Re: November release round

On Wed, Nov 2, 2022 at 2:40 AM Han Li wrote: > > > > > 2022年11月2日 00:19，Mark Thomas 写道： > > > > I've just read the OpenSSL announcement. The issue has been downgraded to > > critical but we are going to need to new Tomcat Native release. There are a > > couple of stack overflow bugs in certific

[tomcat] branch main updated: Improve TaskQueue.

This is an automated email from the ASF dual-hosted git repository. lihan pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new c88e4ca0d8 Improve TaskQueue. c88e4ca0d8 is described

[tomcat] branch 10.1.x updated: Improve TaskQueue.

This is an automated email from the ASF dual-hosted git repository. lihan pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.1.x by this push: new 77e025ffaa Improve TaskQueue. 77e025ffaa is descr

[tomcat] branch 9.0.x updated: Improve TaskQueue.

This is an automated email from the ASF dual-hosted git repository. lihan pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new a2ffa69a72 Improve TaskQueue. a2ffa69a72 is describ

[tomcat] branch 8.5.x updated: Improve TaskQueue.

This is an automated email from the ASF dual-hosted git repository. lihan pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new a7cfc66de7 Improve TaskQueue. a7cfc66de7 is describ

svn commit: r1904997 - in /tomcat/site/trunk: docs/presentations.html xdocs/presentations.xml

Author: remm Date: Wed Nov 2 09:22:27 2022 New Revision: 1904997 URL: http://svn.apache.org/viewvc?rev=1904997&view=rev Log: Add slides link Modified: tomcat/site/trunk/docs/presentations.html tomcat/site/trunk/xdocs/presentations.xml Modified: tomcat/site/trunk/docs/presentations.html

[GitHub] [tomcat-jakartaee-migration] markt-asf commented on issue #35: Does this project work in a spring 5 project?

markt-asf commented on issue #35: URL: https://github.com/apache/tomcat-jakartaee-migration/issues/35#issuecomment-1299935540 No. Those JARs are excluded because they are known not to contain any classes that require conversion. The exclusion is a performance optimisation. -- This is an

[GitHub] [tomcat-jakartaee-migration] markt-asf closed issue #35: Does this project work in a spring 5 project?

markt-asf closed issue #35: Does this project work in a spring 5 project? URL: https://github.com/apache/tomcat-jakartaee-migration/issues/35 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the speci

[tomcat-jakartaee-migration] branch main updated: Skip two tests when security manager is disabled

This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat-jakartaee-migration.git The following commit(s) were added to refs/heads/main by this push: new f6c8ba9 Skip two tests when secur

[tomcat-jakartaee-migration] branch main updated: Update BCEL to 6.6.0

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat-jakartaee-migration.git The following commit(s) were added to refs/heads/main by this push: new cb6cd44 Update BCEL to 6.6.0 cb6

[tomcat-jakartaee-migration] branch main updated: Update to Commons Compress to 1.22

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat-jakartaee-migration.git The following commit(s) were added to refs/heads/main by this push: new c5d0074 Update to Commons Compre

[tomcat-jakartaee-migration] branch main updated: [maven-release-plugin] prepare release 1.0.5

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat-jakartaee-migration.git The following commit(s) were added to refs/heads/main by this push: new d87e1ec [maven-release-plugin] p

[tomcat-jakartaee-migration] annotated tag 1.0.5 created (now 8d97da7)

This is an automated email from the ASF dual-hosted git repository. markt pushed a change to annotated tag 1.0.5 in repository https://gitbox.apache.org/repos/asf/tomcat-jakartaee-migration.git at 8d97da7 (tag) tagging d87e1ec7e67c8d61340111b796e3bb8179a6f0ba (commit) replaces 1.0.4

[tomcat-jakartaee-migration] branch main updated: [maven-release-plugin] prepare for next development iteration

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat-jakartaee-migration.git The following commit(s) were added to refs/heads/main by this push: new 7a9da75 [maven-release-plugin] p

svn commit: r57725 - in /dev/tomcat/jakartaee-migration/v1.0.5: ./ binaries/ source/

Author: markt Date: Wed Nov 2 12:08:47 2022 New Revision: 57725 Log: Upload Tomcat migration tool for Jakarta EE v1.0.5 for voting Added: dev/tomcat/jakartaee-migration/v1.0.5/ dev/tomcat/jakartaee-migration/v1.0.5/binaries/ dev/tomcat/jakartaee-migration/v1.0.5/binaries/jakartaee-m

[tomcat-jakartaee-migration] branch main updated: Prepare for next development iteration

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat-jakartaee-migration.git The following commit(s) were added to refs/heads/main by this push: new 52ed05b Prepare for next develop

[VOTE] Apache Tomcat migration tool for Jakarta EE 1.0.5

The proposed Apache Tomcat migration tool for Jakarta EE 1.0.5 is now available for voting. The significant changes since 1.0.4 are: - #37 narrow scope of javax.annotation conversion to Java EE. PR by Danny Thomas - #36 Improve manifest handling and conversion performance. PR by Danny Thomas

[Bug 66331] Incorrect exception is being caught in SystemLogHandler

https://bz.apache.org/bugzilla/show_bug.cgi?id=66331 --- Comment #2 from John Carr --- Can this be fixed in 10.0.28? We currently cannot move to 10.1.x. -- You are receiving this mail because: You are the assignee for the bug. ---

Tomcat Micrometer integration

Hi! I'm one of the maintainers of the Micrometer [1] project (together with Tommy Ludwig and Jonatan Ivanov). I'd like to ask if there would be an interest to introduce the Micrometer Observation API [2] to Tomcat in order to add

Javadoc beyond 17

Hi, It seems javadoc has become a lot stricter moving forward (starting with Java 18 it seems), where basically everything now needs a javadoc. So will we be keeping a zero warning policy, or are we going to decide to relax it ? If not, this will keep up busy for some time ;) I noticed the proble

[tomcat-native] 01/01: Tag 2.0.2

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to tag 2.0.2 in repository https://gitbox.apache.org/repos/asf/tomcat-native.git commit 9fea6f69aca11c2a129c557934f9abb40ac4e732 Author: Mark Thomas AuthorDate: Wed Nov 2 16:12:43 2022 + Tag 2.0.2

[tomcat-native] tag 2.0.2 created (now 9fea6f69a)

This is an automated email from the ASF dual-hosted git repository. markt pushed a change to tag 2.0.2 in repository https://gitbox.apache.org/repos/asf/tomcat-native.git at 9fea6f69a (commit) This tag includes the following new commits: new 9fea6f69a Tag 2.0.2 The 1 revisions liste

Re: [SECURITY][UPDATE] CVE-2022-42252 Apache Tomcat - Request Smuggling

All, There is a typo in this announcement. The affected versions of Tomcat8.5 are 8.5.0 to 8.0.82, not 8.5.52. Thanks, -chris On 10/31/22 12:46, Mark Thomas wrote: CVE-2022-42252 Apache Tomcat - Request Smuggling Severity: Low Vendor: The Apache Software Foundation Versions Affected: Apach

[Bug 56026] RemoteEndpoint.Async#sendText(String, SendHandler) not thread safe

https://bz.apache.org/bugzilla/show_bug.cgi?id=56026 --- Comment #18 from Jonathan Leech --- I'll try again here. The current Tomcat implementation of this API throws IllegalStateException / TEXT_FULL_WRITING even if the client synchronizes access to the methods and / or ensures that the last mes

Re: November release round

Mark, On 11/1/22 12:19, Mark Thomas wrote: I've just read the OpenSSL announcement. The issue has been downgraded to critical but we are going to need to new Tomcat Native release. There are a couple of stack overflow bugs in certificate verification so Tomcat could be accepted via CLIENT-CERT

[Bug 66331] Incorrect exception is being caught in SystemLogHandler

https://bz.apache.org/bugzilla/show_bug.cgi?id=66331 --- Comment #3 from Mark Thomas --- There are no plans to fix this in 10.0.x since no further 10.0.x releases are planned. What is stopping you moving to 10.1.x? -- You are receiving this mail because: You are the assignee for the bug. -

Re: Javadoc beyond 17

On 02/11/2022 15:52, Rémy Maucherat wrote: Hi, It seems javadoc has become a lot stricter moving forward (starting with Java 18 it seems), where basically everything now needs a javadoc. So will we be keeping a zero warning policy, or are we going to decide to relax it ? If not, this will keep u

[Bug 56026] RemoteEndpoint.Async#sendText(String, SendHandler) not thread safe

https://bz.apache.org/bugzilla/show_bug.cgi?id=56026 --- Comment #19 from Mark Thomas --- (In reply to Jonathan Leech from comment #18) > I'll try again here. The current Tomcat implementation of this API throws > IllegalStateException / TEXT_FULL_WRITING even if the client synchronizes > access

Re: November release round

On 02/11/2022 18:36, Christopher Schultz wrote: Mark, On 11/1/22 12:19, Mark Thomas wrote: I've just read the OpenSSL announcement. The issue has been downgraded to critical but we are going to need to new Tomcat Native release. There are a couple of stack overflow bugs in certificate verifica

Re: Tomcat Micrometer integration

Our general approach with 3rd party integrations is for the 3rd party to host it and we'd be happy to link to it. While this integration is small, I am concerned about the slippery slope and just how much stuff we could end up shipping with Tomcat for various 3rd party integrations. Mark O

[Bug 66330] StandardContext.skipMemoryLeakChecksOnJvmShutdown has no effect

https://bz.apache.org/bugzilla/show_bug.cgi?id=66330 Mark Thomas changed: What|Removed |Added Resolution|--- |FIXED Status|NEW

[tomcat-native] branch main updated: Should have updated recommended version before tagging

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat-native.git The following commit(s) were added to refs/heads/main by this push: new 6ed0c867b Should have updated recommended vers

svn commit: r57728 - in /dev/tomcat/tomcat-connectors/native/2.0.2: ./ binaries/ source/

Author: markt Date: Wed Nov 2 20:50:58 2022 New Revision: 57728 Log: Upload 2.0.2 for voting Added: dev/tomcat/tomcat-connectors/native/2.0.2/ dev/tomcat/tomcat-connectors/native/2.0.2/binaries/ dev/tomcat/tomcat-connectors/native/2.0.2/binaries/tomcat-native-2.0.2-openssl-3.0.7-ocs

[tomcat-native] branch main updated: Increment version for next development cycle

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat-native.git The following commit(s) were added to refs/heads/main by this push: new b36984e93 Increment version for next developme

[VOTE] Release Apache Tomcat Native 2.0.2

The key differences of version 2.0.2 compared to 2.0.1 are: - Update the minimum supported version of LibreSSL to 3.5.2. Based on a #13 provided by orbea. - The windows binaries in this release have been built with OpenSSL 3.0.7 The 2.0.x branch is primarily intended for use with Tomcat 10.

Re: [VOTE] Release Apache Tomcat Native 2.0.2

> 2022年11月3日 04:57，Mark Thomas 写道： > > The key differences of version 2.0.2 compared to 2.0.1 are: > > - Update the minimum supported version of LibreSSL to 3.5.2. > Based on a #13 provided by orbea. > > - The windows binaries in this release have been built with OpenSSL > 3.0.7 > > The 2

Re: [VOTE] Apache Tomcat migration tool for Jakarta EE 1.0.5

> 2022年11月2日 20:43，Mark Thomas 写道： > > The proposed Apache Tomcat migration tool for Jakarta EE 1.0.5 is now > available for voting. > > The significant changes since 1.0.4 are: > > - #37 narrow scope of javax.annotation conversion to Java EE. PR by > Danny Thomas > - #36 Improve manifest h

svn commit: r1905034 - in /tomcat/site/trunk: docs/getinvolved.html xdocs/getinvolved.xml

Author: lihan Date: Thu Nov 3 03:46:19 2022 New Revision: 1905034 URL: http://svn.apache.org/viewvc?rev=1905034&view=rev Log: Update coding conventions Modified: tomcat/site/trunk/docs/getinvolved.html tomcat/site/trunk/xdocs/getinvolved.xml Modified: tomcat/site/trunk/docs/getinvolved.