Author: markt
Date: Thu Feb 22 12:13:51 2018
New Revision: 1825052
URL: http://svn.apache.org/viewvc?rev=1825052&view=rev
Log:
Fix SpotBugs warning. Probably a false positive but err on the safe side.
Modified:
tomcat/trunk/java/org/apache/catalina/loader/WebappClassLoaderBase.java
Modified:
https://bz.apache.org/bugzilla/show_bug.cgi?id=60362
--- Comment #69 from Michael Osipov <1983-01...@gmx.net> ---
(In reply to William Watson from comment #68)
> I believe an option to send a reason phrase should be maintained in Tomcat 9.
>
> The reason phrase should be ignored by RFC-compliant
https://bz.apache.org/bugzilla/show_bug.cgi?id=60362
--- Comment #70 from Mark Thomas ---
That is a view although it is perhaps a tad harsh.
Regardless, the world is moving towards HTTP/2 and HTTP/2 doesn't have a reason
phrase so this is a situation developers are going to have to get used to.
Author: markt
Date: Thu Feb 22 13:15:55 2018
New Revision: 1825054
URL: http://svn.apache.org/viewvc?rev=1825054&view=rev
Log:
Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=62123
Avoid ConcurrentModificationException when attempting to clean up application
triggered RMI memory leaks on web a
Author: markt
Date: Thu Feb 22 13:20:25 2018
New Revision: 1825055
URL: http://svn.apache.org/viewvc?rev=1825055&view=rev
Log:
Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=62123
Avoid ConcurrentModificationException when attempting to clean up application
triggered RMI memory leaks on web a
Author: markt
Date: Thu Feb 22 13:21:08 2018
New Revision: 1825056
URL: http://svn.apache.org/viewvc?rev=1825056&view=rev
Log:
Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=62123
Avoid ConcurrentModificationException when attempting to clean up application
triggered RMI memory leaks on web a
Author: markt
Date: Thu Feb 22 13:21:56 2018
New Revision: 1825057
URL: http://svn.apache.org/viewvc?rev=1825057&view=rev
Log:
Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=62123
Avoid ConcurrentModificationException when attempting to clean up application
triggered RMI memory leaks on web a
https://bz.apache.org/bugzilla/show_bug.cgi?id=62123
Mark Thomas changed:
What|Removed |Added
OS||All
Resolution|---
Author: remm
Date: Thu Feb 22 15:59:13 2018
New Revision: 1825078
URL: http://svn.apache.org/viewvc?rev=1825078&view=rev
Log:
Minor cleanup.
Modified:
tomcat/trunk/java/org/apache/coyote/http2/Http2AsyncParser.java
Modified: tomcat/trunk/java/org/apache/coyote/http2/Http2AsyncParser.java
URL
https://bz.apache.org/bugzilla/show_bug.cgi?id=60362
--- Comment #71 from Michael Osipov <1983-01...@gmx.net> ---
(In reply to Mark Thomas from comment #70)
> That is a view although it is perhaps a tad harsh.
>
> Regardless, the world is moving towards HTTP/2 and HTTP/2 doesn't have a
> reason p
Modified: tomcat/site/trunk/docs/security-7.html
URL:
http://svn.apache.org/viewvc/tomcat/site/trunk/docs/security-7.html?rev=1825106&r1=1825105&r2=1825106&view=diff
==
--- tomcat/site/trunk/docs/security-7.html (original
Author: markt
Date: Fri Feb 23 00:25:01 2018
New Revision: 1825106
URL: http://svn.apache.org/viewvc?rev=1825106&view=rev
Log:
Add info for CVE-2018-1304/5
Modified:
tomcat/site/trunk/docs/security-7.html
tomcat/site/trunk/docs/security-8.html
tomcat/site/trunk/docs/security-9.html
Modified: tomcat/site/trunk/docs/security-8.html
URL:
http://svn.apache.org/viewvc/tomcat/site/trunk/docs/security-8.html?rev=1825106&r1=1825105&r2=1825106&view=diff
==
--- tomcat/site/trunk/docs/security-8.html (original)
Modified: tomcat/site/trunk/xdocs/security-7.xml
URL:
http://svn.apache.org/viewvc/tomcat/site/trunk/xdocs/security-7.xml?rev=1825106&r1=1825105&r2=1825106&view=diff
==
--- tomcat/site/trunk/xdocs/security-7.xml (original)
Modified: tomcat/site/trunk/docs/security-9.html
URL:
http://svn.apache.org/viewvc/tomcat/site/trunk/docs/security-9.html?rev=1825106&r1=1825105&r2=1825106&view=diff
==
--- tomcat/site/trunk/docs/security-9.html (original)
CVE-2018-1305 Security constraint annotations applied too late
Severity: High
Vendor: The Apache Software Foundation
Versions Affected:
Apache Tomcat 9.0.0.M1 to 9.0.4
Apache Tomcat 8.5.0 to 8.5.27
Apache Tomcat 8.0.0.RC1 to 8.0.49
Apache Tomcat 7.0.0 to 7.0.84
Description:
Security constraints
CVE-2018-1304 Security constraints mapped to context root are ignored
Severity: High
Vendor: The Apache Software Foundation
Versions Affected:
Apache Tomcat 9.0.0.M1 to 9.0.4
Apache Tomcat 8.5.0 to 8.5.27
Apache Tomcat 8.0.0.RC1 to 8.0.49
Apache Tomcat 7.0.0 to 7.0.84
Description:
The URL patte
Le 23/02/2018 à 01:25, ma...@apache.org a écrit :
> +This issue was by the Apache Tomcat Security on 1 February 2018 and
> made
> + public on 23 February 2018.
The word "identified" is missing in this sentence.
Emmanuel Bourg
---
On 23/02/18 00:37, Emmanuel Bourg wrote:
> Le 23/02/2018 à 01:25, ma...@apache.org a écrit :
>> +This issue was by the Apache Tomcat Security on 1 February 2018 and
>> made
>> + public on 23 February 2018.
>
> The word "identified" is missing in this sentence.
Thanks for spotting this.
Author: markt
Date: Fri Feb 23 00:42:49 2018
New Revision: 1825107
URL: http://svn.apache.org/viewvc?rev=1825107&view=rev
Log:
Fix typo
Modified:
tomcat/site/trunk/docs/security-7.html
tomcat/site/trunk/docs/security-8.html
tomcat/site/trunk/docs/security-9.html
tomcat/site/trunk/
20 matches
Mail list logo
