[Bug 65517] upgrade to axis2-adb 1.8.0 to address CVE-2020-0822

2021-08-23 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=65517 Mark Thomas changed: What|Removed |Added Resolution|--- |INVALID Status|NEW

[Bug 65516] upgrade to xalan 2.7.2 to address CVE-2014-0107

2021-08-23 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=65516 Mark Thomas changed: What|Removed |Added Resolution|--- |INVALID Status|NEW

[Bug 65517] New: upgrade to axis2-adb 1.8.0 to address CVE-2020-0822

2021-08-23 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=65517 Bug ID: 65517 Summary: upgrade to axis2-adb 1.8.0 to address CVE-2020-0822 Product: Tomcat 9 Version: 9.0.52 Hardware: PC OS: All Status: NEW Severity:

[Bug 65516] New: upgrade to xalan 2.7.2 to address CVE-2014-0107

2021-08-23 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=65516 Bug ID: 65516 Summary: upgrade to xalan 2.7.2 to address CVE-2014-0107 Product: Tomcat 9 Version: 9.0.52 Hardware: PC OS: All Status: NEW Severity: norm

[GitHub] [tomcat] pirateskipper commented on a change in pull request #277: Refuse adding invalid HTTP 2.0 headers

2021-08-23 Thread GitBox
pirateskipper commented on a change in pull request #277: URL: https://github.com/apache/tomcat/pull/277#discussion_r694075997 ## File path: java/org/apache/coyote/Response.java ## @@ -435,6 +435,20 @@ private boolean checkSpecialHeader( String name, String value) {

buildbot failure in on tomcat-10.0.x

2021-08-23 Thread buildbot
The Buildbot has detected a new failure on builder tomcat-10.0.x while building tomcat. Full details are available at: https://ci.apache.org/builders/tomcat-10.0.x/builds/139 Buildbot URL: https://ci.apache.org/ Buildslave for this Build: asf946_ubuntu Build Reason: The AnyBranchScheduler s

[GitHub] [tomcat] pirateskipper commented on a change in pull request #183: preload driver in connection pool

2021-08-23 Thread GitBox
pirateskipper commented on a change in pull request #183: URL: https://github.com/apache/tomcat/pull/183#discussion_r694072834 ## File path: modules/jdbc-pool/src/main/java/org/apache/tomcat/jdbc/pool/PooledConnection.java ## @@ -335,7 +308,7 @@ protected void connectUsingDriv

[tomcat] branch 8.5.x updated: Cleanup javadoc on finalize

2021-08-23 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new e71d7d0 Cleanup javadoc on finalize e71d7d0 is desc

[tomcat] branch 9.0.x updated: Cleanup javadoc on finalize

2021-08-23 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 1b532da Cleanup javadoc on finalize 1b532da is desc

[tomcat] branch 10.0.x updated: Cleanup javadoc on finalize

2021-08-23 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 10.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.0.x by this push: new 6e21720 Cleanup javadoc on finalize 6e21720 is de

[tomcat] branch main updated: Cleanup javadoc on finalize

2021-08-23 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new de1b5ec Cleanup javadoc on finalize de1b5ec is descri

[tomcat] branch main updated: Fix typo

2021-08-23 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 11fca7f Fix typo 11fca7f is described below commit

[tomcat] branch main updated: Refactor to remove use of finalize()

2021-08-23 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 4745922 Refactor to remove use of finalize() 4745922

[tomcat] branch main updated: Refactor - no functional change

2021-08-23 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new c1a5240 Refactor - no functional change c1a5240 is d

[tomcat] branch main updated: Refactor JSSE/OpenSSL integration to avoid use of finalize()

2021-08-23 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new e45117f Refactor JSSE/OpenSSL integration to avoid u

[tomcat] branch main updated: Disable warnings for imported code - need to be fixed upstream

2021-08-23 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new c7b95cf Disable warnings for imported code - need to

Re: OpenSSL using /lib64 rather than /lib

2021-08-23 Thread Rainer Jung
The original root cause is probably this change: https://github.com/openssl/openssl/commit/74b7f339aa58af57c0e71b7efca66e6f2db5ae2e (Makefile: Avoid changing LIBDIR based on whether it already exists) The switch from lib to lib64 in private installation trees on platforms where lib64 is the pl

Re: OpenSSL using /lib64 rather than /lib

2021-08-23 Thread Rainer Jung
Adding --libdir=lib to config or Configure should work. Haven't tried though. Am 23.08.2021 um 11:15 schrieb Rainer Jung: In my environment I used a lame workaround, moved the private OpenSSL installation lib64 directory to lib and symlinked lib64 to lib. But let me check, whether I find a hoo

Re: OpenSSL using /lib64 rather than /lib

2021-08-23 Thread Rainer Jung
In my environment I used a lame workaround, moved the private OpenSSL installation lib64 directory to lib and symlinked lib64 to lib. But let me check, whether I find a hook in OpenSSL building that brings back the old lib directly Regards, Rainer Am 23.08.2021 um 10:56 schrieb Mark Thom

Re: OpenSSL using /lib64 rather than /lib

2021-08-23 Thread Mark Thomas
On 23/08/2021 09:45, Rainer Jung wrote: I noticed the same - switch from lib to lib64 as the default library installation directory - when I recently built OpenSSL 3.0.0 beta2. It must be a change during the last 1-2 months between alpha16 and beta2). Thanks for the confirmation. How do you r

Re: OpenSSL using /lib64 rather than /lib

2021-08-23 Thread Rainer Jung
I noticed the same - switch from lib to lib64 as the default library installation directory - when I recently built OpenSSL 3.0.0 beta2. It must be a change during the last 1-2 months between alpha16 and beta2). Regards, Rainer Am 23.08.2021 um 10:35 schrieb Mark Thomas: Hi, I've noticed th

OpenSSL using /lib64 rather than /lib

2021-08-23 Thread Mark Thomas
Hi, I've noticed that both local and Gump builds of OpenSSL master have started using .../lib64 rather than .../lib for the shared libraries that are built. This is causing build problems - for example httpd looks in /lib I'm not sure if something has changed in the build environments or in