat/site/trunk/build.properties.default (original) +++ tomcat/site/trunk/build.properties.default Tue Jun 14 09:41:45 2016 @@ -39,7 +39,7 @@ tomcat.loc=http://www.apache.org/dist/to tomcat60=6.0.45 tomcat70=7.0.69 tomcat80=8.0.35 -tomcat85=8.5.2 +tomcat85=8.5.3 tomcat90=9.0.0.M8 # - Download destination - Modified: tomcat/site/trunk/docs/download-80.html URL: http://svn.apache.org/viewvc/tomcat/site/trunk/docs/download-80.html?rev=1748370&r1=1748369&r2=1748370&view=diff == --- tomcat/site/trunk/docs/download-80.html (original) +++ tomcat/site/trunk/docs/download-80.html Tue Jun 14 09:41:45 2016 @@ -222,11 +222,11 @@ Quick Navigation +[define w]8.5.3[end] [define v]8.0.35[end] -[define w]8.5.2[end] https://www.apache.org/dist/tomcat/tomcat-8/KEYS";>KEYS | [v] | -[w] BETA | +[w] | Browse | http://archive.apache.org/dist/tomcat/tomcat-8";>Archives @@ -475,7 +475,7 @@ -[w] BETA +[w] @@ -486,7 +486,7 @@ -Binary Distributions +Binary Distributions @@ -647,7 +647,7 @@ -Source Code Distributions +Source Code Distributions Modified: tomcat/site/trunk/docs/index.html URL: http://svn.apache.org/viewvc/tomcat/site/trunk/docs/index.html?rev=1748370&r1=1748369&r2=1748370&view=diff == --- tomcat/site/trunk/docs/index.html (original) +++ tomcat/site/trunk/docs/index.html Tue Jun 14 09:41:45 2016 @@ -279,36 +279,32 @@ changelog. - -2016-05-16 Tomcat 8.5.2 (beta) Released + +2016-06-13 Tomcat 8.5.3 Released -The Apache Tomcat Project is proud to announce the release of version 8.5.2 +The Apache Tomcat Project is proud to announce the release of version 8.5.3 of Apache Tomcat. Apache Tomcat 8.5.x is intended to replace 8.0.x and includes new features pulled forward from Tomcat 9.0.x. The minimum Java version and implemented specification versions remain unchanged. The notable changes -compared to 8.5.0 include: +compared to 8.5.2 include: -Add the org.apache.catalina.servlet4preview package that can be used to gain -early access to Servlet 4.0 features. Note that this package will not be -present in Tomcat 9. +Ensure error will not be thrown during deployment when scanning jar files +with no or invalid MANIFEST.MF files. -Make default TLS configuration more secure +Improvements to memory leak detection and prevention. -Add direct HTTP/2 connection support - -Update the packaged version of the Tomcat Native Library to 1.2.7 to pick up -the Windows binaries that are based on OpenSSL 1.0.2h and APR 1.5.2. +The HTTP Server header is no longer set by default. Full details of these changes, and all the other changes, are available in the -Tomcat 8.5 +Tomcat 8.5 changelog. Modified: tomcat/site/trunk/docs/migration-85.html URL: http://svn.apache.org/viewvc/tomcat/site/trunk/docs/migration-85.html?rev=1748370&r1=1748369&r2=1748370&view=diff == --- tomcat/site/trunk/docs/migration-85.html (original) +++ tomcat/site/trunk/docs/migration-85.html Tue Jun 14 09:41:45 2016 @@ -509,7 +509,8 @@ of Apache Tomcat. var revisions = { "HEAD":"HEAD", "8.5.0":"1735438", - "8.5.2":"1743439" + "8.5.2":"1743439", + "8.5.3":"1747521" }; formSubmit.action = "http://svn.apache.org/viewvc/tomcat/tc8.5.x/trunk/"; + @@ -540,12 +541,14 @@ of Apache Tomcat. Old version: -8.5.0 -8.5.2 +8.5.0 +8.5.2 +8.5.3 , new version: 8.5.0 -8.5.2 +8.5.2 +8.5.3 trunk (unreleased) Modified: tomcat/site/trunk/docs/oldnews.html URL: http://svn.apache.org/viewvc/tomcat/site/trunk/docs/oldnews.html?rev=174
[ANN] Apache Tomcat 9.0.0.M8 available
The Apache Tomcat team announces the immediate availability of Apache Tomcat 9.0.0.M8. Apache Tomcat 9 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 9.0.0.M8 is a milestone release of the 9.0.x branch and has been made to provide users with early access to the new features in Apache Tomcat 9.0.x so that they may provide feedback. The notable changes compared to 9.0.0.M6 include: - Improvements to memory leak detection and prevention including the change RMI memory leaks are now correctly treated as application bugs rather than a JRE bug - Fix a couple of memory leaks found in Tomcat - The HTTP Server header is no longer set by default Please refer to the change log for the complete list of changes: http://tomcat.apache.org/tomcat-9.0-doc/changelog.html Downloads: http://tomcat.apache.org/download-90.cgi Migration guides from Apache Tomcat 5.x, 6.x, 7.x and 8.x: http://tomcat.apache.org/migration.html Enjoy! - The Apache Tomcat team - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
svn commit: r1748374 - in /tomcat/site/trunk/docs/tomcat-8.5-doc: ./ api/ api/org/apache/catalina/ api/org/apache/catalina/ant/ api/org/apache/catalina/ant/jmx/ api/org/apache/catalina/authenticator/
Author: markt Date: Tue Jun 14 09:53:33 2016 New Revision: 1748374 URL: http://svn.apache.org/viewvc?rev=1748374&view=rev Log: Update docs for 8.5.3 release [This commit notification would consist of 66 parts, which exceeds the limit of 50 ones, so it was shortened to the summary.] - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
svn commit: r1748375 - in /tomcat/site/trunk: docs/whichversion.html xdocs/whichversion.xml
Author: markt Date: Tue Jun 14 09:55:40 2016 New Revision: 1748375 URL: http://svn.apache.org/viewvc?rev=1748375&view=rev Log: 8.5.x is no longer beta Mark 8.0.x as superseded Modified: tomcat/site/trunk/docs/whichversion.html tomcat/site/trunk/xdocs/whichversion.xml Modified: tomcat/site/trunk/docs/whichversion.html URL: http://svn.apache.org/viewvc/tomcat/site/trunk/docs/whichversion.html?rev=1748375&r1=1748374&r2=1748375&view=diff == --- tomcat/site/trunk/docs/whichversion.html (original) +++ tomcat/site/trunk/docs/whichversion.html Tue Jun 14 09:55:40 2016 @@ -262,7 +262,7 @@ mapping between the specifications and t 1.1 1.1 8.5.x - 8.5.3 (beta) + 8.5.3 7 and later @@ -275,8 +275,8 @@ mapping between the specifications and t 3.0 1.1 N/A - 8.0.x - 8.0.35 + 8.0.x (superseded) + 8.0.35 (superseded) 7 and later Modified: tomcat/site/trunk/xdocs/whichversion.xml URL: http://svn.apache.org/viewvc/tomcat/site/trunk/xdocs/whichversion.xml?rev=1748375&r1=1748374&r2=1748375&view=diff == --- tomcat/site/trunk/xdocs/whichversion.xml (original) +++ tomcat/site/trunk/xdocs/whichversion.xml Tue Jun 14 09:55:40 2016 @@ -48,7 +48,7 @@ mapping between the specifications and t 1.1 1.1 8.5.x - 8.5.3 (beta) + 8.5.3 7 and later @@ -58,8 +58,8 @@ mapping between the specifications and t 3.0 1.1 N/A - 8.0.x - 8.0.35 + 8.0.x (superseded) + 8.0.35 (superseded) 7 and later - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
[ANN] Apache Tomcat 8.5.3 available
The Apache Tomcat team announces the immediate availability of Apache Tomcat 8.5.3. This is the first stable release of the 8.5.x branch. Tomcat 8.x users should now use 8.5.x releases in preference to 8.0.x releases. Apache Tomcat 8 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and Java Authentication Service Provider Interface for Containers technologies. Apache Tomcat 8.5.x is intended to replace 8.0.x and includes new features pulled forward from the 9.0.x branch. The notable changes since 8.5.2 include: - Ensure error will not be thrown during deployment when scanning jar files with no or invalid MANIFEST.MF files. - Improvements to memory leak detection and prevention - The HTTP Server header is no longer set by default Please refer to the change log for the complete list of changes: http://tomcat.apache.org/tomcat-8.5-doc/changelog.html Downloads: http://tomcat.apache.org/download-80.cgi Migration guides from Apache Tomcat 5.x, 6.x, 7.x and 8.0.x: http://tomcat.apache.org/migration.html Enjoy! - The Apache Tomcat team - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
svn commit: r1748380 - in /tomcat/site/trunk: build.properties.default docs/download-80.html docs/index.html docs/migration-8.html docs/oldnews.html xdocs/download-80.xml xdocs/index.xml xdocs/migrati
Author: markt Date: Tue Jun 14 10:36:50 2016 New Revision: 1748380 URL: http://svn.apache.org/viewvc?rev=1748380&view=rev Log: Update site for 8.3.36 release excluding docs. Modified: tomcat/site/trunk/build.properties.default tomcat/site/trunk/docs/download-80.html tomcat/site/trunk/docs/index.html tomcat/site/trunk/docs/migration-8.html tomcat/site/trunk/docs/oldnews.html tomcat/site/trunk/xdocs/download-80.xml tomcat/site/trunk/xdocs/index.xml tomcat/site/trunk/xdocs/migration-8.xml tomcat/site/trunk/xdocs/oldnews.xml Modified: tomcat/site/trunk/build.properties.default URL: http://svn.apache.org/viewvc/tomcat/site/trunk/build.properties.default?rev=1748380&r1=1748379&r2=1748380&view=diff == --- tomcat/site/trunk/build.properties.default (original) +++ tomcat/site/trunk/build.properties.default Tue Jun 14 10:36:50 2016 @@ -38,7 +38,7 @@ tomcat.loc=http://www.apache.org/dist/to # - Tomcat versions - tomcat60=6.0.45 tomcat70=7.0.69 -tomcat80=8.0.35 +tomcat80=8.0.36 tomcat85=8.5.3 tomcat90=9.0.0.M8 Modified: tomcat/site/trunk/docs/download-80.html URL: http://svn.apache.org/viewvc/tomcat/site/trunk/docs/download-80.html?rev=1748380&r1=1748379&r2=1748380&view=diff == --- tomcat/site/trunk/docs/download-80.html (original) +++ tomcat/site/trunk/docs/download-80.html Tue Jun 14 10:36:50 2016 @@ -223,7 +223,7 @@ [define w]8.5.3[end] -[define v]8.0.35[end] +[define v]8.0.36[end] https://www.apache.org/dist/tomcat/tomcat-8/KEYS";>KEYS | [v] | [w] | Modified: tomcat/site/trunk/docs/index.html URL: http://svn.apache.org/viewvc/tomcat/site/trunk/docs/index.html?rev=1748380&r1=1748379&r2=1748380&view=diff == --- tomcat/site/trunk/docs/index.html (original) +++ tomcat/site/trunk/docs/index.html Tue Jun 14 10:36:50 2016 @@ -245,40 +245,6 @@ project logo are trademarks of the Apach - -2016-05-16 Tomcat 8.0.35 Released - - - -The Apache Tomcat Project is proud to announce the release of version 8.0.35 -of Apache Tomcat. Apache Tomcat 8.0.35 includes fixes for issues identified in -8.0.33 as well as other enhancements and changes. The notable changes since -8.0.33 include: - - - -Making the default TLS configuration more secure. - -Update the packaged version of the Tomcat Native Library to 1.2.7 to pick up -the Windows binaries that are based on OpenSSL 1.0.2h and APR 1.5.2. - - - - - -Full details of these changes, and all the other changes, are available in the -Tomcat 8 -changelog. - - - - - -Download - - - - 2016-06-13 Tomcat 8.5.3 Released @@ -353,6 +319,40 @@ changelog. + + +2016-06-13 Tomcat 8.0.36 Released + + + +The Apache Tomcat Project is proud to announce the release of version 8.0.36 +of Apache Tomcat. Apache Tomcat 8.0.36 includes fixes for issues identified in +8.0.35 as well as other enhancements and changes. The notable changes since +8.0.35 include: + + + +Ensure an error will not be thrown during deployment when scanning jar files +with no or invalid MANIFEST.MF files. + +Improvements to memory leak detection and prevention. + + + + + +Full details of these changes, and all the other changes, are available in the +Tomcat 8 +changelog. + + + + + +Download + + + 2016-05-08 Tomcat Native 1.2.7 Released Modified: tomcat/site/trunk/docs/migration-8.html URL: http://svn.apache.org/viewvc/tomcat/site/trunk/docs/migration-8.html?rev=1748380&r1=1748379&r2=1748380&view=diff == --- tomcat/site/trunk/docs/migration-8.html (original) +++ tomcat/site/trunk/docs/migration-8.html Tue Jun 14 10:36:50 2016 @@ -743,7 +743,8 @@ of Apache Tomcat. "8.0.30":"1717548", "8.0.32":"1728180", "8.0.33":"1735674", - "8.0.35":"1743442" + "8.0.35":"1743442", + "8.0.36":"1747548" }; formSubmit.action = "http://svn.apache.org/viewvc/tomcat/tc8.0.x/trunk/"; + @@ -800,8 +801,9 @@ of Apache Tomcat. 8.0.29 8.0.30 8.0.32 -8.0.33 -8.0.35 +8.0.33 +8.0.35 +8.0.36 , new version: 8.0.0-RC1 @@ -830,8 +832,9 @@ of Apache Tomcat. 8.0.29 8.0.30 8.0.32 -8.0.35 -8.0.35 +8.0.33 +8.0.35 +8.0.36 trunk (unreleased) Modified: tomcat/site/trunk/docs/oldnews.html URL: http://svn.apache.org/viewvc/tomcat/site/trunk/docs/oldnews.html?rev=1748380&r1=1748379&r2=1748380&view=diff == --- tomcat/site/trunk/docs/oldnews.html (original) +++ tomcat/site/trunk/docs/oldnews.html Tue Jun 14 10:36:50 2016 @@ -245,6 +245,40 @@ + +2016-05-16 Tomcat 8.0.35 Released + + + +The Apache Tomcat P
[Bug 59699] Caching issue in ELContext / ImportHandler
https://bz.apache.org/bugzilla/show_bug.cgi?id=59699 --- Comment #2 from bdahon --- Hi, For what I've read, you modified the findClass method to lookup resources before actually loading the class. Reading your comments in the code, it's faster. However, it doesn't actually cache the results, no ? Wouldn't it be better to actually cache the results ? Thanks, Benjamin -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
[Bug 59699] Caching issue in ELContext / ImportHandler
https://bz.apache.org/bugzilla/show_bug.cgi?id=59699 --- Comment #3 from Mark Thomas --- (In reply to bdahon from comment #2) > Hi, > > For what I've read, you modified the findClass method to lookup resources > before actually loading the class. Reading your comments in the code, it's > faster. That wasn't the only change. > However, it doesn't actually cache the results, no ? No additional caching was introduced. > Wouldn't it be better to actually cache the results ? No idea. A thread-safe, memory leak free cache would add a reasonable amount of complexity. There are no guarantees it would be faster. Suitable cache settings will vary between applications so that may require per web application configuration - something that is particularly complex for a specification class where we can't change the public API. If a specific performance issue is raised against the latest code (with a test case that demonstrates the issue) we'll take another look but at this point the code is viewed as 'good enough'. -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
[Bug 59699] Caching issue in ELContext / ImportHandler
https://bz.apache.org/bugzilla/show_bug.cgi?id=59699 --- Comment #4 from bdahon --- Thanks for your reply. -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
[Bug 59699] Caching issue in ELContext / ImportHandler
https://bz.apache.org/bugzilla/show_bug.cgi?id=59699 --- Comment #5 from bdahon --- Actually, I was not suggesting to cache all the results, only the classes which could not be found. -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
svn commit: r1748388 - in /tomcat/site/trunk/docs/tomcat-8.0-doc: ./ api/ api/org/apache/catalina/ api/org/apache/catalina/ant/ api/org/apache/catalina/ant/jmx/ api/org/apache/catalina/authenticator/
Author: markt Date: Tue Jun 14 11:20:27 2016 New Revision: 1748388 URL: http://svn.apache.org/viewvc?rev=1748388&view=rev Log: Update docs for 8.0.36 release [This commit notification would consist of 63 parts, which exceeds the limit of 50 ones, so it was shortened to the summary.] - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
[ANN] Apache Tomcat 8.0.36 available
The Apache Tomcat team announces the immediate availability of Apache Tomcat 8.0.36. Please note that Tomcat 8.x users should now use 8.5.x releases in preference to 8.0.x releases. Apache Tomcat 8.0 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language and Java WebSocket technologies. Apache Tomcat 8.0.36 includes fixes for issues identified in 8.0.35 as well as other enhancements and changes. The notable changes since 8.0.35 include: - Ensure error will not be thrown during deployment when scanning jar files with no or invalid MANIFEST.MF files. - Improvements to memory leak detection and prevention Please refer to the change log for the complete list of changes: http://tomcat.apache.org/tomcat-8.0-doc/changelog.html Downloads: http://tomcat.apache.org/download-80.cgi Migration guides from Apache Tomcat 5.5.x, 6.0.x and 7.0.x: http://tomcat.apache.org/migration.html Enjoy! - The Apache Tomcat team - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
Re: Timescale for 8.0.x EOL
2016-06-14 10:31 GMT+02:00 Mark Thomas : > On 14/06/2016 09:00, Emmanuel Bourg wrote: > > Le 13/06/2016 à 17:47, Mark Thomas a écrit : > >> Now we have a stable release of 8.5.x, I'd like to finialise the end of > >> life date for 8.0.x so we can publish it. > >> > >> We originally said we'd do parallel releases for 6 months. That gives an > >> EOL date of 30 September 2016 for 8.0.x which seems reasonable to me. > >> > >> Any objections to that date or suggestions for a better one? > > > > Hi, > > > > Just a word with my Debian maintainer hat on, Tomcat 8.0.x was shipped > > with Debian 8 Jessie with the expectation it would be supported during > > the lifetime of this release (until May 2018). I'm currently maintaining > > with other volunteers a stable version based on 8.0.14 (with backported > > security patches). Canonical does a similar job for Ubuntu 16.04 LTS > > based on Tomcat 8.0.32. > > > > The early EOL of 8.0.x is impractical because, at least in Debian, major > > updates like the switch to 8.5 aren't allowed for the stable > distribution. > > > > I understand you can't maintain so many branches for a long time, but if > > Tomcat 8.0.x could be security supported at least until the Debian 9 > > release (~April/May 2017) it would allow users following the stable > > distribution to remain on a supported version of Tomcat (Debian 9 will > > include Tomcat 8.5). > > That is unlikely unless someone volunteers for that task. > Yes JF or myself could volunteer to do some additional limited 8.0 releases, but we'll see how it goes in practice. > > > If this isn't possible I'm crossing my fingers and hoping that the 8.5 > > security patches will remain backportable to 8.0.x, and that 8.0.x will > > not be affected by security issues not found in 8.5.x. > > That should be fairly simple. You might need to choose between > back-porting from 8.5.x and forward porting from 7.0.x depending on > where the the problem lies to get the simplest patch but you can always > ask here if you need help. > > I agree, this should produce an easy patch, backwards or forwards will depend on the area of the issue. Obviously that's usually not what people want to hear however, they prefer "we'll support it forever". Rémy
[GitHub] tomcat-maven-plugin pull request #23: Upgraded to Apache Tomcat 8.5.3
GitHub user wikier opened a pull request: https://github.com/apache/tomcat-maven-plugin/pull/23 Upgraded to Apache Tomcat 8.5.3 https://lists.apache.org/thread.html/a134dd23752acd40b9dd092ab300308804605af76225954ff3758db5@%3Cannounce.apache.org%3E You can merge this pull request into a Git repository by running: $ git pull https://github.com/wikier/tomcat-maven-plugin tc8.x Alternatively you can review and apply these changes as the patch at: https://github.com/apache/tomcat-maven-plugin/pull/23.patch To close this pull request, make a commit to your master/trunk branch with (at least) the following in the commit message: This closes #23 commit 137a4be76f154200812b261d0081d1a6b129b0a1 Author: Sergio Fernández Date: 2016-06-14T13:03:01Z upgraded to tomcat 8.5.3 --- If your project is set up for it, you can reply to this email and have your reply appear on GitHub as well. If your project does not have this feature enabled and wishes so, or if the feature is enabled but not working, please contact infrastructure at infrastruct...@apache.org or file a JIRA ticket with INFRA. --- - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
[Bug 59701] New: Improve the documentation when maxPostSize=0
https://bz.apache.org/bugzilla/show_bug.cgi?id=59701 Bug ID: 59701 Summary: Improve the documentation when maxPostSize=0 Product: Tomcat 7 Version: trunk Hardware: All OS: All Status: NEW Severity: normal Priority: P2 Component: Documentation Assignee: dev@tomcat.apache.org Reporter: huxing.zh...@gmail.com In HTTP/AJP connector, setting maxPostSize=0 will no longer disable the post limit from 7.0.63 onwards. This behavior change is introduced by commit: https://github.com/apache/tomcat70/commit/26a05bcfefb317f817d88fc9c07f14830b7afb5a#diff-701b4ec867f455fd7f9ebe04b78842bf With the configuration maxPostSize=0, an upgrade to 7.0.63 onwards may causing un expected result: A call to getParameter("xxx") may result null. I think we should clarify this behavior if maxPostSize=0 in documentation. -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
[Bug 59701] Improve the documentation when maxPostSize=0
https://bz.apache.org/bugzilla/show_bug.cgi?id=59701 --- Comment #1 from Huxing Zhang --- Created attachment 33949 --> https://bz.apache.org/bugzilla/attachment.cgi?id=33949&action=edit patch against trunk -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
[Bug 59701] Improve the documentation when maxPostSize=0
https://bz.apache.org/bugzilla/show_bug.cgi?id=59701 --- Comment #2 from Remy Maucherat --- Hum, well, I disagree. The documentation says: "The maximum size in bytes of the POST which will be handled by the container FORM URL parameter parsing. The limit can be disabled by setting this attribute to a value less than zero. If not specified, this attribute is set to 2097152 (2 megabytes)." This seems right to me (zero means you cannot POST any body that is parsed with the Servlet API, 1 means one byte only - which won't work ;) -, etc). Considerations on version numbers and changes should go into the changelog instead, while the documentation represents the current state. -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
Time for Tomcat 7.0.70
Hi, I would like to start the preparation for Tomcat 7.0.70. If you need something in addition to this release please reply here. Regards, Violeta
svn commit: r1748452 - in /tomcat/trunk: build.xml webapps/docs/changelog.xml
Author: markt Date: Tue Jun 14 19:41:31 2016 New Revision: 1748452 URL: http://svn.apache.org/viewvc?rev=1748452&view=rev Log: (empty) Modified: tomcat/trunk/build.xml tomcat/trunk/webapps/docs/changelog.xml Modified: tomcat/trunk/build.xml URL: http://svn.apache.org/viewvc/tomcat/trunk/build.xml?rev=1748452&r1=1748451&r2=1748452&view=diff == --- tomcat/trunk/build.xml (original) +++ tomcat/trunk/build.xml Tue Jun 14 19:41:31 2016 @@ -152,11 +152,9 @@ - - @@ -441,6 +439,7 @@ + - - Modified: tomcat/trunk/webapps/docs/changelog.xml URL: http://svn.apache.org/viewvc/tomcat/trunk/webapps/docs/changelog.xml?rev=1748452&r1=1748451&r2=1748452&view=diff == --- tomcat/trunk/webapps/docs/changelog.xml (original) +++ tomcat/trunk/webapps/docs/changelog.xml Tue Jun 14 19:41:31 2016 @@ -45,6 +45,15 @@ issues do not "pop up" wrt. others). --> + + + +Correct a regression in the fix for 58588 that removed the +entire org.apache.juli package from the embedded JARs +rendering them unusable. (markt) + + + - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
svn commit: r1748458 - in /tomcat/tc8.5.x/trunk: ./ build.xml webapps/docs/changelog.xml
Author: markt Date: Tue Jun 14 20:23:21 2016 New Revision: 1748458 URL: http://svn.apache.org/viewvc?rev=1748458&view=rev Log: Correct a regression in the fix for bug 58588 that removed the entire org.apache.juli package from the embedded JARs rendering them unusable. Modified: tomcat/tc8.5.x/trunk/ (props changed) tomcat/tc8.5.x/trunk/build.xml tomcat/tc8.5.x/trunk/webapps/docs/changelog.xml Propchange: tomcat/tc8.5.x/trunk/ -- --- svn:mergeinfo (original) +++ svn:mergeinfo Tue Jun 14 20:23:21 2016 @@ -1 +1 @@ -/tomcat/trunk:1734785,1734799,1734845,1734928,1735041,1735044,1735480,1735577,1735597,1735599-1735600,1735615,1736145,1736162,1736209,1736280,1736297,1736299,1736489,1736646,1736703,1736836,1736849,1737104-1737105,1737112,1737117,1737119-1737120,1737155,1737157,1737192,1737280,1737339,1737632,1737664,1737715,1737748,1737785,1737834,1737860,1737959,1738005,1738007,1738014-1738015,1738018,1738022,1738039,1738043,1738059-1738060,1738147,1738149,1738174-1738175,1738261,1738589,1738623-1738625,1738643,1738816,1738850,1738855,1738946-1738948,1738953-1738954,1738979,1738982,1739079-1739081,1739087,1739113,1739153,1739172,1739176,1739191,1739474,1739726,1739762,1739775,1739814,1739817-1739818,1739975,1740131,1740324,1740465,1740495,1740508-1740509,1740520,1740535,1740707,1740803,1740810,1740969,1740980,1740991,1740997,1741015,1741033,1741036,1741058,1741060,1741080,1741147,1741159,1741164,1741173,1741181,1741190,1741197,1741202,1741208,1741213,1741221,1741225,1741232,1741409,1741501,1741677 ,1741892,1741896,1741984,1742023,1742042,1742071,1742090,1742093,1742101,1742105,1742111,1742139,1742146,1742148,1742166,1742181,1742184,1742187,1742246,1742248-1742251,1742263-1742264,1742268,1742276,1742369,1742387,1742448,1742509-1742512,1742917,1742919,1742933,1742975-1742976,1742984,1742986,1743019,1743115,1743117,1743124-1743125,1743134,1743425,1743554,1743679,1743696-1743698,1743700-1743701,1744058,1744064-1744065,1744125,1744194,1744229,1744270,1744323,1744432,1744684,1744697,1744705,1744713,1744760,1744786,1745142-1745143,1745145,1745177,1745179-1745180,1745227,1745248,1745254,1745337,1745467,1745576,1745735,1745744,1746304,1746306-1746307,1746319,1746327,1746338,1746340-1746341,1746344,1746427,1746441,1746473,1746490,1746492,1746495-1746496,1746499-1746501,1746503-1746507,1746509,1746549,1746551,1746554,1746556,1746558,1746584,1746620,1746649,1746724,1746939,1746989,1747014,1747028,1747035,1747210,1747225,1747234,1747253,1747404,1747506,1747536,1747924,1747980,1747993,1748 001,1748253 +/tomcat/trunk:1734785,1734799,1734845,1734928,1735041,1735044,1735480,1735577,1735597,1735599-1735600,1735615,1736145,1736162,1736209,1736280,1736297,1736299,1736489,1736646,1736703,1736836,1736849,1737104-1737105,1737112,1737117,1737119-1737120,1737155,1737157,1737192,1737280,1737339,1737632,1737664,1737715,1737748,1737785,1737834,1737860,1737959,1738005,1738007,1738014-1738015,1738018,1738022,1738039,1738043,1738059-1738060,1738147,1738149,1738174-1738175,1738261,1738589,1738623-1738625,1738643,1738816,1738850,1738855,1738946-1738948,1738953-1738954,1738979,1738982,1739079-1739081,1739087,1739113,1739153,1739172,1739176,1739191,1739474,1739726,1739762,1739775,1739814,1739817-1739818,1739975,1740131,1740324,1740465,1740495,1740508-1740509,1740520,1740535,1740707,1740803,1740810,1740969,1740980,1740991,1740997,1741015,1741033,1741036,1741058,1741060,1741080,1741147,1741159,1741164,1741173,1741181,1741190,1741197,1741202,1741208,1741213,1741221,1741225,1741232,1741409,1741501,1741677 ,1741892,1741896,1741984,1742023,1742042,1742071,1742090,1742093,1742101,1742105,1742111,1742139,1742146,1742148,1742166,1742181,1742184,1742187,1742246,1742248-1742251,1742263-1742264,1742268,1742276,1742369,1742387,1742448,1742509-1742512,1742917,1742919,1742933,1742975-1742976,1742984,1742986,1743019,1743115,1743117,1743124-1743125,1743134,1743425,1743554,1743679,1743696-1743698,1743700-1743701,1744058,1744064-1744065,1744125,1744194,1744229,1744270,1744323,1744432,1744684,1744697,1744705,1744713,1744760,1744786,1745142-1745143,1745145,1745177,1745179-1745180,1745227,1745248,1745254,1745337,1745467,1745576,1745735,1745744,1746304,1746306-1746307,1746319,1746327,1746338,1746340-1746341,1746344,1746427,1746441,1746473,1746490,1746492,1746495-1746496,1746499-1746501,1746503-1746507,1746509,1746549,1746551,1746554,1746556,1746558,1746584,1746620,1746649,1746724,1746939,1746989,1747014,1747028,1747035,1747210,1747225,1747234,1747253,1747404,1747506,1747536,1747924,1747980,1747993,1748 001,1748253,1748452 Modified: tomcat/tc8.5.x/trunk/build.xml URL: http://svn.apache.org/viewvc/tomcat/tc8.5.x/trunk/build.xml?rev=1748458&r1=1748457&r2=1748458&view=diff == --- tomcat/tc8.5.x/trunk/build.xml (original) +++ tomcat/tc8.5.x/trunk/build.xml Tue Jun 14 20:23:21 2016 @@ -156,13 +156,11
[Bug 59703] New: RFC 6265 Cookie Processor doesn't allow cookie domains with a leading dot.
https://bz.apache.org/bugzilla/show_bug.cgi?id=59703 Bug ID: 59703 Summary: RFC 6265 Cookie Processor doesn't allow cookie domains with a leading dot. Product: Tomcat 8 Version: 8.0.35 Hardware: Other OS: Linux Status: NEW Severity: blocker Priority: P2 Component: Catalina Assignee: dev@tomcat.apache.org Reporter: alex.bl...@garmin.com In Tomcat 7 or Tomcat 8, we're seeing HTTP 500s in our access logs due to being sent requests with cookie values containing UTF-8 characters. The corresponding catalina.out exception we see is this: java.lang.IllegalArgumentException: Control character in cookie value or attribute. at org.apache.tomcat.util.http.LegacyCookieProcessor.isHttpSeparator(LegacyCookieProcessor.java:733) A recommended fix is to instead use Tomcat 8.0.35 with the org.apache.tomcat.util.http.Rfc6265CookieProcessor instead in my context. ( https://tomcat.apache.org/tomcat-8.0-doc/config/cookie-processor.html ) This fixed that problem, but introduced a new one! My responses are now blowing up because I'm setting a leading dot on cookie domains in my generated cookies. I'm doing this so subdomains can see them. (Example: I want to set a cookie with domain '.example.com' so subdomain sites like meh.example.com & foo.example.com would both see them.) Here's the exception I'm now seeing: java.lang.IllegalArgumentException: An invalid domain [.example.com] was specified for this cookie at org.apache.tomcat.util.http.Rfc6265CookieProcessor.validateDomain(Rfc6265CookieProcessor.java:180) at org.apache.tomcat.util.http.Rfc6265CookieProcessor.generateHeader(Rfc6265CookieProcessor.java:122) Can someone look at fixing the validateDomain() method to allow leading dots in cookie domains??? This usage is perfectly legal and in fact necessary for compatibility with old browsers like IE8/9 that will ONLY allow these cookies to be seen by subdomains IF they have that leading dot set! (As far as I can tell anyways, a leading dot in cookie domains IS valid.) Thanks, -Alex -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
[GUMP@vmgump]: Project tomcat-native-trunk-make (in module tomcat-native-trunk) failed
To whom it may engage... This is an automated request, but not an unsolicited one. For more information please visit http://gump.apache.org/nagged.html, and/or contact the folk at gene...@gump.apache.org. Project tomcat-native-trunk-make has an issue affecting its community integration. This issue affects 3 projects, and has been outstanding for 43 runs. The current state of this project is 'Failed', with reason 'Build Failed'. For reference only, the following projects are affected by this: - tomcat-native-trunk-make : Tomcat native library using Apache Portable Runtime - tomcat-native-trunk-make-install : Tomcat native library using Apache Portable Runtime - tomcat-trunk-test-apr : Tomcat 9.x, a web server implementing the Java Servlet 4.0, ... Full details are available at: http://vmgump.apache.org/gump/public/tomcat-native-trunk/tomcat-native-trunk-make/index.html That said, some information snippets are provided here. The following annotations (debug/informational/warning/error messages) were provided: -INFO- Failed with reason build failed The following work was performed: http://vmgump.apache.org/gump/public/tomcat-native-trunk/tomcat-native-trunk-make/gump_work/build_tomcat-native-trunk_tomcat-native-trunk-make.html Work Name: build_tomcat-native-trunk_tomcat-native-trunk-make (Type: Build) Work ended in a state of : Failed Elapsed: 34 secs Command Line: make [Working Directory: /srv/gump/public/workspace/tomcat-native-trunk/native] - make[1]: Entering directory `/srv/gump/public/workspace/tomcat-native-trunk/native' /bin/bash /srv/gump/public/workspace/apr-1/dest-20160615/build-1/libtool --silent --mode=compile gcc -g -O2 -pthread -DHAVE_CONFIG_H -DLINUX -D_REENTRANT -D_GNU_SOURCE -g -O2 -DHAVE_OPENSSL -DHAVE_POLLSET_WAKEUP -I/srv/gump/public/workspace/tomcat-native-trunk/native/include -I/usr/lib/jvm/java-8-oracle/include -I/usr/lib/jvm/java-8-oracle/include/linux -I/srv/gump/public/workspace/openssl-master/dest-20160615/include -I/srv/gump/public/workspace/apr-1/dest-20160615/include/apr-1 -o src/address.lo -c src/address.c && touch src/address.lo /bin/bash /srv/gump/public/workspace/apr-1/dest-20160615/build-1/libtool --silent --mode=compile gcc -g -O2 -pthread -DHAVE_CONFIG_H -DLINUX -D_REENTRANT -D_GNU_SOURCE -g -O2 -DHAVE_OPENSSL -DHAVE_POLLSET_WAKEUP -I/srv/gump/public/workspace/tomcat-native-trunk/native/include -I/usr/lib/jvm/java-8-oracle/include -I/usr/lib/jvm/java-8-oracle/include/linux -I/srv/gump/public/workspace/openssl-master/dest-20160615/include -I/srv/gump/public/workspace/apr-1/dest-20160615/include/apr-1 -o src/bb.lo -c src/bb.c && touch src/bb.lo /bin/bash /srv/gump/public/workspace/apr-1/dest-20160615/build-1/libtool --silent --mode=compile gcc -g -O2 -pthread -DHAVE_CONFIG_H -DLINUX -D_REENTRANT -D_GNU_SOURCE -g -O2 -DHAVE_OPENSSL -DHAVE_POLLSET_WAKEUP -I/srv/gump/public/workspace/tomcat-native-trunk/native/include -I/usr/lib/jvm/java-8-oracle/include -I/usr/lib/jvm/java-8-oracle/include/linux -I/srv/gump/public/workspace/openssl-master/dest-20160615/include -I/srv/gump/public/workspace/apr-1/dest-20160615/include/apr-1 -o src/dir.lo -c src/dir.c && touch src/dir.lo /bin/bash /srv/gump/public/workspace/apr-1/dest-20160615/build-1/libtool --silent --mode=compile gcc -g -O2 -pthread -DHAVE_CONFIG_H -DLINUX -D_REENTRANT -D_GNU_SOURCE -g -O2 -DHAVE_OPENSSL -DHAVE_POLLSET_WAKEUP -I/srv/gump/public/workspace/tomcat-native-trunk/native/include -I/usr/lib/jvm/java-8-oracle/include -I/usr/lib/jvm/java-8-oracle/include/linux -I/srv/gump/public/workspace/openssl-master/dest-20160615/include -I/srv/gump/public/workspace/apr-1/dest-20160615/include/apr-1 -o src/error.lo -c src/error.c && touch src/error.lo /bin/bash /srv/gump/public/workspace/apr-1/dest-20160615/build-1/libtool --silent --mode=compile gcc -g -O2 -pthread -DHAVE_CONFIG_H -DLINUX -D_REENTRANT -D_GNU_SOURCE -g -O2 -DHAVE_OPENSSL -DHAVE_POLLSET_WAKEUP -I/srv/gump/public/workspace/tomcat-native-trunk/native/include -I/usr/lib/jvm/java-8-oracle/include -I/usr/lib/jvm/java-8-oracle/include/linux -I/srv/gump/public/workspace/openssl-master/dest-20160615/include -I/srv/gump/public/workspace/apr-1/dest-20160615/include/apr-1 -o src/file.lo -c src/file.c && touch src/file.lo /bin/bash /srv/gump/public/workspace/apr-1/dest-20160615/build-1/libtool --silent --mode=compile gcc -g -O2 -pthread -DHAVE_CONFIG_H -DLINUX -D_REENTRANT -D_GNU_SOURCE -g -O2 -DHAVE_OPENSSL -DHAVE_POLLSET_WAKEUP -I/srv/gump/public/workspace/tomcat-native-trunk/native/include -I/usr/lib/jvm/java-8-oracle/include -I/usr/lib/jvm/java-8-oracle/include/linux -I/srv/gump/public/workspace/openssl-master/dest-20160615/include -I/srv/gump/public/workspace/apr-1/dest-20160615/include/apr-1 -o src/info.lo -c src/info.c && touch src/info.lo /bin/bash /srv/gump/public/workspace/apr-
[Bug 59701] Improve the documentation when maxPostSize=0
https://bz.apache.org/bugzilla/show_bug.cgi?id=59701 --- Comment #3 from Huxing Zhang --- I've found the changlelog mention this behavior change in [1]: 57938: Correctly handle empty form fields when a form is submitted as multipart/form-data, the maxPostSize attribute of the Connector has been set to a negative value and the Context has been configured with a value of true for allowCasualMultipartParsing. The meaning of the value zero for the maxPostSize has also been changed to mean a limit of zero rather than no limit to align it with maxSavePostSize and to be more intuitive. (markt) which is quite clear about it. And the releated issue: https://bz.apache.org/bugzilla/show_bug.cgi?id=57938 I still think the above documentation is better, because it clearly says the meaning of value zero. Hopefully it will be useful for people who has the same problem. [1] http://tomcat.apache.org/tomcat-7.0-doc/changelog.html. -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org