[Bug 69605] Possibility to clear the notFoundClassResource cache from within a running webapp

2025-03-07 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=69605 --- Comment #3 from Mark Thomas --- That is all considered Tomcat internals (the definition is in RELEASE-NOTES) but we do try not to change even the internal API unless we need to. -- You are receiving this mail because: You are the assignee

(tomcat) 01/03: Refactor TimeBucketCounter to support alternative implementations

2025-03-07 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 6f65e9025b3d8aaa6c3c06f140d1962967ad1c8a Author: Mark Thomas AuthorDate: Fri Mar 7 13:27:58 2025 + Refactor TimeB

(tomcat) 03/03: Add an exact rate limit filter.

2025-03-07 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit f60933283eb9268a3203102654ebabc717581505 Author: Mark Thomas AuthorDate: Fri Mar 7 14:55:22 2025 + Add an exact r

(tomcat) branch 9.0.x updated (d7b0d6236e -> f60933283e)

2025-03-07 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a change to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git from d7b0d6236e More skip.installer, remove unless in depends-only target new 6f65e9025b Refactor TimeBucketCounter to s

(tomcat) 02/03: Refactor RateLimiter FastRateLimiter for extension

2025-03-07 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit cfe887822e1ef9fdcf4a00a05b97c3a65cd9d77d Author: Mark Thomas AuthorDate: Fri Mar 7 13:51:00 2025 + Refactor RateL

(tomcat) branch 9.0.x updated: Fix processing of the time-taken token

2025-03-07 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 6047f4d947 Fix processing of the time-taken token 60

[Bug 69607] New: MD5 algorithm insecure usage in tomcat-util

2025-03-07 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=69607 Bug ID: 69607 Summary: MD5 algorithm insecure usage in tomcat-util Product: Tomcat 11 Version: 11.0.4 Hardware: All OS: All Status: NEW Severity: normal

Buildbot success in on tomcat-11.0.x

2025-03-07 Thread buildbot
Build status: Build succeeded! Worker used: bb_worker2_ubuntu URL: https://ci2.apache.org/#builders/112/builds/1562 Blamelist: Mark Thomas , remm Build Text: build successful Status Detected: restored build Build Source Stamp: [branch 11.0.x] abf9c58911690306dbb2be93dd9d2b219f4ff346 Steps: wo

[Bug 69607] MD5 algorithm insecure usage in tomcat-util

2025-03-07 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=69607 --- Comment #3 from ywei...@redseal.net --- Yes, that makes sense, It is really the static init block that is causing us issues. We were actually just thinking to lazy init the MD5 cache and move it out of the static block. Would that be OK? -

[VOTE][RESULT] Release Apache Tomcat 10.1.39

2025-03-07 Thread Christopher Schultz
All, The following votes were cast: +1: remm, markt, csutherl, schultz +0: dsoumis, kkolinko No other votes were cast, therefore the vote passes. Thanks to everyone who contributed toward this release. -chris On 3/4/25 2:13 PM, Christopher Schultz wrote: The proposed Apache Tomcat 10.1.39 r

svn commit: r75357 - /dev/tomcat/tomcat-10/v10.1.39/ /release/tomcat/tomcat-10/v10.1.39/

2025-03-07 Thread schultz
Author: schultz Date: Fri Mar 7 19:31:40 2025 New Revision: 75357 Log: Promote release Added: release/tomcat/tomcat-10/v10.1.39/ - copied from r75356, dev/tomcat/tomcat-10/v10.1.39/ Removed: dev/tomcat/tomcat-10/v10.1.39/ --

(tomcat) branch main updated: Fix processing of the time-taken token

2025-03-07 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 947802bb12 Fix processing of the time-taken token 9478

(tomcat) branch 10.1.x updated: Fix processing of the time-taken token

2025-03-07 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.1.x by this push: new e28959dc0b Fix processing of the time-taken token

(tomcat) branch 11.0.x updated: Fix processing of the time-taken token

2025-03-07 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 11.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/11.0.x by this push: new 550c47eb3e Fix processing of the time-taken token

Re: [PR] enhancement: RateLimitFilter - Provides an exact rate limiting mechanism [tomcat]

2025-03-07 Thread via GitHub
markt-asf commented on code in PR #794: URL: https://github.com/apache/tomcat/pull/794#discussion_r1984984885 ## java/org/apache/catalina/util/TimeBucketCounterBase.java: ## @@ -0,0 +1,214 @@ +/* + * Licensed to the Apache Software Foundation (ASF) under one or more + * contribu

[Bug 69607] MD5 algorithm insecure usage in tomcat-util

2025-03-07 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=69607 ywei...@redseal.net changed: What|Removed |Added CC||ywei...@redseal.net -- You are r

[Bug 69607] MD5 algorithm insecure usage in tomcat-util

2025-03-07 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=69607 --- Comment #1 from Mark Thomas --- Remove completely, no. Handle gracefully if not available, yes. That might include deprecating digestMD5() in Tomcat 11 and removing for Tomcat 12 onwards. Note that MD5 is a required algorithm for Java <=

Re: [PR] enhancement: RateLimitFilter - Provides an exact rate limiting mechanism [tomcat]

2025-03-07 Thread via GitHub
markt-asf commented on PR #794: URL: https://github.com/apache/tomcat/pull/794#issuecomment-2706759471 It turns out the `TimeBucketCounter ` was by far the most complex. Once that was reviewed, the rest followed quite quickly. I'm leaving this PR open as there are some changes - particularl

(tomcat) branch main updated: Add an exact rate limit filter.

2025-03-07 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new c1e50fb357 Add an exact rate limit filter. c1e50fb357

(tomcat) 03/03: Add an exact rate limit filter.

2025-03-07 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 11.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit d16bdb35b62e0321e5120c15f580b4bd0893fa90 Author: Mark Thomas AuthorDate: Fri Mar 7 14:55:22 2025 + Add an exact

(tomcat) 01/03: Refactor TimeBucketCounter to support alternative implementations

2025-03-07 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 11.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 5ae9abb066953c46b2414b5f54f52e56b3f9bc3d Author: Mark Thomas AuthorDate: Fri Mar 7 13:27:58 2025 + Refactor Time

(tomcat) branch main updated: Refactor TimeBucketCounter to support alternative implementations

2025-03-07 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 8e51eae97d Refactor TimeBucketCounter to support alte

[Bug 69605] Possibility to clear the notFoundClassResource cache from within a running webapp

2025-03-07 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=69605 --- Comment #4 from so...@his.de --- Thanks :) -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apach

(tomcat) 03/03: Add an exact rate limit filter.

2025-03-07 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit f2c550898c456cbfc9da780bbfb85ab9065a26ba Author: Mark Thomas AuthorDate: Fri Mar 7 14:55:22 2025 + Add an exact

(tomcat) branch 10.1.x updated (6b9f84aff6 -> f2c550898c)

2025-03-07 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a change to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git from 6b9f84aff6 More skip.installer, remove unless in depends-only target new 9ebf845f38 Refactor TimeBucketCounter to

(tomcat) 02/03: Refactor RateLimiter FastRateLimiter for extension

2025-03-07 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 93c0819a4297a6f3cc4be3d9aefe99d9b536b7ad Author: Mark Thomas AuthorDate: Fri Mar 7 13:51:00 2025 + Refactor Rate

(tomcat) 02/03: Refactor RateLimiter FastRateLimiter for extension

2025-03-07 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 11.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 9e1aaa5251e2990eb5fb35d1e4000ca068275236 Author: Mark Thomas AuthorDate: Fri Mar 7 13:51:00 2025 + Refactor Rate

(tomcat) branch 11.0.x updated (3eee70c8fb -> d16bdb35b6)

2025-03-07 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a change to branch 11.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git from 3eee70c8fb More skip.installer, remove unless in depends-only target new 5ae9abb066 Refactor TimeBucketCounter to

(tomcat) 01/03: Refactor TimeBucketCounter to support alternative implementations

2025-03-07 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 9ebf845f38d1ccfd7466bd46b3c640f4b3e1f5c9 Author: Mark Thomas AuthorDate: Fri Mar 7 13:27:58 2025 + Refactor Time

(tomcat) branch main updated: Refactor RateLimiter FastRateLimiter for extension

2025-03-07 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 137c9f4da9 Refactor RateLimiter FastRateLimiter for e

[Bug 69605] Possibility to clear the notFoundClassResource cache from within a running webapp

2025-03-07 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=69605 --- Comment #2 from so...@his.de --- Thank you for your fast response :) I know that this is not a support forum, but I am unsure what parts of tomcat are considered stable API or what parts are not. Would the following code use the stable A

(tomcat) branch main updated: Expand test coverage

2025-03-07 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new e770b48dd0 Expand test coverage e770b48dd0 is describe

(tomcat) branch 11.0.x updated: Expand test coverage

2025-03-07 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 11.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/11.0.x by this push: new abf9c58911 Expand test coverage abf9c58911 is desc

(tomcat) branch 10.1.x updated: Expand test coverage

2025-03-07 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.1.x by this push: new 7c022789c3 Expand test coverage 7c022789c3 is desc

(tomcat) branch 9.0.x updated: Expand test coverage

2025-03-07 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 163004d96f Expand test coverage 163004d96f is descri

Buildbot failure in on tomcat-12.0.x

2025-03-07 Thread buildbot
Build status: BUILD FAILED: failed compile (failure) Worker used: bb_worker2_ubuntu URL: https://ci2.apache.org/#builders/120/builds/431 Blamelist: remm Build Text: failed compile (failure) Status Detected: new failure Build Source Stamp: [branch main] 947802bb12e42b6f98ef1552cfb4c46490bf76d4 St

Buildbot failure in on tomcat-11.0.x

2025-03-07 Thread buildbot
Build status: BUILD FAILED: failed compile (failure) Worker used: bb_worker2_ubuntu URL: https://ci2.apache.org/#builders/112/builds/1561 Blamelist: Mark Thomas , remm Build Text: failed compile (failure) Status Detected: new failure Build Source Stamp: [branch 11.0.x] 550c47eb3e8b0c43a93d0bf8f622

Re: [VOTE] Release Apache Tomcat 10.1.39

2025-03-07 Thread Rainer Jung
Am 04.03.25 um 20:13 schrieb Christopher Schultz: The proposed Apache Tomcat 10.1.39 release is now available for voting. All committers and PMC members are kindly requested to provide a vote if possible. ANY TOMCAT USER MAY VOTE, though only PMC members votes are binding. We welcome non-commi

[Bug 69607] MD5 algorithm insecure usage in tomcat-util

2025-03-07 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=69607 Christopher Schultz changed: What|Removed |Added Status|NEW |NEEDINFO --- Comment #2 from Chr

Re: [VOTE] Release Apache Tomcat 10.1.39

2025-03-07 Thread Christopher Schultz
All, On 3/4/25 2:13 PM, Christopher Schultz wrote: The proposed Apache Tomcat 10.1.39 release is now available for voting. All committers and PMC members are kindly requested to provide a vote if possible. ANY TOMCAT USER MAY VOTE, though only PMC members votes are binding. We welcome non-com

[Bug 69607] MD5 algorithm insecure usage in tomcat-util

2025-03-07 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=69607 --- Comment #4 from Christopher Schultz --- It's not as simple as dropping that call. If you drop the call, MD5 cannot be used at all, even when the environment (later) requests it. If you want to provide a patch, please ensure that init(MD5)

svn commit: r1924217 - in /tomcat/site/trunk: ./ docs/ docs/tomcat-10.1-doc/ docs/tomcat-10.1-doc/annotationapi/ docs/tomcat-10.1-doc/annotationapi/jakarta/annotation/ docs/tomcat-10.1-doc/annotationa

2025-03-07 Thread schultz
Author: schultz Date: Fri Mar 7 20:59:19 2025 New Revision: 1924217 URL: http://svn.apache.org/viewvc?rev=1924217&view=rev Log: Announce Tomcat v10.1.39 [This commit notification would consist of 52 parts, which exceeds the limit of 50 ones, so it was shortened to the summary.] --

svn commit: r75358 - /release/tomcat/tomcat-10/v10.1.36/

2025-03-07 Thread schultz
Author: schultz Date: Fri Mar 7 21:00:01 2025 New Revision: 75358 Log: Drop old release artifacts Removed: release/tomcat/tomcat-10/v10.1.36/ - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional comma