Fwd: svn commit: r1877430 - /comdev/projects.apache.org/trunk/data/projects.xml

2020-05-06 Thread sebb AT ASF
Please update project.xml with the new location. -- Forwarded message - From: Date: Wed, 6 May 2020 at 12:39 Subject: svn commit: r1877430 - /comdev/projects.apache.org/trunk/data/projects.xml To: Author: sebb Date: Wed May 6 11:39:14 2020 New Revision: 1877430 URL: http

Fwd: Cannot find doap file: http://svn.apache.org/repos/asf/tomcat/taglibs/rdc/trunk/doap_rdc.rdf

2020-04-29 Thread sebb
Please can someone update https://svn.apache.org/repos/asf/comdev/projects.apache.org/trunk/data/projects.xml with the new location of the DOAP? Thanks. -- Forwarded message - From: Projects Date: Wed, 29 Apr 2020 at 03:01 Subject: Cannot find doap file: http://svn.apache.org/repo

Fwd: Error when processing doap file http://svn.apache.org/repos/asf/tomcat/site/trunk/docs/doap_Tomcat.rdf:

2019-02-27 Thread sebb
Please can you fix the syntax error in the DOAP? -- Forwarded message - From: Projects Date: Wed, 27 Feb 2019 at 02:03 Subject: Error when processing doap file http://svn.apache.org/repos/asf/tomcat/site/trunk/docs/doap_Tomcat.rdf: To: Site Development URL: http://svn.apache.or

Re: [ANN] Apache Tomcat Connectors 1.2.43 released

2018-03-07 Thread sebb
What is the project about? Why should I be interested in it? [rhetorical questions] The Announce emails are sent to people not on the developer or user lists. Most will have no idea what the project is about. So the e-mails should contain at least brief details of what the product does, and some

Re: [ANN] Apache Tomcat 7.0.84 released

2018-01-25 Thread sebb
Might be an idea to include a link to the main Tomcat page somewhere in the announce? On 25 January 2018 at 08:44, Violeta Georgieva wrote: > The Apache Tomcat team announces the immediate availability of Apache > Tomcat 7.0.84. > > Apache Tomcat is an open source software implementation of the J

Re: svn commit: r1817993 - /gump/metadata/project/tomcat-trunk.xml

2017-12-15 Thread sebb
On 14 December 2017 at 15:20, Mark Thomas wrote: > On 14/12/17 13:18, Konstantin Kolinko wrote: >> Hi, Mark! >> >> To dev@tomcat, cc: general@gump. >> >> >> The result of this change is that Gump building Tomcat downloads >> tar.gz for Commons-Daemon from mirrors. > > Drat. That wasn't the intenti

Re: [SECURITY] CVE-2015-5345 Apache Tomcat Directory disclosure

2016-02-22 Thread sebb
On 22 February 2016 at 11:23, Mark Thomas wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > CVE-2015-5345 Apache Tomcat Directory disclosure > > Severity: Low > > Vendor: The Apache Software Foundation > > Versions Affected: > - - Apache Tomcat 6.0.0 to 6.0.44 > - - Apache Tomcat 7.0.

Re: buildbot exception in ASF Buildbot on tomcat-8-trunk

2015-10-05 Thread sebb
On 5 October 2015 at 06:08, Christopher Schultz wrote: > All, > > On 10/5/15 12:22 AM, build...@apache.org wrote: >> The Buildbot has detected a build exception on builder tomcat-8-trunk while >> building ASF Buildbot. Full details are available at: >> http://ci.apache.org/builders/tomcat-8-t

Re: svn commit: r1686442 - /tomcat/trunk/java/org/apache/tomcat/util/http/FastHttpDateFormat.java

2015-06-19 Thread sebb
On 19 June 2015 at 17:06, wrote: > Author: remm > Date: Fri Jun 19 16:06:55 2015 > New Revision: 1686442 > > URL: http://svn.apache.org/r1686442 > Log: > Add IAE, although it cannot happen. > > Modified: > tomcat/trunk/java/org/apache/tomcat/util/http/FastHttpDateFormat.java > > Modified: >

Re: svn commit: r1686432 - /tomcat/trunk/java/org/apache/tomcat/util/http/FastHttpDateFormat.java

2015-06-19 Thread sebb
On 19 June 2015 at 16:16, wrote: > Author: remm > Date: Fri Jun 19 15:16:51 2015 > New Revision: 1686432 > > URL: http://svn.apache.org/r1686432 > Log: > Remove unused shared formats. > > Modified: > tomcat/trunk/java/org/apache/tomcat/util/http/FastHttpDateFormat.java > > Modified: > tomcat

Re: svn commit: r1681300 - in /tomcat/native/trunk: build.properties.default build.xml java/ java/org/ java/org/apache/ java/org/apache/tomcat/ java/org/apache/tomcat/Apr.java java/org/apache/tomcat/a

2015-06-19 Thread sebb
On 23 May 2015 at 10:44, wrote: > Author: rjung > Date: Sat May 23 09:44:41 2015 > New Revision: 1681300 > > URL: http://svn.apache.org/r1681300 > Log: > Make tcnative trunk more consistent with 1.1 branch: > > - use externals for jni Java classes, but here > pointing to TC trunk > > - remove d

Re: [SECURITY] CVE-2014-0227 Apache Tomcat Request Smuggling

2015-02-09 Thread sebb
On 9 February 2015 at 09:12, Mark Thomas wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > CVE-2014-0227 Request Smuggling > > Severity: Important > > Vendor: The Apache Software Foundation > > Versions Affected: > - - Apache Tomcat 8.0.0-RC1 to 8.0.8 > - - Apache Tomcat 7.0.0 to 7.0.54

Re: Recreate missing TC commit emails

2014-12-06 Thread sebb
On 6 December 2014 at 16:48, Rainer Jung wrote: > Am 06.12.2014 um 15:17 schrieb sebb: >> >> On 6 December 2014 at 13:19, Rainer Jung wrote: >>> >>> The following commit emails are missing currently for the TC project: >>> > ... > >>> T

Re: Recreate missing TC commit emails

2014-12-06 Thread sebb
On 6 December 2014 at 13:19, Rainer Jung wrote: > The following commit emails are missing currently for the TC project: > > r1643041 > r1643045 > r1643054 > r1643055 > r1643065 > r1643066 > r1643069 > r1643100 > r1643104 > r1643109 > r1643121 > r1643126 > > The list was crated by comparing the mai

Re: svn commit: r1629770 - /tomcat/jk/trunk/xdocs/miscellaneous/changelog.xml

2014-10-07 Thread sebb
On 6 October 2014 22:38, wrote: > Author: rjung > Date: Mon Oct 6 21:38:24 2014 > New Revision: 1629770 > > URL: http://svn.apache.org/r1629770 > Log: > Typo in changelog. > > Modified: > tomcat/jk/trunk/xdocs/miscellaneous/changelog.xml > > Modified: tomcat/jk/trunk/xdocs/miscellaneous/chan

Tomcat BCEL and Commons BCEL

2014-09-14 Thread sebb
It seems that Tomcat's version of BCEL is diverging significantly from Commons BCEL. Is there any mileage in trying to re-organise Commons BCEL so it is more easily usable by Tomcat? For example, I gather that Tomcat only uses a small portion of Commons BCEL. Maybe the Commons code could be divid

Re: svn commit: r1622302 - in /tomcat/tc7.0.x/trunk: ./ java/org/apache/catalina/connector/Request.java test/org/apache/catalina/connector/TestRequest.java test/org/apache/catalina/connector/TesterReq

2014-09-14 Thread sebb
On 4 September 2014 10:52, Mark Thomas wrote: > On 04/09/2014 10:50, Mark Thomas wrote: >> On 04/09/2014 10:16, Mark Thomas wrote: >>> On 04/09/2014 10:11, Mark Thomas wrote: On 04/09/2014 08:05, Martin Grigorov wrote: > On Wed, Sep 3, 2014 at 8:37 PM, wrote: > >> Author: markt >

Re: git (yet again)

2014-09-03 Thread sebb
On 3 September 2014 16:10, Martin Grigorov wrote: > On Wed, Sep 3, 2014 at 2:54 PM, Stefan Bodewig wrote: > >> On 2014-09-03, sebb wrote: >> >> > Maybe it's possible to configure the commit messages so that diffs are >> > shown; if not, then perhaps

Re: git (yet again)

2014-09-03 Thread sebb
On 3 September 2014 10:41, Rainer Jung wrote: > > Am 02.09.2014 um 18:41 schrieb Mark Thomas: > >> I've been looking at this again (anything to get a break from writing >> parsers for cookies) and chatting with some of the infra folks that look >> after the ASF's git repos. >> >> There are a coupl

Re: git (yet again)

2014-09-02 Thread sebb
On 2 September 2014 20:25, Filip Hanik wrote: > On Tue, Sep 2, 2014 at 10:52 AM, Rémy Maucherat wrote: > >> 2014-09-02 18:41 GMT+02:00 Mark Thomas : >> >> > I'm leaning towards A myself. >> > > > The move to git clears a huge hurdle, and that is managing contributions. > The patch system is very

Re: [Tomcat Wiki] Update of "Security/Heartbleed" by KonstantinKolinko

2014-04-18 Thread sebb
On 18 April 2014 14:56, Apache Wiki wrote: > The "Security/Heartbleed" page has been changed by KonstantinKolinko: > https://wiki.apache.org/tomcat/Security/Heartbleed?action=diff&rev1=10&rev2=11 > + 1. Update OpenSSL to a version that includes the fix. The natural version > number for this is

Re: [Bug 50078] Concurrent access to WeakHashMap in ConcurrentCache causes infinite loop, 100% CPU usage

2014-04-16 Thread sebb
On 16 April 2014 11:04, Mark Thomas wrote: > On 16/04/2014 10:56, Konstantin Kolinko wrote: >> 2014-04-16 13:48 GMT+04:00 Mark Thomas : >>> On 16/04/2014 10:36, bugzi...@apache.org wrote: https://issues.apache.org/bugzilla/show_bug.cgi?id=50078 --- Comment #4 from Andrea Wilson ---

Re: [off-list] Heartbleed info

2014-04-14 Thread sebb
On 14 April 2014 21:34, Mark Thomas wrote: > On 14/04/2014 20:45, Tim Whittington wrote: >> >> On 15/04/2014, at 1:26 am, Christopher Schultz >> wrote: >> >>> Mark, >>> >>> On 4/13/14, 10:29 AM, Mark Thomas wrote: On 13/04/2014 08:18, Christopher Schultz wrote: > Mark, > > On 4/

Re: [Bug 56248] Automatic deployment with TCD deletes customized context.xml file

2014-03-13 Thread sebb
On 13 March 2014 15:30, wrote: > https://issues.apache.org/bugzilla/show_bug.cgi?id=56248 > > Mark Thomas changed: > >What|Removed |Added > > Status|NEW

Re: Git

2014-02-24 Thread sebb
AIUI SVN will still be mandated by Infra for - release publishing - site publishing Release publishing should not cause an issue. However site publishing may perhaps be tricker to do from a GIT repo; might need to consider leaving site docs in SVN. On 24 February 2014 17:43, Jeremy Boynes wrote

Re: ASF svn server certficate + svn client

2014-02-21 Thread sebb
On 21 February 2014 16:09, sebb wrote: > The certs were changed recently. The new fingerprints should be on the > infra website somewhere. > > A quick search found the outdated details for svn.apache.org: > > http://www.apache.org/dev/version-control.html#cert I've upda

Re: ASF svn server certficate + svn client

2014-02-21 Thread sebb
The certs were changed recently. The new fingerprints should be on the infra website somewhere. A quick search found the outdated details for svn.apache.org: http://www.apache.org/dev/version-control.html#cert The uptodate list seems to be here: http://www.apache.org/dev/machines.html#ssl-keys

Re: Improvement fo org.apache.tomcat.util.net.jsse.JSSESupport class

2014-02-05 Thread sebb
On 5 February 2014 15:14, Mark Thomas wrote: > On 05/02/2014 14:56, Maxim Kirilov wrote: >> Hi, >> >> I've noticed that some code inside *handshake()* method can be omitted. >> After executing the >> call to: *ssl.startHandshake()*, according to SSLSocket >>

Re: Permissions to create release directory for taglibs?

2014-01-02 Thread sebb
On 2 January 2014 22:24, Jeremy Boynes wrote: > On Dec 29, 2013, at 3:10 PM, Mark Thomas wrote: >> >> > I’ve uploaded a copy of the source release here: >> > https://dist.apache.org/repos/dist/dev/tomcat/taglibs/taglibs-standard-1.2.1/ >> > >> > Is that what you had in mind? Do I just svn mv tha

Re: [Tomcat Wiki] Update of "Cookies" by markt

2014-01-01 Thread sebb
On 1 January 2014 18:32, Jeremy Boynes wrote: > On Dec 31, 2013, at 12:46 PM, Mark Thomas wrote: > >> Signed PGP part >> On 31/12/2013 20:29, Mark Thomas wrote: >> > On 31/12/2013 17:03, Jeremy Boynes wrote: >> >> On Dec 31, 2013, at 3:55 AM, Mark Thomas >> >> wrote: >> > >> >>> On 31/12/2013 11

Re: [VOTE] Release Apache Tomcat 8.0.0-RC10

2013-12-19 Thread sebb
On 19 December 2013 18:38, Mark Thomas wrote: > The proposed Apache Tomcat 8.0.0 release candidate 10 is now available > for voting. > > Given this is a release candidate I am working on the basis that it is > equivalent to an alpha. The main changes since RC5 are: > - Better handling of generic t

Re: [ANN] Apache Tomcat Native 1.1.29 released

2013-12-19 Thread sebb
Thanks! On 19 December 2013 10:09, Konstantin Kolinko wrote: > 2013/12/16 sebb : >> On 15 October 2013 14:53, Mladen Turk wrote: >>> The Apache Tomcat team announces the immediate availability of Apache >>> Tomcat Native 1.1.29 stable. >> >> Please

Re: svn commit: r1551729 - /tomcat/tc7.0.x/trunk/test/org/apache/catalina/websocket/TestWebSocket.java

2013-12-17 Thread sebb
On 17 December 2013 21:43, wrote: > Author: rjung > Date: Tue Dec 17 21:43:02 2013 > New Revision: 1551729 > > URL: http://svn.apache.org/r1551729 > Log: > Fix occasional test failure. > > The WebSocketClient first read headers via > a BufferedReader, then tried to read the body > via the underly

Re: [ANN] Apache Tomcat Native 1.1.29 released

2013-12-16 Thread sebb
On 15 October 2013 14:53, Mladen Turk wrote: > The Apache Tomcat team announces the immediate availability of Apache > Tomcat Native 1.1.29 stable. Please can someone now remove the old version? https://dist.apache.org/repos/dist/release/tomcat/tomcat-connectors/native/1.1.28/ -

Re: Tagging 7.0.47

2013-10-17 Thread sebb
Please note https://issues.apache.org/bugzilla/show_bug.cgi?id=55663 The text in the NOTICE file is wrong. On 17 October 2013 13:15, Violeta Georgieva wrote: > Hi, > > I'm starting with Tomcat 7.0.47 tagging. > > Regards > Violeta

Re: Recent tcnative null-dereference with 8.0.0-RC3 and 7.0.45 [tcnative-1.dll+0x7e23]

2013-10-03 Thread sebb
On 2 October 2013 06:18, Mladen Turk wrote: > On 10/01/2013 07:32 PM, sebb wrote: >> >> >> If a Java application succeeds in crashing the JVM, then IMO the JVM >> has a bug. I believe that all native code should strive to behave the >> same way. >> >

Re: Recent tcnative null-dereference with 8.0.0-RC3 and 7.0.45 [tcnative-1.dll+0x7e23]

2013-10-01 Thread sebb
On 1 October 2013 15:47, Christopher Schultz wrote: > Mladen, > > On 10/1/13 10:39 AM, Mladen Turk wrote: >> On 10/01/2013 04:15 PM, Christopher Schultz wrote: >>> Mladen and Rainer, > > -1. You are just hiding the reason for crash. >>> >>> I disagree: the reason for the crash can still be

Re: International characters in source files and SVN commit messages (was: RE:r1525975)

2013-09-26 Thread sebb
On 26 September 2013 23:29, Konstantin Kolinko wrote: > 2013/9/26 sebb : >> On 25 September 2013 17:02, Konstantin Preißer wrote: >>> Mark, >>> >>>> -Original Message- >>>> From: Mark Thomas [mailto:ma...@apache.org] >>>> S

Re: [VOTE] Release Apache Tomcat 7.0.45

2013-09-26 Thread sebb
On 26 September 2013 19:46, Konstantin Preißer wrote: > Hi Rainer, > >> -Original Message- >> From: Rainer Jung [mailto:rainer.j...@kippdata.de] >> Sent: Thursday, September 26, 2013 8:22 PM > >> Any chance you can try current trunk? Mark added more fixes to >> AprEndpoint after r1523781.

Re: International characters in source files and SVN commit messages (was: RE:r1525975)

2013-09-26 Thread sebb
On 25 September 2013 17:02, Konstantin Preißer wrote: > Mark, > >> -Original Message- >> From: Mark Thomas [mailto:ma...@apache.org] >> Sent: Wednesday, September 25, 2013 5:54 PM > >> I'd say yes. Property files are a 'special' case: >> http://stackoverflow.com/questions/4659929/how-to-us

Re: Issues in Apache Taglibs 1.2.0-RC1

2013-09-20 Thread sebb
On 18 September 2013 08:01, Jeremy Boynes wrote: > On Sep 15, 2013, at 4:49 PM, sebb wrote: > >> On 14 September 2013 17:09, Jeremy Boynes wrote: >>> >>> I think addressed those issues in the following changes: >>> http://svn.apache.org/r1512150 >

Re: [RESULT] Was: [VOTE] Release Apache Tomcat Native 1.1.28

2013-09-16 Thread sebb
http://people.apache.org/committers-by-project.html#tomcat-pmc On 16 September 2013 14:47, Christopher Schultz wrote: > Mladen, > > On 9/16/13 1:43 AM, Mladen Turk wrote: >> With 5 bining (Mark, Rainer, Henri, Chris, Mladen) > > I'm not sure I'm binding, though it does not matter as you still hav

Re: Issues in Apache Taglibs 1.2.0-RC1

2013-09-15 Thread sebb
On 14 September 2013 17:09, Jeremy Boynes wrote: > On Aug 7, 2013, at 4:41 AM, sebb wrote: > >> On 2 August 2013 20:32, Jeremy Boynes wrote: >>> A proposed release candidate Apache Taglibs 1.2.0-RC1 is now available for >>> voting. >>> >>> Th

Re: svn commit: r1523127 - /tomcat/native/branches/1.1.x/xdocs/miscellaneous/changelog.xml

2013-09-14 Thread sebb
On 13 September 2013 23:14, wrote: > Author: schultz > Date: Fri Sep 13 22:14:13 2013 > New Revision: 1523127 > > URL: http://svn.apache.org/r1523127 > Log: > Added changelog item to match the patch in r1518225. > > Modified: > tomcat/native/branches/1.1.x/xdocs/miscellaneous/changelog.xml >

Re: svn commit: r1522018 - in /tomcat/trunk/webapps/docs: images/docs-stylesheet-ie-fix.css images/docs-stylesheet.css tomcat-docs.xsl

2013-09-11 Thread sebb
On 11 September 2013 21:09, wrote: > Author: markt > Date: Wed Sep 11 20:09:40 2013 > New Revision: 1522018 > > URL: http://svn.apache.org/r1522018 > Log: > IE <=9 fixes without the conditional comments > IE8 now looks much better. ---

Re: Need guidance for writing unit tests for 55317

2013-08-21 Thread sebb
On 21 August 2013 20:21, Christopher Schultz wrote: > Sebb, > > On 8/21/13 1:46 PM, sebb wrote: >> On 21 August 2013 14:48, Christopher Schultz >> wrote: >>> Nick, >>> >>> On 8/20/13 8:24 PM, Nick Williams wrote: >>>> I ran in to a roa

Re: Need guidance for writing unit tests for 55317

2013-08-21 Thread sebb
On 21 August 2013 14:48, Christopher Schultz wrote: > Nick, > > On 8/20/13 8:24 PM, Nick Williams wrote: >> I ran in to a roadblock with this idea. Part of the byte code of a >> class includes the fully-qualified class name. If I create a class, >> say UnweavedClass, and replace its byte code in m

Re: [VOTE] Release Apache Taglibs 1.2.0-RC1

2013-08-07 Thread sebb
On 2 August 2013 20:32, Jeremy Boynes wrote: > A proposed release candidate Apache Taglibs 1.2.0-RC1 is now available for > voting. > > This is release candidate for an implementation of JSTL 1.2 and can be > obtained from the staging repo at: > https://repository.apache.org/content/repositori

Re: Various shell-scripting idioms in bin/daemon.sh

2013-07-18 Thread sebb
On 18 July 2013 10:13, Rainer Jung wrote: > On 18.07.2013 06:04, Mladen Turk wrote: >> On 07/17/2013 11:59 PM, sebb wrote: >>> Regardless, please consider documenting the script to explain why it >>> does not use -n/-z if that is necessary to avoid bugs. >&g

Re: Various shell-scripting idioms in bin/daemon.sh

2013-07-17 Thread sebb
Regardless, please consider documenting the script to explain why it does not use -n/-z if that is necessary to avoid bugs. On 17 July 2013 20:26, Christopher Schultz wrote: > Mladen, > > On 7/17/13 1:07 PM, Mladen Turk wrote: >> On 07/17/2013 06:05 PM, sebb wrote: >

Re: Various shell-scripting idioms in bin/daemon.sh

2013-07-17 Thread sebb
On 17 July 2013 15:50, Mladen Turk wrote: > On 07/17/2013 04:01 PM, sebb wrote: >> >> May I suggest a short comment is added to the script to document why >> -z and -n are not used? >> Someone else reading the script in the future is going to wonder the >> same-

Re: Various shell-scripting idioms in bin/daemon.sh

2013-07-17 Thread sebb
On 17 July 2013 12:59, Mladen Turk wrote: > On 07/16/2013 11:42 PM, Christopher Schultz wrote: >> >> All, >> >> While doing the trivial fix for >> https://issues.apache.org/bugzilla/show_bug.cgi?id=55268, I noticed a >> few idioms being used in bin/daemon.sh that struck me as odd. For example: >>

Re: svn commit: r1495875 - in /tomcat/tc7.0.x/trunk: ./ build.xml webapps/docs/changelog.xml

2013-06-23 Thread sebb
On 23 June 2013 20:24, wrote: > Author: markt > Date: Sun Jun 23 19:24:21 2013 > New Revision: 1495875 > > URL: http://svn.apache.org/r1495875 > Log: > Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=55119 > Ensure that the build process produces Javadoc that is not vulnerable to > CVE-20

Re: CVE-2013-1571, VU#225657

2013-06-20 Thread sebb
On 20 June 2013 16:33, Christopher Schultz wrote: > Sebb, > > On 6/20/13 9:31 AM, sebb wrote: >> On 20 June 2013 14:16, Christopher Schultz >> wrote: >>> Sebb, >>> >>> On 6/19/13 4:26 AM, sebb wrote: >>>> On 19 June 2013 09:15, Mark T

Re: CVE-2013-1571, VU#225657

2013-06-20 Thread sebb
On 20 June 2013 14:16, Christopher Schultz wrote: > Sebb, > > On 6/19/13 4:26 AM, sebb wrote: >> On 19 June 2013 09:15, Mark Thomas wrote: >>> On 19/06/2013 00:42, Nick Williams wrote: >>>> >>>> Oracle has announced a Javadoc vulnerability (CVE-20

Re: CVE-2013-1571, VU#225657

2013-06-19 Thread sebb
On 19 June 2013 15:36, Mark Thomas wrote: > On 19/06/2013 15:12, sebb wrote: >> >> On 19 June 2013 14:12, Konstantin Kolinko wrote: >>> >>> 2013/6/19 sebb : >>>> >>>> On 19 June 2013 13:12, sebb wrote: >>>>> >>>>

Re: CVE-2013-1571, VU#225657

2013-06-19 Thread sebb
On 19 June 2013 14:12, Konstantin Kolinko wrote: > 2013/6/19 sebb : >> On 19 June 2013 13:12, sebb wrote: >>> On 19 June 2013 13:03, Nick Williams wrote: >>>> >>>> On Jun 19, 2013, at 3:15 AM, Mark Thomas wrote: >>>> >>>>> On

Re: CVE-2013-1571, VU#225657

2013-06-19 Thread sebb
On 19 June 2013 13:12, sebb wrote: > On 19 June 2013 13:03, Nick Williams wrote: >> >> On Jun 19, 2013, at 3:15 AM, Mark Thomas wrote: >> >>> On 19/06/2013 00:42, Nick Williams wrote: >>>> Oracle has announced a Javadoc vulnerability (CVE-2013-157

Re: CVE-2013-1571, VU#225657

2013-06-19 Thread sebb
On 19 June 2013 13:03, Nick Williams wrote: > > On Jun 19, 2013, at 3:15 AM, Mark Thomas wrote: > >> On 19/06/2013 00:42, Nick Williams wrote: >>> Oracle has announced a Javadoc vulnerability (CVE-2013-1571 [1], >>> VU#225657 [2]) whereby Javadoc generated with Java 5, Java 6, or Java >>> 7 < 7u25

Re: CVE-2013-1571, VU#225657

2013-06-19 Thread sebb
On 19 June 2013 09:15, Mark Thomas wrote: > On 19/06/2013 00:42, Nick Williams wrote: >> >> Oracle has announced a Javadoc vulnerability (CVE-2013-1571 [1], >> VU#225657 [2]) whereby Javadoc generated with Java 5, Java 6, or Java >> 7 < 7u25 is vulnerable to a frame injection attack. Oracle has >>

Re: Jar scanning, SCI scanning, fragment scanning

2013-06-14 Thread sebb
On 14 June 2013 17:35, Christopher Schultz wrote: > Mark, > > On 6/14/13 12:21 PM, Mark Thomas wrote: >> On 14/06/2013 16:57, Christopher Schultz wrote: >>> Mark, >>> >>> On 6/14/13 3:16 AM, Mark Thomas wrote: On 14/06/2013 03:31, Christopher Schultz wrote: > It might be nice if this

[jira] [Created] (MTOMCAT-226) Wasted work in AbstractCatalinaMojo#getManager()

2013-06-11 Thread Sebb (JIRA)
Sebb created MTOMCAT-226: Summary: Wasted work in AbstractCatalinaMojo#getManager() Key: MTOMCAT-226 URL: https://issues.apache.org/jira/browse/MTOMCAT-226 Project: Apache Tomcat Maven Plugin Issue

Re: OT: How do I subscribe to the Tomcat Dev/User lists with my @apache.org address?

2013-05-14 Thread sebb
On 15 May 2013 00:37, Christopher Schultz wrote: > Nick, > > On 5/14/13 6:35 PM, Nick Williams wrote: >> I recently became a committer on the Logging project and thus I now have an >> @apache.org address. Since it's a forwarding address, I'm having it forward >> to my Google Apps email address (

Re: svn commit: r1479953 - in /tomcat/tc7.0.x/trunk: ./ java/org/apache/tomcat/util/http/parser/HttpParser.java test/org/apache/tomcat/util/http/parser/TestMediaType.java webapps/docs/changelog.xml

2013-05-08 Thread sebb
On 7 May 2013 16:54, wrote: > Author: markt > Date: Tue May 7 15:54:36 2013 > New Revision: 1479953 > > URL: http://svn.apache.org/r1479953 > Log: > Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=54703 > Be tolerant of applications that pass CR or LF in setHeader() values. > Fix some whi

Re: [Tomcat Wiki] Update of "LocalBadContent" by ChuckCaldarale

2013-04-25 Thread sebb
Is all of that URL spammy? I specifically included most of the path because I thought there might be valid content elsewhere on the site. On 25 April 2013 13:46, Apache Wiki wrote: > Dear Wiki user, > > You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for > change notificat

Re: [Tomcat Wiki] Update of "LocalBadContent" by KonstantinKolinko

2013-04-16 Thread sebb
On 15 April 2013 15:43, Konstantin Kolinko wrote: > 2013/4/15 Pid : > > Is it me or has the wiki-spam been on the increase lately? > > > > Yes, > > I think it a constant stream, started a month ago. > > When I added some common phrases to the filter page (like "my\s+name") > it slowed for a week

Re: Use of JAXB api to process Base64 in Tomcat 7 and 8

2013-03-21 Thread sebb
On 21 March 2013 09:39, Mark Thomas wrote: > On 21/03/2013 05:35, Konstantin Kolinko wrote: >> Hi! >> >> Recent Mark's commits in Tomcat 7, 8 replaced custom >> implementations(*) of base64 >> with use of the following class from JAXB: >> >> javax.xml.bind.DatatypeConverter >> >> This affects base

Re: [Tomcat Wiki] Update of "LocalBadContent" by ChuckCaldarale

2013-03-21 Thread sebb
On 21 March 2013 17:48, Apache Wiki wrote: > Dear Wiki user, > > You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for > change notification. > > The "LocalBadContent" page has been changed by ChuckCaldarale: > http://wiki.apache.org/tomcat/LocalBadContent?action=diff&rev1=97&r

Re: [Tomcat Wiki] Update of "LocalBadContent" by ChuckCaldarale

2013-03-19 Thread sebb
On 18 March 2013 21:54, Mark Thomas wrote: > On 18/03/2013 21:46, Apache Wiki wrote: >> Dear Wiki user, >> >> You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for >> change notification. >> >> The "LocalBadContent" page has been changed by ChuckCaldarale: > > I've raised it be

Re: [Tomcat Wiki] Update of "LocalBadContent" by KonstantinKolinko

2013-03-19 Thread sebb
On 19 March 2013 16:06, Apache Wiki wrote: > Dear Wiki user, > > You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for > change notification. > > The "LocalBadContent" page has been changed by KonstantinKolinko: > http://wiki.apache.org/tomcat/LocalBadContent?action=diff&rev1=8

Re: Checkstyle errors in storeconfig in trunk

2013-02-09 Thread sebb
On 9 February 2013 09:42, Remy Maucherat wrote: > On Sat, 2013-02-09 at 05:19 +0400, Konstantin Kolinko wrote: >> 2013/2/8 Konstantin Kolinko : >> > Hi! >> > >> > FYI, there are a lot of checkstyle errors in o.a.c.storeconfig package, >> > >> > a) tabs in server-registry.xml >> > b) a lot of trail

Re: svn commit: r1440892 - in /tomcat/maven-plugin/trunk/tomcat7-war-runner/src/main/java/org/apache/tomcat/maven/runner: Tomcat7Runner.java Tomcat7RunnerCli.java

2013-01-31 Thread sebb
On 31 January 2013 09:58, wrote: > Author: olamy > Date: Thu Jan 31 09:58:49 2013 > New Revision: 1440892 > > URL: http://svn.apache.org/viewvc?rev=1440892&view=rev > Log: > fix possible values for clientAuth > > Modified: > > tomcat/maven-plugin/trunk/tomcat7-war-runner/src/main/java/org/ap

Re: svn commit: r1397522 - in /tomcat/trunk/java/javax/net: ./ websocket/ websocket/annotations/ websocket/extensions/

2012-10-16 Thread sebb
On 12 October 2012 13:39, Mark Thomas wrote: > On 12/10/2012 13:24, Martin Grigorov wrote: > > Please use quoting, particularly when you have a few short comments on a > very large e-mail. Without quoting, your comments were more effort to find. > >>> Added: tomcat/trunk/java/javax/net/websocket/H

Re: Re-factoring TLD parsing

2012-08-17 Thread sebb
On 17 August 2012 05:00, Christopher Schultz wrote: > Sebb, > > On 8/16/12 7:11 PM, sebb wrote: >> On 16 August 2012 23:44, Christopher Schultz >> wrote: >>> >>> I had a conversation in Vancouver with David Blevins about the scourge >>> o

Re: Re-factoring TLD parsing

2012-08-16 Thread sebb
On 16 August 2012 23:44, Christopher Schultz wrote: > All, > > The first item in the TOMCAT-NEXT.txt is this: > > 1. Refactor the TLD parsing. TLDs are currently parsed twice. Once by > Catalina looking for listeners and once by Jasper. > > I had a conversation in Vancouver with David Blevins

Re: svn commit: r1358055 - in /tomcat/trunk: java/org/apache/catalina/connector/ java/org/apache/catalina/core/ java/org/apache/coyote/ java/org/apache/coyote/ajp/ java/org/apache/coyote/http11/ java/

2012-08-03 Thread sebb
On 6 July 2012 07:53, wrote: > Author: fhanik > Date: Fri Jul 6 06:53:52 2012 > New Revision: 1358055 > > URL: http://svn.apache.org/viewvc?rev=1358055&view=rev > Log: > implement rev 1 of async/non blocking writes > > > Modified: > tomcat/trunk/java/org/apache/coyote/http11/InternalNioOutputB

Re: [tomcat-maven-plugin] Is it only for Maven 3 and later? (was: svn commit r1367640)

2012-08-02 Thread sebb
On 1 August 2012 19:39, Konstantin Kolinko wrote: > 2012/7/31 : >> Author: olamy >> Date: Tue Jul 31 16:01:20 2012 >> New Revision: 1367640 >> >> URL: http://svn.apache.org/viewvc?rev=1367640&view=rev >> Log: >> [MTOMCAT-157] use new Maven Plugins annotations. done for tomcat6 mojos. >> >> Modifi

Re: svn commit: r1364419 - /tomcat/trunk/java/org/apache/catalina/tribes/group/interceptors/TcpPingInterceptor.java

2012-07-22 Thread sebb
On 22 July 2012 20:55, wrote: > Author: markt > Date: Sun Jul 22 19:55:50 2012 > New Revision: 1364419 > > URL: http://svn.apache.org/viewvc?rev=1364419&view=rev > Log: > Fingbugs: Fix possible NPE > > Modified: > > tomcat/trunk/java/org/apache/catalina/tribes/group/interceptors/TcpPingInter

Re: svn commit: r1358055 - in /tomcat/trunk: java/org/apache/catalina/connector/ java/org/apache/catalina/core/ java/org/apache/coyote/ java/org/apache/coyote/ajp/ java/org/apache/coyote/http11/ java/

2012-07-16 Thread sebb
On 6 July 2012 07:53, wrote: > Author: fhanik > Date: Fri Jul 6 06:53:52 2012 > New Revision: 1358055 > > URL: http://svn.apache.org/viewvc?rev=1358055&view=rev > Log: > implement rev 1 of async/non blocking writes > > @@ -146,8 +226,12 @@ public class InternalNioOutputBuffer ext > * @thro

Re: svn commit: r1360729 - in /tomcat/trunk: ./ modules/jdbc-pool/src/test/java/org/apache/tomcat/jdbc/test/driver/ res/dbcp/

2012-07-16 Thread sebb
mmons dev list. If no-one brings it > up sooner, I'll bring it up once Pool2 is sorted as work will naturally > move to dbcp2 at that point. > > Mark > >> >> - Original Message - >>> From: "sebb" >>> To: "Tomcat Developers

Re: svn commit: r1360729 - in /tomcat/trunk: ./ modules/jdbc-pool/src/test/java/org/apache/tomcat/jdbc/test/driver/ res/dbcp/

2012-07-14 Thread sebb
Do these patches need to be fed back to Commons DBCP? Or do they only apply to the version embedded by Tomcat? On 14 July 2012 21:47, Rainer Jung wrote: > On 14.07.2012 22:25, Filip Hanik Mailing Lists wrote: >> >> I know, it's the same patch for DBCP as for DBCP2. > > > Roger that. > > >> we ca

Re: [VOTE] Release Apache Tomcat 7.0.28

2012-06-15 Thread sebb
On 15 June 2012 10:14, Mark Thomas wrote: > The proposed Apache Tomcat 7.0.28 release is now available for voting. > > It can be obtained from: > https://dist.apache.org/repos/dist/dev/tomcat/tomcat-7/v7.0.28/ The NOTICE file for the source archive includes references to Nullsoft and Eclipse whic

Re: [ANN] Apache Tomcat Native 1.1.24 released

2012-06-14 Thread sebb
On 14 June 2012 15:58, Mladen Turk wrote: > The Apache Tomcat team announces the immediate availability of Apache > Tomcat Native 1.1.24 stable. Please include a brief synopsis (1 or 2 sentences) of the purpose of the TLP/Product in all announcements sent outside the TLP mailing lists. The devel

Re: native connector tool chain

2012-05-24 Thread sebb
On 21 May 2012 21:01, Mark Thomas wrote: > On 21/05/2012 17:52, Mladen Turk wrote: >> On 05/21/2012 02:05 PM, Mark Thomas wrote: >>> I am trying to build the 1.1.x native connector from trunk so I can test >>> the changes I plan to make to support per socket time outs. I can build >>> using dynami

Re: [VOTE] Release Apache Tomcat Connectors 1.2.36

2012-05-11 Thread sebb
On 9 May 2012 15:25, Mladen Turk wrote: > Hi, > > Apache Tomcat Connectors 1.2.36 release candidate is ready > for vote at [1]. This version solves shared memorz regression(s) > found in released version 1.2.35 and allows )again= compiling > against old httpd 1.3.x. > > > The VOTE will remain open

Re: svn commit: r1336516 - in /tomcat/tc7.0.x/trunk: ./ java/org/apache/tomcat/util/net/AbstractEndpoint.java webapps/docs/changelog.xml

2012-05-10 Thread sebb
On 10 May 2012 08:50, wrote: > Author: rjung > Date: Thu May 10 07:50:29 2012 > New Revision: 1336516 > > URL: http://svn.apache.org/viewvc?rev=1336516&view=rev > Log: > Add public method to retrieve the current connectionCount > from an endpoint. > > It will also show up in the ThreadPool MBean.

Re: Taglibs build #2 failed due to Hudson error

2012-03-31 Thread sebb
On 31 March 2012 03:23, Jeremy Boynes wrote: > From the log: > https://builds.apache.org/job/taglib-standard/2/consoleText > > Parsing POMs > ERROR: Failed to parse POMs > hudson.util.IOException2: remote file operation failed: > /home/jenkins/jenkins-slave/workspace/taglib-standard at > hudson.

Re: [VOTE] Release Apache Taglibs Parent POM 2

2012-03-24 Thread sebb
On 24 March 2012 14:45, Jeremy Boynes wrote: > The proposed 2 release of Apache Taglibs Parent POM is now available for > voting. > > This release addresses issues found during the 1 release process including > duplicate LICENSE files and poor site configuration. > > The Maven staging repo is: >

Re: License/Notice Files

2012-03-20 Thread sebb
n. If in the future we add > dependencies with notice requirements we can add that to the particular > module at that time. OK, great. > On Mar 4, 2012, at 5:40 PM, sebb wrote: > >> On 4 March 2012 03:44, Jeremy Boynes wrote: >>> On Feb 29, 2012, at 11:37 AM, sebb wr

Re: License/Notice Files

2012-03-04 Thread sebb
On 4 March 2012 03:44, Jeremy Boynes wrote: > On Feb 29, 2012, at 11:37 AM, sebb wrote: > >> On 29 February 2012 19:15, Olivier Lamy wrote: >>> Perso, I prefer using something which read pom and generate >>> automatically N&L from metadatas rather than maintai

Re: svn commit: r1295724 - in /tomcat/trunk/webapps/examples/WEB-INF: classes/websocket/EchoMessage.java web.xml

2012-03-02 Thread sebb
On 1 March 2012 18:27, wrote: > Author: fhanik > Date: Thu Mar  1 18:27:56 2012 > New Revision: 1295724 > > URL: http://svn.apache.org/viewvc?rev=1295724&view=rev > Log: > Allow the examples to configure the buffer on the fly > > Modified: >    tomcat/trunk/webapps/examples/WEB-INF/classes/websoc

Re: [VOTE] Release Apache Taglibs Parent POM 1

2012-02-29 Thread sebb
OV) AFAICT that just moves the work from maintaining the N&L to creating and maintaining the metadata. It also means that the N&L files are not present in SVN (unless they are checked in after generation). > BTW Did you create any issues for that ? > > 2012/2/29 sebb : >> O

Re: [VOTE] Release Apache Taglibs Parent POM 1

2012-02-29 Thread sebb
t; On Feb 29, 2012, at 9:14 AM, sebb wrote: > >> On 29 February 2012 05:11, Konstantin Kolinko wrote: >>> 2012/2/29 Jeremy Boynes : >>>> Removed from svn. A dry run of the next release shows they are >>>> automatically added to the source bundle. >&g

Re: svn commit: r1294943 - in /tomcat/taglibs/taglibs-parent/trunk: LICENSE.txt NOTICE.txt

2012-02-29 Thread sebb
On 29 February 2012 02:19, wrote: > Author: jboynes > Date: Wed Feb 29 02:19:53 2012 > New Revision: 1294943 > > URL: http://svn.apache.org/viewvc?rev=1294943&view=rev > Log: > remove LICENCE.txt and NOTICE.txt as they are automatically added by Maven > release process -1 I think that's the wr

Re: [VOTE] Release Apache Taglibs Parent POM 1

2012-02-29 Thread sebb
s parent pom. > > Best regards, > Konstantin Kolinko > > >> On Feb 28, 2012, at 12:12 PM, Mladen Turk wrote: >> >>> On 02/28/2012 08:57 PM, sebb wrote: >>>> On 28 February 2012 16:43, Mladen Turk  wrote: >>>>> >>>>> Although

Re: [VOTE] Release Apache Taglibs Parent POM 1

2012-02-28 Thread sebb
On 28 February 2012 16:43, Mladen Turk wrote: > On 02/27/2012 12:33 AM, Jeremy Boynes wrote: >> >> OK. Artefacts re-staged at >> https://repository.apache.org/content/repositories/orgapachetomcat-084/ >> > > +1 > Signatures and content OK. > > Although not sure why you have LICENSE and LICENSE.txt

Re: [VOTE] Release Apache Taglibs Parent POM 1

2012-02-26 Thread sebb
On 26 February 2012 23:33, Jeremy Boynes wrote: > OK. Artefacts re-staged at > https://repository.apache.org/content/repositories/orgapachetomcat-084/ Looks a bit odd to have orgapachetomcat above yet the Maven package is org.apache.taglibs ? But perhaps that's just a feature of Nexus. Using

Re: svn commit: r1292891 - /tomcat/trunk/bin/daemon.sh

2012-02-23 Thread sebb
On 23 February 2012 19:00, Konstantin Kolinko wrote: > 2012/2/23  : >> Author: markt >> Date: Thu Feb 23 18:44:02 2012 >> New Revision: 1292891 >> >> URL: http://svn.apache.org/viewvc?rev=1292891&view=rev >> Log: >> Fix BZ52750. Correctly parse command options >> Port of r1292878 from 7.0.x >> >>

Re: Tomcat web site UI update

2012-02-23 Thread sebb
On 15 February 2012 20:04, Jeremy Brown wrote: >>That is a comment that the layout needs to be >>cleaner (a comment I agree with). > > I agree too. I tried to create a cleaner layout and I posted a mockup for > all to see and voice their opinions. > > https://s3.amazonaws.com/jjbosstracker/TomcatM

Re: svn commit: r1243508 - in /tomcat/site/trunk: docs/tools.html xdocs/tools.xml

2012-02-14 Thread sebb
On 13 February 2012 13:50, wrote: > Author: kkolinko > Date: Mon Feb 13 13:50:43 2012 > New Revision: 1243508 > > URL: http://svn.apache.org/viewvc?rev=1243508&view=rev > Log: > Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=52652 > Correct typos in tools.html > > s/licence/license/ seems

  1   2   3   4   5   >