[Bug 51195] "Find leaks" reports a false positive memory/classloader leak

2018-03-12 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=51195 --- Comment #12 from Mark Thomas --- I'd argue that this is a JRE bug. Given the possibility of a memory leak, a method should be provided to enable the cache to be cleared for a given class loader. I'm working on extending https://github.com/

[tomcat-training] branch master updated: Start the deployment module

2018-03-12 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/tomcat-training.git The following commit(s) were added to refs/heads/master by this push: new b7a3d00 Start the deployment module b7a

[Bug 62172] org.apache.catalina.startup.Constants specifies an absolute path for web.xml

2018-03-12 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62172 --- Comment #4 from Christopher Schultz --- Sounds like a documentation bug, if anything. -- You are receiving this mail because: You are the assignee for the bug. - To unsub

[Bug 62172] org.apache.catalina.startup.Constants specifies an absolute path for web.xml

2018-03-12 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62172 --- Comment #3 from Mark Thomas --- That constants class has evolved over time based on how the constants were used. The constants are correct and - in any case - can't easily be changed without breaking the potential usage of them by others.

[SECURITY] CVE-2018-1323 Apache Tomcat JK ISAPI Connector path traversal

2018-03-12 Thread Mark Thomas
CVE-2018-1323 Apache Tomcat JK ISAPI Connector path traversal Severity: Important Vendor: The Apache Software Foundation Versions Affected: - Apache Tomcat JK ISAPI Connector 1.2.0 to 1.2.42 Description The IIS/ISAPI specific code that normalised the requested path before matching it to the URI

svn commit: r1826541 - in /tomcat/site/trunk: docs/security-jk.html xdocs/security-jk.xml

2018-03-12 Thread markt
Author: markt Date: Mon Mar 12 12:22:21 2018 New Revision: 1826541 URL: http://svn.apache.org/viewvc?rev=1826541&view=rev Log: Publish details of CVE-2018-1323 Modified: tomcat/site/trunk/docs/security-jk.html tomcat/site/trunk/xdocs/security-jk.xml Modified: tomcat/site/trunk/docs/secur

[Bug 62168] PersistentManager.minIdleSwap=-1 does not disable swapping as documented.

2018-03-12 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62168 --- Comment #5 from Mark Thomas --- The old behaviour was wrong because it did not differentiate between minIdleSwap==0 and minIdleSwap==-1 -- You are receiving this mail because: You are the assignee for the bug.

[ANN] Apache Tomcat 8.5.29 available

2018-03-12 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat 8.5.29. Tomcat 8.x users should be using 8.5.x releases in preference to 8.0.x releases. Apache Tomcat 8 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language,

[Bug 62172] org.apache.catalina.startup.Constants specifies an absolute path for web.xml

2018-03-12 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62172 --- Comment #2 from Alexander Veit --- In our code which embeds Tomcat, I've used Path dirDocBase; .. = dirDocBase.resolve(Constants.ApplicationWebXml); It resolves to /WEB-INF/web.xml which is an absolute path, starting at the root of the f

svn commit: r25658 - /release/tomcat/tomcat-8/v8.5.28/

2018-03-12 Thread markt
Author: markt Date: Mon Mar 12 10:31:39 2018 New Revision: 25658 Log: Remove 8.5.28 from mirrors Removed: release/tomcat/tomcat-8/v8.5.28/ - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands,

svn commit: r1826526 - in /tomcat/site/trunk: ./ docs/ xdocs/

2018-03-12 Thread markt
Author: markt Date: Mon Mar 12 09:21:09 2018 New Revision: 1826526 URL: http://svn.apache.org/viewvc?rev=1826526&view=rev Log: Update site for 8.5.29 release Modified: tomcat/site/trunk/build.properties.default tomcat/site/trunk/docs/download-80.html tomcat/site/trunk/docs/index.html

svn commit: r1826525 - in /tomcat/site/trunk/docs/tomcat-8.5-doc: ./ api/ api/org/apache/catalina/ api/org/apache/catalina/ant/ api/org/apache/catalina/ant/jmx/ api/org/apache/catalina/authenticator/

2018-03-12 Thread markt
Author: markt Date: Mon Mar 12 09:13:03 2018 New Revision: 1826525 URL: http://svn.apache.org/viewvc?rev=1826525&view=rev Log: Update docs for 8.5.29 [This commit notification would consist of 785 parts, which exceeds the limit of 50 ones, so it was shortened to the summary.] -

[Bug 62172] org.apache.catalina.startup.Constants specifies an absolute path for web.xml

2018-03-12 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62172 --- Comment #1 from Remy Maucherat --- Can you clarify what is wrong and where ? These constants are not all used in the same context, and some need to be absolute path, others not. For starters, ApplicationWebXml="/WEB-INF/web.xml" is correct.

svn commit: r25655 - /release/tomcat/tomcat-9/v9.0.5/

2018-03-12 Thread markt
Author: markt Date: Mon Mar 12 08:50:22 2018 New Revision: 25655 Log: Remove Tomcat 9.0.5 from mirrors Removed: release/tomcat/tomcat-9/v9.0.5/ - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional comm

[Bug 62172] New: org.apache.catalina.startup.Constants specifies an absolute path for web.xml

2018-03-12 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62172 Bug ID: 62172 Summary: org.apache.catalina.startup.Constants specifies an absolute path for web.xml Product: Tomcat 8 Version: 8.5.x-trunk Hardware: PC OS

svn commit: r1826515 - in /tomcat/tc7.0.x/trunk: modules/jdbc-pool/src/main/java/org/apache/tomcat/jdbc/pool/interceptor/StatementCache.java webapps/docs/changelog.xml

2018-03-12 Thread kfujino
Author: kfujino Date: Mon Mar 12 07:13:58 2018 New Revision: 1826515 URL: http://svn.apache.org/viewvc?rev=1826515&view=rev Log: Ensure that parameters have been cleared when PreparedStatement and/or CallableStatement are cached. Modified: tomcat/tc7.0.x/trunk/modules/jdbc-pool/src/main/jav

svn commit: r1826514 - in /tomcat/tc8.0.x/trunk: modules/jdbc-pool/src/main/java/org/apache/tomcat/jdbc/pool/interceptor/StatementCache.java webapps/docs/changelog.xml

2018-03-12 Thread kfujino
Author: kfujino Date: Mon Mar 12 07:13:02 2018 New Revision: 1826514 URL: http://svn.apache.org/viewvc?rev=1826514&view=rev Log: Ensure that parameters have been cleared when PreparedStatement and/or CallableStatement are cached. Modified: tomcat/tc8.0.x/trunk/modules/jdbc-pool/src/main/jav

svn commit: r1826513 - in /tomcat/tc8.5.x/trunk: modules/jdbc-pool/src/main/java/org/apache/tomcat/jdbc/pool/interceptor/StatementCache.java webapps/docs/changelog.xml

2018-03-12 Thread kfujino
Author: kfujino Date: Mon Mar 12 07:11:41 2018 New Revision: 1826513 URL: http://svn.apache.org/viewvc?rev=1826513&view=rev Log: Ensure that parameters have been cleared when PreparedStatement and/or CallableStatement are cached. Modified: tomcat/tc8.5.x/trunk/modules/jdbc-pool/src/main/jav

svn commit: r1826512 - in /tomcat/trunk: modules/jdbc-pool/src/main/java/org/apache/tomcat/jdbc/pool/interceptor/StatementCache.java webapps/docs/changelog.xml

2018-03-12 Thread kfujino
Author: kfujino Date: Mon Mar 12 07:09:09 2018 New Revision: 1826512 URL: http://svn.apache.org/viewvc?rev=1826512&view=rev Log: Ensure that parameters have been cleared when PreparedStatement and/or CallableStatement are cached. Modified: tomcat/trunk/modules/jdbc-pool/src/main/java/org/ap