dev  

Messages by Thread

• • (tomcat) 14/21: Create the storage directory in the back-port tools and do not swallow export failures remm
  • (tomcat) 12/21: Report a bean property value which cannot be converted as a NamingException remm
  • (tomcat) 10/21: Fix the class loader used to check the type of a JNDI lookup reference remm
  • (tomcat) 18/21: Log the Txt2Html converted file count once per task with the correct total remm
  • (tomcat) 21/21: Return null from ResourceLinkFactory when the global naming context is unavailable remm
  • (tomcat) 09/21: Bind the initial context of a container in one step remm
  • (tomcat) 17/21: Close the per-entry stream when normalising archive timestamps remm
• (tomcat) branch main updated (2231557217 -> 6ba25c848c) remm
  • (tomcat) 06/22: Ignore unusable JULI Log service providers instead of failing remm
  • (tomcat) 15/22: Do not swallow exceptions when loading translation property files remm
  • (tomcat) 01/22: Fix infinite loop in JsonFormatter for cyclic cause chains remm
  • (tomcat) 09/22: Bind the initial context of a container in one step remm
  • (tomcat) 12/22: Report a bean property value which cannot be converted as a NamingException remm
  • (tomcat) 10/22: Fix the class loader used to check the type of a JNDI lookup reference remm
  • (tomcat) 08/22: Synchronize access to the bindings of a naming context remm
  • (tomcat) 02/22: Clear handler prefix ThreadLocal when handler creation fails remm
  • (tomcat) 07/22: Release the log handlers of the given class loader in JULI remm
  • (tomcat) 14/22: Create the storage directory in the back-port tools and do not swallow export failures remm
  • (tomcat) 04/22: Avoid NPE in juli formatters for records with no message remm
  • (tomcat) 03/22: Open the current log file when no date is set remm
  • (tomcat) 05/22: Fix recovery after write failures in JULI FileHandler remm
  • (tomcat) 11/22: Ignore the resource description in the Bean resource factory remm
  • (tomcat) 13/22: Create the package directory when generating the reflection less code remm
  • (tomcat) 18/22: Log the Txt2Html converted file count once per task with the correct total remm
  • (tomcat) 19/22: Do not swallow write failures when converting text files to HTML remm
  • (tomcat) 20/22: Report a resource link which omits the global attribute as an IllegalArgumentException remm
  • (tomcat) 17/22: Close the per-entry stream when normalising archive timestamps remm
  • (tomcat) 22/22: Merge branch 'main' of [email protected]:apache/tomcat.git into main remm
  • (tomcat) 21/22: Return null from ResourceLinkFactory when the global naming context is unavailable remm
  • (tomcat) 16/22: Restore the original archive when normalising the timestamps fails remm
• (tomcat) branch 9.0.x updated: Refactor AJP tests to use a common base class markt
• (tomcat) branch 11.0.x updated: Refactor AJP tests to use a common base class markt
• (tomcat) branch 10.1.x updated: Refactor AJP tests to use a common base class markt
• (tomcat) branch main updated: Refactor AJP tests to use a common base class markt
• (tomcat) branch 10.1.x updated: Add a test case for CVE-2026-101356 markt
• (tomcat) branch 9.0.x updated: Add a test case for CVE-2026-101356 markt
• (tomcat) branch 11.0.x updated: Add a test case for CVE-2026-101356 markt
• (tomcat) branch 10.1.x updated: Add a test case for CVE-2026-103119 markt
• (tomcat) branch 9.0.x updated: Add a test case for CVE-2026-103119 markt
• (tomcat) branch 11.0.x updated: Add a test case for CVE-2026-103119 markt
• (tomcat) branch main updated (aacbea1ec2 -> 6c0327626c) markt
  • (tomcat) 02/02: Add a test case for CVE-2026-101356 markt
  • (tomcat) 01/02: Add a test case for CVE-2026-103119 markt
• (tomcat) branch 9.0.x updated (b4a14e6cbe -> 36b8024d2e) markt
  • (tomcat) 04/06: Follow-up to "Fix broken SNI fallback for ClientHello values larger..." markt
  • (tomcat) 02/06: Fix NIO2 handling of end of input markt
  • (tomcat) 06/06: Consistent naming (derived from base class) markt
  • (tomcat) 03/06: Improve error handling markt
  • (tomcat) 01/06: Fix IDE warnings markt
  • (tomcat) 05/06: Fix intermittent test failures markt
• (tomcat) branch 10.1.x updated: Consistent naming (derived from base class) markt
• (tomcat) branch 11.0.x updated: Consistent naming (derived from base class) markt
• (tomcat) branch main updated: Consistent naming (derived from base class) markt
• (tomcat) branch 10.1.x updated (8d19dd054b -> fb420199ce) markt
  • (tomcat) 01/05: Fix IDE warnings markt
  • (tomcat) 03/05: Improve error handling markt
  • (tomcat) 04/05: Follow-up to "Fix broken SNI fallback for ClientHello values larger..." markt
  • (tomcat) 02/05: Fix NIO2 handling of end of input markt
  • (tomcat) 05/05: Fix intermittent test failures markt
• (tomcat) branch main updated (161734d72c -> 7c6e5c06cd) markt
  • (tomcat) 01/02: Improve error handling markt
  • (tomcat) 02/02: Fix intermittent test failures markt
• (tomcat) branch 11.0.x updated (3f8bd42a80 -> 13f0469f14) markt
  • (tomcat) 04/05: Follow-up to "Fix broken SNI fallback for ClientHello values larger..." markt
  • (tomcat) 02/05: Fix NIO2 handling of end of input markt
  • (tomcat) 03/05: Improve error handling markt
  • (tomcat) 05/05: Fix intermittent test failures markt
  • (tomcat) 01/05: Fix IDE warnings markt
• (tomcat) branch main updated: Better reporting of bound ports for cluster receiver markt
  • Re: (tomcat) branch main updated: Better reporting of bound ports for cluster receiver Mark Thomas
• (tomcat) branch 9.0.x updated: Reduce test runtime markt
  • (tomcat) branch 9.0.x updated: Reduce test runtime markt
  • (tomcat) branch 9.0.x updated: Reduce test runtime markt
• (tomcat) branch main updated: Reduce test runtime markt
  • (tomcat) branch main updated: Reduce test runtime markt
  • (tomcat) branch main updated: Reduce test runtime markt
• (tomcat) branch 10.1.x updated: Reduce test runtime markt
  • (tomcat) branch 10.1.x updated: Reduce test runtime markt
  • (tomcat) branch 10.1.x updated: Reduce test runtime markt
• (tomcat) branch 11.0.x updated: Reduce test runtime markt
  • (tomcat) branch 11.0.x updated: Reduce test runtime markt
  • (tomcat) branch 11.0.x updated: Reduce test runtime markt
• [SECURITY] CVE-2026-80353 Apache Tomcat - TOCTOU when setting specific permissions for Unix Domain Sockets - Fix for CVE-2026-65183 did not address APR connector Mark Thomas
• (tomcat) branch 9.0.x updated: Split test into multiple tests to improve parallel running markt
• (tomcat) branch 10.1.x updated: Split test into multiple tests to improve parallel running markt
• (tomcat) branch 11.0.x updated: Split test into multiple tests to improve parallel running markt
• (tomcat) branch main updated: Split test into multiple tests to improve parallel running markt
• (tomcat) branch 10.1.x updated: Reduce runtime for Form Auht tests markt
• (tomcat) branch 9.0.x updated: Reduce runtime for Form Auht tests markt
• (tomcat) branch 11.0.x updated: Reduce runtime for Form Auht tests markt
• (tomcat) branch main updated: Reduce runtime for Form Auht tests markt
• [SECURITY] CVE-2026-103119 Apache Tomcat - AJP response mix-up Mark Thomas
• (tomcat) branch 9.0.x updated: Reduce time spent running tests markt
• (tomcat) branch 10.1.x updated: Reduce time spent running tests markt
• (tomcat) branch 11.0.x updated: Reduce time spent running tests markt
• (tomcat) branch main updated: Reduce time spent running tests markt
• [SECURITY] CVE-2026-101296 Apache Tomcat - JNDIRealm bind credential validation fails open for non-GSSAPI SASL mechanisms Mark Thomas
• [SECURITY] CVE-2026-74049 Apache Tomcat - Jasper JSTL <c:redirect> plug-in implementation omits page abort (SKIP_PAGE) Mark Thomas
• [SECURITY] CVE-2026-101356 Apache Tomcat - HTTP/2 request/response mix-up after error during async processing Mark Thomas
• [SECURITY] CVE-2026-93446 Apache Tomcat - Possible TLS 1.3 connection failures Mark Thomas
• [SECURITY] CVE-2026-88041 Apache Tomcat - HTTP/2 trailer header cross-contamination Mark Thomas
• [SECURITY] CVE-2026-74048 Apache Tomcat - OpenSSL-FFM FIPS failure does not prevent start-up Mark Thomas
• svn commit: r1939289 - in tomcat/site/trunk: docs xdocs markt
• (tomcat) branch 9.0.x updated: Avoid re-evaluation of command-line arguments schultz
• (tomcat) branch 9.0.x updated: Fix IDE warnings in Java package markt
• (tomcat) branch 11.0.x updated: Avoid re-evaluation of command-line arguments schultz
• (tomcat) branch 10.1.x updated: Avoid re-evaluation of command-line arguments schultz
• (tomcat) branch main updated: Avoid re-evaluation of invocation parameters schultz
• (tomcat) branch main updated: Add findsecbugs plugin to spotbugs schultz
  • Re: (tomcat) branch main updated: Add findsecbugs plugin to spotbugs Christopher Schultz
  • Re: (tomcat) branch main updated: Add findsecbugs plugin to spotbugs Mark Thomas
  • Re: (tomcat) branch main updated: Add findsecbugs plugin to spotbugs Christopher Schultz
  • Re: (tomcat) branch main updated: Add findsecbugs plugin to spotbugs Mark Thomas
  • Re: (tomcat) branch main updated: Add findsecbugs plugin to spotbugs Christopher Schultz
  • Re: (tomcat) branch main updated: Add findsecbugs plugin to spotbugs Christopher Schultz
• [PR] Preserve backward compatibility by defaulting maxLocaleCount to -1 [tomcat] via GitHub
  • Re: [PR] Preserve backward compatibility by defaulting maxLocaleCount to -1 [tomcat] via GitHub
  • Re: [PR] Preserve backward compatibility by defaulting maxLocaleCount to -1 [tomcat] via GitHub
• (tomcat) branch 10.1.x updated: Fix IDE warnings in Java package markt
• (tomcat) branch 11.0.x updated: Fix IDE warnings in Java package markt
• (tomcat) branch main updated: Fix IDE warnings in Java package markt
• [Bug 68227] AsyncListener::onComplete is not called on network error if error listener calls dispatch bugzilla
• (tomcat) branch 9.0.x updated: Stop OCSP checks once a cert in the trust store is reached markt
• (tomcat) branch main updated: Correct entry location markt
• (tomcat) branch 10.1.x updated: Stop OCSP checks once a cert in the trust store is reached markt
• (tomcat) branch 11.0.x updated: Stop OCSP checks once a cert in the trust store is reached markt
• (tomcat) branch main updated: Stop OCSP checks once a cert in the trust store is reached # Conflicts: # webapps/docs/changelog.xml markt
• [PR] [11.0.x] Fix for bz 70262 : Add rename path for service.bat [tomcat] via GitHub
  • Re: [PR] [11.0.x] Fix for bz 70262 : Add rename path for service.bat [tomcat] via GitHub
  • Re: [PR] [11.0.x] Fix for bz 70262 : Add rename path for service.bat [tomcat] via GitHub
  • Re: [PR] [11.0.x] Fix for bz 70262 : Add rename path for service.bat [tomcat] via GitHub
  • Re: [PR] [11.0.x] Fix for bz 70262 : Add rename path for service.bat [tomcat] via GitHub
• (tomcat) branch 11.0.x updated: Run four tests that were missing @Test remm
• (tomcat) branch 9.0.x updated: Run four tests that were missing @Test remm
• (tomcat) branch 10.1.x updated: Run four tests that were missing @Test remm
• (tomcat) branch main updated (fb6f0a2b93 -> 85391716a1) remm
  • (tomcat) 01/01: Merge pull request #1094 from sharanggupta/run-dead-tests remm
• (tomcat) branch 9.0.x updated (42c7b40ade -> e771852e68) remm
  • (tomcat) 01/46: Fix jspc handling of the full stop (--) argument remm
  • (tomcat) 02/46: Fix jspc infinite loop with a trailing -trimSpaces argument remm
  • (tomcat) 10/46: Validate page directive buffer values against the JSP specification remm
  • (tomcat) 07/46: Correct the "unusable error detail" line number in JavacErrorDetail remm
  • (tomcat) 16/46: Omit the id from validation messages without one remm
  • (tomcat) 05/46: Match JSP pages in sub-directories in JspConfig.isJspPage remm
  • (tomcat) 21/46: Keep the wrapped exception in the JSP EL exception cause chain remm
  • (tomcat) 24/46: Use the canonical enum name in the optimized string interpreter remm
  • (tomcat) 03/46: Stop the Ant compiler System.err capture when compilation fails unexpectedly remm
  • (tomcat) 23/46: Use the canonical enum name in optimized tag setter code generation remm
  • (tomcat) 28/46: Resolve JspC resources whose path contains URI-illegal characters remm
  • (tomcat) 26/46: Record JSP usage time on every request, fixing premature idle unload remm
  • (tomcat) 04/46: Report compilation errors before removing the generated source remm
  • (tomcat) 41/46: Avoid NullPointerException rendering a null entry remm
  • (tomcat) 09/46: Avoid NullPointerException in include error path for non-JAR pages remm
  • (tomcat) 34/46: Share the Import tag plugin URL with its params via the plugin context remm
  • (tomcat) 42/46: Keep UniqueAttributesImpl tracking in step with its attributes remm
  • (tomcat) 06/46: Avoid NullPointerException when the JSP source cannot be read for an error detail remm
  • (tomcat) 11/46: Match the JSP namespace exactly when detecting JSP documents remm
  • (tomcat) 27/46: Avoid registering TLD listeners twice for a duplicate taglib URI remm
  • (tomcat) 31/46: Validate begin, end and step in the ForEach and ForTokens tag plugins remm
  • (tomcat) 38/46: Strip a trailing slash from the context in resolveUrl remm
  • (tomcat) 18/46: Correct the assignability check for Graal bean property writes remm
  • (tomcat) 15/46: Avoid NullPointerException when a cached TLD is removed remm
  • (tomcat) 14/46: Report a translation error for an invalid TLD jsp-version remm
  • (tomcat) 13/46: Report a translation error for an empty taglib URI remm
  • (tomcat) 08/46: Fix the jsp:attribute trim loop skipping nodes after removal remm
  • (tomcat) 32/46: Fall back when c:when or c:otherwise has no choose parent remm
  • (tomcat) 36/46: Store the Set tag plugin deferred value in the variable mapper remm
  • (tomcat) 19/46: Avoid NullPointerException writing a null bean property value remm
  • (tomcat) 12/46: Extract the SMAP from the end of the compiled class file remm
  • (tomcat) 46/46: EE and Java compatibility remm
  • (tomcat) 20/46: Report bean getter and setter exceptions in GraalVM mode remm
  • (tomcat) 17/46: Reject jsp:element with multiple name attributes remm
  • (tomcat) 29/46: Avoid StringIndexOutOfBoundsException on an empty content-type parameter remm
  • (tomcat) 33/46: Compute the ForEach tag plugin's state flags per request remm
  • (tomcat) 45/46: Java compatibility remm
  • (tomcat) 30/46: Expose the ForEach tag plugin loop variable as an Integer remm
  • (tomcat) 43/46: Build UniqueAttributesImpl.setAttributes() from the incoming set remm
  • (tomcat) 37/46: Fall back when the Set tag plugin has nowhere to set remm
  • (tomcat) 44/46: Match duplicate page directive attribute names exactly remm
  • (tomcat) 25/46: Avoid StringIndexOutOfBoundsException forwarding a relative path from a slash-less servlet path remm
  • (tomcat) 39/46: Share the Url and Redirect tag plugin URLs with their params remm
  • (tomcat) 35/46: Trim and escape the Out tag plugin body fallback remm
  • (tomcat) 40/46: Honour a FastRemovalDequeue maximum size of one remm
  • (tomcat) 22/46: Correct the expression wrapper equals implementation remm
• (tomcat) branch 10.1.x updated (05b4e876e4 -> c15a98ec3d) remm
  • (tomcat) 04/46: Report compilation errors before removing the generated source remm
  • (tomcat) 09/46: Avoid NullPointerException in include error path for non-JAR pages remm
  • (tomcat) 05/46: Match JSP pages in sub-directories in JspConfig.isJspPage remm
  • (tomcat) 11/46: Match the JSP namespace exactly when detecting JSP documents remm
  • (tomcat) 14/46: Report a translation error for an invalid TLD jsp-version remm
  • (tomcat) 12/46: Extract the SMAP from the end of the compiled class file remm
  • (tomcat) 10/46: Validate page directive buffer values against the JSP specification remm
  • (tomcat) 16/46: Omit the id from validation messages without one remm
  • (tomcat) 20/46: Report bean getter and setter exceptions in GraalVM mode remm
  • (tomcat) 01/46: Fix jspc handling of the full stop (--) argument remm
  • (tomcat) 03/46: Stop the Ant compiler System.err capture when compilation fails unexpectedly remm
  • (tomcat) 08/46: Fix the jsp:attribute trim loop skipping nodes after removal remm
  • (tomcat) 26/46: Avoid StringIndexOutOfBoundsException forwarding a relative path from a slash-less servlet path remm
  • (tomcat) 25/46: Avoid NullPointerException releasing a PageContext when the pool size changed remm
  • (tomcat) 21/46: Keep the wrapped exception in the JSP EL exception cause chain remm

• Earlier messages
• Later messages