https://bz.apache.org/bugzilla/show_bug.cgi?id=69605
--- Comment #3 from Mark Thomas ---
That is all considered Tomcat internals (the definition is in RELEASE-NOTES)
but we do try not to change even the internal API unless we need to.
--
You are receiving this mail because:
You are the assignee
This is an automated email from the ASF dual-hosted git repository.
markt pushed a commit to branch 9.0.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
commit 6f65e9025b3d8aaa6c3c06f140d1962967ad1c8a
Author: Mark Thomas
AuthorDate: Fri Mar 7 13:27:58 2025 +
Refactor TimeB
This is an automated email from the ASF dual-hosted git repository.
markt pushed a commit to branch 9.0.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
commit f60933283eb9268a3203102654ebabc717581505
Author: Mark Thomas
AuthorDate: Fri Mar 7 14:55:22 2025 +
Add an exact r
This is an automated email from the ASF dual-hosted git repository.
markt pushed a change to branch 9.0.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
from d7b0d6236e More skip.installer, remove unless in depends-only target
new 6f65e9025b Refactor TimeBucketCounter to s
This is an automated email from the ASF dual-hosted git repository.
markt pushed a commit to branch 9.0.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
commit cfe887822e1ef9fdcf4a00a05b97c3a65cd9d77d
Author: Mark Thomas
AuthorDate: Fri Mar 7 13:51:00 2025 +
Refactor RateL
This is an automated email from the ASF dual-hosted git repository.
remm pushed a commit to branch 9.0.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/9.0.x by this push:
new 6047f4d947 Fix processing of the time-taken token
60
https://bz.apache.org/bugzilla/show_bug.cgi?id=69607
Bug ID: 69607
Summary: MD5 algorithm insecure usage in tomcat-util
Product: Tomcat 11
Version: 11.0.4
Hardware: All
OS: All
Status: NEW
Severity: normal
Build status: Build succeeded!
Worker used: bb_worker2_ubuntu
URL: https://ci2.apache.org/#builders/112/builds/1562
Blamelist: Mark Thomas , remm
Build Text: build successful
Status Detected: restored build
Build Source Stamp: [branch 11.0.x] abf9c58911690306dbb2be93dd9d2b219f4ff346
Steps:
wo
https://bz.apache.org/bugzilla/show_bug.cgi?id=69607
--- Comment #3 from ywei...@redseal.net ---
Yes, that makes sense,
It is really the static init block that is causing us issues. We were actually
just thinking to lazy init the MD5 cache and move it out of the static block.
Would that be OK?
-
All,
The following votes were cast:
+1: remm, markt, csutherl, schultz
+0: dsoumis, kkolinko
No other votes were cast, therefore the vote passes.
Thanks to everyone who contributed toward this release.
-chris
On 3/4/25 2:13 PM, Christopher Schultz wrote:
The proposed Apache Tomcat 10.1.39 r
Author: schultz
Date: Fri Mar 7 19:31:40 2025
New Revision: 75357
Log:
Promote release
Added:
release/tomcat/tomcat-10/v10.1.39/
- copied from r75356, dev/tomcat/tomcat-10/v10.1.39/
Removed:
dev/tomcat/tomcat-10/v10.1.39/
--
This is an automated email from the ASF dual-hosted git repository.
remm pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/main by this push:
new 947802bb12 Fix processing of the time-taken token
9478
This is an automated email from the ASF dual-hosted git repository.
remm pushed a commit to branch 10.1.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/10.1.x by this push:
new e28959dc0b Fix processing of the time-taken token
This is an automated email from the ASF dual-hosted git repository.
remm pushed a commit to branch 11.0.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/11.0.x by this push:
new 550c47eb3e Fix processing of the time-taken token
markt-asf commented on code in PR #794:
URL: https://github.com/apache/tomcat/pull/794#discussion_r1984984885
##
java/org/apache/catalina/util/TimeBucketCounterBase.java:
##
@@ -0,0 +1,214 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one or more
+ * contribu
https://bz.apache.org/bugzilla/show_bug.cgi?id=69607
ywei...@redseal.net changed:
What|Removed |Added
CC||ywei...@redseal.net
--
You are r
https://bz.apache.org/bugzilla/show_bug.cgi?id=69607
--- Comment #1 from Mark Thomas ---
Remove completely, no. Handle gracefully if not available, yes.
That might include deprecating digestMD5() in Tomcat 11 and removing for Tomcat
12 onwards.
Note that MD5 is a required algorithm for Java <=
markt-asf commented on PR #794:
URL: https://github.com/apache/tomcat/pull/794#issuecomment-2706759471
It turns out the `TimeBucketCounter ` was by far the most complex. Once that
was reviewed, the rest followed quite quickly. I'm leaving this PR open as
there are some changes - particularl
This is an automated email from the ASF dual-hosted git repository.
markt pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/main by this push:
new c1e50fb357 Add an exact rate limit filter.
c1e50fb357
This is an automated email from the ASF dual-hosted git repository.
markt pushed a commit to branch 11.0.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
commit d16bdb35b62e0321e5120c15f580b4bd0893fa90
Author: Mark Thomas
AuthorDate: Fri Mar 7 14:55:22 2025 +
Add an exact
This is an automated email from the ASF dual-hosted git repository.
markt pushed a commit to branch 11.0.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
commit 5ae9abb066953c46b2414b5f54f52e56b3f9bc3d
Author: Mark Thomas
AuthorDate: Fri Mar 7 13:27:58 2025 +
Refactor Time
This is an automated email from the ASF dual-hosted git repository.
markt pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/main by this push:
new 8e51eae97d Refactor TimeBucketCounter to support alte
https://bz.apache.org/bugzilla/show_bug.cgi?id=69605
--- Comment #4 from so...@his.de ---
Thanks :)
--
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apach
This is an automated email from the ASF dual-hosted git repository.
markt pushed a commit to branch 10.1.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
commit f2c550898c456cbfc9da780bbfb85ab9065a26ba
Author: Mark Thomas
AuthorDate: Fri Mar 7 14:55:22 2025 +
Add an exact
This is an automated email from the ASF dual-hosted git repository.
markt pushed a change to branch 10.1.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
from 6b9f84aff6 More skip.installer, remove unless in depends-only target
new 9ebf845f38 Refactor TimeBucketCounter to
This is an automated email from the ASF dual-hosted git repository.
markt pushed a commit to branch 10.1.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
commit 93c0819a4297a6f3cc4be3d9aefe99d9b536b7ad
Author: Mark Thomas
AuthorDate: Fri Mar 7 13:51:00 2025 +
Refactor Rate
This is an automated email from the ASF dual-hosted git repository.
markt pushed a commit to branch 11.0.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
commit 9e1aaa5251e2990eb5fb35d1e4000ca068275236
Author: Mark Thomas
AuthorDate: Fri Mar 7 13:51:00 2025 +
Refactor Rate
This is an automated email from the ASF dual-hosted git repository.
markt pushed a change to branch 11.0.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
from 3eee70c8fb More skip.installer, remove unless in depends-only target
new 5ae9abb066 Refactor TimeBucketCounter to
This is an automated email from the ASF dual-hosted git repository.
markt pushed a commit to branch 10.1.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
commit 9ebf845f38d1ccfd7466bd46b3c640f4b3e1f5c9
Author: Mark Thomas
AuthorDate: Fri Mar 7 13:27:58 2025 +
Refactor Time
This is an automated email from the ASF dual-hosted git repository.
markt pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/main by this push:
new 137c9f4da9 Refactor RateLimiter FastRateLimiter for e
https://bz.apache.org/bugzilla/show_bug.cgi?id=69605
--- Comment #2 from so...@his.de ---
Thank you for your fast response :)
I know that this is not a support forum, but I am unsure what parts of tomcat
are considered stable API or what parts are not.
Would the following code use the stable A
This is an automated email from the ASF dual-hosted git repository.
remm pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/main by this push:
new e770b48dd0 Expand test coverage
e770b48dd0 is describe
This is an automated email from the ASF dual-hosted git repository.
remm pushed a commit to branch 11.0.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/11.0.x by this push:
new abf9c58911 Expand test coverage
abf9c58911 is desc
This is an automated email from the ASF dual-hosted git repository.
remm pushed a commit to branch 10.1.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/10.1.x by this push:
new 7c022789c3 Expand test coverage
7c022789c3 is desc
This is an automated email from the ASF dual-hosted git repository.
remm pushed a commit to branch 9.0.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/9.0.x by this push:
new 163004d96f Expand test coverage
163004d96f is descri
Build status: BUILD FAILED: failed compile (failure)
Worker used: bb_worker2_ubuntu
URL: https://ci2.apache.org/#builders/120/builds/431
Blamelist: remm
Build Text: failed compile (failure)
Status Detected: new failure
Build Source Stamp: [branch main] 947802bb12e42b6f98ef1552cfb4c46490bf76d4
St
Build status: BUILD FAILED: failed compile (failure)
Worker used: bb_worker2_ubuntu
URL: https://ci2.apache.org/#builders/112/builds/1561
Blamelist: Mark Thomas , remm
Build Text: failed compile (failure)
Status Detected: new failure
Build Source Stamp: [branch 11.0.x] 550c47eb3e8b0c43a93d0bf8f622
Am 04.03.25 um 20:13 schrieb Christopher Schultz:
The proposed Apache Tomcat 10.1.39 release is now available for
voting.
All committers and PMC members are kindly requested to provide a vote if
possible. ANY TOMCAT USER MAY VOTE, though only PMC members votes are
binding. We welcome non-commi
https://bz.apache.org/bugzilla/show_bug.cgi?id=69607
Christopher Schultz changed:
What|Removed |Added
Status|NEW |NEEDINFO
--- Comment #2 from Chr
All,
On 3/4/25 2:13 PM, Christopher Schultz wrote:
The proposed Apache Tomcat 10.1.39 release is now available for
voting.
All committers and PMC members are kindly requested to provide a vote if
possible. ANY TOMCAT USER MAY VOTE, though only PMC members votes are
binding. We welcome non-com
https://bz.apache.org/bugzilla/show_bug.cgi?id=69607
--- Comment #4 from Christopher Schultz ---
It's not as simple as dropping that call. If you drop the call, MD5 cannot be
used at all, even when the environment (later) requests it.
If you want to provide a patch, please ensure that init(MD5)
Author: schultz
Date: Fri Mar 7 20:59:19 2025
New Revision: 1924217
URL: http://svn.apache.org/viewvc?rev=1924217&view=rev
Log:
Announce Tomcat v10.1.39
[This commit notification would consist of 52 parts,
which exceeds the limit of 50 ones, so it was shortened to the summary.]
--
Author: schultz
Date: Fri Mar 7 21:00:01 2025
New Revision: 75358
Log:
Drop old release artifacts
Removed:
release/tomcat/tomcat-10/v10.1.36/
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional comma
43 matches
Mail list logo