users  

Messages by Date

• 2026/08/28 Re: Tomcat Embed Core 10.1.58 Christopher Schultz
• 2026/08/28 Re: Tomcat Severity Ratings verus CVSS Darryl Baker
• 2026/08/28 Re: Tomcat Severity Ratings verus CVSS Christopher Schultz
• 2026/08/26 Re: Tomcat Severity Ratings verus CVSS [email protected]
• 2026/08/26 Tomcat Severity Ratings verus CVSS Darryl Baker
• 2026/08/25 [SECURITY] CVE-2026-73180 Apache Tomcat - Authenticated WebSocket session survives end of HTTP session Mark Thomas
• 2026/08/25 [SECURITY] CVE-2026-68763 Apache Tomcat - DoS via allocation leak in HTTP/2 backlog tracking when a stream is reset Mark Thomas
• 2026/08/25 [SECURITY] CVE-2026-68569 Apache Tomcat - Principal lookup can fail open in some cases Mark Thomas
• 2026/08/25 [SECURITY] CVE-2026-68525 Apache Tomcat - Redirect after FORM authentication may bypass method specific constraints Mark Thomas
• 2026/08/25 [SECURITY] CVE-2026-66422 Apache Tomcat - Servlet role references can bypass declarative role constraints Mark Thomas
• 2026/08/25 [SECURITY] CVE-2026-65927 Apache Tomcat - RewriteValve [N] restarts at the second rule and may bypass access control Mark Thomas
• 2026/08/25 [SECURITY] CVE-2026-65905 Apache Tomcat - Limited replay attack possible with DIGEST authentication Mark Thomas
• 2026/08/25 [SECURITY] CVE-2026-65637 Apache Tomcat - HTTP/2 no-authority bypass of strict SNI validation Mark Thomas
• 2026/08/25 [SECURITY] CVE-2026-65183 Apache Tomcat - TOCTOU when setting specific permissions for Unix Domain Sockets Mark Thomas
• 2026/08/25 [SECURITY] CVE-2026-65182 Apache Tomcat - Security constraint bypass Mark Thomas
• 2026/08/25 RE: Support for gMSA Lambert, Dominique via users
• 2026/08/25 Re: Support for gMSA Mark Thomas
• 2026/08/25 Support for gMSA Lambert, Dominique via users
• 2026/08/21 Re: AW: Version 10.1.57 / 10.1.59 Mark Thomas
• 2026/08/21 AW: Version 10.1.57 / 10.1.59 Thomas Hoffmann (Speed4Trade GmbH) via users
• 2026/08/21 Fwd: Version 10.1.57 / 10.1.59 Brian Proffitt
• 2026/08/20 Re: Tomcat Embed Core 10.1.58 Eric Fetzer
• 2026/08/20 Re: Tomcat Embed Core 10.1.58 Mark Thomas
• 2026/08/20 Re: Tomcat Embed Core 10.1.58 Eric Fetzer
• 2026/08/20 Re: Update for new versions Mark Thomas
• 2026/08/19 Update for new versions Venkumahanti Praveen
• 2026/08/19 Re: Tomcat Embed Core 10.1.58 Chuck Caldarale
• 2026/08/19 Tomcat Embed Core 10.1.58 Raghu Dev
• 2026/08/18 [ANN] Apache Tomcat 9.0.121 available Rémy Maucherat
• 2026/08/18 [ANN] Apache Tomcat 11.0.25 Available Mark Thomas
• 2026/08/17 Re: Status and timeline inquiry for Apache Tomcat 11.0.25 release Chuck Caldarale
• 2026/08/17 Status and timeline inquiry for Apache Tomcat 11.0.25 release Terry ST SY/DPO
• 2026/08/10 Re: Community over Code Sydney 2026 Mark Thomas
• 2026/08/08 Re: Tomcat 11.0.25 Release Timeline Inquiry Christopher Schultz
• 2026/08/08 Re: Tomcat 11.0.25 Release Timeline Inquiry Mark Thomas
• 2026/08/07 Re: Tomcat 11.0.25 Release Timeline Inquiry Jo�o Paulo Sim�es Martins via users
• 2026/08/07 Re: Tomcat 11.0.25 Release Timeline Inquiry Sebastian Trost via users
• 2026/08/07 Tomcat 11.0.25 Release Timeline Inquiry joao-paulo.martins-prestataire.ca-ps.com via users
• 2026/08/06 Re: Regarding apache-tomcat 10.1.58 version Mark Thomas
• 2026/08/06 Regarding apache-tomcat 10.1.58 version Roshan Patil
• 2026/08/06 Re: Tomcat host header redirect issue Mark Thomas
• 2026/08/05 Re: Tomcat host header redirect issue Anushka sur
• 2026/08/05 Re: Session clustering between tomcat versions. Mark Thomas
• 2026/08/05 Re: AW: Regarding apache-tomcat 10.1.58 version Mark Thomas
• 2026/08/05 Re: Regarding apache-tomcat 10.1.58 version Rob Sargent
• 2026/08/05 Session clustering between tomcat versions. Stephen Booth
• 2026/08/05 Re: AW: Regarding apache-tomcat 10.1.58 version Roshan Patil
• 2026/08/05 AW: Regarding apache-tomcat 10.1.58 version Döscher, Andreas (ESI) via users
• 2026/08/05 Regarding apache-tomcat 10.1.58 version Roshan Patil
• 2026/08/01 Re: Tomcat host header redirect issue GUSTAVO AVITABILE
• 2026/07/31 Re: Tomcat host header redirect issue Mark Thomas
• 2026/07/31 Community over Code Sydney 2026 Mark Thomas
• 2026/07/31 Community over Code Glasgow 2026 Mark Thomas
• 2026/07/30 Re: Tomcat host header redirect issue Anushka sur
• 2026/07/29 Re: Tomcat host header redirect issue Christopher Schultz
• 2026/07/28 [SECURITY] CVE-2026-66299 Apache Tomcat - DoS via WebSocket chat example Mark Thomas
• 2026/07/24 Re: Tomcat host header redirect issue GUSTAVO AVITABILE
• 2026/07/23 London - Tues 28 July - evening Mark Thomas
• 2026/07/23 Re: Tomcat host header redirect issue Mark Thomas
• 2026/07/23 Re: Tomcat host header redirect issue Johan Compagner
• 2026/07/23 Re: Tomcat host header redirect issue Anushka sur
• 2026/07/23 Re: Tomcat host header redirect issue Anushka sur
• 2026/07/22 Re: Tomcat host header redirect issue Anushka sur
• 2026/07/22 Re: Apache Tomcat 9.1.x release timeframe Christopher Schultz
• 2026/07/22 Re: [OT] Apache Tomcat 9.1.x release timeframe Christopher Schultz
• 2026/07/22 Re: Apache Tomcat 9.1.x release timeframe Christopher Schultz
• 2026/07/22 Re: AW: [EXTERNAL] Re: Why tomcat "Incorrect URL decoding in RewriteValve may allow security control bypass" is rated 'Low' on tomcat page but 'Critical' on NIST ? Christopher Schultz
• 2026/07/22 Re: Tomcat host header redirect issue Christopher Schultz
• 2026/07/22 AW: [EXTERNAL] Re: AW: Re: Why tomcat "Incorrect URL decoding in RewriteValve may allow security control bypass" is rated 'Low' on tomcat page but 'Critical' on NIST ? LAURIA Giuseppe via users
• 2026/07/22 Re: [EXTERNAL] Re: Why tomcat "Incorrect URL decoding in RewriteValve may allow security control bypass" is rated 'Low' on tomcat page but 'Critical' on NIST ? Zdeněk Henek
• 2026/07/22 Re: AW: [EXTERNAL] Re: Why tomcat "Incorrect URL decoding in RewriteValve may allow security control bypass" is rated 'Low' on tomcat page but 'Critical' on NIST ? Rémy Maucherat
• 2026/07/21 Re: AW: [EXTERNAL] Re: Why tomcat "Incorrect URL decoding in RewriteValve may allow security control bypass" is rated 'Low' on tomcat page but 'Critical' on NIST ? Mark Thomas
• 2026/07/21 Re: [EXTERNAL] Re: Why tomcat "Incorrect URL decoding in RewriteValve may allow security control bypass" is rated 'Low' on tomcat page but 'Critical' on NIST ? Peter Kreuser
• 2026/07/21 Re: AW: [EXTERNAL] Re: Why tomcat "Incorrect URL decoding in RewriteValve may allow security control bypass" is rated 'Low' on tomcat page but 'Critical' on NIST ? Sebastian Trost via users
• 2026/07/21 AW: [EXTERNAL] Re: Why tomcat "Incorrect URL decoding in RewriteValve may allow security control bypass" is rated 'Low' on tomcat page but 'Critical' on NIST ? LAURIA Giuseppe via users
• 2026/07/21 Re: Why tomcat "Incorrect URL decoding in RewriteValve may allow security control bypass" is rated 'Low' on tomcat page but 'Critical' on NIST ? Tim Funk
• 2026/07/21 Why tomcat "Incorrect URL decoding in RewriteValve may allow security control bypass" is rated 'Low' on tomcat page but 'Critical' on NIST ? LAURIA Giuseppe via users
• 2026/07/21 Re: Tomcat host header redirect issue Mark Thomas
• 2026/07/21 Re: Tomcat host header redirect issue Anushka sur
• 2026/07/17 RE: Apache Tomcat 9.1.x release timeframe Lisa Sayre
• 2026/07/17 Re: Apache Tomcat 9.1.x release timeframe Mark Thomas
• 2026/07/17 RE: Apache Tomcat 9.1.x release timeframe Lisa Sayre
• 2026/07/17 Re: Apache Tomcat 9.1.x release timeframe Sebastian Trost via users
• 2026/07/17 Re: Apache Tomcat 9.1.x release timeframe Mark Thomas
• 2026/07/17 RE: Apache Tomcat 9.1.x release timeframe Eddie Rowe via users
• 2026/07/17 Re: Apache Tomcat 9.1.x release timeframe Sebastian Trost via users
• 2026/07/17 RE: Apache Tomcat 9.1.x release timeframe Lisa Sayre
• 2026/07/17 Re: Tomcat Jobs? Sebastian Trost via users
• 2026/07/17 Re: Tomcat Jobs? Jon McAlexander
• 2026/07/17 Re: Tomcat Jobs? Sebastian Trost via users
• 2026/07/16 Tomcat Jobs? Jon McAlexander
• 2026/07/16 Re: Apache Tomcat 9.1.x release timeframe david w
• 2026/07/16 Re: Apache Tomcat 9.1.x release timeframe Mark Thomas
• 2026/07/16 Re: Possible missing CVE commits in 9.0.120, 10.1.57 and 11.0.24 release builds Mark Thomas
• 2026/07/16 Possible missing CVE commits in 9.0.120, 10.1.57 and 11.0.24 release builds Thomas Williams
• 2026/07/16 Apache Tomcat 9.1.x release timeframe Lisa Sayre
• 2026/07/15 Re: Tomcat host header redirect issue Anushka sur
• 2026/07/15 Re: Tomcat host header redirect issue Anushka sur
• 2026/07/15 Re: Tomcat host header redirect issue Christopher Schultz
• 2026/07/15 Re: Tomcat host header redirect issue Mark Thomas
• 2026/07/15 Re: Tomcat host header redirect issue Olaf Kock
• 2026/07/15 Tomcat host header redirect issue Anushka sur
• 2026/07/15 AW: Tomcat 10 MLDSA - failed to start Döscher, Andreas (ESI) via users
• 2026/07/15 Re: Tomcat 10 MLDSA - failed to start Rémy Maucherat
• 2026/07/15 AW: Tomcat 10 MLDSA - failed to start Döscher, Andreas (ESI) via users
• 2026/07/15 Re: Tomcat 10 MLDSA - failed to start Rémy Maucherat
• 2026/07/15 Re: jspwiki-wiki down?! Sebastian Trost via users
• 2026/07/15 jspwiki-wiki down?! Holger Klawitter
• 2026/07/14 Re: Tomcat 10 MLDSA - failed to start Chuck Caldarale
• 2026/07/14 Tomcat 10 MLDSA - failed to start John Mok
• 2026/07/14 [SECURITY] CVE-2026-59084 Apache Tomcat - EncryptInterceptor requirements not clearly documented Mark Thomas
• 2026/07/14 [SECURITY] CVE-2026-59083 Apache Tomcat - Incorrect URL decoding in RewriteValve may allow security control bypass Mark Thomas
• 2026/07/13 Re: Multiple Apache Tomcat Vulnerabilities Allow Attackers to Bypass Authentication Chuck Caldarale
• 2026/07/13 Multiple Apache Tomcat Vulnerabilities Allow Attackers to Bypass Authentication Turritopsis Dohrnii Teo En Ming
• 2026/07/10 [ANN] Apache Tomcat 10.1.57 Available Christopher Schultz
• 2026/07/08 Re: Tomcat 10.1.56: Extending RequestElement no longer works! Amit Pande via users
• 2026/07/08 [ANN] Apache Tomcat 11.0.24 Available Mark Thomas
• 2026/07/07 [ANN] Apache Tomcat 9.0.120 available Rémy Maucherat
• 2026/07/02 Re: The scheme https s not consistent with the TLS enabled setting (Re: [ANN] Apache Tomcat 11.0.22 Available) Mark Thomas
• 2026/07/02 Re: The scheme https s not consistent with the TLS enabled setting (Re: [ANN] Apache Tomcat 11.0.22 Available) Christopher Schultz
• 2026/07/02 Re: Interesting issue while deploying an angular application (Tomcat 10.1.x) Christopher Schultz
• 2026/07/02 Re: Tomcat 10.1.56: Extending RequestElement no longer works! Christopher Schultz
• 2026/07/01 Re: Possible regression after upgrade to [9.0.119] (java.lang.IllegalArgumentException: newPosition > limit: (8175 > 9)) Mark Thomas
• 2026/06/30 Re: tomcat 9.0.119 + jsvc Chuck Caldarale
• 2026/06/30 RE: tomcat 9.0.119 + jsvc Rathore, Rajendra via users
• 2026/06/30 Re: tomcat 9.0.119 + jsvc Holger Klawitter
• 2026/06/30 Re: tomcat 9.0.119 + jsvc Mark Thomas
• 2026/06/30 Re: tomcat 9.0.119 + jsvc Rémy Maucherat
• 2026/06/30 tomcat 9.0.119 + jsvc info . asf
• 2026/06/29 [SECURITY] CVE-2026-55957 Apache Tomcat - Authentication bypass with JNDIRealm and GSSAPI authenticated bind Mark Thomas
• 2026/06/29 [SECURITY] CVE-2026-55956 Apache Tomcat - Security constraints for default servlet ignored method Mark Thomas
• 2026/06/29 [SECURITY] CVE-2026-55955 Apache Tomcat - EncryptInterceptor not protected against replay attacks Mark Thomas
• 2026/06/29 [SECURITY] CVE-2026-55276 Apache Tomcat - Logged effective web.xml is incomplete Mark Thomas
• 2026/06/29 [SECURITY] CVE-2026-53434 Apache Tomcat - Invalid CRL configuration doesn't trigger failure for FFM Connector Mark Thomas
• 2026/06/29 [SECURITY] CVE-2026-53404 Apache Tomcat - Bad ornext processing in RewriteValve Mark Thomas
• 2026/06/29 [SECURITY] CVE-2026-50229 Apache Tomcat - XXS in number guess example Mark Thomas
• 2026/06/26 Re: Possible regression after upgrade to [9.0.119] (java.lang.IllegalArgumentException: newPosition > limit: (8175 > 9)) Mark Thomas
• 2026/06/26 Re: Tomcat native 1.3.8 Mark Thomas
• 2026/06/26 Re: Tomcat native 1.3.8 Mark Thomas
• 2026/06/26 Tomcat native 1.3.8 Harri Pesonen via users
• 2026/06/25 Possible regression after upgrade to [9.0.119] (java.lang.IllegalArgumentException: newPosition > limit: (8175 > 9)) Stankov. Yavor
• 2026/06/24 Re: Interesting issue while deploying an angular application (Tomcat 10.1.x) Amit Pande via users
• 2026/06/24 Re: Interesting issue while deploying an angular application (Tomcat 10.1.x) Mark Thomas
• 2026/06/24 Re: https://tomcat.apache.org/tomcat-9.0-doc/changelog.html Not Yet Updated for 9.0.119 Mark Thomas
• 2026/06/23 Re: Tomcat 10.1.56: Extending RequestElement no longer works! Amit Pande via users
• 2026/06/23 Re: Tomcat 10.1.56: Extending RequestElement no longer works! Rémy Maucherat
• 2026/06/23 Re: Interesting issue while deploying an angular application (Tomcat 10.1.x) Christopher Schultz
• 2026/06/23 Re: https://tomcat.apache.org/tomcat-9.0-doc/changelog.html Not Yet Updated for 9.0.119 Christopher Schultz
• 2026/06/23 Re: Tomcat 10.1.56: Extending RequestElement no longer works! Christopher Schultz
• 2026/06/23 Interesting issue while deploying an angular application (Tomcat 10.1.x) Amit Pande via users
• 2026/06/23 Tomcat 10.1.56: Extending RequestElement no longer works! Amit Pande via users
• 2026/06/23 https://tomcat.apache.org/tomcat-9.0-doc/changelog.html Not Yet Updated for 9.0.119 Eddie Rowe via users
• 2026/06/23 [ANN] Apache Tomcat 9.0.119 available Rémy Maucherat
• 2026/06/22 [ANN] Apache Tomcat 10.1.56 Available Christopher Schultz
• 2026/06/22 AW: AW: [ANN] Apache Tomcat 11.0.23 Available Thomas Hoffmann (Speed4Trade GmbH) via users
• 2026/06/22 Re: AW: [ANN] Apache Tomcat 11.0.23 Available Mark Thomas
• 2026/06/22 Re: AW: [ANN] Apache Tomcat 11.0.23 Available Mark Thomas
• 2026/06/22 Re: AW: [ANN] Apache Tomcat 11.0.23 Available Mark Thomas
• 2026/06/22 AW: [ANN] Apache Tomcat 11.0.23 Available Thomas Hoffmann (Speed4Trade GmbH) via users
• 2026/06/22 [ANN] Apache Tomcat 11.0.23 Available Mark Thomas
• 2026/06/15 [ANN] Apache Tomcat Native 1.3.8 released Mark Thomas
• 2026/06/15 [ANN] Apache Tomcat Native 2.0.15 released Mark Thomas
• 2026/06/13 Re: OT: Entra ID Realm for Tomcat Jon McAlexander
• 2026/06/13 Re: OT: Entra ID Realm for Tomcat Zoran Avtarovski
• 2026/06/13 Re: OT: Entra ID Realm for Tomcat Christopher Schultz
• 2026/06/13 Re: RSS Christopher Schultz
• 2026/06/11 Re: OT: Entra ID Realm for Tomcat Zoran Avtarovski
• 2026/06/10 Re: RSS Roger Marquis
• 2026/06/10 Re: OT: Entra ID Realm for Tomcat Christopher Schultz
• 2026/06/10 Re: Tomcat website, RSS and social media Mark Thomas
• 2026/06/10 Re: Tomcat website, RSS and social media Christopher Schultz
• 2026/06/08 OT: Entra ID Realm for Tomcat Zoran Avtarovski
• 2026/06/08 Re: VS: VS: Log headers for failing request Mark Thomas
• 2026/06/08 VS: VS: Log headers for failing request Harri Pesonen via users
• 2026/06/08 Re: Tomcat website, RSS and social media Mark Thomas
• 2026/06/08 Re: Tomcat website, RSS and social media Mark Thomas
• 2026/06/08 Re: VS: Log headers for failing request Mark Thomas
• 2026/06/08 Re: Tomcat website, RSS and social media Mark Thomas
• 2026/06/08 VS: Log headers for failing request Harri Pesonen via users
• 2026/06/08 Tomcat website, RSS and social media Thorsten Heit
• 2026/06/07 Re: Is Tomcat affected by CVE-2026-49975 (HTTP/2 Bomb)? Stefan Mayr
• 2026/06/05 Re: Log headers for failing request Mark Thomas
• 2026/06/05 Re: Is Tomcat affected by CVE-2026-49975 (HTTP/2 Bomb)? Mark Thomas
• 2026/06/05 Log headers for failing request Harri Pesonen via users
• 2026/06/05 [ANN] Apache Tomcat Migration tool for Jakarta EE 1.0.12 Mark Thomas
• 2026/06/04 Re: Is Tomcat affected by CVE-2026-49975 (HTTP/2 Bomb)? Christopher Schultz
• 2026/06/04 Is Tomcat affected by CVE-2026-49975 (HTTP/2 Bomb)? Stefan Mayr
• 2026/06/04 RE: Logging of which jars did or didn't need scanning? Holle, Jess via users
• 2026/06/04 RE: Logging of which jars did or didn't need scanning? Hemanta Pathak
• 2026/06/04 Logging of which jars did or didn't need scanning? Holle, Jess via users
• 2026/06/02 Informal poll of Tomcat version usage Christopher Schultz
• 2026/06/02 Re: Fwd: Questions regarding updating Apache Tomcat on a server. Jon McAlexander
• 2026/06/01 Re: Fwd: Questions regarding updating Apache Tomcat on a server. Christopher Schultz
• 2026/05/29 Re: [BUG] Parameters.recycle() does not reset queryStringCharset — leaks across recycled Requests Mark Thomas
• 2026/05/29 Re: [BUG] Parameters.recycle() does not reset queryStringCharset — leaks across recycled Requests Mark Thomas
• 2026/05/29 Re: The scheme https s not consistent with the TLS enabled setting (Re: [ANN] Apache Tomcat 11.0.22 Available) Thomas Meyer
• 2026/05/29 Re: Fwd: Questions regarding updating Apache Tomcat on a server. Jon McAlexander
• 2026/05/28 [BUG] Parameters.recycle() does not reset queryStringCharset — leaks across recycled Requests 황인엽
• 2026/05/28 Fwd: Questions regarding updating Apache Tomcat on a server. Brian Proffitt
• 2026/05/28 Re: The scheme https s not consistent with the TLS enabled setting (Re: [ANN] Apache Tomcat 11.0.22 Available) Mark Thomas

• Earlier messages