dev  

Messages by Date

• 2026/07/15 [Bug 70144] Tomcat Embedded doesn't work with encoded `\` bugzilla
• 2026/07/15 Re: New severity for security reports Christopher Schultz
• 2026/07/15 [Bug 70144] Tomcat Embedded doesn't work with encoded `\` bugzilla
• 2026/07/15 Re: [PR] Const time equal params order [tomcat] via GitHub
• 2026/07/15 Re: [PR] Const time equal params order [tomcat] via GitHub
• 2026/07/15 Re: [PR] Const time equal params order [tomcat] via GitHub
• 2026/07/15 (tomcat) branch 10.1.x updated: Code review fixes remm
• 2026/07/15 (tomcat) branch 9.0.x updated: Code review fixes remm
• 2026/07/15 (tomcat) branch 11.0.x updated: Code review fixes remm
• 2026/07/15 (tomcat) branch main updated: Code review fixes remm
• 2026/07/15 [Bug 70144] Tomcat Embedded doesn't work with encoded `\` bugzilla
• 2026/07/15 Re: New severity for security reports Mark Thomas
• 2026/07/15 Re: New severity for security reports Tim Funk
• 2026/07/15 [Bug 70144] Tomcat Embedded doesn't work with encoded `\` bugzilla
• 2026/07/15 Re: New severity for security reports Rémy Maucherat
• 2026/07/15 New severity for security reports Mark Thomas
• 2026/07/15 [Bug 70144] New: Tomcat Embedded doesn't work with encoded `\` bugzilla
• 2026/07/14 (tomcat-maven-plugin) branch dependabot/maven/tomcatVersion-11.0.24 created (now 5685b3b) github-bot
• 2026/07/14 [PR] Bump tomcatVersion from 9.0.117 to 11.0.24 [tomcat-maven-plugin] via GitHub
• 2026/07/14 [Bug 70143] InvalidFileNameException thrown when only IllegalStateException is expected when uploading file bugzilla
• 2026/07/14 (tomcat) branch 9.0.x updated: Handle InvalidFileNameException when parsing parts remm
• 2026/07/14 (tomcat) branch 10.1.x updated: Handle InvalidFileNameException when parsing parts remm
• 2026/07/14 (tomcat) branch 11.0.x updated: Handle InvalidFileNameException when parsing parts remm
• 2026/07/14 (tomcat) branch main updated: Handle InvalidFileNameException when parsing parts remm
• 2026/07/14 [Bug 70143] New: InvalidFileNameException thrown when only IllegalStateException is expected when uploading file bugzilla
• 2026/07/14 [SECURITY] CVE-2026-59084 Apache Tomcat - EncryptInterceptor requirements not clearly documented Mark Thomas
• 2026/07/14 [SECURITY] CVE-2026-59083 Apache Tomcat - Incorrect URL decoding in RewriteValve may allow security control bypass Mark Thomas
• 2026/07/14 svn commit: r1936127 - in tomcat/site/trunk: docs xdocs markt
• 2026/07/11 Re: [PR] Adds the possibility to change the USE_TLS_RESPONSE HTTP response [tomcat] via GitHub
• 2026/07/11 [Bug 68596] Remaining overhead in javax.el.CompositeELResolver.convertToType bugzilla
• 2026/07/11 [Bug 68596] Remaining overhead in javax.el.CompositeELResolver.convertToType bugzilla
• 2026/07/10 (tomcat) branch 10.1.x updated: Refactor using Mark's template remm
• 2026/07/10 (tomcat) branch 9.0.x updated: Refactor using Mark's template remm
• 2026/07/10 (tomcat) branch 11.0.x updated: Refactor using Mark's template remm
• 2026/07/10 (tomcat) branch main updated: Refactor using Mark's template remm
• 2026/07/10 Re: (tomcat) branch main updated: Fixes from code review Christopher Schultz
• 2026/07/10 Re: (tomcat) branch main updated: Fixes from code review Christopher Schultz
• 2026/07/10 Re: (tomcat) branch main updated: Fixes from code review Mark Thomas
• 2026/07/10 (tomcat) branch 9.0.x updated: Fix from further review remm
• 2026/07/10 (tomcat) branch 10.1.x updated: Fix from further review remm
• 2026/07/10 (tomcat) branch 11.0.x updated: Fix from further review remm
• 2026/07/10 (tomcat) branch main updated: Fix from further review remm
• 2026/07/10 Re: (tomcat) branch main updated: Fixes from code review Rémy Maucherat
• 2026/07/10 Re: (tomcat) branch main updated: Fixes from code review Mark Thomas
• 2026/07/10 svn commit: r1936041 - tomcat/site/trunk/docs markt
• 2026/07/10 Re: AW: Web site slow to update Christopher Schultz
• 2026/07/10 [ANN] Apache Tomcat 10.1.57 Available Christopher Schultz
• 2026/07/10 Re: (tomcat) branch main updated: Use Eclipse generated hashCode() and equals() with some modifications Christopher Schultz
• 2026/07/10 [Bug 70141] Shell Command Injection via CGIServlet Argument Injection on Linux bugzilla
• 2026/07/10 (tomcat) branch 9.0.x updated: Fixes from code review remm
• 2026/07/10 (tomcat) branch 10.1.x updated: Fixes from code review remm
• 2026/07/10 (tomcat) branch 11.0.x updated: Fixes from code review remm
• 2026/07/10 (tomcat) branch main updated: Fixes from code review remm
• 2026/07/10 (tomcat) branch 9.0.x updated: Avoid IDE warning. Detect invalid offset. Better exception messages. markt
• 2026/07/10 (tomcat) branch 10.1.x updated: Avoid IDE warning. Detect invalid offset. Better exception messages. markt
• 2026/07/10 (tomcat) branch 11.0.x updated: Avoid IDE warning. Detect invalid offset. Better exception messages. markt
• 2026/07/10 (tomcat) branch main updated: Avoid IDE warning. Detect invalid offset. Better exception messages. markt
• 2026/07/10 AW: Web site slow to update Döscher, Andreas (ESI) via dev
• 2026/07/10 (tomcat) branch 11.0.x updated: Use Eclipse generated hashCode() and equals() with some modifications markt
• 2026/07/10 (tomcat) branch 9.0.x updated: Use Eclipse generated hashCode() and equals() with some modifications markt
• 2026/07/10 (tomcat) branch 10.1.x updated: Use Eclipse generated hashCode() and equals() with some modifications markt
• 2026/07/10 (tomcat) branch main updated: Use Eclipse generated hashCode() and equals() with some modifications markt
• 2026/07/10 (tomcat) branch 9.0.x updated: No need to notify if there was no entry to remove markt
• 2026/07/10 (tomcat) branch 10.1.x updated: No need to notify if there was no entry to remove markt
• 2026/07/10 (tomcat) branch 11.0.x updated: No need to notify if there was no entry to remove markt
• 2026/07/10 (tomcat) branch 10.1.x updated: Consider value as well as key in equals() markt
• 2026/07/10 (tomcat) branch main updated: No need to notify if there was no entry to remove markt
• 2026/07/10 (tomcat) branch 9.0.x updated: Consider value as well as key in equals() markt
• 2026/07/10 (tomcat) branch 11.0.x updated: Consider value as well as key in equals() markt
• 2026/07/10 (tomcat) branch main updated: Consider value as well as key in equals() markt
• 2026/07/09 Buildbot success in on tomcat-9.0.x buildbot
• 2026/07/09 Buildbot failure in on tomcat-9.0.x buildbot
• 2026/07/09 (tomcat) branch 9.0.x updated: Minor fixes from code review remm
• 2026/07/09 (tomcat) branch 10.1.x updated: Minor fixes from code review remm
• 2026/07/09 (tomcat) branch 11.0.x updated: Minor fixes from code review remm
• 2026/07/09 (tomcat) branch main updated: Minor fixes from code review remm
• 2026/07/09 (tomcat) branch 9.0.x updated: Ensure internal state is reset before re-using ELParser markt
• 2026/07/09 (tomcat) branch 10.1.x updated: Ensure internal state is reset before re-using ELParser markt
• 2026/07/09 (tomcat) branch 11.0.x updated: Ensure internal state is reset before re-using ELParser markt
• 2026/07/09 (tomcat) branch main updated: Ensure internal state is reset before re-using ELParser markt
• 2026/07/09 [Bug 70141] Shell Command Injection via CGIServlet Argument Injection on Linux bugzilla
• 2026/07/09 [Bug 70141] New: Shell Command Injection via CGIServlet Argument Injection on Linux bugzilla
• 2026/07/09 (tomcat) branch 9.0.x updated: Extend filtering to include dynamic proxy interface classes markt
• 2026/07/09 (tomcat) branch 10.1.x updated: Extend filtering to include dynamic proxy interface classes markt
• 2026/07/09 (tomcat) branch 11.0.x updated: Extend filtering to include dynamic proxy interface classes markt
• 2026/07/09 (tomcat) branch main updated: Extend filtering to include dynamic proxy interface classes markt
• 2026/07/09 (tomcat) branch 9.0.x updated: Remove unnecessary intern() calls. markt
• 2026/07/09 (tomcat) branch 10.1.x updated: Remove unnecessary intern() calls. markt
• 2026/07/09 (tomcat) branch 11.0.x updated: Remove unnecessary intern() calls. markt
• 2026/07/09 (tomcat) branch main updated: Remove unnecessary intern() calls. markt
• 2026/07/08 (tomcat) branch 10.1.x updated: Add release date for 10.1.57 schultz
• 2026/07/08 Buildbot success in on tomcat-9.0.x buildbot
• 2026/07/08 (tomcat) branch 11.0.x updated: Fix javadoc remm
• 2026/07/08 (tomcat) branch 9.0.x updated: Fix javadoc remm
• 2026/07/08 (tomcat) branch 10.1.x updated: Fix javadoc remm
• 2026/07/08 (tomcat) branch main updated: Fix javadoc remm
• 2026/07/08 Re: (tomcat) branch main updated: Various minor fixes and improvements from code review Rémy Maucherat
• 2026/07/08 Re: (tomcat) branch main updated: Various minor fixes and improvements from code review Mark Thomas
• 2026/07/08 Buildbot failure in on tomcat-9.0.x buildbot
• 2026/07/08 (tomcat) branch 9.0.x updated: Various minor fixes and improvements from code review remm
• 2026/07/08 (tomcat) branch 10.1.x updated: Various minor fixes and improvements from code review remm
• 2026/07/08 (tomcat) branch 11.0.x updated: Various minor fixes and improvements from code review remm
• 2026/07/08 (tomcat) branch main updated: Various minor fixes and improvements from code review remm
• 2026/07/08 [Bug 70135] SecurityClassLoad fails to preload JspRuntimeLibrary (NoSuchMethodException) since its constructor was made private in 9.0.119 bugzilla
• 2026/07/08 [Bug 70127] Fails to start 11.0.23 bugzilla
• 2026/07/08 (tomcat) branch 9.0.x updated: Expand the Javadoc for DNSMembershipProvider markt
• 2026/07/08 (tomcat) branch 10.1.x updated: Expand the Javadoc for DNSMembershipProvider markt
• 2026/07/08 (tomcat) branch 11.0.x updated: Expand the Javadoc for DNSMembershipProvider markt
• 2026/07/08 (tomcat) branch main updated: Expand the Javadoc for DNSMembershipProvider markt
• 2026/07/08 [ANN] Apache Tomcat 11.0.24 Available Mark Thomas
• 2026/07/08 (tomcat) branch 11.0.x updated: Add release date for 11.0.24 markt
• 2026/07/08 svn commit: r1936003 - in tomcat/site/trunk: . docs xdocs markt
• 2026/07/08 svn commit: r1936002 - in tomcat/site/trunk/docs/tomcat-11.0-doc: . annotationapi annotationapi/jakarta/annotation annotationapi/jakarta/annotation/security annotationapi/jakarta/annotation/sql api api/org/apache/catalina api/org/apache/catalina/ant ap... markt
• 2026/07/08 svn commit: r85772 - release/tomcat/tomcat-11/v11.0.22 markt
• 2026/07/08 svn commit: r85770 - dev/tomcat/tomcat-11/v11.0.24 release/tomcat/tomcat-11/v11.0.24 markt
• 2026/07/08 [VOTE][RESULT] Release Apache Tomcat 11.0.24 Mark Thomas
• 2026/07/07 AW: Web site slow to update Döscher, Andreas (ESI) via dev
• 2026/07/07 Re: Web site slow to update Christopher Schultz
• 2026/07/07 [ANN] Apache Tomcat 9.0.120 available Rémy Maucherat
• 2026/07/07 Re: Web site slow to update Rémy Maucherat
• 2026/07/07 Web site slow to update Christopher Schultz
• 2026/07/07 (tomcat-maven-plugin) branch dependabot/maven/org.apache.maven.shared-maven-filtering-3.5.1 deleted (was 9cc17f5) github-bot
• 2026/07/07 (tomcat-maven-plugin) 01/01: Merge pull request #132 from apache/dependabot/maven/org.apache.maven.shared-maven-filtering-3.5.1 remm
• 2026/07/07 (tomcat-maven-plugin) branch trunk updated (a452cf5 -> 822fde5) remm
• 2026/07/07 Re: [PR] Bump org.apache.maven.shared:maven-filtering from 3.5.0 to 3.5.1 [tomcat-maven-plugin] via GitHub
• 2026/07/07 (tomcat-maven-plugin) branch dependabot/maven/org.apache.maven.shared-maven-filtering-3.5.1 created (now 9cc17f5) github-bot
• 2026/07/07 [PR] Bump org.apache.maven.shared:maven-filtering from 3.5.0 to 3.5.1 [tomcat-maven-plugin] via GitHub
• 2026/07/07 svn commit: r85733 - in release/tomcat/tomcat-10: v10.1.55 v10.1.56 schultz
• 2026/07/07 svn commit: r1935983 - in tomcat/site/trunk: . docs docs/tomcat-10.1-doc docs/tomcat-10.1-doc/annotationapi docs/tomcat-10.1-doc/annotationapi/jakarta/annotation docs/tomcat-10.1-doc/annotationapi/jakarta/annotation/security docs/tomcat-10.1-doc/annota... schultz
• 2026/07/07 svn commit: r85729 - dev/tomcat/tomcat-10/v10.1.57 release/tomcat/tomcat-10/v10.1.57 schultz
• 2026/07/07 [VOTE][RESULT] Release Apache Tomcat 10.1.57 Christopher Schultz
• 2026/07/07 svn commit: r1935980 - in tomcat/site/trunk/docs/tomcat-9.0-doc: . annotationapi annotationapi/javax/annotation annotationapi/javax/annotation/security annotationapi/javax/annotation/sql api api/org/apache/catalina api/org/apache/catalina/ant api/org/a... remm
• 2026/07/07 svn commit: r1935979 - in tomcat/site/trunk: . docs xdocs remm
• 2026/07/07 Buildbot success in on tomcat-10.1.x buildbot
• 2026/07/07 svn commit: r85724 - dev/tomcat/tomcat-9/v9.0.120 release/tomcat/tomcat-9/v9.0.120 remm
• 2026/07/07 [RESULT][VOTE] Release Apache Tomcat 9.0.120 Rémy Maucherat
• 2026/07/07 (tomcat) branch main updated: Default change has been back-ported markt
• 2026/07/07 (tomcat) branch 9.0.x updated: Be more explicit about security considerations for EncryptInterceptor markt
• 2026/07/07 (tomcat) branch 10.1.x updated: Be more explicit about security considerations for EncryptInterceptor markt
• 2026/07/07 (tomcat) branch 11.0.x updated: Be more explicit about security considerations for EncryptInterceptor markt
• 2026/07/07 (tomcat) branch main updated: Be more explicit about security considerations for EncryptInterceptor markt
• 2026/07/07 (tomcat) branch 9.0.x updated: Update default encryptionAlgorithm to "AES/GCM/NoPadding" markt
• 2026/07/07 (tomcat) branch 10.1.x updated: Update default encryptionAlgorithm to "AES/GCM/NoPadding" markt
• 2026/07/07 (tomcat) branch 11.0.x updated: Update default encryptionAlgorithm to "AES/GCM/NoPadding" markt
• 2026/07/06 Buildbot failure in on tomcat-10.1.x buildbot
• 2026/07/06 Re: [VOTE] Release Apache Tomcat 9.0.120 Mark Thomas
• 2026/07/06 (tomcat) branch 9.0.x updated: Revert FileURLConnection changes - it does open an InputStream markt
• 2026/07/06 (tomcat) branch 10.1.x updated: Revert FileURLConnection changes - it does open an InputStream markt
• 2026/07/06 (tomcat) branch 11.0.x updated: Revert FileURLConnection changes - it does open an InputStream markt
• 2026/07/06 (tomcat) branch main updated: Revert FileURLConnection changes - it does open an InputStream markt
• 2026/07/06 Re: (tomcat) branch main updated: Minor review updates Rémy Maucherat
• 2026/07/06 (tomcat) branch 9.0.x updated: Fix handling of login-config merge conflict markt
• 2026/07/06 (tomcat) branch 10.1.x updated: Fix handling of login-config merge conflict markt
• 2026/07/06 (tomcat) branch 11.0.x updated: Fix handling of login-config merge conflict markt
• 2026/07/06 (tomcat) branch main updated: Fix handling of login-config merge conflict markt
• 2026/07/06 Re: [VOTE] Release Apache Tomcat 10.1.57 Mark Thomas
• 2026/07/06 Buildbot success in on tomcat-12.0.x buildbot
• 2026/07/06 Re: [VOTE] Release Apache Tomcat 11.0.24 Mark Thomas
• 2026/07/06 (tomcat) branch 9.0.x updated: Fix repeated logging when file cannot be found markt
• 2026/07/06 (tomcat) branch 10.1.x updated: Fix repeated logging when file cannot be found markt
• 2026/07/06 (tomcat) branch 11.0.x updated: Fix repeated logging when file cannot be found markt
• 2026/07/06 (tomcat) branch main updated: Fix repeated logging when file cannot be found markt
• 2026/07/06 (tomcat) branch 9.0.x updated: Minor review updates markt
• 2026/07/06 (tomcat) branch 10.1.x updated: Minor review updates markt
• 2026/07/06 (tomcat) branch 11.0.x updated: Minor review updates markt
• 2026/07/06 (tomcat) branch main updated: Minor review updates markt
• 2026/07/05 Re: [VOTE] Release Apache Tomcat 9.0.120 Rainer Jung
• 2026/07/05 Re: [VOTE] Release Apache Tomcat 10.1.57 Rainer Jung
• 2026/07/05 Re: [VOTE] Release Apache Tomcat 11.0.24 Rainer Jung
• 2026/07/05 Is the [email protected] mailing list still needed? sebb
• 2026/07/04 Re: [Vote] Announce EOL for ajp12 and ajp14 workers in mod_jk Igal Sapir
• 2026/07/04 Re: [Vote] Announce EOL for ajp12 and ajp14 workers in mod_jk Felix Schumacher
• 2026/07/04 Re: Makensis Rainer Jung
• 2026/07/04 Makensis Christopher Schultz
• 2026/07/04 Re: [VOTE] Release Apache Tomcat 10.1.57 Christopher Schultz
• 2026/07/03 Re: [VOTE] Release Apache Tomcat 11.0.24 Igal Sapir
• 2026/07/03 Re: [VOTE] Release Apache Tomcat 9.0.120 Igal Sapir
• 2026/07/03 Re: [VOTE] Release Apache Tomcat 10.1.57 Igal Sapir
• 2026/07/03 Buildbot failure in on tomcat-12.0.x buildbot
• 2026/07/03 (tomcat) branch 9.0.x updated: Update changelog remm
• 2026/07/03 (tomcat) branch 10.1.x updated: Update changelog remm
• 2026/07/03 (tomcat) branch 11.0.x updated: Changelog entry remm
• 2026/07/03 (tomcat) branch main updated: Update changelog remm
• 2026/07/03 (tomcat) branch 11.0.x updated: Remove unused import remm
• 2026/07/03 (tomcat) branch 9.0.x updated: Remove unused import remm
• 2026/07/03 (tomcat) branch 10.1.x updated: Remove unused import remm
• 2026/07/03 (tomcat) branch 9.0.x updated: Replace various existing patterns with the URLConnection wrapper remm
• 2026/07/03 (tomcat) branch 10.1.x updated: Replace various existing patterns with the URLConnection wrapper remm
• 2026/07/03 (tomcat) branch main updated: Remove unused import remm
• 2026/07/03 (tomcat) branch 11.0.x updated: Replace various existing patterns with the URLConnection wrapper remm
• 2026/07/03 (tomcat) branch main updated: Replace various existing patterns with the URLConnection wrapper remm
• 2026/07/03 (tomcat) 02/02: Java 8 fix remm
• 2026/07/03 (tomcat) branch 9.0.x updated (fd71483dd5 -> bba071cfc2) remm
• 2026/07/03 (tomcat) 01/02: Add utility URLConnection wrapper remm
• 2026/07/03 (tomcat) branch 10.1.x updated: Add utility URLConnection wrapper remm
• 2026/07/03 (tomcat) branch 11.0.x updated: Add utility URLConnection wrapper remm
• 2026/07/03 Re: [VOTE] Release Apache Tomcat 10.1.57 Rémy Maucherat
• 2026/07/03 Re: [VOTE] Release Apache Tomcat 9.0.120 Christopher Schultz
• 2026/07/03 Re: [VOTE] Release Apache Tomcat 11.0.24 Christopher Schultz
• 2026/07/03 (tomcat) branch 10.1.x updated: Increment version numbers for next release schultz

• Earlier messages
• Later messages