Re: Building all releases with Java 11

2022-01-11 Thread Michael Osipov
Am 2022-01-10 um 17:46 schrieb Mark Thomas: [...] Is this because of EJC going Java 11? Has anyone reached out to them? Why 11? I assume that 8 will outlive 11 for some time. Java 8 still seems like a good baseline. - To uns

[tomcat] branch 10.0.x updated: Improve Javadoc as suggested by schultz

2022-01-11 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.0.x by this push: new 045c960 Improve Javadoc as suggested by schultz

[tomcat] branch main updated: Improve Javadoc as suggested by schultz

2022-01-11 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 644c904 Improve Javadoc as suggested by schultz 644c

[tomcat] branch 9.0.x updated: Improve Javadoc as suggested by schultz

2022-01-11 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 199d99b Improve Javadoc as suggested by schultz 19

[tomcat] branch 8.5.x updated: Improve Javadoc as suggested by schultz

2022-01-11 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new 3dfde1c Improve Javadoc as suggested by schultz 3d

[tomcat] branch 9.0.x updated: Remove the JmxRemoteLifecycleListener

2022-01-11 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 510520c Remove the JmxRemoteLifecycleListener 5105

[tomcat] branch 8.5.x updated: Remove the JmxRemoteLifecycleListener

2022-01-11 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new 1b9e8fd Remove the JmxRemoteLifecycleListener 1b9e

[tomcat] branch main updated: Update copyright dates to 2022

2022-01-11 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 83bb6fc Update copyright dates to 2022 83bb6fc is de

[tomcat] branch 10.0.x updated: Update copyright dates to 2022

2022-01-11 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.0.x by this push: new 18a0ca3 Update copyright dates to 2022 18a0ca3 i

[tomcat] branch 9.0.x updated: Update copyright dates to 2022

2022-01-11 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 6488f8a Update copyright dates to 2022 6488f8a is

[tomcat] branch 8.5.x updated: Update copyright dates to 2022

2022-01-11 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new 38992ee Update copyright dates to 2022 38992ee is

[Bug 65778] Don't create URL from string

2022-01-11 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=65778 Mark Thomas changed: What|Removed |Added Status|NEW |RESOLVED Resolution|---

[Bug 65779] Introduce CATALINA_BASE_DATA

2022-01-11 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=65779 --- Comment #1 from Mark Thomas --- Why is this required? The work directory can already be configured per host and per context. -- You are receiving this mail because: You are the assignee for the bug. ---

Re: Sensitive session cookies on error are exposed by the parser

2022-01-11 Thread Joscha Cepok
Hi Mark, Am 10.01.22 um 22:50 schrieb Mark Thomas: On 07/01/2022 15:02, Christopher Schultz wrote: Our only official feedback on your publication is that we do not consider it a security vulnerability that warrants a CVE, coordinated disclosure, etc. We would be happy to have you raise this is

Re: Sensitive session cookies on error are exposed by the parser

2022-01-11 Thread Mark Thomas
On 11/01/2022 14:50, Joscha Cepok wrote I didn't take a deeper look, why browsers add the timestamp to the cookie header, so ignoring the timestamp and log it once seems fine for me. But in case of multiple broken cookies, maybe all malformed content of the header should be logged on INFO an

[Bug 65779] Introduce CATALINA_BASE_DATA

2022-01-11 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=65779 --- Comment #2 from Gael Lalire --- In Vestige each application instance got 3 directories (I put default location on a Linux below, but is is OS dependent) : - conf : $HOME/.config/vestige/app/ - data : $HOME/.local/share/vestige/app/ - cache

[Bug 65778] Don't create URL from string

2022-01-11 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=65778 Gael Lalire changed: What|Removed |Added Status|RESOLVED|REOPENED Resolution|WONTFIX