svn commit: r1920855 - in /tomcat/site/trunk: docs/security-jk.html xdocs/security-jk.xml

2024-09-23 Thread markt
Author: markt Date: Mon Sep 23 10:40:16 2024 New Revision: 1920855 URL: http://svn.apache.org/viewvc?rev=1920855&view=rev Log: Add CVE-2024-46544 Modified: tomcat/site/trunk/docs/security-jk.html tomcat/site/trunk/xdocs/security-jk.xml Modified: tomcat/site/trunk/docs/security-jk.html UR

[SECURITY] CVE-2024-46544 Apache mod_jk - Information Disclosure / Denial of Service

2024-09-23 Thread Mark Thomas
CVE-2024-46544 Apache mod_jk - Information Disclosure / DoS Severity: Moderate Vendor: The Apache Software Foundation Versions Affected: - JK 1.2.9-1.2.49 (mod_jk on Unix like platforms only) Description: Incorrect default permissions for the memory mapped file configured by the JkShmFile dir

(tomcat) branch 9.0.x updated: Test manager webapp Servlets

2024-09-23 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 8262d874c0 Test manager webapp Servlets 8262d874c0 i

(tomcat) branch 10.1.x updated: Test manager webapp Servlets

2024-09-23 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.1.x by this push: new 45caced2a5 Test manager webapp Servlets 45caced2a5

svn commit: r1920861 - in /tomcat/site/trunk: docs/security-10.html docs/security-11.html docs/security-9.html xdocs/security-10.xml xdocs/security-11.xml xdocs/security-9.xml

2024-09-23 Thread markt
Author: markt Date: Mon Sep 23 12:53:20 2024 New Revision: 1920861 URL: http://svn.apache.org/viewvc?rev=1920861&view=rev Log: Add CVE-2024-38286 Modified: tomcat/site/trunk/docs/security-10.html tomcat/site/trunk/docs/security-11.html tomcat/site/trunk/docs/security-9.html tomcat

(tomcat) branch 9.0.x updated: jakarta -> javax

2024-09-23 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 31c741f861 jakarta -> javax 31c741f861 is described

[SECURITY] CVE-2024-38286 Apache Tomcat - Denial of Service

2024-09-23 Thread Mark Thomas
CVE-2024-38286 Apache Tomcat - Denial of Service Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 11.0.0-M1 to 11.0.0-M20 Apache Tomcat 10.1.0-M1 to 10.1.24 Apache Tomcat 9.0.13 to 9.0.89 Description: Tomcat, under certain configurations on any platfo

[Bug 69333] Unnecessary code in generated JSPs

2024-09-23 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=69333 --- Comment #6 from Christopher Schultz --- I'm fairly sure that try/catch/finally don't add any overhead in terms of method-code-bytes. It expands the size of the exception-handling table, but it doesn't reduce code size. Perhaps overall .clas

[Bug 69333] Unnecessary code in generated JSPs

2024-09-23 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=69333 --- Comment #5 from Mark Thomas --- Looking at the generated source and the code the generates it, I don't see why we need the try/catch/finally. Local testing indicates we can remove the try/catch/finally. We can also remove the 3-arg release

[Bug 69333] Unnecessary code in generated JSPs

2024-09-23 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=69333 --- Comment #7 from John Engebretson --- > I just want to make sure to manage expectations of what any change will > actually accomplish. Understood, agreed, and appreciated. :) -- You are receiving this mail because: You are the assignee

Re: Coyote Request getRequestId()

2024-09-23 Thread Mark Thomas
On 23/09/2024 04:28, Igal Sapir wrote: Hello, The current implementation of getRequestId() is optimized for speed and generates IDs that are unique to a running instance of Tomcat. But most server configurations nowadays require uniqueness across the whole system, and currently we do not offer

(tomcat) branch main updated: Fix NIO2

2024-09-23 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 1c818eee25 Fix NIO2 1c818eee25 is described below com

(tomcat) branch 11.0.x updated: Fix NIO2

2024-09-23 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 11.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/11.0.x by this push: new 72c86639b1 Fix NIO2 72c86639b1 is described below

(tomcat) branch 9.0.x updated: Fix NIO2

2024-09-23 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new c6af22abee Fix NIO2 c6af22abee is described below c

(tomcat) branch 10.1.x updated: Fix NIO2

2024-09-23 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.1.x by this push: new a3e11cb61c Fix NIO2 a3e11cb61c is described below

(tomcat) branch main updated: trimCredentials was removed

2024-09-23 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 13665c1d45 trimCredentials was removed 13665c1d45 is d

(tomcat) branch 11.0.x updated: trimCredentials was removed

2024-09-23 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 11.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/11.0.x by this push: new 7e7178a36e trimCredentials was removed 7e7178a36e

(tomcat) branch main updated: Test manager webapp Servlets

2024-09-23 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new fc9230ee9b Test manager webapp Servlets fc9230ee9b is

(tomcat) branch 11.0.x updated: Test manager webapp Servlets

2024-09-23 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 11.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/11.0.x by this push: new bd095d2144 Test manager webapp Servlets bd095d2144

[Bug 69337] New: Your City Wire - Where the world meets!

2024-09-23 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=69337 Bug ID: 69337 Summary: Your City Wire - Where the world meets! Product: Tomcat Native Version: unspecified Hardware: PC OS: Mac OS X 10.1 Status: NEW Se