Author: kfujino
Date: Mon Mar 12 07:09:09 2018
New Revision: 1826512
URL: http://svn.apache.org/viewvc?rev=1826512&view=rev
Log:
Ensure that parameters have been cleared when PreparedStatement and/or
CallableStatement are cached.
Modified:
tomcat/trunk/modules/jdbc-pool/src/main/java/org/ap
Author: kfujino
Date: Mon Mar 12 07:11:41 2018
New Revision: 1826513
URL: http://svn.apache.org/viewvc?rev=1826513&view=rev
Log:
Ensure that parameters have been cleared when PreparedStatement and/or
CallableStatement are cached.
Modified:
tomcat/tc8.5.x/trunk/modules/jdbc-pool/src/main/jav
Author: kfujino
Date: Mon Mar 12 07:13:02 2018
New Revision: 1826514
URL: http://svn.apache.org/viewvc?rev=1826514&view=rev
Log:
Ensure that parameters have been cleared when PreparedStatement and/or
CallableStatement are cached.
Modified:
tomcat/tc8.0.x/trunk/modules/jdbc-pool/src/main/jav
Author: kfujino
Date: Mon Mar 12 07:13:58 2018
New Revision: 1826515
URL: http://svn.apache.org/viewvc?rev=1826515&view=rev
Log:
Ensure that parameters have been cleared when PreparedStatement and/or
CallableStatement are cached.
Modified:
tomcat/tc7.0.x/trunk/modules/jdbc-pool/src/main/jav
https://bz.apache.org/bugzilla/show_bug.cgi?id=62172
Bug ID: 62172
Summary: org.apache.catalina.startup.Constants specifies an
absolute path for web.xml
Product: Tomcat 8
Version: 8.5.x-trunk
Hardware: PC
OS
Author: markt
Date: Mon Mar 12 08:50:22 2018
New Revision: 25655
Log:
Remove Tomcat 9.0.5 from mirrors
Removed:
release/tomcat/tomcat-9/v9.0.5/
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional comm
https://bz.apache.org/bugzilla/show_bug.cgi?id=62172
--- Comment #1 from Remy Maucherat ---
Can you clarify what is wrong and where ? These constants are not all used in
the same context, and some need to be absolute path, others not. For starters,
ApplicationWebXml="/WEB-INF/web.xml" is correct.
Author: markt
Date: Mon Mar 12 09:13:03 2018
New Revision: 1826525
URL: http://svn.apache.org/viewvc?rev=1826525&view=rev
Log:
Update docs for 8.5.29
[This commit notification would consist of 785 parts,
which exceeds the limit of 50 ones, so it was shortened to the summary.]
-
Author: markt
Date: Mon Mar 12 09:21:09 2018
New Revision: 1826526
URL: http://svn.apache.org/viewvc?rev=1826526&view=rev
Log:
Update site for 8.5.29 release
Modified:
tomcat/site/trunk/build.properties.default
tomcat/site/trunk/docs/download-80.html
tomcat/site/trunk/docs/index.html
Author: markt
Date: Mon Mar 12 10:31:39 2018
New Revision: 25658
Log:
Remove 8.5.28 from mirrors
Removed:
release/tomcat/tomcat-8/v8.5.28/
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands,
https://bz.apache.org/bugzilla/show_bug.cgi?id=62172
--- Comment #2 from Alexander Veit ---
In our code which embeds Tomcat, I've used
Path dirDocBase;
.. = dirDocBase.resolve(Constants.ApplicationWebXml);
It resolves to /WEB-INF/web.xml which is an absolute path, starting at the root
of the f
The Apache Tomcat team announces the immediate availability of Apache
Tomcat 8.5.29.
Tomcat 8.x users should be using 8.5.x releases in preference to 8.0.x
releases.
Apache Tomcat 8 is an open source software implementation of the Java
Servlet, JavaServer Pages, Java Unified Expression Language,
https://bz.apache.org/bugzilla/show_bug.cgi?id=62168
--- Comment #5 from Mark Thomas ---
The old behaviour was wrong because it did not differentiate between
minIdleSwap==0 and minIdleSwap==-1
--
You are receiving this mail because:
You are the assignee for the bug.
Author: markt
Date: Mon Mar 12 12:22:21 2018
New Revision: 1826541
URL: http://svn.apache.org/viewvc?rev=1826541&view=rev
Log:
Publish details of CVE-2018-1323
Modified:
tomcat/site/trunk/docs/security-jk.html
tomcat/site/trunk/xdocs/security-jk.xml
Modified: tomcat/site/trunk/docs/secur
CVE-2018-1323 Apache Tomcat JK ISAPI Connector path traversal
Severity: Important
Vendor: The Apache Software Foundation
Versions Affected:
- Apache Tomcat JK ISAPI Connector 1.2.0 to 1.2.42
Description
The IIS/ISAPI specific code that normalised the requested path before
matching it to the URI
https://bz.apache.org/bugzilla/show_bug.cgi?id=62172
--- Comment #3 from Mark Thomas ---
That constants class has evolved over time based on how the constants were
used. The constants are correct and - in any case - can't easily be changed
without breaking the potential usage of them by others.
https://bz.apache.org/bugzilla/show_bug.cgi?id=62172
--- Comment #4 from Christopher Schultz ---
Sounds like a documentation bug, if anything.
--
You are receiving this mail because:
You are the assignee for the bug.
-
To unsub
This is an automated email from the ASF dual-hosted git repository.
markt pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/tomcat-training.git
The following commit(s) were added to refs/heads/master by this push:
new b7a3d00 Start the deployment module
b7a
https://bz.apache.org/bugzilla/show_bug.cgi?id=51195
--- Comment #12 from Mark Thomas ---
I'd argue that this is a JRE bug. Given the possibility of a memory leak, a
method should be provided to enable the cache to be cleared for a given class
loader.
I'm working on extending https://github.com/
19 matches
Mail list logo
