DO NOT REPLY [Bug 45610] New: status-worker: Bug in request parameter parsing for update action

2008-08-11 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=45610 Summary: status-worker: Bug in request parameter parsing for update action Product: Tomcat 5 Version: 5.5.26 Platform: PC OS/Version: Linux Status: NEW

svn commit: r684680 - /tomcat/tc6.0.x/trunk/STATUS.txt

2008-08-11 Thread billbarker
Author: billbarker Date: Mon Aug 11 02:01:39 2008 New Revision: 684680 URL: http://svn.apache.org/viewvc?rev=684680&view=rev Log: votes Modified: tomcat/tc6.0.x/trunk/STATUS.txt Modified: tomcat/tc6.0.x/trunk/STATUS.txt URL: http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/STATUS.txt?rev=6

Re: is JDK 1.1 still needed? README say Java5

2008-08-11 Thread Mark Thomas
Jim Manico wrote: I would say that the era of Java up through 1.3 is dead. Java 1.4 and above is the only thing I see in production anymore. - Jim The 2.5 Servlet spec mandates Java 1.5 so for TC6 and up you are fine. TC5 needs to run on 1.4 (with the compat package) and TC4 should run on 1.3

[Tomcat Wiki] Update of "FAQ/Miscellaneous" by TimFunk

2008-08-11 Thread Apache Wiki
Dear Wiki user, You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change notification. The following page has been changed by TimFunk: http://wiki.apache.org/tomcat/FAQ/Miscellaneous The comment on the change is: startup order

Re: is JDK 1.1 still needed? README say Java5

2008-08-11 Thread Jens Kapitza
Mark Thomas schrieb: The 2.5 Servlet spec mandates Java 1.5 so for TC6 and up you are fine. i'm working on trunk (are all files hostet in one trunk?) i've removed some Classes and it works fine tomcat now has more speed (startup takes 1/2 time ~800ms) with changes to the code (use of Collect

Re: is JDK 1.1 still needed? README say Java5

2008-08-11 Thread Mark Thomas
Jens Kapitza wrote: Mark Thomas schrieb: The 2.5 Servlet spec mandates Java 1.5 so for TC6 and up you are fine. i'm working on trunk (are all files hostet in one trunk?) Yes they are. i've removed some Classes and it works fine tomcat now has more speed (startup takes 1/2 time ~800ms) wit

Re: is JDK 1.1 still needed? README say Java5

2008-08-11 Thread Jens Kapitza
Mark Thomas schrieb: Jens Kapitza wrote: Mark Thomas schrieb: The 2.5 Servlet spec mandates Java 1.5 so for TC6 and up you are fine. i'm working on trunk (are all files hostet in one trunk?) Yes they are. I've browsed the SVN a little bit, there are tags (branches) for tomcat 4,5 i think th

DO NOT REPLY [Bug 45613] New: use of generics in package org.apache.tomcat.util.http

2008-08-11 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=45613 Summary: use of generics in package org.apache.tomcat.util.http Product: Tomcat 6 Version: unspecified Platform: PC OS/Version: Linux Status: NEW Severity: enhancement

Re: svn commit: r684680 - /tomcat/tc6.0.x/trunk/STATUS.txt

2008-08-11 Thread Mark Thomas
[EMAIL PROTECTED] wrote: Author: billbarker Date: Mon Aug 11 02:01:39 2008 New Revision: 684680 URL: http://svn.apache.org/viewvc?rev=684680&view=rev Log: votes Modified: tomcat/tc6.0.x/trunk/STATUS.txt Modified: tomcat/tc6.0.x/trunk/STATUS.txt URL: http://svn.apache.org/viewvc/tomcat/tc6

DO NOT REPLY [Bug 45609] contentType=image sometime cause strange character (??) with UTF-8 encoding and throw java.lang.IllegalStateException

2008-08-11 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=45609 Mark Thomas <[EMAIL PROTECTED]> changed: What|Removed |Added Status|NEW |RESOLVED

DO NOT REPLY [Bug 45609] contentType=image sometime cause strange character (??) with UTF-8 encoding and throw java.lang.IllegalStateException

2008-08-11 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=45609 --- Comment #2 from Jirat <[EMAIL PROTECTED]> 2008-08-11 08:45:13 PST --- Thank you very much, but then how can we fix this issues? I already follow your link but it doesn't provide the solution. I also searched for Java2D or stream or

svn commit: r684832 - in /tomcat/site/trunk: docs/security-4.html docs/security-5.html docs/security-6.html xdocs/security-4.xml xdocs/security-5.xml xdocs/security-6.xml

2008-08-11 Thread markt
Author: markt Date: Mon Aug 11 10:35:04 2008 New Revision: 684832 URL: http://svn.apache.org/viewvc?rev=684832&view=rev Log: Update with details for CVE-2008-2938 Modified: tomcat/site/trunk/docs/security-4.html tomcat/site/trunk/docs/security-5.html tomcat/site/trunk/docs/security-6.

svn commit: r684899 - /tomcat/current/tc4.1.x/STATUS.txt

2008-08-11 Thread markt
Author: markt Date: Mon Aug 11 13:09:09 2008 New Revision: 684899 URL: http://svn.apache.org/viewvc?rev=684899&view=rev Log: Add other votes from security list for the record Modified: tomcat/current/tc4.1.x/STATUS.txt Modified: tomcat/current/tc4.1.x/STATUS.txt URL: http://svn.apache.org/v

svn commit: r684900 - in /tomcat: container/branches/tc4.1.x/RELEASE-NOTES-4.1.txt container/branches/tc4.1.x/catalina/src/share/org/apache/catalina/authenticator/AuthenticatorBase.java current/tc4.1.

2008-08-11 Thread markt
Author: markt Date: Mon Aug 11 13:16:02 2008 New Revision: 684900 URL: http://svn.apache.org/viewvc?rev=684900&view=rev Log: Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=41217 Mark SSO cookies as secure. This is CVE-2008-0128. Modified: tomcat/container/branches/tc4.1.x/RELEASE-NOTE

Re: svn commit: r684613 - /tomcat/current/tc4.1.x/STATUS.txt

2008-08-11 Thread Mark Thomas
[EMAIL PROTECTED] wrote: Author: funkman Date: Sun Aug 10 16:50:06 2008 New Revision: 684613 URL: http://svn.apache.org/viewvc?rev=684613&view=rev Log: Followup on request to review Many thanks. Mark - To unsubscribe, e-ma

svn commit: r684901 - in /tomcat/site/trunk: docs/security-4.html xdocs/security-4.xml

2008-08-11 Thread markt
Author: markt Date: Mon Aug 11 13:20:20 2008 New Revision: 684901 URL: http://svn.apache.org/viewvc?rev=684901&view=rev Log: CVE-2008-0128 is now fixed in TC4 trunk Modified: tomcat/site/trunk/docs/security-4.html tomcat/site/trunk/xdocs/security-4.xml Modified: tomcat/site/trunk/docs/se

svn commit: r684922 - in /tomcat: container/branches/tc4.1.x/webapps/tomcat-docs/ container/branches/tc4.1.x/webapps/tomcat-docs/config/ container/tc5.5.x/webapps/docs/ container/tc5.5.x/webapps/docs/

2008-08-11 Thread markt
Author: markt Date: Mon Aug 11 13:57:16 2008 New Revision: 684922 URL: http://svn.apache.org/viewvc?rev=684922&view=rev Log: Correct SSL docs as to the list of ciphers used by default. Add note about export grade ciphers. Add note (already in TC4) about cipher naming. Modified: tomcat/contai

DO NOT REPLY [Bug 33453] Jasper should recompile JSP files whose datestamps change in either direction (not just newer)

2008-08-11 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=33453 --- Comment #65 from Luis Naver <[EMAIL PROTECTED]> 2008-08-11 14:00:43 PST --- I just got bit by this bug and lost a good part of my day trying to locate it. I have tomcat on my development machine (winXP) configured to UTC and the ma

svn commit: r684944 - in /tomcat/site/trunk: docs/security.html xdocs/security.xml

2008-08-11 Thread markt
Author: markt Date: Mon Aug 11 14:31:58 2008 New Revision: 684944 URL: http://svn.apache.org/viewvc?rev=684944&view=rev Log: Lay groundwork for adding links to associated svn commits to vulnerability pages. Also make clear up front that we don't provide binary patches. Modified: tomcat/site/

Tomcat v4.1 - Resource not found 500 Error - Help!

2008-08-11 Thread cfrankland
Hi, I am a bit new to Tomcat, but have a really quick question. I am trying to deploy a new single class file to an existing Tomcat application, however, I am using Rational Application Developer 7.0 to create the class. When I deploy the new class to the Tomcat 4.1 web application, the page cras

Tomcat 5.5 & 4.1 Security Release

2008-08-11 Thread David Rees
I posted a couple messages to the user/dev lists last week asking the same question, but still haven't seen any mention of a plan to release a new 5.5.x or 4.1.x to fix the security issues posted at the beginning of the month. Is there a plan to push a new release for either 5.5.x or 4.1.x or shou

DO NOT REPLY [Bug 45617] New: Resource is not closed

2008-08-11 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=45617 Summary: Resource is not closed Product: Tomcat 6 Version: unspecified Platform: PC OS/Version: Windows 2000 Status: NEW Severity: normal Priority: P2

DO NOT REPLY [Bug 45618] New: Selector is not closed.

2008-08-11 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=45618 Summary: Selector is not closed. Product: Tomcat 6 Version: unspecified Platform: PC OS/Version: Windows 2000 Status: NEW Severity: normal Priority: P2