[Bug 64463] Tomcat 9 Cluster

2020-05-20 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64463 Michael Osipov changed: What|Removed |Added OS||All Resolution|---

[Bug 64463] New: Tomcat 9 Cluster

2020-05-20 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64463 Bug ID: 64463 Summary: Tomcat 9 Cluster Product: Tomcat 9 Version: 9.0.33 Hardware: PC Status: NEW Severity: normal Priority: P2 Component: Cluster

[Bug 64442] Re-use roles and groups defined on users on MemoryUserDatabase creation

2020-05-20 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64442 Felix Schumacher changed: What|Removed |Added Attachment #37246|0 |1 is obsolete|

[SECURITY] CVE-2020-9484 Apache Tomcat Remote Code Execution via session persistence

2020-05-20 Thread Mark Thomas
CVE-2020-9484 Apache Tomcat Remote Code Execution via session persistence Severity: High Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 10.0.0-M1 to 10.0.0-M4 Apache Tomcat 9.0.0.M1 to 9.0.34 Apache Tomcat 8.5.0 to 8.5.54 Apache Tomcat 7.0.0 to 7.0.103 Description: If:

svn commit: r1877957 - in /tomcat/site/trunk: docs/security-10.html docs/security-7.html docs/security-8.html docs/security-9.html xdocs/security-10.xml xdocs/security-7.xml xdocs/security-8.xml xdocs

2020-05-20 Thread markt
Author: markt Date: Wed May 20 15:19:16 2020 New Revision: 1877957 URL: http://svn.apache.org/viewvc?rev=1877957&view=rev Log: Update site for CVE-2020-9484 Modified: tomcat/site/trunk/docs/security-10.html tomcat/site/trunk/docs/security-7.html tomcat/site/trunk/docs/security-8.html

[Bug 64442] Re-use roles and groups defined on users on MemoryUserDatabase creation

2020-05-20 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64442 --- Comment #9 from Felix Schumacher --- OK, so I will try to relax the schema. Currently a role, that is defined after a user has "defined" a role, will reset the membership and therefore loose the connection to the user. That has been fixed

[GitHub] [tomcat] rmaucher closed pull request #221: RewriteMap with quoted parameters and ServiceLoader support

2020-05-20 Thread GitBox
rmaucher closed pull request #221: URL: https://github.com/apache/tomcat/pull/221 This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to th

[GitHub] [tomcat] rmaucher commented on pull request #221: RewriteMap with quoted parameters and ServiceLoader support

2020-05-20 Thread GitBox
rmaucher commented on pull request #221: URL: https://github.com/apache/tomcat/pull/221#issuecomment-631480011 I integrated everything (and a bit more) except the service loader part. This is an automated message from the Apa

[Bug 64432] RewriteValve does not work with multiple rules

2020-05-20 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64432 Mark Thomas changed: What|Removed |Added CC||apache-bugzilla=spam@ruedig

[Bug 64461] RewriteValve regression in 8.5.55

2020-05-20 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64461 Mark Thomas changed: What|Removed |Added Resolution|--- |DUPLICATE Status|NEW

[Bug 64461] RewriteValve regression in 8.5.55

2020-05-20 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64461 --- Comment #1 from apache-bugzilla=s...@ruediger-kuhlmann.de --- PS. The same configuration was previously used with version 8.5.54, which worked fine. -- You are receiving this mail because: You are the assignee for the bug.

[Bug 64461] New: RewriteValve regression in 8.5.55

2020-05-20 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64461 Bug ID: 64461 Summary: RewriteValve regression in 8.5.55 Product: Tomcat 8 Version: 8.5.x-trunk Hardware: PC OS: Linux Status: NEW Severity: regression

[tomcat] branch 8.5.x updated: Add the default internal rewrite maps

2020-05-20 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new f936bbf Add the default internal rewrite maps f936b

[tomcat] branch 9.0.x updated: Add the default internal rewrite maps

2020-05-20 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 0e32c14 Add the default internal rewrite maps 0e32c

[tomcat] branch master updated: Add the default internal rewrite maps

2020-05-20 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/master by this push: new 0446c5c Add the default internal rewrite maps 044

[Bug 64442] Re-use roles and groups defined on users on MemoryUserDatabase creation

2020-05-20 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64442 --- Comment #8 from Remy Maucherat --- Did I miss something, or is a random element order much harder to write in a xsd ? The sequence is very easy otoh, but the ordering is fixed. I'm ok as well for allowing creativity here, it doesn't hurt.

[Bug 64442] Re-use roles and groups defined on users on MemoryUserDatabase creation

2020-05-20 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64442 --- Comment #7 from Mark Thomas --- The XSD was added to document the requirements / allow XML aware editors to produce valid files. I'm happy with relaxing the restrictions. With the relaxation in place, we need to think about what duplicate