Re: [PR] BZ69446 - add parameter maxPutFileSize in DefaultServlet [tomcat]

2025-02-20 Thread via GitHub
Chenjp commented on PR #823: URL: https://github.com/apache/tomcat/pull/823#issuecomment-2673452793 > > Rate limiter filter, or WAF can detect and block those requests. > > Either of those two can also provide the limits you are requesting, here. Adding a feature to Tomcat which requi

Buildbot success in on tomcat-11.0.x

2025-02-20 Thread buildbot
Build status: Build succeeded! Worker used: bb_worker2_ubuntu URL: https://ci2.apache.org/#builders/112/builds/1531 Blamelist: remm Build Text: build successful Status Detected: restored build Build Source Stamp: [branch 11.0.x] 6c9817e102ffbb8b3a896ef5b55e82b9fe8b5eec Steps: worker_preparati

Buildbot failure in on tomcat-11.0.x

2025-02-20 Thread buildbot
Build status: BUILD FAILED: failed compile (failure) Worker used: bb_worker2_ubuntu URL: https://ci2.apache.org/#builders/112/builds/1530 Blamelist: remm Build Text: failed compile (failure) Status Detected: new failure Build Source Stamp: [branch 11.0.x] ae67bb4bb6eaf2f5aa2d3eecccea8406878e501b

(tomcat) branch 9.0.x updated: Further improve with feedback from 69575

2025-02-20 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 2f285843e6 Further improve with feedback from 69575

[Bug 69575] org.apache.coyote.CompressionConfig doesn't recognize "zstd" compression

2025-02-20 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=69575 Remy Maucherat changed: What|Removed |Added Resolution|--- |FIXED Status|REOPENED

(tomcat) branch 10.1.x updated: Further improve with feedback from 69575

2025-02-20 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.1.x by this push: new e62b04efe1 Further improve with feedback from 6957

(tomcat) branch 11.0.x updated: Further improve with feedback from 69575

2025-02-20 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 11.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/11.0.x by this push: new 6c9817e102 Further improve with feedback from 6957

(tomcat) branch main updated: Further improve with feedback from 69575

2025-02-20 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 080fa6cf7e Further improve with feedback from 69575 08

(tomcat) branch 10.1.x updated: Update with transfer-encoding support

2025-02-20 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.1.x by this push: new 47adb1053f Update with transfer-encoding support 4

(tomcat) branch 9.0.x updated: Update with transfer-encoding support

2025-02-20 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new ac14646dba Update with transfer-encoding support ac1

(tomcat) branch 11.0.x updated: Update with transfer-encoding support

2025-02-20 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 11.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/11.0.x by this push: new ae67bb4bb6 Update with transfer-encoding support a

(tomcat) branch main updated: Update with transfer-encoding support

2025-02-20 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 2eb8e19552 Update with transfer-encoding support 2eb8e

(tomcat) 02/02: Improve CVE-2024-56337 protection

2025-02-20 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 11.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 413d82fab675d43653bda5513ae7cfc777c80c2c Author: Mark Thomas AuthorDate: Thu Feb 20 16:45:02 2025 + Improve CVE-

(tomcat) 01/02: Remove the case sensitivity check

2025-02-20 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 11.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 4ea9c0043f569fba3e63c7982b081539ad72c080 Author: Mark Thomas AuthorDate: Thu Feb 20 12:49:53 2025 + Remove the c

(tomcat) branch 11.0.x updated (d93b96e085 -> 413d82fab6)

2025-02-20 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a change to branch 11.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git from d93b96e085 Remove unnecessary configuration new 4ea9c0043f Remove the case sensitivity check new 413d82fab6 I

[Bug 69575] org.apache.coyote.CompressionConfig doesn't recognize "zstd" compression

2025-02-20 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=69575 --- Comment #5 from Remy Maucherat --- It seems to me it's a good time to (finally) add transfer-encoding support since it's the right way to do this. Nobody will use it though ;) It would be used if the client submits a "TE: gzip" header, and

Re: Further improvements to the CVE-2024-56337 protection

2025-02-20 Thread Mark Thomas
On 20/02/2025 13:52, Rémy Maucherat wrote: On Thu, Feb 20, 2025 at 2:42 PM Mark Thomas wrote: On 20/02/2025 13:36, Rémy Maucherat wrote: On Thu, Feb 20, 2025 at 1:06 PM Mark Thomas wrote: All, The recent releases have improved things for users of embedded Tomcat but there are still some i

Re: [PR] BZ69446 - add parameter maxPutFileSize in DefaultServlet [tomcat]

2025-02-20 Thread via GitHub
ChristopherSchultz commented on PR #823: URL: https://github.com/apache/tomcat/pull/823#issuecomment-2671713171 > > The feedback was that this serves no purpose. I believe it is correct. > > For processing of POST and some others like that, processing takes memory. Also we do not know wha

Re: Further improvements to the CVE-2024-56337 protection

2025-02-20 Thread Rémy Maucherat
On Thu, Feb 20, 2025 at 2:42 PM Mark Thomas wrote: > > On 20/02/2025 13:36, Rémy Maucherat wrote: > > On Thu, Feb 20, 2025 at 1:06 PM Mark Thomas wrote: > >> > >> All, > >> > >> The recent releases have improved things for users of embedded Tomcat > >> but there are still some issues. I am seeing

Re: Further improvements to the CVE-2024-56337 protection

2025-02-20 Thread Mark Thomas
On 20/02/2025 13:36, Rémy Maucherat wrote: On Thu, Feb 20, 2025 at 1:06 PM Mark Thomas wrote: All, The recent releases have improved things for users of embedded Tomcat but there are still some issues. I am seeing reports via $work related to Spring Boot. The problem is on Windows and Mac. T

Re: Further improvements to the CVE-2024-56337 protection

2025-02-20 Thread Rémy Maucherat
On Thu, Feb 20, 2025 at 1:06 PM Mark Thomas wrote: > > All, > > The recent releases have improved things for users of embedded Tomcat > but there are still some issues. I am seeing reports via $work related > to Spring Boot. > > The problem is on Windows and Mac. The file systems are case insensit

Re: [PR] WebResource read/write lock key changed to in lowercase arbitrarily [tomcat]

2025-02-20 Thread via GitHub
Chenjp closed pull request #829: WebResource read/write lock key changed to in lowercase arbitrarily URL: https://github.com/apache/tomcat/pull/829 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to th

(tomcat) branch main updated: Remove the case sensitivity check

2025-02-20 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 82367b3891 Remove the case sensitivity check 82367b38

(tomcat) branch 11.0.x updated: Remove unnecessary configuration

2025-02-20 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 11.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/11.0.x by this push: new d93b96e085 Remove unnecessary configuration d93b9

Further improvements to the CVE-2024-56337 protection

2025-02-20 Thread Mark Thomas
All, The recent releases have improved things for users of embedded Tomcat but there are still some issues. I am seeing reports via $work related to Spring Boot. The problem is on Windows and Mac. The file systems are case insensitive and DirResourceSet instances are read/write by default so

Re: [PR] Simplify usage of custom ssl configuration [tomcat]

2025-02-20 Thread via GitHub
Hakky54 commented on PR #805: URL: https://github.com/apache/tomcat/pull/805#issuecomment-2671109381 Hi @markt-asf any thoughts regarding this pr? Would love to get your opinion/feedback as we have worked together on the other pr in the past -- This is an automated message from the Apache