[GUMP@vmgump-vm3]: Project tomcat-tc8.0.x-test-nio2 (in module tomcat-8.0.x) failed

To whom it may engage... This is an automated request, but not an unsolicited one. For more information please visit http://gump.apache.org/nagged.html, and/or contact the folk at gene...@gump.apache.org. Project tomcat-tc8.0.x-test-nio2 has an issue affecting its community integration

[GUMP@vmgump-vm3]: Project tomcat-trunk-validate (in module tomcat-trunk) failed

To whom it may engage... This is an automated request, but not an unsolicited one. For more information please visit http://gump.apache.org/nagged.html, and/or contact the folk at gene...@gump.apache.org. Project tomcat-trunk-validate has an issue affecting its community integration. Th

[GUMP@vmgump-vm3]: Project tomcat-tc8.0.x-validate (in module tomcat-8.0.x) failed

To whom it may engage... This is an automated request, but not an unsolicited one. For more information please visit http://gump.apache.org/nagged.html, and/or contact the folk at gene...@gump.apache.org. Project tomcat-tc8.0.x-validate has an issue affecting its community integration.

[GUMP@vmgump-vm3]: Project tomcat-tc7.0.x-validate (in module tomcat-7.0.x) failed

To whom it may engage... This is an automated request, but not an unsolicited one. For more information please visit http://gump.apache.org/nagged.html, and/or contact the folk at gene...@gump.apache.org. Project tomcat-tc7.0.x-validate has an issue affecting its community integration.

Re: [GUMP@vmgump-vm3]: Project tomcat-tc7.0.x-test-apr (in module tomcat-7.0.x) failed

To the administrator of these automated emails, On 9/22/2017 9:54 PM, Bill Barker wrote: To whom it may engage... This is an automated request, but not an unsolicited one. For more information please visit http://gump.apache.org/nagged.html, and/or contact the folk at gene...@gump.apa

buildbot success in on tomcat-7-trunk

The Buildbot has detected a restored build on builder tomcat-7-trunk while building . Full details are available at: https://ci.apache.org/builders/tomcat-7-trunk/builds/880 Buildbot URL: https://ci.apache.org/ Buildslave for this Build: silvanus_ubuntu Build Reason: The AnyBranchScheduler

[GUMP@vmgump-vm3]: Project tomcat-tc7.0.x-test-apr (in module tomcat-7.0.x) failed

tmp-APR -Djunit.jar=/srv/gump/public/workspace/junit/target/junit-4.13-SNAPSHOT.jar -Dobjenesis.jar=/srv/gump/public/workspace/objenesis/main/target/objenesis-2.7-SNAPSHOT.jar -Dexamples.sources.skip=true -Dcommons-daemon.jar=/srv/gump/public/workspace/apache-commons/daemon/dist/commons

svn commit: r1809358 - /tomcat/tc7.0.x/trunk/java/org/apache/naming/resources/FileDirContext.java

Author: markt Date: Fri Sep 22 21:28:47 2017 New Revision: 1809358 URL: http://svn.apache.org/viewvc?rev=1809358&view=rev Log: Fix broken tests caused by "" vs "/" when resource is at base of DirContext Modified: tomcat/tc7.0.x/trunk/java/org/apache/naming/resources/FileDirContext.java Modif

[VOTE] Release Apache Tomcat 8.5.22

The proposed Apache Tomcat 8.5.22 release is now available for voting. The major changes compared to the 8.5.21 release are: - Fix CVE-2017-12617 - Add ExtractingRoot, a new WebResourceRoot implementation that extracts JARs to the work directory for improved performance when deploying packed

[GUMP@vmgump-vm3]: Project tomcat-tc7.0.x-test-nio (in module tomcat-7.0.x) failed

tmp-NIO -Djunit.jar=/srv/gump/public/workspace/junit/target/junit-4.13-SNAPSHOT.jar -Dobjenesis.jar=/srv/gump/public/workspace/objenesis/main/target/objenesis-2.7-SNAPSHOT.jar -Dexamples.sources.skip=true -Dcommons-daemon.jar=/srv/gump/public/workspace/apache-commons/daemon/dist/commons

svn commit: r21897 - in /dev/tomcat/tomcat-8/v8.5.22: ./ bin/ bin/embed/ bin/extras/ src/

Author: markt Date: Fri Sep 22 20:24:43 2017 New Revision: 21897 Log: Upload 8.5.22 for voting Added: dev/tomcat/tomcat-8/v8.5.22/ dev/tomcat/tomcat-8/v8.5.22/KEYS dev/tomcat/tomcat-8/v8.5.22/README.html dev/tomcat/tomcat-8/v8.5.22/RELEASE-NOTES dev/tomcat/tomcat-8/v8.5.22/bin

[GUMP@vmgump-vm3]: Project tomcat-tc7.0.x-test-bio (in module tomcat-7.0.x) failed

tmp-BIO -Djunit.jar=/srv/gump/public/workspace/junit/target/junit-4.13-SNAPSHOT.jar -Dobjenesis.jar=/srv/gump/public/workspace/objenesis/main/target/objenesis-2.7-SNAPSHOT.jar -Dexamples.sources.skip=true -Dcommons-daemon.jar=/srv/gump/public/workspace/apache-commons/daemon/dist/commons

svn commit: r1809337 - in /tomcat/tc8.5.x/tags/TOMCAT_8_5_22: ./ build.properties.default webapps/docs/changelog.xml

Author: markt Date: Fri Sep 22 19:07:52 2017 New Revision: 1809337 URL: http://svn.apache.org/viewvc?rev=1809337&view=rev Log: Tag 8.5.22 Added: tomcat/tc8.5.x/tags/TOMCAT_8_5_22/ (props changed) - copied from r1809336, tomcat/tc8.5.x/trunk/ Modified: tomcat/tc8.5.x/tags/TOMCAT_8_

svn commit: r1809336 - in /tomcat/trunk: build.properties.default res/maven/mvn.properties.default webapps/docs/changelog.xml

Author: markt Date: Fri Sep 22 19:01:55 2017 New Revision: 1809336 URL: http://svn.apache.org/viewvc?rev=1809336&view=rev Log: Increment version ready for next development cycle Modified: tomcat/trunk/build.properties.default tomcat/trunk/res/maven/mvn.properties.default tomcat/trunk/

[VOTE] Release Apache Tomcat 9.0.0

The proposed Apache Tomcat 9.0.0 release is now available for voting. The major changes compared to the 9.0.0.M27 release are: - Fix CVE-2017-12617 - Servlet 4.0 implementation is complete - Add the ability to reconfigure TLS connectors at runtime without stopping the connector - Stricter va

svn commit: r21896 - in /dev/tomcat/tomcat-9/v9.0.0: ./ bin/ bin/embed/ bin/extras/ src/

Author: markt Date: Fri Sep 22 18:53:49 2017 New Revision: 21896 Log: Upload 9.0.0 for a release vote Added: dev/tomcat/tomcat-9/v9.0.0/ dev/tomcat/tomcat-9/v9.0.0/KEYS dev/tomcat/tomcat-9/v9.0.0/README.html dev/tomcat/tomcat-9/v9.0.0/RELEASE-NOTES dev/tomcat/tomcat-9/v9.0.0/b

svn commit: r1809331 - in /tomcat/tags/TOMCAT_9_0_0: ./ build.properties.default webapps/docs/changelog.xml

Author: markt Date: Fri Sep 22 18:19:57 2017 New Revision: 1809331 URL: http://svn.apache.org/viewvc?rev=1809331&view=rev Log: Tag 9.0.0 Added: tomcat/tags/TOMCAT_9_0_0/ (props changed) - copied from r1809330, tomcat/trunk/ Modified: tomcat/tags/TOMCAT_9_0_0/build.properties.defau

Re: Servlet 4.0 implementation status

On 22/09/17 15:16, Konstantin Kolinko wrote: > 2017-09-22 0:16 GMT+03:00 Mark Thomas : >> Hi all, >> >> As of a few minutes ago the Servlet 4.0 API implementation in 9.0.x is >> aligned with the 4.0 final release. It is also fully implemented. That >> opens up the possibility of both beta and stabl

Re: Servlet 4.0 implementation status

2017-09-22 0:16 GMT+03:00 Mark Thomas : > Hi all, > > As of a few minutes ago the Servlet 4.0 API implementation in 9.0.x is > aligned with the 4.0 final release. It is also fully implemented. That > opens up the possibility of both beta and stable labels for the next > 9.0.x release. It also means

[Bug 61542] Apache Tomcat Remote Code Execution via JSP Upload bypass

https://bz.apache.org/bugzilla/show_bug.cgi?id=61542 Mark Thomas changed: What|Removed |Added Status|NEW |RESOLVED Resolution|---

svn commit: r1809317 - in /tomcat/trunk: java/org/apache/coyote/http11/AbstractHttp11Protocol.java java/org/apache/coyote/http11/Http11Processor.java webapps/docs/changelog.xml webapps/docs/config/htt

Author: markt Date: Fri Sep 22 14:06:39 2017 New Revision: 1809317 URL: http://svn.apache.org/viewvc?rev=1809317&view=rev Log: Make host header / request line consistency check configurable since it is a new requirement in RFC 7230 Modified: tomcat/trunk/java/org/apache/coyote/http11/Abstrac

buildbot success in on tomcat-trunk

The Buildbot has detected a restored build on builder tomcat-trunk while building . Full details are available at: https://ci.apache.org/builders/tomcat-trunk/builds/2712 Buildbot URL: https://ci.apache.org/ Buildslave for this Build: silvanus_ubuntu Build Reason: The AnyBranchScheduler sch

[GitHub] tomcat pull request #:

Github user vmassol commented on the pull request: https://github.com/apache/tomcat/commit/eb195bebac8239b994fa921aeedb136a93e4ccaf#commitcomment-24486575 In java/org/apache/catalina/Context.java: In java/org/apache/catalina/Context.java on line 1790: Thanks ---

[GitHub] tomcat pull request #:

Github user efge commented on the pull request: https://github.com/apache/tomcat/commit/eb195bebac8239b994fa921aeedb136a93e4ccaf#commitcomment-24486403 In java/org/apache/catalina/Context.java: In java/org/apache/catalina/Context.java on line 1790: FYI this was backported for 7

buildbot success in on tomcat-8-trunk

The Buildbot has detected a restored build on builder tomcat-8-trunk while building . Full details are available at: https://ci.apache.org/builders/tomcat-8-trunk/builds/1129 Buildbot URL: https://ci.apache.org/ Buildslave for this Build: silvanus_ubuntu Build Reason: The AnyBranchScheduler

buildbot failure in on tomcat-7-trunk

The Buildbot has detected a new failure on builder tomcat-7-trunk while building . Full details are available at: https://ci.apache.org/builders/tomcat-7-trunk/builds/879 Buildbot URL: https://ci.apache.org/ Buildslave for this Build: silvanus_ubuntu Build Reason: The AnyBranchScheduler sch

[Bug 61542] Apache Tomcat Remote Code Execution via JSP Upload bypass

https://bz.apache.org/bugzilla/show_bug.cgi?id=61542 --- Comment #10 from Peter Stöckli --- Created attachment 35361 --> https://bz.apache.org/bugzilla/attachment.cgi?id=35361&action=edit proposal to improve doc of the readonly flag First of all: your work is greatly appreciated! And I didn't

svn commit: r1809300 - /tomcat/trunk/java/org/apache/catalina/authenticator/SpnegoAuthenticator.java

Author: markt Date: Fri Sep 22 10:59:13 2017 New Revision: 1809300 URL: http://svn.apache.org/viewvc?rev=1809300&view=rev Log: Trivial clean-up to trigger a CI build Modified: tomcat/trunk/java/org/apache/catalina/authenticator/SpnegoAuthenticator.java Modified: tomcat/trunk/java/org/apache

svn commit: r1809298 - /tomcat/tc7.0.x/trunk/java/org/apache/naming/resources/FileDirContext.java

Author: markt Date: Fri Sep 22 10:39:51 2017 New Revision: 1809298 URL: http://svn.apache.org/viewvc?rev=1809298&view=rev Log: Code clean-up as a result of code reviews - Minor performance optimisation - Simplify code - Additional commentary Modified: tomcat/tc7.0.x/trunk/java/org/apache/nami

svn commit: r1809296 - in /tomcat/tc8.0.x/trunk: ./ java/org/apache/catalina/webresources/AbstractFileResourceSet.java

Author: markt Date: Fri Sep 22 10:29:45 2017 New Revision: 1809296 URL: http://svn.apache.org/viewvc?rev=1809296&view=rev Log: Additional clean-up Modified: tomcat/tc8.0.x/trunk/ (props changed) tomcat/tc8.0.x/trunk/java/org/apache/catalina/webresources/AbstractFileResourceSet.java Pr

svn commit: r1809293 - in /tomcat/tc7.0.x/trunk: java/org/apache/naming/resources/FileDirContext.java webapps/docs/changelog.xml

Author: markt Date: Fri Sep 22 10:18:29 2017 New Revision: 1809293 URL: http://svn.apache.org/viewvc?rev=1809293&view=rev Log: Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=61542 Remainder of fix for CVE-2017-12617 This ensures that a path specified for creation of a file does not end in '/'

svn commit: r1809288 - in /tomcat/tc7.0.x/trunk: java/org/apache/catalina/servlets/ java/org/apache/naming/resources/ test/org/apache/naming/resources/

Author: markt Date: Fri Sep 22 09:46:02 2017 New Revision: 1809288 URL: http://svn.apache.org/viewvc?rev=1809288&view=rev Log: Partial fix for CVE-2017-12617 This moves a check from the Default servlet where it applied to GET, POST, HEAD and OPTIONS to the resources implementation where it applie

svn commit: r1809286 - in /tomcat/tc7.0.x/trunk/test/org/apache/naming/resources: TestProxyDirContext.java TestWarDirContext.java

Author: markt Date: Fri Sep 22 09:26:41 2017 New Revision: 1809286 URL: http://svn.apache.org/viewvc?rev=1809286&view=rev Log: Fix IDE warnings in this package (the comments aren't intended to be used to generate Javadoc) Modified: tomcat/tc7.0.x/trunk/test/org/apache/naming/resources/TestP

[Bug 61542] Apache Tomcat Remote Code Execution via JSP Upload bypass

https://bz.apache.org/bugzilla/show_bug.cgi?id=61542 --- Comment #9 from Mark Thomas --- Indeed. Lots of folks run Tomcat with WebDAV on internal sites. Hard-coding readonly to true is simply not an option. Regarding better documentation, patches welcome. -- You are receiving this mail because

[Bug 61542] Apache Tomcat Remote Code Execution via JSP Upload bypass

https://bz.apache.org/bugzilla/show_bug.cgi?id=61542 --- Comment #8 from Remy Maucherat --- (In reply to Peter Stöckli from comment #7) > Isn't the mere existence of the readonly parameter also part of the problem? > > https://tomcat.apache.org/tomcat-7.0-doc/default-servlet.html > It is current

svn commit: r1809285 - in /tomcat/tc8.0.x/trunk: ./ java/org/apache/catalina/webresources/AbstractFileResourceSet.java

Author: markt Date: Fri Sep 22 09:10:11 2017 New Revision: 1809285 URL: http://svn.apache.org/viewvc?rev=1809285&view=rev Log: Code clean-up as a result of code reviews - Minor performance optimisation - Simplify code - Additional commentary - Correctly convert \ to / on platforms that use \ as a

svn commit: r1809284 - in /tomcat/tc8.0.x/trunk: ./ java/org/apache/catalina/webresources/DirResourceSet.java test/org/apache/catalina/webresources/AbstractTestResourceSet.java webapps/docs/changelog.

Author: markt Date: Fri Sep 22 09:08:10 2017 New Revision: 1809284 URL: http://svn.apache.org/viewvc?rev=1809284&view=rev Log: Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=61542 Remainder of fix for CVE-2017-12617 This ensures that a path specified for creation of a file does not end in '/'

svn commit: r1809283 - in /tomcat/tc8.0.x/trunk: ./ java/org/apache/catalina/servlets/DefaultServlet.java java/org/apache/catalina/webresources/AbstractFileResourceSet.java test/org/apache/catalina/we

Author: markt Date: Fri Sep 22 09:06:38 2017 New Revision: 1809283 URL: http://svn.apache.org/viewvc?rev=1809283&view=rev Log: Partial fix for CVE-2017-12617 This moves a check from the Default servlet where it applied to GET, POST, HEAD and OPTIONS to the resources implementation where it applie

svn commit: r1809275 - in /tomcat/tc8.5.x/trunk: ./ java/org/apache/catalina/webresources/AbstractFileResourceSet.java

Author: markt Date: Fri Sep 22 08:03:54 2017 New Revision: 1809275 URL: http://svn.apache.org/viewvc?rev=1809275&view=rev Log: Code clean-up as a result of code reviews - Minor performance optimisation - Simplify code - Additional commentary - Correctly convert \ to / on platforms that use \ as a

[Bug 61542] Apache Tomcat Remote Code Execution via JSP Upload bypass

https://bz.apache.org/bugzilla/show_bug.cgi?id=61542 --- Comment #7 from Peter Stöckli --- Isn't the mere existence of the readonly parameter also part of the problem? https://tomcat.apache.org/tomcat-7.0-doc/default-servlet.html It is currently documented as "Is this context "read only", so HTT

buildbot failure in on tomcat-8-trunk

The Buildbot has detected a new failure on builder tomcat-8-trunk while building . Full details are available at: https://ci.apache.org/builders/tomcat-8-trunk/builds/1127 Buildbot URL: https://ci.apache.org/ Buildslave for this Build: silvanus_ubuntu Build Reason: The AnyBranchScheduler sc

svn commit: r1809274 - in /tomcat/tc8.5.x/trunk: ./ java/org/apache/catalina/webresources/DirResourceSet.java test/org/apache/catalina/webresources/AbstractTestResourceSet.java webapps/docs/changelog.

Author: markt Date: Fri Sep 22 07:54:31 2017 New Revision: 1809274 URL: http://svn.apache.org/viewvc?rev=1809274&view=rev Log: Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=61542 Remainder of fix for CVE-2017-12617 This ensures that a path specified for creation of a file does not end in '/'

svn commit: r1809272 - in /tomcat/tc8.5.x/trunk: ./ java/org/apache/catalina/servlets/DefaultServlet.java java/org/apache/catalina/webresources/AbstractFileResourceSet.java test/org/apache/catalina/we

Author: markt Date: Fri Sep 22 07:50:26 2017 New Revision: 1809272 URL: http://svn.apache.org/viewvc?rev=1809272&view=rev Log: Partial fix for CVE-2017-12617 This moves a check from the Default servlet where it applied to GET, POST, HEAD and OPTIONS to the resources implementation where it applie

buildbot failure in on tomcat-trunk

The Buildbot has detected a new failure on builder tomcat-trunk while building . Full details are available at: https://ci.apache.org/builders/tomcat-trunk/builds/2711 Buildbot URL: https://ci.apache.org/ Buildslave for this Build: silvanus_ubuntu Build Reason: The AnyBranchScheduler schedu

[Bug 61545] ProxyConnection.invoke() does not handle javax.sql.PooledConnection method calls

https://bz.apache.org/bugzilla/show_bug.cgi?id=61545 --- Comment #2 from Nils Winkler --- Thanks for the quick fix! Happy to help! -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-ma

[Bug 61545] ProxyConnection.invoke() does not handle javax.sql.PooledConnection method calls

https://bz.apache.org/bugzilla/show_bug.cgi?id=61545 Mark Thomas changed: What|Removed |Added Resolution|--- |FIXED Status|NEW

svn commit: r1809268 - in /tomcat/tc7.0.x/trunk: ./ modules/jdbc-pool/src/main/java/org/apache/tomcat/jdbc/pool/ProxyConnection.java webapps/docs/changelog.xml

Author: markt Date: Fri Sep 22 07:23:18 2017 New Revision: 1809268 URL: http://svn.apache.org/viewvc?rev=1809268&view=rev Log: Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=61545 Correctly handle invocations of methods defined in the PooledConnection interface when using pooled XA connection

svn commit: r1809267 - in /tomcat/tc8.0.x/trunk: ./ modules/jdbc-pool/src/main/java/org/apache/tomcat/jdbc/pool/ProxyConnection.java webapps/docs/changelog.xml

Author: markt Date: Fri Sep 22 07:22:12 2017 New Revision: 1809267 URL: http://svn.apache.org/viewvc?rev=1809267&view=rev Log: Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=61545 Correctly handle invocations of methods defined in the PooledConnection interface when using pooled XA connection

svn commit: r1809266 - in /tomcat/tc8.5.x/trunk: ./ modules/jdbc-pool/src/main/java/org/apache/tomcat/jdbc/pool/ProxyConnection.java webapps/docs/changelog.xml

Author: markt Date: Fri Sep 22 07:20:39 2017 New Revision: 1809266 URL: http://svn.apache.org/viewvc?rev=1809266&view=rev Log: Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=61545 Correctly handle invocations of methods defined in the PooledConnection interface when using pooled XA connection

svn commit: r1809265 - in /tomcat/trunk: modules/jdbc-pool/src/main/java/org/apache/tomcat/jdbc/pool/ProxyConnection.java webapps/docs/changelog.xml

Author: markt Date: Fri Sep 22 07:20:04 2017 New Revision: 1809265 URL: http://svn.apache.org/viewvc?rev=1809265&view=rev Log: Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=61545 Correctly handle invocations of methods defined in the PooledConnection interface when using pooled XA connection

[Bug 61557] KeyStoreException make Tomcat could not startup successfully

https://bz.apache.org/bugzilla/show_bug.cgi?id=61557 Mark Thomas changed: What|Removed |Added Resolution|--- |FIXED Status|REOPENED

svn commit: r1809264 - in /tomcat/tc8.5.x/trunk: ./ java/org/apache/tomcat/util/net/jsse/JSSEUtil.java webapps/docs/changelog.xml

Author: markt Date: Fri Sep 22 07:10:46 2017 New Revision: 1809264 URL: http://svn.apache.org/viewvc?rev=1809264&view=rev Log: Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=61557 Correct a further regression in the fix to enable the use of Java key stores that contain multiple keys that do n

svn commit: r1809263 - in /tomcat/trunk: java/org/apache/tomcat/util/net/jsse/JSSEUtil.java webapps/docs/changelog.xml

Author: markt Date: Fri Sep 22 07:09:59 2017 New Revision: 1809263 URL: http://svn.apache.org/viewvc?rev=1809263&view=rev Log: Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=61557 Correct a further regression in the fix to enable the use of Java key stores that contain multiple keys that do n