dev  

Messages by Thread

• (tomcat) branch 9.0.x updated: Use jdk.tls.namedGroups as the default value for named group list remm
• (tomcat) branch 10.1.x updated: Use jdk.tls.namedGroups as the default value for named group list remm
• (tomcat) branch 11.0.x updated: Use jdk.tls.namedGroups as the default value for named group list remm
• (tomcat) branch main updated: Use jdk.tls.namedGroups as the default value for named group list remm
• [SECURITY] CVE-2026-24734 Apache Tomcat and Tomcat Native - OCSP revocation bypass Mark Thomas
• [SECURITY] CVE-2026-24733 Apache Tomcat - Security constraint bypass with HTTP/0.9 Mark Thomas
• [SECURITY] CVE-2025-66614 Apache Tomcat - Client certificate verification bypass due to virtual host mapping Mark Thomas
• svn commit: r1931909 - in tomcat/site/trunk: docs xdocs markt
• [Bug 69955] New: Best outfits for men 2026 is all about comfort, confidence, and clean sophistication. bugzilla
  • [Bug 69955] SPAM SPAM SPAM SPAM bugzilla
• (tomcat-tck) branch dependabot/maven/org.junit-junit-bom-6.0.3 created (now 630692f) github-bot
• [PR] Bump org.junit:junit-bom from 6.0.2 to 6.0.3 [tomcat-tck] via GitHub
• (tomcat-native) branch 1.3.x updated: Limit the boundary of ocsp payload chars (#39) markt
• (tomcat-native) branch main updated: Limit the boundary of ocsp payload chars (#39) markt
• [Bug 69951] New: Potential solution for on-disk KEK-encrypted TLS key and certificate bugzilla
  • [Bug 69951] Potential solution for on-disk KEK-encrypted TLS key and certificate bugzilla
  • [Bug 69951] Potential solution for on-disk KEK-encrypted TLS key and certificate bugzilla
  • [Bug 69951] Potential solution for on-disk KEK-encrypted TLS key and certificate bugzilla
• [PR] Limit the boundary of ocsp response string from memory size to actual payload size [tomcat-native] via GitHub
  • Re: [PR] Limit the boundary of ocsp response string from memory size to actual payload size [tomcat-native] via GitHub
  • Re: [PR] Limit the boundary of ocsp response string from memory size to actual payload size [tomcat-native] via GitHub
• [PROPOSED ANNOUNCEMENT] End of support for Apache Tomcat Native 1.2.x Christopher Schultz
  • Re: [PROPOSED ANNOUNCEMENT] End of support for Apache Tomcat Native 1.2.x Mark Thomas
  • Re: [PROPOSED ANNOUNCEMENT] End of support for Apache Tomcat Native 1.2.x Rémy Maucherat
  • Re: [PROPOSED ANNOUNCEMENT] End of support for Apache Tomcat Native 1.2.x Christopher Schultz
• svn commit: r1931830 - tomcat/site/trunk/docs markt
• svn commit: r1931828 - tomcat/site/trunk/docs markt
  • Re: svn commit: r1931828 - tomcat/site/trunk/docs Christopher Schultz
  • Re: svn commit: r1931828 - tomcat/site/trunk/docs Mark Thomas
• Is the Migration Tool poorly documented? Christopher Schultz
  • Re: Is the Migration Tool poorly documented? Mark Thomas
  • Re: Is the Migration Tool poorly documented? Christopher Schultz
  • Re: Is the Migration Tool poorly documented? Mark Thomas
• (tomcat-maven-plugin) branch trunk updated (8aebde6 -> 5153f4b) remm
  • (tomcat-maven-plugin) 01/01: Merge pull request #104 from apache/dependabot/maven/tomcat-main-maven-plugin/src/test/resources/deploy-only-war-project/junit-junit-4.13.1 remm
• (tomcat-maven-plugin) branch dependabot/maven/tomcat-main-maven-plugin/src/test/resources/deploy-only-war-project/junit-junit-4.13.1 deleted (was f763253) github-bot
• (tomcat-maven-plugin) branch trunk updated: No need to build for Tomcat 7 and 8 remm
• (tomcat-maven-plugin) branch dependabot/maven/tomcat-main-maven-plugin/src/test/resources/deploy-only-war-project/junit-junit-4.13.1 created (now f763253) github-bot
• [PR] Bump junit:junit from 4.9 to 4.13.1 in /tomcat-main-maven-plugin/src/test/resources/deploy-only-war-project [tomcat-maven-plugin] via GitHub
  • Re: [PR] Bump junit:junit from 4.9 to 4.13.1 in /tomcat-main-maven-plugin/src/test/resources/deploy-only-war-project [tomcat-maven-plugin] via GitHub
• (tomcat-maven-plugin) branch trunk updated (dc64010 -> 37f2205) remm
  • (tomcat-maven-plugin) 01/01: Merge pull request #103 from fatima-qaisar/update-plugin-config remm
• [PR] Update deprecated plugin configurations [tomcat-maven-plugin] via GitHub
  • Re: [PR] Update deprecated plugin configurations [tomcat-maven-plugin] via GitHub
• svn commit: r1931817 - in tomcat/site/trunk: docs xdocs schultz
• svn commit: r1931816 - in tomcat/site/trunk: docs xdocs schultz
• (tomcat) branch 9.0.x updated: Log info message if APR Connector is used - recommends NIO instead markt
• (tomcat) branch 10.1.x updated: Increase minimum recommended Tomcat Native version to 2.0.12 for all markt
• (tomcat) branch 11.0.x updated: Increase minimum recommended Tomcat Native version to 2.0.12 for all markt
• (tomcat) branch main updated: Increase minimum recommended Tomcat Native version to 2.0.12 for all markt
• [ANN] End of support for Apache Tomcat Native 1.3.x Mark Thomas
• [ANN] Tomcat 9.0.x End of Support and Tomcat 9 long term support plan Mark Thomas
  • Re: [ANN] Tomcat 9.0.x End of Support and Tomcat 9 long term support plan Michael Osipov
  • Re: [ANN] Tomcat 9.0.x End of Support and Tomcat 9 long term support plan Mark Thomas
• svn commit: r1931812 - in tomcat/site/trunk: docs xdocs markt
• svn commit: r1931811 - in tomcat/site/trunk: docs xdocs markt
• svn commit: r1931810 - in tomcat/site/trunk: docs xdocs markt
• svn commit: r1931809 - in tomcat/site/trunk: docs docs/native-1.3-doc xdocs markt
• Re: [PR] Simplify Address#getInfo() native implementation [tomcat-native] via GitHub
  • Re: [PR] Simplify Address#getInfo() native implementation [tomcat-native] via GitHub
• (tomcat-native) branch 1.3.x updated: End end of support notice to 1.3.x release news markt
• svn commit: r82429 - in release/tomcat/tomcat-connectors/native: 1.3.5 2.0.12 markt
• [ANN] Apache Tomcat Native 1.3.6 released Mark Thomas
• svn commit: r1931808 - in tomcat/site/trunk: docs xdocs markt
• svn commit: r1931807 - in tomcat/site/trunk/docs/native-1.3-doc: . miscellaneous news markt
• (tomcat-native) branch 1.3.x updated (525f767a5 -> 256adbc37) markt
  • (tomcat-native) 01/02: Add release date for 1.3.6 markt
  • (tomcat-native) 02/02: Update index & news for 1.3.6 release markt
• svn commit: r82426 - dev/tomcat/tomcat-connectors/native/1.3.6 release/tomcat/tomcat-connectors/native/1.3.6 markt
• (tomcat) branch main updated: Fix typo dsoumis
• [ANN] Apache Tomcat Native 2.0.13 released Mark Thomas
• svn commit: r1931806 - in tomcat/site/trunk: docs xdocs markt
• svn commit: r1931805 - in tomcat/site/trunk/docs/native-doc: . miscellaneous news markt
• (tomcat-native) branch main updated (d6a9c2c66 -> d7df5e021) markt
  • (tomcat-native) 02/02: Update index & news for 2.0.13 release markt
  • (tomcat-native) 01/02: Add release date for 2.0.13 markt
• (tomcat-maven-plugin) branch dependabot/maven/tomcat-main-maven-plugin/src/test/resources/deploy-war-project/junit-junit-4.13.1 deleted (was 3329c20) github-bot
• (tomcat-maven-plugin) branch trunk updated (dc50532 -> dc64010) remm
  • (tomcat-maven-plugin) 01/01: Merge pull request #102 from apache/dependabot/maven/tomcat-main-maven-plugin/src/test/resources/deploy-war-project/junit-junit-4.13.1 remm
• svn commit: r1931803 - in tomcat/site/trunk: docs xdocs markt
• svn commit: r82423 - dev/tomcat/tomcat-connectors/native/2.0.13 release/tomcat/tomcat-connectors/native/2.0.13 markt
• svn commit: r82422 - in release/tomcat/tomcat-connectors/jk: . binaries/windows binaries/windows/symbols markt
• svn commit: r82421 - in release/tomcat/tomcat-9: v9.0.111 v9.0.112 v9.0.113 markt
  • Re: svn commit: r82421 - in release/tomcat/tomcat-9: v9.0.111 v9.0.112 v9.0.113 Rémy Maucherat
• (tomcat-maven-plugin) branch dependabot/maven/tomcat-main-maven-plugin/src/test/resources/deploy-war-project/junit-junit-4.13.1 created (now 3329c20) github-bot
• [PR] Bump junit:junit from 4.9 to 4.13.1 in /tomcat-main-maven-plugin/src/test/resources/deploy-war-project [tomcat-maven-plugin] via GitHub
  • Re: [PR] Bump junit:junit from 4.9 to 4.13.1 in /tomcat-main-maven-plugin/src/test/resources/deploy-war-project [tomcat-maven-plugin] via GitHub
• (tomcat-maven-plugin) branch dependabot/maven/org.apache.maven.plugins-maven-dependency-plugin-3.10.0 deleted (was 891bb28) github-bot
• (tomcat-maven-plugin) branch trunk updated (b284f27 -> dc50532) remm
  • (tomcat-maven-plugin) 01/01: Merge pull request #101 from apache/dependabot/maven/org.apache.maven.plugins-maven-dependency-plugin-3.10.0 remm
• (tomcat-maven-plugin) branch dependabot/maven/tomcat9Version-11.0.18 deleted (was 69cfdaa) github-bot
• (tomcat) branch 9.0.x updated (a3c12682e8 -> 9773bc3010) markt
  • (tomcat) 01/02: Add drainTimeout property to Http2Protocol/Http2UpgradeHandler (#917) markt
  • (tomcat) 02/02: Fix BZ 69870 - add drainTimeout to HTTP/2 markt
• (tomcat) branch main updated (92f4713e11 -> 2698c84914) markt
  • (tomcat) 02/02: Fix BZ 69870 - add drainTimeout to HTTP/2 markt
  • (tomcat) 01/02: Add drainTimeout property to Http2Protocol/Http2UpgradeHandler (#917) markt
• (tomcat) branch 11.0.x updated (e60aa5f1ef -> 9917c2fbea) markt
  • (tomcat) 02/02: Fix BZ 69870 - add drainTimeout to HTTP/2 markt
  • (tomcat) 01/02: Add drainTimeout property to Http2Protocol/Http2UpgradeHandler (#917) markt
• (tomcat) branch 10.1.x updated: Fix BZ 69870 - add drainTimeout to HTTP/2 markt
• (tomcat) branch 10.1.x updated: Add drainTimeout property to Http2Protocol/Http2UpgradeHandler (#917) markt
• (tomcat) branch 9.0.x updated: Update the internal fork of Apache Commons BCEL to 6.12.0 markt
• (tomcat) branch 10.1.x updated: Update the internal fork of Apache Commons BCEL to 6.12.0 markt
• (tomcat) branch 11.0.x updated: Update the internal fork of Apache Commons BCEL to 6.12.0 markt
• (tomcat) branch main updated: Update the internal fork of Apache Commons BCEL to 6.12.0 markt
• (tomcat-maven-plugin) branch dependabot/maven/org.apache.maven.plugins-maven-dependency-plugin-3.10.0 created (now 891bb28) github-bot
• [PR] Bump org.apache.maven.plugins:maven-dependency-plugin from 3.9.0 to 3.10.0 [tomcat-maven-plugin] via GitHub
  • Re: [PR] Bump org.apache.maven.plugins:maven-dependency-plugin from 3.9.0 to 3.10.0 [tomcat-maven-plugin] via GitHub
• (tomcat-maven-plugin) branch dependabot/maven/tomcat9Version-11.0.18 created (now 69cfdaa) github-bot
• [PR] Bump tomcat9Version from 7.0.109 to 11.0.18 [tomcat-maven-plugin] via GitHub
  • Re: [PR] Bump tomcat9Version from 7.0.109 to 11.0.18 [tomcat-maven-plugin] via GitHub
  • Re: [PR] Bump tomcat9Version from 7.0.109 to 11.0.18 [tomcat-maven-plugin] via GitHub
  • Re: [PR] Bump tomcat9Version from 7.0.109 to 11.0.18 [tomcat-maven-plugin] via GitHub
• Tomcat 9.0.x to 9.1.x migration Mark Thomas
  • Re: Tomcat 9.0.x to 9.1.x migration Michael Osipov
  • Re: Tomcat 9.0.x to 9.1.x migration Mark Thomas
  • Re: Tomcat 9.0.x to 9.1.x migration Rémy Maucherat
  • Re: Tomcat 9.0.x to 9.1.x migration Michael Osipov
  • Re: Tomcat 9.0.x to 9.1.x migration Rémy Maucherat
• (tomcat) branch 9.0.x updated: Remove support for the KRB5 alias markt
• (tomcat) branch 11.0.x updated: Add support for the CBC alias markt
• (tomcat) branch 10.1.x updated: Remove support for the KRB5 alias markt
• (tomcat) branch 10.1.x updated: Add support for the CBC alias markt
• (tomcat) branch 11.0.x updated: Remove support for the EXPORT aliases markt
• (tomcat) branch 9.0.x updated: Remove support for the FZA aliases markt
• (tomcat) branch 10.1.x updated: Remove support for the FZA aliases markt
• (tomcat) branch 11.0.x updated: Remove support for the KRB5 alias markt
• (tomcat) branch 9.0.x updated: Add support for the CBC alias markt
• (tomcat) branch 9.0.x updated: Remove support for the EXPORT aliases markt
• (tomcat) branch 11.0.x updated: Remove support for the FZA aliases markt
• (tomcat) branch 9.0.x updated: Add support for the ARIAGCM alias markt
• (tomcat) branch 10.1.x updated: Remove support for the EXPORT aliases markt
• (tomcat) branch 10.1.x updated: Add support for the ARIAGCM alias markt
• (tomcat) branch 11.0.x updated: Add support for the ARIAGCM alias markt
• (tomcat) branch 9.0.x updated: Remove support for the SSLv3 alias when configuring ciphers markt
• (tomcat) branch 10.1.x updated: Remove support for the SSLv3 alias when configuring ciphers markt
• (tomcat) branch 11.0.x updated: Remove support for the SSLv3 alias when configuring ciphers markt
• (tomcat) branch 9.0.x updated: Remove some SSLv2 related code. markt
• (tomcat) branch 10.1.x updated: Remove some SSLv2 related code. markt
• (tomcat) branch 11.0.x updated: Remove some SSLv2 related code. markt
• (tomcat) branch main updated (bbf9aa217c -> d8c636fecf) markt
  • (tomcat) 02/06: Add support for the ARIAGCM alias markt
  • (tomcat) 01/06: Remove support for the SSLv3 alias when configuring ciphers markt
  • (tomcat) 04/06: Remove support for the EXPORT aliases markt
  • (tomcat) 03/06: Add support for the CBC alias markt
  • (tomcat) 06/06: Remove support for the FZA aliases markt
  • (tomcat) 05/06: Remove support for the KRB5 alias markt
• (tomcat) branch main updated: Remove some SSLv2 related code. markt
  • Re: (tomcat) branch main updated: Remove some SSLv2 related code. Mark Thomas
  • Re: (tomcat) branch main updated: Remove some SSLv2 related code. Rémy Maucherat
• JDK 26 Release Candidate builds / JavaOne 2026 and More Heads-Up David Delabassee via dev
• (tomcat) branch 9.0.x updated: Fix test bug that added all SSLv3 ciphers to output markt
• (tomcat) branch 11.0.x updated: Fix test bug that added all SSLv3 ciphers to output markt
• (tomcat) branch 10.1.x updated: Fix test bug that added all SSLv3 ciphers to output markt
• (tomcat) branch main updated: Fix test bug that added all SSLv3 ciphers to output markt
• (tomcat) branch main updated: Align with 9.0.x markt
• (tomcat) branch 11.0.x updated: Align with 9.0.x markt
• (tomcat) branch 10.1.x updated: Align with 9.0.x markt
• (tomcat) branch 9.0.x updated: More general comment suitable for all Tomcat versions markt
• (tomcat-tck) branch dependabot/maven/io.github.download-maven-plugin-download-maven-plugin-2.1.0 deleted (was b31adf3) github-bot
• (tomcat-tck) branch main updated: Bump io.github.download-maven-plugin:download-maven-plugin markt
• [PR] Bump io.github.download-maven-plugin:download-maven-plugin from 2.0.0 to 2.1.0 [tomcat-tck] via GitHub
  • Re: [PR] Bump io.github.download-maven-plugin:download-maven-plugin from 2.0.0 to 2.1.0 [tomcat-tck] via GitHub
• Test failures for TestOcspSoftFail (NIO+native; only JDK2[567] and TC 10.1/11) Rainer Jung
  • Re: Test failures for TestOcspSoftFail (NIO+native; only JDK2[567] and TC 10.1/11) Mark Thomas
• (tomcat-native) branch 1.3.x updated: Fix typo in changelog rjung
• (tomcat-native) branch main updated: Fix typo in changelog rjung
• (tomcat) branch 9.0.x updated: Add size limit for OCSP responses remm
• (tomcat) branch 10.1.x updated: Add size limit for OCSP responses remm
• (tomcat) branch 11.0.x updated: Add size limit for OCSP responses remm
• (tomcat) branch main updated: Add size limit for OCSP responses remm
• [VOTE] Release Apache Tomcat Native 1.3.6 Mark Thomas
  • Re: [VOTE] Release Apache Tomcat Native 1.3.6 Rainer Jung
  • Re: [VOTE] Release Apache Tomcat Native 1.3.6 Rémy Maucherat
  • Re: [VOTE] Release Apache Tomcat Native 1.3.6 Dimitris Soumis
  • Re: [VOTE] Release Apache Tomcat Native 1.3.6 Christopher Schultz
  • Re: [VOTE] Release Apache Tomcat Native 1.3.6 Mark Thomas
  • [VOTE][RESULT] Release Apache Tomcat Native 1.3.6 Mark Thomas
• [VOTE] Release Apache Tomcat Native 2.0.13 Mark Thomas
  • Re: [VOTE] Release Apache Tomcat Native 2.0.13 Rainer Jung
  • Re: [VOTE] Release Apache Tomcat Native 2.0.13 Rémy Maucherat
  • Re: [VOTE] Release Apache Tomcat Native 2.0.13 Dimitris Soumis
  • Re: [VOTE] Release Apache Tomcat Native 2.0.13 Christopher Schultz
  • Re: [VOTE] Release Apache Tomcat Native 2.0.13 Christopher Schultz
  • Re: [VOTE] Release Apache Tomcat Native 2.0.13 Mark Thomas
  • [VOTE][RESULT] Release Apache Tomcat Native 2.0.13 Mark Thomas
• (tomcat-native) branch 1.3.x updated: Increment version for 1.3.7 development markt
• (tomcat-native) branch main updated: Increment version for 2.0.14 development markt
• svn commit: r82338 - in dev/tomcat/tomcat-connectors/native/1.3.6: . binaries source markt
• svn commit: r82337 - in dev/tomcat/tomcat-connectors/native/2.0.13: . binaries source markt
• (tomcat-native) tag 1.3.6 created (now 4e4be9fee) markt
  • (tomcat-native) 01/01: Tag 1.3.6 markt
• (tomcat-native) branch 1.3.x updated: enforce OCSP_MAX_RESPONSE_SIZE (#38) markt
• (tomcat-native) tag 2.0.13 created (now 4dbc3f6e5) markt
  • (tomcat-native) 01/01: Tag 2.0.13 markt
• (tomcat-native) branch main updated: Sync with 12.0. markt
• (tomcat-native) branch main updated: Sync with 1.3.x (better) markt
• (tomcat-native) branch main updated: Now need to tweak change log before tagging too markt
• (tomcat-native) branch main updated: enforce OCSP_MAX_RESPONSE_SIZE (#38) markt

• Earlier messages