dev  

Messages by Thread

• • (tomcat) 02/07: Guard SpnegoAuthenticator against missing JAAS/Kerberos config files, handle the unchecked SecurityException they would cause and log GSS ticket failures with the correct message remm
  • (tomcat) 07/07: Store the JASPIC isMandatory MessageInfo property as a Boolean as the specification requires rather than a String, and throw IllegalArgumentException rather than NullPointerException when null is passed to the MessageInfoImpl request/response message setters remm
  • (tomcat) 03/07: Load statically configured ServerAuthModule classes via the thread context (web application) class loader first, matching the pattern used for AuthConfigProvider classes, so modules packaged in WEB-INF/lib are found remm
  • (tomcat) 01/07: Stop SSO session listeners accumulating on sessions by re-keying the SSO entry on session ID change without registering an additional listener remm
  • (tomcat) 04/07: Document that a failure to create a persistent JASPIC provider registration is deliberately fatal rather than silently skipped, since skipping an authentication provider would fail open remm
  • (tomcat) 05/07: Initialize the ServerAuthModule before caching the SingleModuleServerAuthContext so a failed initialization is not cached permanently and can be re-attempted on next use remm
  • (tomcat) 06/07: Update the JASPIC client Subject only when password validation succeeded (or was not requested), failing closed rather than adding a principal derived from untrusted caller-supplied data when validation failed remm
• (tomcat) branch main updated (c2b1c9dab0 -> c817143f15) remm
  • (tomcat) 06/07: Update the JASPIC client Subject only when password validation succeeded (or was not requested), failing closed rather than adding a principal derived from untrusted caller-supplied data when validation failed remm
  • (tomcat) 02/07: Guard SpnegoAuthenticator against missing JAAS/Kerberos config files, handle the unchecked SecurityException they would cause and log GSS ticket failures with the correct message remm
  • (tomcat) 01/07: Stop SSO session listeners accumulating on sessions by re-keying the SSO entry on session ID change without registering an additional listener remm
  • (tomcat) 07/07: Store the JASPIC isMandatory MessageInfo property as a Boolean as the specification requires rather than a String, and throw IllegalArgumentException rather than NullPointerException when null is passed to the MessageInfoImpl request/response message setters remm
  • (tomcat) 03/07: Load statically configured ServerAuthModule classes via the thread context (web application) class loader first, matching the pattern used for AuthConfigProvider classes, so modules packaged in WEB-INF/lib are found remm
  • (tomcat) 04/07: Document that a failure to create a persistent JASPIC provider registration is deliberately fatal rather than silently skipped, since skipping an authentication provider would fail open remm
  • (tomcat) 05/07: Initialize the ServerAuthModule before caching the SingleModuleServerAuthContext so a failed initialization is not cached permanently and can be re-attempted on next use remm
• (tomcat) branch 10.1.x updated: Explicitly state virtual host and SNI matching are separate markt
• (tomcat) branch main updated: Explicitly state virtual host and SNI matching are separate markt
• [PR] Fix CharChunk.indexOf(char) for chunks with a non-zero start [tomcat] via GitHub
  • Re: [PR] Fix CharChunk.indexOf(char) for chunks with a non-zero start [tomcat] via GitHub
• [PR] Fix Map.Entry contract for CaseInsensitiveKeyMap entries [tomcat] via GitHub
  • Re: [PR] Fix Map.Entry contract for CaseInsensitiveKeyMap entries [tomcat] via GitHub
• Buildbot retry in on tomcat-10.1.x buildbot
• (tomcat) branch 11.0.x updated: Revert commit, with an explanation remm
• (tomcat) branch main updated: Revert commit, with an explanation remm
• (tomcat) branch 9.0.x updated (ab60dfaaef -> 751734ac01) remm
  • (tomcat) 02/13: Remove unused internalid attribute from JKStatusUpdateTask remm
  • (tomcat) 05/13: Align default URL-encoding charset of the Manager Ant tasks with the server default of UTF-8 remm
  • (tomcat) 07/13: Prevent oversized 'idle' values from expiring all sessions via integer overflow in the sessions/expire command remm
  • (tomcat) 09/13: Close the JMX connection owned by a task or condition when no reference is used to share it remm
  • (tomcat) 10/13: Fail with a clear BuildException when a JMX string-to-type conversion is impossible instead of sending the raw String to the server remm
  • (tomcat) 12/13: Raise a BuildException when a JMX task or condition explicitly specifies a target that conflicts with an existing connection reference instead of silently ignoring it remm
  • (tomcat) 04/13: Avoid buffering remote WAR uploads of unknown length in memory in the Manager Ant tasks remm
  • (tomcat) 01/13: Fix FindLeaksTask response constraint handling when statusLine is false remm
  • (tomcat) 03/13: Add configurable timeout for HTTP connections used by the Manager Ant tasks remm
  • (tomcat) 11/13: Validate the operation and type in the JMX condition and report non-numeric values as a BuildException instead of an uncaught NumberFormatException or a silent false remm
  • (tomcat) 06/13: Include the HTTP error response body in the error messages of the Manager Ant tasks remm
  • (tomcat) 13/13: Log the error message returned by a JMX task when failOnError is false instead of discarding it remm
  • (tomcat) 08/13: Register the missing serverinfo Ant task in antlib.xml and catalina.tasks remm
• (tomcat) branch 10.1.x updated (85d60a3c37 -> 8d68bfa075) remm
  • (tomcat) 12/13: Raise a BuildException when a JMX task or condition explicitly specifies a target that conflicts with an existing connection reference instead of silently ignoring it remm
  • (tomcat) 02/13: Remove unused internalid attribute from JKStatusUpdateTask remm
  • (tomcat) 04/13: Avoid buffering remote WAR uploads of unknown length in memory in the Manager Ant tasks remm
  • (tomcat) 10/13: Fail with a clear BuildException when a JMX string-to-type conversion is impossible instead of sending the raw String to the server remm
  • (tomcat) 07/13: Prevent oversized 'idle' values from expiring all sessions via integer overflow in the sessions/expire command remm
  • (tomcat) 03/13: Add configurable timeout for HTTP connections used by the Manager Ant tasks remm
  • (tomcat) 01/13: Fix FindLeaksTask response constraint handling when statusLine is false remm
  • (tomcat) 13/13: Log the error message returned by a JMX task when failOnError is false instead of discarding it remm
  • (tomcat) 09/13: Close the JMX connection owned by a task or condition when no reference is used to share it remm
  • (tomcat) 11/13: Validate the operation and type in the JMX condition and report non-numeric values as a BuildException instead of an uncaught NumberFormatException or a silent false remm
  • (tomcat) 05/13: Align default URL-encoding charset of the Manager Ant tasks with the server default of UTF-8 remm
  • (tomcat) 08/13: Register the missing serverinfo Ant task in antlib.xml and catalina.tasks remm
  • (tomcat) 06/13: Include the HTTP error response body in the error messages of the Manager Ant tasks remm
• (tomcat) branch 11.0.x updated (5ee1097e13 -> 21d8a2b6d9) remm
  • (tomcat) 01/14: Fix FindLeaksTask response constraint handling when statusLine is false remm
  • (tomcat) 08/14: Register the missing serverinfo Ant task in antlib.xml and catalina.tasks remm
  • (tomcat) 07/14: Prevent oversized 'idle' values from expiring all sessions via integer overflow in the sessions/expire command remm
  • (tomcat) 04/14: Avoid buffering remote WAR uploads of unknown length in memory in the Manager Ant tasks remm
  • (tomcat) 03/14: Add configurable timeout for HTTP connections used by the Manager Ant tasks remm
  • (tomcat) 02/14: Remove unused internalid attribute from JKStatusUpdateTask remm
  • (tomcat) 05/14: Align default URL-encoding charset of the Manager Ant tasks with the server default of UTF-8 remm
  • (tomcat) 06/14: Include the HTTP error response body in the error messages of the Manager Ant tasks remm
  • (tomcat) 10/14: Close the JMX connection owned by a task or condition when no reference is used to share it remm
  • (tomcat) 14/14: Log the error message returned by a JMX task when failOnError is false instead of discarding it remm
  • (tomcat) 11/14: Fail with a clear BuildException when a JMX string-to-type conversion is impossible instead of sending the raw String to the server remm
  • (tomcat) 09/14: Match the runtime default by blocking external entity resolution in the Validator Ant task remm
  • (tomcat) 12/14: Validate the operation and type in the JMX condition and report non-numeric values as a BuildException instead of an uncaught NumberFormatException or a silent false remm
  • (tomcat) 13/14: Raise a BuildException when a JMX task or condition explicitly specifies a target that conflicts with an existing connection reference instead of silently ignoring it remm
• (tomcat) branch main updated (7a8da75d93 -> 96b998834e) remm
  • (tomcat) 05/15: Align default URL-encoding charset of the Manager Ant tasks with the server default of UTF-8 remm
  • (tomcat) 07/15: Prevent oversized 'idle' values from expiring all sessions via integer overflow in the sessions/expire command remm
  • (tomcat) 10/15: Close the JMX connection owned by a task or condition when no reference is used to share it remm
  • (tomcat) 11/15: Fail with a clear BuildException when a JMX string-to-type conversion is impossible instead of sending the raw String to the server remm
  • (tomcat) 02/15: Remove unused internalid attribute from JKStatusUpdateTask remm
  • (tomcat) 03/15: Add configurable timeout for HTTP connections used by the Manager Ant tasks remm
  • (tomcat) 08/15: Register the missing serverinfo Ant task in antlib.xml and catalina.tasks remm
  • (tomcat) 13/15: Raise a BuildException when a JMX task or condition explicitly specifies a target that conflicts with an existing connection reference instead of silently ignoring it remm
  • (tomcat) 15/15: Merge branch 'main' of [email protected]:apache/tomcat.git into main remm
  • (tomcat) 04/15: Avoid buffering remote WAR uploads of unknown length in memory in the Manager Ant tasks remm
  • (tomcat) 09/15: Match the runtime default by blocking external entity resolution in the Validator Ant task remm
  • (tomcat) 12/15: Validate the operation and type in the JMX condition and report non-numeric values as a BuildException instead of an uncaught NumberFormatException or a silent false remm
  • (tomcat) 06/15: Include the HTTP error response body in the error messages of the Manager Ant tasks remm
  • (tomcat) 14/15: Log the error message returned by a JMX task when failOnError is false instead of discarding it remm
  • (tomcat) 01/15: Fix FindLeaksTask response constraint handling when statusLine is false remm
  • Re: (tomcat) branch main updated (7a8da75d93 -> 96b998834e) Rémy Maucherat
• (tomcat) branch 10.1.x updated: Avoid very rare race between async write notification and completion remm
• (tomcat) branch 9.0.x updated: Avoid very rare race between async write notification and completion remm
• (tomcat) branch 11.0.x updated: Avoid very rare race between async write notification and completion remm
• (tomcat) branch 9.0.x updated: Ensure non-blocking write buffer is empty before sending AJP end msg markt
• (tomcat) branch 10.1.x updated: Ensure non-blocking write buffer is empty before sending AJP end msg markt
• (tomcat) branch 11.0.x updated: Ensure non-blocking write buffer is empty before sending AJP end msg markt
• (tomcat) branch main updated: Ensure non-blocking write buffer is empty before sending AJP end msg markt
• (tomcat) branch 11.0.x updated: Add test case for CVE-2026-78437 markt
• (tomcat) branch 10.1.x updated: Move to 27-ea remm
• [Bug 69949] Corrupted uploads from Safari on Tomcat 9/10/11 bugzilla
• (tomcat) branch main updated: Improve handling of Servlet 5.7 response closure markt
• (tomcat) branch main updated (19a8077cd3 -> e5a5d87495) markt
  • (tomcat) 03/03: Add test case for CVE-2026-78437 markt
  • (tomcat) 02/03: Add test case for CVE-2026-77791 markt
  • (tomcat) 01/03: Add test case for CVE-2026-77762 markt
• (tomcat) branch 11.0.x updated: Improve handling of Servlet 5.7 response closure markt
• (tomcat) branch 9.0.x updated: Align flushing buffered writes with HTTP. markt
• (tomcat) branch 10.1.x updated: Align flushing buffered writes with HTTP. markt
• (tomcat) branch 11.0.x updated: Align flushing buffered writes with HTTP. markt
• (tomcat) branch main updated: Align flushing buffered writes with HTTP. markt
• (tomcat) branch main updated: Clean-up - no functional change markt
• (tomcat) branch 9.0.x updated: Clean-up - no functional change markt
• (tomcat) branch 10.1.x updated: Clean-up - no functional change markt
• (tomcat) branch 11.0.x updated: Clean-up - no functional change markt
• (tomcat) branch 9.0.x updated: Add test case for CVE-2026-78437 markt
• (tomcat) branch 11.0.x updated: Add test case for CVE-2026-77791 markt
• (tomcat) branch main updated: Avoid very rare race between async write notification and completion remm
• NSIS 3.13 released ... Rainer Jung
  • Re: NSIS 3.13 released ... Mark Thomas
• (tomcat) branch 10.1.x updated: Add test case for CVE-2026-78437 markt
• (tomcat) branch 9.0.x updated: Add test case for CVE-2026-77791 markt
• (tomcat) branch 10.1.x updated: Add test case for CVE-2026-77791 markt
• (tomcat) branch 9.0.x updated: Add test case for CVE-2026-77762 markt
• (tomcat) branch 10.1.x updated: Add test case for CVE-2026-77762 markt
• (tomcat) branch 11.0.x updated: Add test case for CVE-2026-77762 markt
• (tomcat) branch main updated (a67bd12758 -> 19a8077cd3) remm
  • (tomcat) 01/01: Merge pull request #1056 from apache/dependabot/github_actions/actions/setup-java-6 remm
• (tomcat) branch dependabot/github_actions/actions/setup-java-6 deleted (was 52f6d081e0) github-bot
• (tomcat) branch 11.0.x updated: Move to 27-ea remm
• (tomcat) branch main updated: Drop 26 remm
• [PR] Route JspC context logging through Ant [tomcat] via GitHub
  • Re: [PR] Route JspC context logging through Ant [tomcat] via GitHub
  • Re: [PR] Route JspC context logging through Ant [tomcat] via GitHub
• (tomcat-connectors) branch main updated: Better length checks when processing response header values. markt
• (tomcat-connectors) branch main updated: Add a lower bounds check for encoded response headers markt
• svn commit: r1938614 - in tomcat/site/trunk: docs xdocs markt
• (tomcat) branch 11.0.x updated: Add test case for bug 70249 markt
• (tomcat) branch 9.0.x updated: Add test case for bug 70249 markt
• (tomcat) branch 10.1.x updated: Add test case for bug 70249 markt
• (tomcat) branch main updated: Add test case for bug 70249 markt
• (tomcat) branch main updated: Fix a Coverity resource leak warning. markt
• (tomcat) branch 10.1.x updated: Typos remm
• (tomcat) branch 11.0.x updated: Typos remm
• (tomcat) branch 9.0.x updated: Typos remm
• (tomcat) branch main updated: Typos remm
• [PR] Bump jakarta.tck:sigtest-maven-plugin from 2.6 to 2.7 [tomcat-tck] via GitHub
• [PR] Bump org.apache.maven.plugins:maven-install-plugin from 3.1.4 to 3.2.0 [tomcat-tck] via GitHub
• (tomcat-tck) branch dependabot/maven/jakarta.tck-sigtest-maven-plugin-2.7 created (now c5b40e3) github-bot
• (tomcat-tck) branch dependabot/maven/org.junit-junit-bom-6.1.3 created (now 8028a24) github-bot
• (tomcat-tck) branch dependabot/maven/org.slf4j-slf4j-simple-2.0.20 created (now 0d19279) github-bot
• [PR] Bump org.slf4j:slf4j-simple from 2.0.18 to 2.0.20 [tomcat-tck] via GitHub
• [PR] Bump org.junit:junit-bom from 6.1.0 to 6.1.3 [tomcat-tck] via GitHub
• (tomcat-tck) branch dependabot/maven/org.apache.maven.plugins-maven-install-plugin-3.2.0 created (now 476df0b) github-bot
• (tomcat-jakartaee-migration) branch dependabot/maven/org.apache-apache-40 deleted (was f69bb56) github-bot
• (tomcat-jakartaee-migration) branch main updated: Bump org.apache:apache from 39 to 40 remm
• [Bug 69890] Update test-status for more clear output bugzilla
  • [Bug 69890] Update test-status for more clear output bugzilla
• (tomcat-jakartaee-migration) branch dependabot/maven/org.apache-apache-40 created (now f69bb56) github-bot
• [PR] Bump org.apache:apache from 39 to 40 [tomcat-jakartaee-migration] via GitHub
  • Re: [PR] Bump org.apache:apache from 39 to 40 [tomcat-jakartaee-migration] via GitHub
• [Bug 70249] New: EL in Tomcat 12-M1: NPE coerceToNumber() bugzilla
  • [Bug 70249] EL in Tomcat 12-M1: NPE coerceToNumber() bugzilla
  • [Bug 70249] EL in Tomcat 12-M1: NPE coerceToNumber() bugzilla
• (tomcat) branch 9.0.x updated: Fix possible corruption with HTTP/2 and large uploads remm
• (tomcat) branch 10.1.x updated: Fix possible corruption with HTTP/2 and large uploads remm
• (tomcat) branch 11.0.x updated: Fix possible corruption with HTTP/2 and large uploads remm
• (tomcat) branch main updated: Fix possible corruption with HTTP/2 and large uploads remm
• [PR] Fix data corruption in SocketBufferHandler.unReadReadBuffer() [tomcat] via GitHub
  • Re: [PR] Fix data corruption in SocketBufferHandler.unReadReadBuffer() [tomcat] via GitHub
  • Re: [PR] Fix data corruption in SocketBufferHandler.unReadReadBuffer() [tomcat] via GitHub
  • Re: [PR] Fix data corruption in SocketBufferHandler.unReadReadBuffer() [tomcat] via GitHub
  • Re: [PR] Fix data corruption in SocketBufferHandler.unReadReadBuffer() [tomcat] via GitHub
  • Re: [PR] Fix data corruption in SocketBufferHandler.unReadReadBuffer() [tomcat] via GitHub
  • Re: [PR] Fix data corruption in SocketBufferHandler.unReadReadBuffer() [tomcat] via GitHub
• (tomcat) branch 10.1.x updated: Update the internal fork of Apache Commons BCEL to 6.13.0 markt
• (tomcat) branch 9.0.x updated: Update the internal fork of Apache Commons BCEL to 6.13.0 markt
• (tomcat) branch 11.0.x updated: Update the internal fork of Apache Commons BCEL to 6.13.0 markt
• (tomcat) branch main updated: Update the internal fork of Apache Commons BCEL to 6.13.0 markt
• (tomcat) branch main updated: Fix checkstyle error markt
• (tomcat) branch main updated: Another round of documentation updates for clusters with TLS markt
• (tomcat) branch main updated: Fixes for MembershipServiceBase with TLS-PSK markt
• (tomcat) branch main updated: Fix issue with some missing messages markt
• (tomcat) branch main updated: LibreSSL does not support PSK at all remm
• (tomcat) branch main updated: Hopefully the final check to fix to MacOS smoke test markt
• (tomcat) branch main updated: Better fix for test failures on Java 21 and earlier markt
• (tomcat) branch main updated: Fix LibreSSL compatibility remm
  • Re: (tomcat) branch main updated: Fix LibreSSL compatibility Rémy Maucherat
• (tomcat) branch main updated: Add a note re LibreSSL markt
• (tomcat) branch main updated: Revert "Add OpenSSL support to the MacOS smoketest" markt
• (tomcat) branch main updated: Move SSL_in_init to compat remm
  • Re: (tomcat) branch main updated: Move SSL_in_init to compat Rémy Maucherat
• (tomcat) branch main updated: Add OpenSSL support to the MacOS smoketest markt
  • Re: (tomcat) branch main updated: Add OpenSSL support to the MacOS smoketest Rémy Maucherat
  • Re: (tomcat) branch main updated: Add OpenSSL support to the MacOS smoketest Mark Thomas
• (tomcat) branch main updated: Skip FFM tests if running on Java 21 or earlier markt
  • Re: (tomcat) branch main updated: Skip FFM tests if running on Java 21 or earlier Mark Thomas
• [PR] Bring back OpenSSL 1.1.1 support [tomcat-native] via GitHub
  • Re: [PR] Bring back OpenSSL 1.1.1 support [tomcat-native] via GitHub
  • Re: [PR] Bring back OpenSSL 1.1.1 support [tomcat-native] via GitHub
• (tomcat) branch main updated: Expands tests markt
• (tomcat) branch main updated (2db121ddce -> 1de7fac738) markt
  • (tomcat) 01/02: Align with Tomcat Native 1.2.x markt
  • (tomcat) 02/02: First pass at TLS 1.3 support markt
• (tomcat-native) branch main updated: Further fix for TLS 1.3 PSK support markt
• (tomcat) branch main updated: And some more deprecation markt
• (tomcat) branch main updated: Additional deprecation markt

• Earlier messages
• Later messages