dev  

Messages by Thread

• (tomcat) branch 9.0.x updated: A few more places were constant time comparisons could be used markt
• (tomcat) branch 11.0.x updated: A few more places were constant time comparisons could be used markt
• (tomcat) branch 10.1.x updated: A few more places were constant time comparisons could be used markt
• (tomcat) branch 10.1.x updated: Fix persistent Windows test failures. markt
• (tomcat) branch 11.0.x updated: Fix persistent Windows test failures. markt
• (tomcat) branch 9.0.x updated: Fix persistent Windows test failures. markt
• (tomcat) branch main updated: Fix persistent Windows test failures. markt
• (tomcat) branch 10.1.x updated: Ensure RealmBase finds all matching extension based constraints markt
• (tomcat) branch 9.0.x updated: Ensure RealmBase finds all matching extension based constraints markt
• (tomcat) branch 11.0.x updated: Ensure RealmBase finds all matching extension based constraints markt
• (tomcat) branch main updated: Ensure RealmBase finds all matching extension based constraints markt
• (tomcat) branch 9.0.x updated: Fix the handling of invalid users with DIGEST authentication markt
• (tomcat) branch 10.1.x updated: Fix the handling of invalid users with DIGEST authentication markt
• (tomcat) branch 11.0.x updated: Fix the handling of invalid users with DIGEST authentication markt
• (tomcat) branch main updated: Fix the handling of invalid users with DIGEST authentication markt
• (tomcat) branch 10.1.x updated: Add case sensitive attribute to LockOutRealm markt
• (tomcat) branch 9.0.x updated: Add case sensitive attribute to LockOutRealm markt
• (tomcat) branch 11.0.x updated: Add case sensitive attribute to LockOutRealm markt
• (tomcat) branch main updated: Improve test after CoPilot review markt
• (tomcat) branch main updated: Add case sensitive attribute to LockOutRealm markt
• (tomcat) branch 9.0.x updated: One more location where a constant time comparison could be used markt
• (tomcat) branch 10.1.x updated: One more location where a constant time comparison could be used markt
• (tomcat) branch 10.1.x updated: Follow-up to AJP switch to constant time for secret comparison markt
• (tomcat) branch 11.0.x updated: Follow-up to AJP switch to constant time for secret comparison markt
• (tomcat) branch 9.0.x updated: Follow-up to AJP switch to constant time for secret comparison markt
• (tomcat) branch 11.0.x updated: One more location where a constant time comparison could be used markt
• (tomcat) branch main updated: One more location where a constant time comparison could be used markt
• (tomcat) branch main updated (fbcb561830 -> 4b40f2f13f) markt
  • (tomcat) 02/03: A few more places were constant time comparisons could be used markt
  • (tomcat) 03/03: Remove deprecated code markt
  • (tomcat) 01/03: Follow-up to AJP switch to constant time for secret comparison markt
• (tomcat) branch 9.0.x updated: Fix deprecation warnings markt
• (tomcat) branch 10.1.x updated: Fix deprecation warnings markt
• (tomcat) branch 11.0.x updated: Fix deprecation warnings markt
• (tomcat) branch 9.0.x updated: Switch AJP secret comparison to a constant time algorithm. markt
• (tomcat) branch 11.0.x updated: Switch AJP secret comparison to a constant time algorithm. markt
• (tomcat) branch main updated (801b87ea11 -> fbcb561830) markt
  • (tomcat) 02/02: Fix deprecation warnings markt
  • (tomcat) 01/02: Switch AJP secret comparison to a constant time algorithm. markt
• (tomcat) branch 10.1.x updated: Switch AJP secret comparison to a constant time algorithm. markt
• (tomcat) branch main updated: Simplify markt
  • (tomcat) branch main updated: Simplify markt
• (tomcat) branch 9.0.x updated: Simplify markt
• (tomcat) branch 11.0.x updated: Simplify markt
• (tomcat) branch 10.1.x updated: Simplify markt
• (tomcat) branch 11.0.x updated: Follow-up to HTTP/2 header filtering markt
• (tomcat) branch 9.0.x updated: Follow-up to HTTP/2 header filtering markt
• (tomcat) branch 10.1.x updated: Follow-up to HTTP/2 header filtering markt
• (tomcat) branch main updated: Follow-up to HTTP/2 header filtering markt
• (tomcat) branch 9.0.x updated: Fix WebSocket + proxy + DIGEST auth on proxy markt
• (tomcat) branch 10.1.x updated: Fix WebSocket + proxy + DIGEST auth on proxy markt
• (tomcat) branch 11.0.x updated: Fix WebSocket + proxy + DIGEST auth on proxy markt
• (tomcat) branch main updated: Fix WebSocket + proxy + DIGEST auth on proxy markt
• (tomcat) branch 9.0.x updated: Follow-up to adding limit to WebDAV bodies markt
• (tomcat) branch 10.1.x updated: Follow-up to adding limit to WebDAV bodies markt
• (tomcat) branch 11.0.x updated: Follow-up to adding limit to WebDAV bodies markt
• (tomcat) branch main updated: Follow-up to adding limit to WebDAV bodies markt
• (tomcat) branch 10.1.x updated: Silence IDE warnings markt
• (tomcat) branch 11.0.x updated: Silence IDE warnings markt
• (tomcat) branch 9.0.x updated: Silence IDE warnings markt
• (tomcat) branch main updated: Silence IDE warnings markt
• (tomcat) branch 9.0.x updated: Add HTTP/2 header filtering and associated tests markt
• (tomcat) branch 11.0.x updated: Add HTTP/2 header filtering and associated tests markt
• (tomcat) branch 10.1.x updated: Add HTTP/2 header filtering and associated tests markt
• (tomcat) branch main updated: Add HTTP/2 header filtering and associated tests markt
• (tomcat) branch 9.0.x updated: Add a configurable limit for WebDAV XML request bodies markt
• (tomcat) branch 10.1.x updated: Add a configurable limit for WebDAV XML request bodies markt
• (tomcat) branch 11.0.x updated: Add a configurable limit for WebDAV XML request bodies markt
• (tomcat) branch main updated: Add a configurable limit for WebDAV XML request bodies markt
• (tomcat) branch 9.0.x updated: Enhance version.sh and version.bat output to display APR, OpenSSL, and third-party library versions (#919) csutherl
• (tomcat) branch 10.1.x updated: Enhance version.sh and version.bat output to display APR, OpenSSL, and third-party library versions (#919) csutherl
• (tomcat) branch 11.0.x updated: Enhance version.sh and version.bat output to display APR, OpenSSL, and third-party library versions (#919) csutherl
• (tomcat) branch 9.0.x updated (68805e41cb -> 9212b94f2c) markt
  • (tomcat) 03/03: Improvements to Japanese translations provided by tak7iji. markt
  • (tomcat) 02/03: Improvements to French translations. (remm) markt
  • (tomcat) 01/03: Fix ordering markt
• (tomcat) branch main updated: Enhance version.sh and version.bat output to display APR, OpenSSL, and third-party library versions (#919) csutherl
• (tomcat) branch 10.1.x updated (cd3e8c5d03 -> a121fbc76d) markt
  • (tomcat) 03/03: Improvements to Japanese translations provided by tak7iji markt
  • (tomcat) 02/03: Improvements to French translations. (remm) markt
  • (tomcat) 01/03: Fix ordering markt
• (tomcat) branch 11.0.x updated (6d2ca0cba3 -> 3b8d767e64) markt
  • (tomcat) 02/03: Improvements to French translations. (remm) markt
  • (tomcat) 03/03: Improvements to Japanese translations provided by tak7iji. markt
  • (tomcat) 01/03: Fix ordering markt
• (tomcat) branch main updated (3a9d31ee8a -> 75503d981c) markt
  • (tomcat) 02/02: Improvements to Japanese translations provided by tak7iji markt
  • (tomcat) 01/02: Improvements to French translations. (remm) markt
• (tomcat) branch 9.0.x updated: Fix a potential integer overflow... markt
• (tomcat) branch 10.1.x updated: Fix a potential integer overflow... markt
• (tomcat) branch 11.0.x updated: Fix a potential integer overflow... markt
• Time to move the tomcat-site repo from svn to git? Coty Sutherland
  • Re: Time to move the tomcat-site repo from svn to git? Rémy Maucherat
  • Re: Time to move the tomcat-site repo from svn to git? Mark Thomas
  • Re: Time to move the tomcat-site repo from svn to git? Coty Sutherland
  • Re: Time to move the tomcat-site repo from svn to git? Christopher Schultz
  • Re: Time to move the tomcat-site repo from svn to git? Dimitris Soumis
• (tomcat) branch main updated: Fix a potential integer overflow... markt
• (tomcat) branch 9.0.x updated: Follow-up to PR #992. markt
• (tomcat) branch 10.1.x updated: Follow-up to PR #992. markt
• (tomcat) branch 11.0.x updated: Follow-up to PR #992. markt
• (tomcat) branch 9.0.x updated: Fix BZ 70001: _jspx_dependants contains non-deterministic absolute JAR paths for taglibs resolved from external JARs markt
• (tomcat) branch 10.1.x updated: Fix BZ 70001: _jspx_dependants contains non-deterministic absolute JAR paths for taglibs resolved from external JARs markt
• (tomcat) branch 11.0.x updated: Fix BZ 70001: _jspx_dependants contains non-deterministic absolute JAR paths for taglibs resolved from external JARs markt
• (tomcat) branch main updated: Follow-up to PR #992. markt
• (tomcat) branch 9.0.x updated: Update OpenSSL version numbers remm
• (tomcat) branch 10.1.x updated: Update OpenSSL version numbers remm
• (tomcat) branch 11.0.x updated: Update OpenSSL version numbers remm
• (tomcat) branch main updated: Update OpenSSL version numbers remm
• [PR] Add SECURITY.md per dev-list discussion [tomcat] via GitHub
  • Re: [PR] Add SECURITY.md per dev-list discussion [tomcat] via GitHub
  • Re: [PR] Add SECURITY.md per dev-list discussion [tomcat] via GitHub
  • Re: [PR] Add SECURITY.md per dev-list discussion [tomcat] via GitHub
  • Re: [PR] Add SECURITY.md per dev-list discussion [tomcat] via GitHub
  • Re: [PR] Add SECURITY.md per dev-list discussion [tomcat] via GitHub
  • Re: [PR] Add SECURITY.md per dev-list discussion [tomcat] via GitHub
• (tomcat) branch main updated: Fix BZ 70001: _jspx_dependants contains non-deterministic absolute JAR paths for taglibs resolved from external JARs markt
• (tomcat) branch 9.0.x updated: Update Bouncy Castle to 1.84 markt
• (tomcat) branch 10.1.x updated: Update Bouncy Castle to 1.84 markt
• (tomcat) branch 11.0.x updated: Update Bouncy Castle to 1.84 markt
• (tomcat) branch main updated: Update Bouncy Castle to 1.84 markt
• (tomcat) branch main updated: Update Checkstyle to 13.4.1 markt
• (tomcat) branch 10.1.x updated: Update Byte Buddy to 1.18.8 markt
• (tomcat) branch 9.0.x updated: Update Byte Buddy to 1.18.8 markt
• (tomcat) branch 11.0.x updated: Update Byte Buddy to 1.18.8 markt
• (tomcat) branch main updated: Update Byte Buddy to 1.18.8 markt
• May releases Mark Thomas
  • Re: May releases Rémy Maucherat
  • Re: May releases Mark Thomas
• (tomcat) branch 9.0.x updated: Remove an obsolete TODO markt
• (tomcat) branch 11.0.x updated: Remove an obsolete TODO markt
• (tomcat) branch 10.1.x updated: Remove an obsolete TODO markt
• (tomcat) branch main updated: Remove an obsolete TODO markt
• (tomcat) branch 9.0.x updated: Remove work around that is no longer required markt
• (tomcat) branch 10.1.x updated: Remove work around that is no longer required markt
• (tomcat) branch 11.0.x updated: Remove work around that is no longer required markt
• (tomcat) branch main updated: Remove work around that is no longer required markt
• (tomcat) branch 9.0.x updated: Update Windows Authentication documentation markt
• (tomcat) branch 11.0.x updated: Update Windows Authentication documentation markt
• (tomcat) branch 10.1.x updated: Update Windows Authentication documentation markt
• (tomcat) branch main updated: Update Windows Authentication documentation markt
• (tomcat-maven-plugin) branch dependabot/maven/org.jacoco-jacoco-maven-plugin-0.8.14 deleted (was 14c522e) github-bot
• (tomcat-maven-plugin) branch trunk updated (efd9788 -> 5d8dc0f) remm
  • (tomcat-maven-plugin) 01/01: Merge pull request #122 from apache/dependabot/maven/org.jacoco-jacoco-maven-plugin-0.8.14 remm
• (tomcat-maven-plugin) branch dependabot/maven/org.jacoco-jacoco-maven-plugin-0.8.14 created (now 14c522e) github-bot
• [PR] Bump org.jacoco:jacoco-maven-plugin from 0.8.13 to 0.8.14 [tomcat-maven-plugin] via GitHub
  • Re: [PR] Bump org.jacoco:jacoco-maven-plugin from 0.8.13 to 0.8.14 [tomcat-maven-plugin] via GitHub
• Considering AI suggestions/guardrails for the tomcat project Coty Sutherland
  • Re: Considering AI suggestions/guardrails for the tomcat project Rémy Maucherat
  • Re: Considering AI suggestions/guardrails for the tomcat project Mark Thomas
  • Re: Considering AI suggestions/guardrails for the tomcat project Coty Sutherland
  • Re: Considering AI suggestions/guardrails for the tomcat project Christopher Schultz
  • Re: Considering AI suggestions/guardrails for the tomcat project Coty Sutherland
  • Re: Considering AI suggestions/guardrails for the tomcat project Christopher Schultz
• Community Over Code Conference, October 2026, Glasgow, Scotland, UK Christopher Schultz
• [PR] Add unit tests for PQC features [tomcat] via GitHub
  • Re: [PR] Add unit tests for PQC features [tomcat] via GitHub
• (tomcat) branch 9.0.x updated: Update NSIS checksums for 3.12 rjung
• (tomcat) branch 10.1.x updated: Update NSIS checksums for 3.12 rjung
• (tomcat) branch 11.0.x updated: Update NSIS checksums for 3.12 rjung
• (tomcat) branch main updated: Update NSIS checksums for 3.12 rjung
• (tomcat) branch 9.0.x updated: Update NSIS to 3.12 rjung
• (tomcat) branch 10.1.x updated: Update NSIS to 3.12 rjung
• (tomcat) branch 11.0.x updated: Update NSIS to 3.12 rjung
• (tomcat) branch main updated: Update NSIS to 3.12 rjung
  • Re: (tomcat) branch main updated: Update NSIS to 3.12 Mark Thomas
  • Re: (tomcat) branch main updated: Update NSIS to 3.12 Rainer Jung
• [PR] Disable tolerantEol by default for HTTP/1.1 header parsing [tomcat] via GitHub
  • Re: [PR] Disable tolerantEol by default for HTTP/1.1 header parsing [tomcat] via GitHub
  • Re: [PR] Disable tolerantEol by default for HTTP/1.1 header parsing [tomcat] via GitHub
• (tomcat-jakartaee-migration) branch dependabot/maven/commons-io-commons-io-2.22.0 deleted (was 5d10b31) github-bot
• (tomcat-jakartaee-migration) branch main updated: Bump commons-io:commons-io from 2.21.0 to 2.22.0 remm
• (tomcat-jakartaee-migration) branch dependabot/maven/commons-io-commons-io-2.22.0 created (now 5d10b31) github-bot
• [PR] Bump commons-io:commons-io from 2.21.0 to 2.22.0 [tomcat-jakartaee-migration] via GitHub
  • Re: [PR] Bump commons-io:commons-io from 2.21.0 to 2.22.0 [tomcat-jakartaee-migration] via GitHub
• [Bug 59569] isWrapperFor/unwrap implementations incorrect bugzilla
  • [Bug 59569] isWrapperFor/unwrap implementations incorrect bugzilla
  • [Bug 59569] isWrapperFor/unwrap implementations incorrect bugzilla
  • [Bug 59569] isWrapperFor/unwrap implementations incorrect bugzilla
  • [Bug 59569] isWrapperFor/unwrap implementations incorrect bugzilla
• [Bug 70011] New: org.apache.tomcat.jdbc.pool.ProxyConnection does not honour java.sql.Wrapper bugzilla
  • [Bug 70011] org.apache.tomcat.jdbc.pool.ProxyConnection does not honour java.sql.Wrapper bugzilla
• (tomcat) branch 9.0.x updated (f09d4d3b4d -> 22693fcbe0) markt
  • (tomcat) 01/02: Further improvements to CONNECT checks after CoPilot review markt
  • (tomcat) 02/02: Make test more robust markt
• (tomcat) branch 10.1.x updated (def2eb275a -> ea9715801e) markt
  • (tomcat) 01/02: Further improvements to CONNECT checks after CoPilot review markt
  • (tomcat) 02/02: Make test more robust markt
• (tomcat) branch main updated: Make test more robust markt
• (tomcat) branch 11.0.x updated (8bc2d54572 -> 6c6909c96f) markt
  • (tomcat) 02/02: Make test more robust markt
  • (tomcat) 01/02: Further improvements to CONNECT checks after CoPilot review markt
• (tomcat) branch main updated: Further improvements to CONNECT checks after CoPilot review markt
• (tomcat-jakartaee-migration) branch main updated: Update changes remm
• Cookie attribute handling Mark Thomas
  • Re: Cookie attribute handling Dimitris Soumis
  • Re: Cookie attribute handling Rémy Maucherat
  • Re: Cookie attribute handling Christopher Schultz
  • Re: Cookie attribute handling Mark Thomas
• (tomcat) branch 11.0.x updated: Remove stale org.apache.jasper.security from BND Export-Package dsoumis

• Earlier messages