Re: [SECURITY] CVE-2024-38286 Apache Tomcat - Denial of Service

On Fri, Sep 27, 2024 at 8:37 PM Amarendra Godbole wrote: > > On Mon, Sep 23, 2024 at 5:54 AM Mark Thomas wrote: > > > > CVE-2024-38286 Apache Tomcat - Denial of Service > > > > Severity: Important > > > > Vendor: The Apache Software Foundation > > > > Versions Affected: > > Apache Tomcat 11.0.0-M

Re: [SECURITY] CVE-2024-38286 Apache Tomcat - Denial of Service

On Mon, Sep 23, 2024 at 5:54 AM Mark Thomas wrote: > > CVE-2024-38286 Apache Tomcat - Denial of Service > > Severity: Important > > Vendor: The Apache Software Foundation > > Versions Affected: > Apache Tomcat 11.0.0-M1 to 11.0.0-M20 > Apache Tomcat 10.1.0-M1 to 10.1.24 > Apache Tomcat 9.0.13 to 9

[Bug 69338] Overhead in El processing (AST*)

https://bz.apache.org/bugzilla/show_bug.cgi?id=69338 --- Comment #7 from John Engebretson --- Thank you for the quick turnaround! FWIW, the report I received is holding up, but there's also some internal code in the area. I'll open a new ticket for anything else I stumble upon. -- You are rec

[Bug 69348] Optimizable memory allocation in ELContext

https://bz.apache.org/bugzilla/show_bug.cgi?id=69348 --- Comment #1 from John Engebretson --- Prod data confirms the allocation of many ArrayDeque. Margin of error is high so I won't quote numbers, but it's definitely present. -- You are receiving this mail because: You are the assignee for th

[Bug 69348] New: Optimizable memory allocation in ELContext

https://bz.apache.org/bugzilla/show_bug.cgi?id=69348 Bug ID: 69348 Summary: Optimizable memory allocation in ELContext Product: Tomcat 9 Version: 9.0.x Hardware: All OS: Windows XP Status: NEW Severity: no

[Bug 69347] SPAM SPAM SPAM SPAM

https://bz.apache.org/bugzilla/show_bug.cgi?id=69347 --- Comment #2 from Chuck Caldarale --- The content of attachment 39878 has been deleted for the following reason: Spam -- You are receiving this mail because: You are the assignee for the bug. ---

[Bug 69347] SPAM SPAM SPAM SPAM

https://bz.apache.org/bugzilla/show_bug.cgi?id=69347 Chuck Caldarale changed: What|Removed |Added Attachment #39878|https://www.ninjacart.com/ |SPAM SPAM SPAM SPAM descripti

[Bug 69347] SPAM SPAM SPAM SPAM

https://bz.apache.org/bugzilla/show_bug.cgi?id=69347 Chuck Caldarale changed: What|Removed |Added Summary|https://www.ninjacart.com/ |SPAM SPAM SPAM SPAM

[Bug 69347] New: https://www.ninjacart.com/

https://bz.apache.org/bugzilla/show_bug.cgi?id=69347 Bug ID: 69347 Summary: https://www.ninjacart.com/ Product: Tomcat Native Version: 2.0.8 Hardware: PC Status: NEW Severity: normal Priority: P2 Compon

Buildbot success in on tomcat-9.0.x

Build status: Build succeeded! Worker used: bb_worker2_ubuntu URL: https://ci2.apache.org/#builders/37/builds/1098 Blamelist: Mark Thomas , Paul Lodge , remm Build Text: build successful Status Detected: restored build Build Source Stamp: [branch 9.0.x] ffc0a2696ab0f33f14501174bf5f644e7aa06e3b

Buildbot success in on tomcat-11.0.x

Build status: Build succeeded! Worker used: bb_worker2_ubuntu URL: https://ci2.apache.org/#builders/112/builds/1300 Blamelist: Mark Thomas , Paul Lodge , remm Build Text: build successful Status Detected: restored build Build Source Stamp: [branch 11.0.x] 3c83e17392355ee66032f0713f9f9eeaca758ede

Re: [PR] Add ParameterLimitValve to enforce request parameter limits for specific URLs [tomcat]

dsoumis commented on PR #753: URL: https://github.com/apache/tomcat/pull/753#issuecomment-2379031764 I have refactored the valve and the request as discussed here. There were 2 failing tests after the change to Request's constructor which introduced method accessing of Connector. The

Re: [PR] Add ParameterLimitValve to enforce request parameter limits for specific URLs [tomcat]

dsoumis commented on code in PR #753: URL: https://github.com/apache/tomcat/pull/753#discussion_r1778454482 ## test/org/apache/catalina/valves/TestSSLValve.java: ## @@ -314,12 +352,14 @@ public void testSslCipherUserKeySizeHeaderPresent() throws Exception { @Test(expecte

[Bug 69338] Overhead in El processing (AST*)

https://bz.apache.org/bugzilla/show_bug.cgi?id=69338 Mark Thomas changed: What|Removed |Added Resolution|--- |FIXED Status|NEW

(tomcat) branch 10.1.x updated: Fix IDE warnings

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.1.x by this push: new ad1162bcd2 Fix IDE warnings ad1162bcd2 is describ

(tomcat) branch 9.0.x updated: Fix IDE warnings

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 372f3cefe6 Fix IDE warnings 372f3cefe6 is described

(tomcat) branch 11.0.x updated: Fix IDE warnings

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 11.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/11.0.x by this push: new 3c83e17392 Fix IDE warnings 3c83e17392 is describ

(tomcat) branch main updated: Fix IDE warnings

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 2276ee88f2 Fix IDE warnings 2276ee88f2 is described b

(tomcat) branch 9.0.x updated: Review and fix edge cases after CI failure.

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 5e4f5aa216 Review and fix edge cases after CI failu

(tomcat) branch 10.1.x updated: Review and fix edge cases after CI failure.

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.1.x by this push: new 962c479ed1 Review and fix edge cases after CI fai

(tomcat) branch 11.0.x updated: Review and fix edge cases after CI failure.

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 11.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/11.0.x by this push: new 002d38647f Review and fix edge cases after CI fai

(tomcat) branch main updated: Review and fix edge cases after CI failure.

This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 0d6b794df6 Review and fix edge cases after CI failure

Buildbot success in on tomcat-10.1.x

Build status: Build succeeded! Worker used: bb_worker2_ubuntu URL: https://ci2.apache.org/#builders/44/builds/1416 Blamelist: Mark Thomas , Paul Lodge , remm Build Text: build successful Status Detected: restored build Build Source Stamp: [branch 10.1.x] 7dd25ff71835dae52f3363de58215e5fdf8c45e7

Buildbot failure in on tomcat-11.0.x

Build status: BUILD FAILED: failed Snapshot deployed to ASF Maven snapshot repository (failure) Worker used: bb_worker2_ubuntu URL: https://ci2.apache.org/#builders/112/builds/1299 Blamelist: Paul Lodge , remm Build Text: failed Snapshot deployed to ASF Maven snapshot repository (failure) Status

(tomcat) branch 9.0.x updated: API changes

This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new ffc0a2696a API changes ffc0a2696a is described below

(tomcat) 01/02: Added a unit test to make sure that the Expires and Date headers have consisent formatting and contain GMT

This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit e45d8fb1004439bf3c4dfceba1f56e18c1309085 Author: Paul Lodge AuthorDate: Tue Sep 17 16:39:58 2024 +0200 Added a unit te

(tomcat) 02/02: Checkstyle and comment

This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 7dd25ff71835dae52f3363de58215e5fdf8c45e7 Author: remm AuthorDate: Fri Sep 27 10:23:34 2024 +0200 Checkstyle and comme

(tomcat) 02/02: Checkstyle and comment

This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 273caa8c71bc9cf862fb413aef5d8481800df1b1 Author: remm AuthorDate: Fri Sep 27 10:23:34 2024 +0200 Checkstyle and commen

(tomcat) branch 9.0.x updated (c9293e2ab4 -> 273caa8c71)

This is an automated email from the ASF dual-hosted git repository. remm pushed a change to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git from c9293e2ab4 Always use code blocks new e45d8fb100 Added a unit test to make sure that the Expires and Date headers h

(tomcat) 01/02: Added a unit test to make sure that the Expires and Date headers have consisent formatting and contain GMT

This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit b55299df3ab780d1cb8638a675f9655128d98e20 Author: Paul Lodge AuthorDate: Tue Sep 17 16:39:58 2024 +0200 Added a unit t

(tomcat) branch 10.1.x updated (9b439fcc72 -> 7dd25ff718)

This is an automated email from the ASF dual-hosted git repository. remm pushed a change to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git from 9b439fcc72 Always use code blocks new b55299df3a Added a unit test to make sure that the Expires and Date headers

(tomcat) 01/02: Added a unit test to make sure that the Expires and Date headers have consisent formatting and contain GMT

This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 11.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit e36a358ef7ae908acb9f51274fdf2bfb796288aa Author: Paul Lodge AuthorDate: Tue Sep 17 16:39:58 2024 +0200 Added a unit t

(tomcat) 02/02: Checkstyle and comment

This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 11.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit bacf851c40f7ac00a154defe6a784bdb2e34e371 Author: remm AuthorDate: Fri Sep 27 10:23:34 2024 +0200 Checkstyle and comme

(tomcat) branch 11.0.x updated (b5d8092cd8 -> bacf851c40)

This is an automated email from the ASF dual-hosted git repository. remm pushed a change to branch 11.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git from b5d8092cd8 Always use code blocks new e36a358ef7 Added a unit test to make sure that the Expires and Date headers

(tomcat) branch main updated: Checkstyle and comment

This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 64a7cfbd52 Checkstyle and comment 64a7cfbd52 is descri

(tomcat) branch main updated (472173a8e7 -> 2b582321ba)

This is an automated email from the ASF dual-hosted git repository. remm pushed a change to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git from 472173a8e7 Always use code blocks add 4f2baf0d54 Added a unit test to make sure that the Expires and Date headers ha

Re: [PR] Unit test ensuring that the Expires and Date headers use GMT [tomcat]

rmaucher merged PR #756: URL: https://github.com/apache/tomcat/pull/756 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.or

(tomcat) 01/01: Merge pull request #756 from PaulLodge/expire-header-uses-gmt

This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 2b582321baa0e05ecf6f2be5a8377a385a22e938 Merge: 472173a8e7 4f2baf0d54 Author: Rémy Maucherat AuthorDate: Fri Sep 27 10:19:58