dev  

Messages by Thread

• (tomcat-native) branch main updated: Remove remaining unused declarations markt
• (tomcat-native) branch main updated: Remove remaining unused functions markt
• (tomcat) branch main updated (d3c07eec82 -> 91f7934cf3) markt
  • (tomcat) 01/02: Remove deprecated code markt
  • (tomcat) 02/02: Deprecate unused code markt
• [PR] Allow Request#getDateHeader to parse dates in RFC 9651 Structured Field Values format [tomcat] via GitHub
  • Re: [PR] Allow Request#getDateHeader to parse dates in RFC 9651 Structured Field Values format [tomcat] via GitHub
  • Re: [PR] Allow Request#getDateHeader to parse dates in RFC 9651 Structured Field Values format [tomcat] via GitHub
  • Re: [PR] Allow Request#getDateHeader to parse dates in RFC 9651 Structured Field Values format [tomcat] via GitHub
  • Re: [PR] Allow Request#getDateHeader to parse dates in RFC 9651 Structured Field Values format [tomcat] via GitHub
  • Re: [PR] Allow Request#getDateHeader to parse dates in RFC 9651 Structured Field Values format [tomcat] via GitHub
  • Re: [PR] Allow Request#getDateHeader to parse dates in RFC 9651 Structured Field Values format [tomcat] via GitHub
  • Re: [PR] Allow Request#getDateHeader to parse dates in RFC 9651 Structured Field Values format [tomcat] via GitHub
  • Re: [PR] Allow Request#getDateHeader to parse dates in RFC 9651 Structured Field Values format [tomcat] via GitHub
  • Re: [PR] Allow Request#getDateHeader to parse dates in RFC 9651 Structured Field Values format [tomcat] via GitHub
• (tomcat) branch 9.0.x updated: Deprecate unused code markt
  • (tomcat) branch 9.0.x updated: Deprecate unused code markt
• (tomcat) branch 9.0.x updated: Deprecate unused code and update deprecation info markt
• (tomcat) branch 10.1.x updated: Deprecate unused code markt
  • (tomcat) branch 10.1.x updated: Deprecate unused code markt
  • (tomcat) branch 10.1.x updated: Deprecate unused code markt
• (tomcat) branch 11.0.x updated: Deprecate unused code markt
  • (tomcat) branch 11.0.x updated: Deprecate unused code markt
  • (tomcat) branch 11.0.x updated: Deprecate unused code markt
• (tomcat) branch main updated: Deprecate unused code markt
  • (tomcat) branch main updated: Deprecate unused code markt
• (tomcat-native) branch main updated: Remove unused code markt
  • (tomcat-native) branch main updated: Remove unused code markt
  • (tomcat-native) branch main updated: Remove unused code markt
  • (tomcat-native) branch main updated: Remove unused code markt
  • (tomcat-native) branch main updated: Remove unused code markt
  • (tomcat-native) branch main updated: Remove unused code markt
  • (tomcat-native) branch main updated: Remove unused code markt
  • (tomcat-native) branch main updated: Remove unused code markt
  • (tomcat-native) branch main updated: Remove unused code markt
  • (tomcat-native) branch main updated: Remove unused code markt
  • (tomcat-native) branch main updated: Remove unused code markt
  • (tomcat-native) branch main updated: Remove unused code markt
  • (tomcat-native) branch main updated: Remove unused code markt
  • (tomcat-native) branch main updated: Remove unused code markt
  • (tomcat-native) branch main updated: Remove unused code markt
  • (tomcat-native) branch main updated: Remove unused code markt
• (tomcat-native) branch main updated: Remove dead code markt
• (tomcat) branch 11.0.x updated: Resolve missing back references or variables as empty string remm
• (tomcat) branch 10.1.x updated: Resolve missing back references or variables as empty string remm
• (tomcat) branch 9.0.x updated: Resolve missing back references or variables as empty string remm
• (tomcat) branch main updated: Resolve missing back references or variables as empty string remm
• (tomcat-native) branch 1.3.x updated: Add support for the extended range of options in OpenSSL 3.x onwards markt
• (tomcat-native) branch main updated: Add support for the extended range of options in OpenSSL 3.x onwards markt
• (tomcat-native) branch 1.3.x updated: Fix a potential crash when negotiating ALPN markt
• (tomcat-native) branch 1.3.x updated: Fallback as intended if ALPN negotiation fails. markt
• (tomcat-native) branch main updated (10c98b699 -> 035249cc4) markt
  • (tomcat-native) 02/02: Fallback as intended if ALPN negotiation fails. markt
  • (tomcat-native) 01/02: Fix a potential crash when negotiating ALPN markt
• (tomcat) branch 9.0.x updated: Improve robustness of o.a.c.core package to system clock jumps markt
• (tomcat) branch 10.1.x updated: Improve robustness of o.a.c.core package to system clock jumps markt
• (tomcat) branch 11.0.x updated: Improve robustness of o.a.c.core package to system clock jumps markt
• (tomcat) branch main updated: Improve robustness of o.a.c.core package to system clock jumps markt
• (tomcat) branch 9.0.x updated: Ensure namespace attributes are XML escaped in WebDAV responses markt
• (tomcat) branch 10.1.x updated: Ensure namespace attributes are XML escaped in WebDAV responses markt
• (tomcat) branch 11.0.x updated: Ensure namespace attributes are XML escaped in WebDAV responses markt
• (tomcat) branch main updated: Ensure namespace attributes are XML escaped in WebDAV responses markt
• (tomcat) branch 9.0.x updated: Improve handling of get[Pooled]Connection(String,String) markt
• (tomcat) branch 10.1.x updated: Improve handling of get[Pooled]Connection(String,String) markt
• (tomcat) branch 11.0.x updated: Improve handling of get[Pooled]Connection(String,String) markt
• (tomcat) branch main updated: Improve handling of get[Pooled]Connection(String,String) markt
• (tomcat) branch 9.0.x updated: Try again. markt
  • Re: (tomcat) branch 9.0.x updated: Try again. Coty Sutherland
• Ticketing systems and release/security announcements Mark Thomas
• [SECURITY] CVE-2026-73180 Apache Tomcat - Authenticated WebSocket session survives end of HTTP session Mark Thomas
• [SECURITY] CVE-2026-68763 Apache Tomcat - DoS via allocation leak in HTTP/2 backlog tracking when a stream is reset Mark Thomas
• [SECURITY] CVE-2026-68569 Apache Tomcat - Principal lookup can fail open in some cases Mark Thomas
• [SECURITY] CVE-2026-65927 Apache Tomcat - RewriteValve [N] restarts at the second rule and may bypass access control Mark Thomas
• [SECURITY] CVE-2026-68525 Apache Tomcat - Redirect after FORM authentication may bypass method specific constraints Mark Thomas
• [SECURITY] CVE-2026-66422 Apache Tomcat - Servlet role references can bypass declarative role constraints Mark Thomas
• [SECURITY] CVE-2026-65905 Apache Tomcat - Limited replay attack possible with DIGEST authentication Mark Thomas
• [SECURITY] CVE-2026-65637 Apache Tomcat - HTTP/2 no-authority bypass of strict SNI validation Mark Thomas
• [SECURITY] CVE-2026-65183 Apache Tomcat - TOCTOU when setting specific permissions for Unix Domain Sockets Mark Thomas
• [SECURITY] CVE-2026-65182 Apache Tomcat - Security constraint bypass Mark Thomas
• svn commit: r1937457 - in tomcat/site/trunk: docs xdocs markt
• Buildbot retry in on tomcat-11.0.x buildbot
• (tomcat) branch 11.0.x updated: Skip tribes membership tests when IP multicast is unavailable (#1052) csutherl
• (tomcat) branch 9.0.x updated: Skip tribes membership tests when IP multicast is unavailable (#1052) csutherl
• (tomcat) branch 10.1.x updated: Skip tribes membership tests when IP multicast is unavailable (#1052) csutherl
• (tomcat) branch main updated: Skip tribes membership tests when IP multicast is unavailable (#1052) csutherl
• (tomcat) branch 11.0.x updated: Skip OCSP tests when responder port is unavailable instead of fail (#1051) csutherl
• (tomcat) branch 9.0.x updated: Skip OCSP tests when responder port is unavailable instead of fail (#1051) csutherl
• (tomcat) branch 10.1.x updated: Skip OCSP tests when responder port is unavailable instead of fail (#1051) csutherl
• (tomcat) branch main updated: Skip OCSP tests when responder port is unavailable instead of fail (#1051) csutherl
• svn commit: r1937432 - in tomcat/site/trunk: docs xdocs markt
• (tomcat) branch 10.1.x updated: Hardening: Use SecureRandom to generate Sec-WebSocket-Key markt
• (tomcat) branch 9.0.x updated: Hardening: Use SecureRandom to generate Sec-WebSocket-Key markt
• (tomcat) branch 11.0.x updated: Hardening: Use SecureRandom to generate Sec-WebSocket-Key markt
• (tomcat) branch main updated: Hardening: Use SecureRandom to generate Sec-WebSocket-Key markt
• [PR] Upgrade actions/setup-java to v6 [tomcat] via GitHub
  • Re: [PR] Upgrade actions/setup-java to v6 [tomcat] via GitHub
  • Re: [PR] Upgrade actions/setup-java to v6 [tomcat] via GitHub
• [PR] Skip tribes membership tests when IP multicast is unavailable rather than fail [tomcat] via GitHub
  • Re: [PR] Skip tribes membership tests when IP multicast is unavailable rather than fail [tomcat] via GitHub
  • Re: [PR] Skip tribes membership tests when IP multicast is unavailable rather than fail [tomcat] via GitHub
• [PR] Skip OCSP tests when responder port is unavailable instead of fail [tomcat] via GitHub
  • Re: [PR] Skip OCSP tests when responder port is unavailable instead of fail [tomcat] via GitHub
  • Re: [PR] Skip OCSP tests when responder port is unavailable instead of fail [tomcat] via GitHub
• (tomcat) branch 9.0.x updated: Prevent session swap out if associated with currently active request markt
• (tomcat) branch 10.1.x updated: Prevent session swap out if associated with currently active request markt
• (tomcat) branch 11.0.x updated: Prevent session swap out if associated with currently active request markt
• (tomcat) branch main updated: Prevent session swap out if associated with currently active request markt
• (tomcat) branch main updated: Fix broken test markt
• [PR] Fix drawboard rendering for axis-aligned shapes [tomcat] via GitHub
• (tomcat) branch 9.0.x updated: Re-apply standard formatting markt
• (tomcat) branch main updated: Drop backwards compatibility implementation markt
• (tomcat) branch 9.0.x updated: Fix concurrency issues with session Store load/save markt
• (tomcat) branch 10.1.x updated: Fix concurrency issues with session Store load/save markt
• (tomcat) branch 11.0.x updated: Fix concurrency issues with session Store load/save markt
• (tomcat) branch main updated: Fix concurrency issues with session Store load/save markt
• (tomcat) branch 11.0.x updated: Re-apply standard formatting markt
• (tomcat) branch 10.1.x updated: Re-apply standard formatting markt
• (tomcat) branch main updated: Code clean-up - re-apply standard formatting markt
• svn commit: r1937284 - in tomcat/site/trunk: docs xdocs markt
• Re-thinking encryption for clustering Mark Thomas
• svn commit: r1937274 - in tomcat/site/trunk: . docs docs/tomcat-10.1-doc docs/tomcat-10.1-doc/annotationapi docs/tomcat-10.1-doc/annotationapi/jakarta/annotation docs/tomcat-10.1-doc/annotationapi/jakarta/annotation/security docs/tomcat-10.1-doc/annota... schultz
• svn commit: r86899 - release/tomcat/tomcat-10/v10.1.57 schultz
• svn commit: r86897 - dev/tomcat/tomcat-10/v10.1.59 release/tomcat/tomcat-10/v10.1.59 schultz
• (tomcat) branch 9.0.x updated: Re-work x-forwarded-proto multiple header fix markt
• (tomcat) branch 10.1.x updated: Re-work x-forwarded-proto multiple header fix markt
• (tomcat) branch 11.0.x updated: Re-work x-forwarded-proto multiple header fix markt
• (tomcat) branch main updated: Re-work x-forwarded-proto multiple header fix markt
• (tomcat) branch 9.0.x updated (ec24533693 -> e992113d2c) markt
  • (tomcat) 02/02: Add some additional validation in RemoteIp[Filter|Valve] markt
  • (tomcat) 01/02: Fix backport markt
• (tomcat) branch 10.1.x updated: Add some additional validation in RemoteIp[Filter|Valve]git diff markt
• (tomcat) branch 11.0.x updated: Add some additional validation in RemoteIp[Filter|Valve] markt
• (tomcat) branch main updated: Add some additional validation in RemoteIp[Filter|Valve] markt
• (tomcat) branch 10.1.x updated: Fix backport markt
• (tomcat) branch 9.0.x updated: Improve robustness of DIGEST authentication to system clock jumps. markt
• (tomcat) branch 10.1.x updated: Improve robustness of DIGEST authentication to system clock jumps. markt
• (tomcat) branch 11.0.x updated: Improve robustness of DIGEST authentication to system clock jumps. markt
• (tomcat) branch main updated: Improve robustness of DIGEST authentication to system clock jumps. markt
• (tomcat) branch 9.0.x updated: Re-apply standard code formatting markt
• (tomcat) branch 10.1.x updated: Re-apply standard code formatting markt
• (tomcat) branch 11.0.x updated: Re-apply standard code formatting markt
• (tomcat) branch main updated: Re-apply standard code formatting markt
• (tomcat) branch main updated: web.xml logged output should also use decoded URL patterns markt
• (tomcat) branch 9.0.x updated: Align web.xml logged output with urlPatternsProvidedInDecodedForm markt
• (tomcat) branch 10.1.x updated: Align web.xml logged output with urlPatternsProvidedInDecodedForm markt
• (tomcat) branch 11.0.x updated: Align web.xml logged output with urlPatternsProvidedInDecodedForm markt
• [PR] Correct typos and formatting in message properties [tomcat] via GitHub
  • Re: [PR] Correct typos and formatting in message properties [tomcat] via GitHub
  • Re: [PR] Correct typos and formatting in message properties [tomcat] via GitHub
  • Re: [PR] Correct typos and formatting in message properties [tomcat] via GitHub
  • Re: [PR] Correct typos and formatting in message properties [tomcat] via GitHub
• [PR] Defer abandoned connection trace formatting [tomcat] via GitHub
  • Re: [PR] Defer abandoned connection trace formatting [tomcat] via GitHub
• (tomcat-maven-plugin) branch trunk updated: Update Tomcat version remm
• (tomcat-maven-plugin) branch dependabot/maven/tomcatVersion-11.0.25 deleted (was b6e16f8) github-bot
• (tomcat-maven-plugin) branch dependabot/maven/tomcatVersion-11.0.25 created (now b6e16f8) github-bot
• (tomcat-maven-plugin) branch dependabot/maven/tomcatVersion-11.0.24 deleted (was 5685b3b) github-bot
• [PR] Bump tomcatVersion from 9.0.117 to 11.0.25 [tomcat-maven-plugin] via GitHub
  • Re: [PR] Bump tomcatVersion from 9.0.117 to 11.0.25 [tomcat-maven-plugin] via GitHub
  • Re: [PR] Bump tomcatVersion from 9.0.117 to 11.0.25 [tomcat-maven-plugin] via GitHub
• (tomcat) branch 11.0.x updated: Add SECURITY.md per dev-list discussion 'Considering AI suggestions/guardrails for the tomcat project' (#1001) csutherl
• (tomcat) branch 10.1.x updated: Add SECURITY.md per dev-list discussion 'Considering AI suggestions/guardrails for the tomcat project' (#1001) csutherl
• (tomcat) branch 9.0.x updated: Add SECURITY.md per dev-list discussion 'Considering AI suggestions/guardrails for the tomcat project' (#1001) csutherl
• (tomcat) branch main updated: Add SECURITY.md per dev-list discussion 'Considering AI suggestions/guardrails for the tomcat project' (#1001) csutherl
• [PR] Reset noContextManagerReceived when requesting session state [tomcat] via GitHub
• [Bug 70187] New: Tomcat embeded server shades packages that are declared by servlet API modules bugzilla
  • [Bug 70187] Tomcat embeded server shades packages that are declared by servlet API modules bugzilla
  • [Bug 70187] Tomcat embeded server shades packages that are declared by servlet API modules bugzilla
• [ANN] Apache Tomcat 9.0.121 available Rémy Maucherat
• [ANN] Apache Tomcat 11.0.25 Available Mark Thomas
• svn commit: r86846 - release/tomcat/tomcat-11/v11.0.24 markt
• (tomcat) branch 11.0.x updated: Add release date for 11.0.25 markt
• svn commit: r1937209 - in tomcat/site/trunk: . docs xdocs markt
• svn commit: r1937208 - in tomcat/site/trunk/docs/tomcat-11.0-doc: . annotationapi annotationapi/jakarta/annotation annotationapi/jakarta/annotation/security annotationapi/jakarta/annotation/sql api api/org/apache/catalina api/org/apache/catalina/ant ap... markt
• svn commit: r1937207 - in tomcat/site/trunk/docs/tomcat-9.0-doc/api/org/apache: catalina/authenticator tomcat/util/buf tomcat/websocket/server remm
• (tomcat) branch 9.0.x updated: Improve RewriteRule syntax reference (#1044) markt
• (tomcat) branch 10.1.x updated: Improve RewriteRule syntax reference (#1044) markt
• (tomcat) branch 11.0.x updated: Improve RewriteRule syntax reference (#1044) markt
• (tomcat) branch main updated: Follow-up to 853b54eb7c markt
• (tomcat) branch main updated: Improve RewriteRule syntax reference (#1044) markt
• (tomcat) branch 9.0.x updated: Validate sendAllSessionsSize in DeltaManager (#1042) markt
• (tomcat) branch 10.1.x updated: Validate sendAllSessionsSize in DeltaManager (#1042) markt
• (tomcat) branch 11.0.x updated: Validate sendAllSessionsSize in DeltaManager (#1042) markt
• (tomcat) branch main updated: Follow-up to 318032a608 markt
• svn commit: r1937194 - in tomcat/site/trunk/docs/tomcat-9.0-doc: . annotationapi annotationapi/javax/annotation annotationapi/javax/annotation/security annotationapi/javax/annotation/sql api api/org/apache/catalina api/org/apache/catalina/ant api/org/a... remm
• (tomcat) branch main updated: Validate sendAllSessionsSize in DeltaManager (#1042) markt
• svn commit: r1937193 - in tomcat/site/trunk: . docs xdocs remm
• svn commit: r86843 - dev/tomcat/tomcat-11/v11.0.25 release/tomcat/tomcat-11/v11.0.25 markt
• svn commit: r86839 - dev/tomcat/tomcat-9/v9.0.121 release/tomcat/tomcat-9/v9.0.121 remm
• New Qwen release Rémy Maucherat
  • Re: New Qwen release Rémy Maucherat
  • Re: New Qwen release Coty Sutherland
• (tomcat) branch main updated (39455c0ba1 -> 2a97dbcc78) markt
• (tomcat) branch 9.0.x updated (567d4707d1 -> 73a73af571) markt
  • (tomcat) 01/02: Use LRU order for persistent session swaps (#1045) markt
  • (tomcat) 02/02: Fix potential concurrency issues when ordering sessions markt
• (tomcat) branch 10.1.x updated (8865b73f23 -> 7a2276d972) markt
  • (tomcat) 02/02: Fix potential concurrency issues when ordering sessions markt
  • (tomcat) 01/02: Use LRU order for persistent session swaps (#1045) markt
• (tomcat) branch main updated (949b1bcd44 -> 3c4d92d16d) markt

• Earlier messages
• Later messages