[Bug 64051] mod_jk set_session_cookie not sending new cookie after node failover for sticky session

2020-01-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64051 Mohsen changed: What|Removed |Added Status|NEEDINFO|NEW --- Comment #11 from Mohsen --- Thank yo

[Bug 64063] The libtcnative library should be installed in $CATALINA_HOME/bin

2020-01-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64063 --- Comment #19 from Christopher Schultz --- (In reply to Michael Osipov from comment #18) > It is actually bin, because there is no distinction between bin and lib on > Windows. It loads DLLs from the same directory as executables. This is wha

[Bug 64063] The libtcnative library should be installed in $CATALINA_HOME/bin

2020-01-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64063 --- Comment #18 from Michael Osipov --- (In reply to Christopher Schultz from comment #17) > (In reply to Michael Osipov from comment #16) > > (In reply to Christopher Schultz from comment #13) > > > (In reply to Michael Osipov from comment #12

[Bug 64080] Graceful shutdown does not occur for connected clients that have not yet submitted their request payload

2020-01-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64080 --- Comment #5 from Christopher Schultz --- (In reply to carbattles from comment #4) > @Christopher Schultz In the previous bug 62515 I mentioned the first thing > that should happen, when a shutdown is requested, is that the port should be > c

[Bug 64063] The libtcnative library should be installed in $CATALINA_HOME/bin

2020-01-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64063 --- Comment #17 from Christopher Schultz --- (In reply to Michael Osipov from comment #16) > (In reply to Christopher Schultz from comment #13) > > (In reply to Michael Osipov from comment #12) > > > My proposal would be platform-aware in Tomca

[Bug 64080] Graceful shutdown does not occur for connected clients that have not yet submitted their request payload

2020-01-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64080 --- Comment #4 from carbatt...@hotmail.com --- @Christopher Schultz In the previous bug 62515 I mentioned the first thing that should happen, when a shutdown is requested, is that the port should be closed, so no more incoming requests are accep

[Bug 64080] Graceful shutdown does not occur for connected clients that have not yet submitted their request payload

2020-01-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64080 --- Comment #3 from Christopher Schultz --- (In reply to carbattles from comment #2) > In a perfect world, I'd like Tomcat to behave like an enterprise server, eg > if it accepts a connection, it will process the request and submit the > respon

[Bug 64063] The libtcnative library should be installed in $CATALINA_HOME/bin

2020-01-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64063 --- Comment #16 from Michael Osipov --- (In reply to Christopher Schultz from comment #13) > (In reply to Michael Osipov from comment #12) > > My proposal would be platform-aware in Tomcat 10 and 8.5 + 9 would support > > both for a transition

[Bug 64063] The libtcnative library should be installed in $CATALINA_HOME/bin

2020-01-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64063 --- Comment #15 from Michael Osipov --- (In reply to Remy Maucherat from comment #14) > (In reply to Christopher Schultz from comment #13) > > (In reply to Michael Osipov from comment #12) > > > My proposal would be platform-aware in Tomcat 10

[Bug 64063] The libtcnative library should be installed in $CATALINA_HOME/bin

2020-01-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64063 --- Comment #14 from Remy Maucherat --- (In reply to Christopher Schultz from comment #13) > (In reply to Michael Osipov from comment #12) > > My proposal would be platform-aware in Tomcat 10 and 8.5 + 9 would support > > both for a transition

[Bug 64084] "Unexpected query parameters [sort]"

2020-01-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64084 Mark Thomas changed: What|Removed |Added Resolution|--- |INVALID Status|NEW

[GitHub] [tomcat] simonsteiner1984 commented on issue #162: Add support for same-site cookie attribute

2020-01-17 Thread GitBox
simonsteiner1984 commented on issue #162: Add support for same-site cookie attribute URL: https://github.com/apache/tomcat/pull/162#issuecomment-575741548 For tomcat 7, best I could do was, which works in chrome and not firefox, is there another way? filterConfig.getServletContext().ge

[Bug 64063] The libtcnative library should be installed in $CATALINA_HOME/bin

2020-01-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64063 --- Comment #13 from Christopher Schultz --- (In reply to Michael Osipov from comment #12) > My proposal would be platform-aware in Tomcat 10 and 8.5 + 9 would support > both for a transition phase. Of course, this will require decent > documen

[Bug 64084] New: "Unexpected query parameters [sort]"

2020-01-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64084 Bug ID: 64084 Summary: "Unexpected query parameters [sort]" Product: Tomcat 8 Version: 8.5.32 Hardware: HP OS: Linux Status: NEW Severity: normal

[Bug 64081] Fix for 49464 looks to introduced a regression on jstl's import tag support under certain condition

2020-01-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64081 --- Comment #3 from fuminz...@crd.com --- Thought this might be one possibility of the verdict. :) Still, thanks. -- You are receiving this mail because: You are the assignee for the bug. ---

[Bug 64083] JDBC pool keeps closed connection as available

2020-01-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64083 Alex Panchenko changed: What|Removed |Added CC||alex.panche...@gmail.com -- You are

[Bug 64083] New: JDBC pool keeps closed connection as available

2020-01-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64083 Bug ID: 64083 Summary: JDBC pool keeps closed connection as available Product: Tomcat Modules Version: unspecified Hardware: All OS: All Status: NEW Sev

[Bug 64082] Nio2Endpoint for async request doesn't clear OutputBuffer when socket has already been closed (response mixup)

2020-01-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64082 --- Comment #2 from Remy Maucherat --- You are presenting what could be an issue in a complex and confusing IMO. So let's start over. The changes to isClosed is likely not relevant and this will not be changed. They ensure that the socket wrap

[Bug 64082] Nio2Endpoint for async request doesn't clear OutputBuffer when socket has already been closed (response mixup)

2020-01-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64082 --- Comment #1 from william.crow...@roguewave.com --- For reference: Tomcat 8.5.3 - 8.5.31 and 9.0.0 - 9.0.8: ... @Override public boolean isClosed() { return !getSocket().isOpen(); } ... Tomcat 8.5.32 - 8.5.37 and 9.0.9 - 9.0.14 ... @Over

Re: [Bug 61542] Apache Tomcat Remote Code Execution via JSP Upload bypass

2020-01-17 Thread Mark Thomas
On 17/01/2020 14:25, Christopher Schultz wrote: > Mark, > > On 1/16/20 8:11 AM, Mark Thomas wrote: >> On 16/01/2020 12:00, bugzi...@apache.org wrote: >>> https://bz.apache.org/bugzilla/show_bug.cgi?id=61542 >>> >>> --- Comment #13 from Sam --- > >> This idiot has been blocked from BZ for spam an

[Bug 64080] Graceful shutdown does not occur for connected clients that have not yet submitted their request payload

2020-01-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64080 --- Comment #2 from carbatt...@hotmail.com --- >Are you expecting Tomcat to process these requests normally (within some >>configured timeout or set of timeouts for each stage) or is cleanly returning >a >503 an acceptable response? In a perf

[Bug 64082] New: Nio2Endpoint for async request doesn't clear OutputBuffer when socket has already been closed (response mixup)

2020-01-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64082 Bug ID: 64082 Summary: Nio2Endpoint for async request doesn't clear OutputBuffer when socket has already been closed (response mixup) Product: Tomcat 8 Version:

[Bug 64063] The libtcnative library should be installed in $CATALINA_HOME/bin

2020-01-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64063 --- Comment #12 from Michael Osipov --- (In reply to Christopher Schultz from comment #10) > (In reply to Michael Osipov from comment #7) > > Apply POLA! > > The proper application of POLA is that Tomcat doesn't switch the location of > these

[Bug 64063] The libtcnative library should be installed in $CATALINA_HOME/bin

2020-01-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64063 --- Comment #11 from Remy Maucherat --- (In reply to Christopher Schultz from comment #10) > (In reply to Michael Osipov from comment #7) > > Apply POLA! > > The proper application of POLA is that Tomcat doesn't switch the location of > these

[Bug 64063] The libtcnative library should be installed in $CATALINA_HOME/bin

2020-01-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64063 --- Comment #10 from Christopher Schultz --- (In reply to Michael Osipov from comment #7) > Apply POLA! The proper application of POLA is that Tomcat doesn't switch the location of these files even across versions. I've lost track of the histo

[Bug 64081] Fix for 49464 looks to introduced a regression on jstl's import tag support under certain condition

2020-01-17 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64081 Mark Thomas changed: What|Removed |Added Status|NEW |RESOLVED Resolution|---

Re: [Bug 61542] Apache Tomcat Remote Code Execution via JSP Upload bypass

2020-01-17 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 1/16/20 8:11 AM, Mark Thomas wrote: > On 16/01/2020 12:00, bugzi...@apache.org wrote: >> https://bz.apache.org/bugzilla/show_bug.cgi?id=61542 >> >> --- Comment #13 from Sam --- > > This idiot has been blocked from BZ for spam and the spa

JDK 14 is now in Rampdown Phase Two

2020-01-17 Thread Rory O'Donnell
 Hi Mark, *Per the JDK 14 schedule , we are now in Rampdown Phase Two * *Please advise if you have any open high priority issues.* ** * The overall feature set is frozen. o No further JEPs will be targeted to this release o Per the JDK Release Process [1] we now turn our focus to P1