dev  

Messages by Thread

• • Re: (tomcat) branch main updated: Better reporting of bound ports for cluster receiver Mark Thomas
• (tomcat) branch 9.0.x updated: Reduce test runtime markt
  • (tomcat) branch 9.0.x updated: Reduce test runtime markt
  • (tomcat) branch 9.0.x updated: Reduce test runtime markt
• (tomcat) branch main updated: Reduce test runtime markt
  • (tomcat) branch main updated: Reduce test runtime markt
  • (tomcat) branch main updated: Reduce test runtime markt
• (tomcat) branch 10.1.x updated: Reduce test runtime markt
  • (tomcat) branch 10.1.x updated: Reduce test runtime markt
  • (tomcat) branch 10.1.x updated: Reduce test runtime markt
• (tomcat) branch 11.0.x updated: Reduce test runtime markt
  • (tomcat) branch 11.0.x updated: Reduce test runtime markt
  • (tomcat) branch 11.0.x updated: Reduce test runtime markt
• [SECURITY] CVE-2026-80353 Apache Tomcat - TOCTOU when setting specific permissions for Unix Domain Sockets - Fix for CVE-2026-65183 did not address APR connector Mark Thomas
• (tomcat) branch 9.0.x updated: Split test into multiple tests to improve parallel running markt
• (tomcat) branch 10.1.x updated: Split test into multiple tests to improve parallel running markt
• (tomcat) branch 11.0.x updated: Split test into multiple tests to improve parallel running markt
• (tomcat) branch main updated: Split test into multiple tests to improve parallel running markt
• (tomcat) branch 10.1.x updated: Reduce runtime for Form Auht tests markt
• (tomcat) branch 9.0.x updated: Reduce runtime for Form Auht tests markt
• (tomcat) branch 11.0.x updated: Reduce runtime for Form Auht tests markt
• (tomcat) branch main updated: Reduce runtime for Form Auht tests markt
• [SECURITY] CVE-2026-103119 Apache Tomcat - AJP response mix-up Mark Thomas
• (tomcat) branch 9.0.x updated: Reduce time spent running tests markt
• (tomcat) branch 10.1.x updated: Reduce time spent running tests markt
• (tomcat) branch 11.0.x updated: Reduce time spent running tests markt
• (tomcat) branch main updated: Reduce time spent running tests markt
• [SECURITY] CVE-2026-101296 Apache Tomcat - JNDIRealm bind credential validation fails open for non-GSSAPI SASL mechanisms Mark Thomas
• [SECURITY] CVE-2026-74049 Apache Tomcat - Jasper JSTL <c:redirect> plug-in implementation omits page abort (SKIP_PAGE) Mark Thomas
• [SECURITY] CVE-2026-101356 Apache Tomcat - HTTP/2 request/response mix-up after error during async processing Mark Thomas
• [SECURITY] CVE-2026-93446 Apache Tomcat - Possible TLS 1.3 connection failures Mark Thomas
• [SECURITY] CVE-2026-88041 Apache Tomcat - HTTP/2 trailer header cross-contamination Mark Thomas
• [SECURITY] CVE-2026-74048 Apache Tomcat - OpenSSL-FFM FIPS failure does not prevent start-up Mark Thomas
• svn commit: r1939289 - in tomcat/site/trunk: docs xdocs markt
• (tomcat) branch 9.0.x updated: Avoid re-evaluation of command-line arguments schultz
• (tomcat) branch 9.0.x updated: Fix IDE warnings in Java package markt
• (tomcat) branch 11.0.x updated: Avoid re-evaluation of command-line arguments schultz
• (tomcat) branch 10.1.x updated: Avoid re-evaluation of command-line arguments schultz
• (tomcat) branch main updated: Avoid re-evaluation of invocation parameters schultz
• (tomcat) branch main updated: Add findsecbugs plugin to spotbugs schultz
  • Re: (tomcat) branch main updated: Add findsecbugs plugin to spotbugs Christopher Schultz
  • Re: (tomcat) branch main updated: Add findsecbugs plugin to spotbugs Mark Thomas
  • Re: (tomcat) branch main updated: Add findsecbugs plugin to spotbugs Christopher Schultz
  • Re: (tomcat) branch main updated: Add findsecbugs plugin to spotbugs Mark Thomas
  • Re: (tomcat) branch main updated: Add findsecbugs plugin to spotbugs Christopher Schultz
  • Re: (tomcat) branch main updated: Add findsecbugs plugin to spotbugs Christopher Schultz
• [PR] Preserve backward compatibility by defaulting maxLocaleCount to -1 [tomcat] via GitHub
  • Re: [PR] Preserve backward compatibility by defaulting maxLocaleCount to -1 [tomcat] via GitHub
  • Re: [PR] Preserve backward compatibility by defaulting maxLocaleCount to -1 [tomcat] via GitHub
• (tomcat) branch 10.1.x updated: Fix IDE warnings in Java package markt
• (tomcat) branch 11.0.x updated: Fix IDE warnings in Java package markt
• (tomcat) branch main updated: Fix IDE warnings in Java package markt
• [Bug 68227] AsyncListener::onComplete is not called on network error if error listener calls dispatch bugzilla
• (tomcat) branch 9.0.x updated: Stop OCSP checks once a cert in the trust store is reached markt
• (tomcat) branch main updated: Correct entry location markt
• (tomcat) branch 10.1.x updated: Stop OCSP checks once a cert in the trust store is reached markt
• (tomcat) branch 11.0.x updated: Stop OCSP checks once a cert in the trust store is reached markt
• (tomcat) branch main updated: Stop OCSP checks once a cert in the trust store is reached # Conflicts: # webapps/docs/changelog.xml markt
• [PR] [11.0.x] Fix for bz 70262 : Add rename path for service.bat [tomcat] via GitHub
  • Re: [PR] [11.0.x] Fix for bz 70262 : Add rename path for service.bat [tomcat] via GitHub
• (tomcat) branch 11.0.x updated: Run four tests that were missing @Test remm
• (tomcat) branch 9.0.x updated: Run four tests that were missing @Test remm
• (tomcat) branch 10.1.x updated: Run four tests that were missing @Test remm
• (tomcat) branch main updated (fb6f0a2b93 -> 85391716a1) remm
  • (tomcat) 01/01: Merge pull request #1094 from sharanggupta/run-dead-tests remm
• (tomcat) branch 9.0.x updated (42c7b40ade -> e771852e68) remm
  • (tomcat) 01/46: Fix jspc handling of the full stop (--) argument remm
  • (tomcat) 02/46: Fix jspc infinite loop with a trailing -trimSpaces argument remm
  • (tomcat) 10/46: Validate page directive buffer values against the JSP specification remm
  • (tomcat) 07/46: Correct the "unusable error detail" line number in JavacErrorDetail remm
  • (tomcat) 16/46: Omit the id from validation messages without one remm
  • (tomcat) 05/46: Match JSP pages in sub-directories in JspConfig.isJspPage remm
  • (tomcat) 21/46: Keep the wrapped exception in the JSP EL exception cause chain remm
  • (tomcat) 24/46: Use the canonical enum name in the optimized string interpreter remm
  • (tomcat) 03/46: Stop the Ant compiler System.err capture when compilation fails unexpectedly remm
  • (tomcat) 23/46: Use the canonical enum name in optimized tag setter code generation remm
  • (tomcat) 28/46: Resolve JspC resources whose path contains URI-illegal characters remm
  • (tomcat) 26/46: Record JSP usage time on every request, fixing premature idle unload remm
  • (tomcat) 04/46: Report compilation errors before removing the generated source remm
  • (tomcat) 41/46: Avoid NullPointerException rendering a null entry remm
  • (tomcat) 09/46: Avoid NullPointerException in include error path for non-JAR pages remm
  • (tomcat) 34/46: Share the Import tag plugin URL with its params via the plugin context remm
  • (tomcat) 42/46: Keep UniqueAttributesImpl tracking in step with its attributes remm
  • (tomcat) 06/46: Avoid NullPointerException when the JSP source cannot be read for an error detail remm
  • (tomcat) 11/46: Match the JSP namespace exactly when detecting JSP documents remm
  • (tomcat) 27/46: Avoid registering TLD listeners twice for a duplicate taglib URI remm
  • (tomcat) 31/46: Validate begin, end and step in the ForEach and ForTokens tag plugins remm
  • (tomcat) 38/46: Strip a trailing slash from the context in resolveUrl remm
  • (tomcat) 18/46: Correct the assignability check for Graal bean property writes remm
  • (tomcat) 15/46: Avoid NullPointerException when a cached TLD is removed remm
  • (tomcat) 14/46: Report a translation error for an invalid TLD jsp-version remm
  • (tomcat) 13/46: Report a translation error for an empty taglib URI remm
  • (tomcat) 08/46: Fix the jsp:attribute trim loop skipping nodes after removal remm
  • (tomcat) 32/46: Fall back when c:when or c:otherwise has no choose parent remm
  • (tomcat) 36/46: Store the Set tag plugin deferred value in the variable mapper remm
  • (tomcat) 19/46: Avoid NullPointerException writing a null bean property value remm
  • (tomcat) 12/46: Extract the SMAP from the end of the compiled class file remm
  • (tomcat) 46/46: EE and Java compatibility remm
  • (tomcat) 20/46: Report bean getter and setter exceptions in GraalVM mode remm
  • (tomcat) 17/46: Reject jsp:element with multiple name attributes remm
  • (tomcat) 29/46: Avoid StringIndexOutOfBoundsException on an empty content-type parameter remm
  • (tomcat) 33/46: Compute the ForEach tag plugin's state flags per request remm
  • (tomcat) 45/46: Java compatibility remm
  • (tomcat) 30/46: Expose the ForEach tag plugin loop variable as an Integer remm
  • (tomcat) 43/46: Build UniqueAttributesImpl.setAttributes() from the incoming set remm
  • (tomcat) 37/46: Fall back when the Set tag plugin has nowhere to set remm
  • (tomcat) 44/46: Match duplicate page directive attribute names exactly remm
  • (tomcat) 25/46: Avoid StringIndexOutOfBoundsException forwarding a relative path from a slash-less servlet path remm
  • (tomcat) 39/46: Share the Url and Redirect tag plugin URLs with their params remm
  • (tomcat) 35/46: Trim and escape the Out tag plugin body fallback remm
  • (tomcat) 40/46: Honour a FastRemovalDequeue maximum size of one remm
  • (tomcat) 22/46: Correct the expression wrapper equals implementation remm
• (tomcat) branch 10.1.x updated (05b4e876e4 -> c15a98ec3d) remm
  • (tomcat) 04/46: Report compilation errors before removing the generated source remm
  • (tomcat) 09/46: Avoid NullPointerException in include error path for non-JAR pages remm
  • (tomcat) 05/46: Match JSP pages in sub-directories in JspConfig.isJspPage remm
  • (tomcat) 11/46: Match the JSP namespace exactly when detecting JSP documents remm
  • (tomcat) 14/46: Report a translation error for an invalid TLD jsp-version remm
  • (tomcat) 12/46: Extract the SMAP from the end of the compiled class file remm
  • (tomcat) 10/46: Validate page directive buffer values against the JSP specification remm
  • (tomcat) 16/46: Omit the id from validation messages without one remm
  • (tomcat) 20/46: Report bean getter and setter exceptions in GraalVM mode remm
  • (tomcat) 01/46: Fix jspc handling of the full stop (--) argument remm
  • (tomcat) 03/46: Stop the Ant compiler System.err capture when compilation fails unexpectedly remm
  • (tomcat) 08/46: Fix the jsp:attribute trim loop skipping nodes after removal remm
  • (tomcat) 26/46: Avoid StringIndexOutOfBoundsException forwarding a relative path from a slash-less servlet path remm
  • (tomcat) 25/46: Avoid NullPointerException releasing a PageContext when the pool size changed remm
  • (tomcat) 21/46: Keep the wrapped exception in the JSP EL exception cause chain remm
  • (tomcat) 06/46: Avoid NullPointerException when the JSP source cannot be read for an error detail remm
  • (tomcat) 29/46: Resolve JspC resources whose path contains URI-illegal characters remm
  • (tomcat) 42/46: Avoid NullPointerException rendering a null entry remm
  • (tomcat) 41/46: Honour a FastRemovalDequeue maximum size of one remm
  • (tomcat) 39/46: Strip a trailing slash from the context in resolveUrl remm
  • (tomcat) 36/46: Trim and escape the Out tag plugin body fallback remm
  • (tomcat) 40/46: Share the Url and Redirect tag plugin URLs with their params remm
  • (tomcat) 43/46: Keep UniqueAttributesImpl tracking in step with its attributes remm
  • (tomcat) 33/46: Fall back when c:when or c:otherwise has no choose parent remm
  • (tomcat) 38/46: Fall back when the Set tag plugin has nowhere to set remm
  • (tomcat) 24/46: Use the canonical enum name in the optimized string interpreter remm
  • (tomcat) 23/46: Use the canonical enum name in optimized tag setter code generation remm
  • (tomcat) 07/46: Correct the "unusable error detail" line number in JavacErrorDetail remm
  • (tomcat) 31/46: Expose the ForEach tag plugin loop variable as an Integer remm
  • (tomcat) 13/46: Report a translation error for an empty taglib URI remm
  • (tomcat) 02/46: Fix jspc infinite loop with a trailing -trimSpaces argument remm
  • (tomcat) 32/46: Validate begin, end and step in the ForEach and ForTokens tag plugins remm
  • (tomcat) 17/46: Reject jsp:element with multiple name attributes remm
  • (tomcat) 15/46: Avoid NullPointerException when a cached TLD is removed remm
  • (tomcat) 45/46: Match duplicate page directive attribute names exactly remm
  • (tomcat) 46/46: Java compatibility remm
  • (tomcat) 22/46: Correct the expression wrapper equals implementation remm
  • (tomcat) 19/46: Avoid NullPointerException writing a null bean property value remm
  • (tomcat) 30/46: Avoid StringIndexOutOfBoundsException on an empty content-type parameter remm
  • (tomcat) 37/46: Store the Set tag plugin deferred value in the variable mapper remm
  • (tomcat) 27/46: Record JSP usage time on every request, fixing premature idle unload remm
  • (tomcat) 44/46: Build UniqueAttributesImpl.setAttributes() from the incoming set remm
  • (tomcat) 35/46: Share the Import tag plugin URL with its params via the plugin context remm
  • (tomcat) 18/46: Correct the assignability check for Graal bean property writes remm
  • (tomcat) 28/46: Avoid registering TLD listeners twice for a duplicate taglib URI remm
  • (tomcat) 34/46: Compute the ForEach tag plugin's state flags per request remm
• (tomcat) branch 11.0.x updated (1036d10c8a -> c26619cfa0) remm
  • (tomcat) 08/46: Fix the jsp:attribute trim loop skipping nodes after removal remm
  • (tomcat) 05/46: Match JSP pages in sub-directories in JspConfig.isJspPage remm
  • (tomcat) 07/46: Correct the "unusable error detail" line number in JavacErrorDetail remm
  • (tomcat) 11/46: Match the JSP namespace exactly when detecting JSP documents remm
  • (tomcat) 22/46: Correct the expression wrapper equals implementation remm
  • (tomcat) 02/46: Fix jspc infinite loop with a trailing -trimSpaces argument remm
  • (tomcat) 15/46: Avoid NullPointerException when a cached TLD is removed remm
  • (tomcat) 26/46: Avoid StringIndexOutOfBoundsException forwarding a relative path from a slash-less servlet path remm
  • (tomcat) 23/46: Use the canonical enum name in optimized tag setter code generation remm
  • (tomcat) 36/46: Trim and escape the Out tag plugin body fallback remm
  • (tomcat) 39/46: Strip a trailing slash from the context in resolveUrl remm
  • (tomcat) 35/46: Share the Import tag plugin URL with its params via the plugin context remm
  • (tomcat) 19/46: Avoid NullPointerException writing a null bean property value remm
  • (tomcat) 04/46: Report compilation errors before removing the generated source remm
  • (tomcat) 20/46: Report bean getter and setter exceptions in GraalVM mode remm
  • (tomcat) 41/46: Honour a FastRemovalDequeue maximum size of one remm
  • (tomcat) 29/46: Resolve JspC resources whose path contains URI-illegal characters remm
  • (tomcat) 03/46: Stop the Ant compiler System.err capture when compilation fails unexpectedly remm
  • (tomcat) 33/46: Fall back when c:when or c:otherwise has no choose parent remm
  • (tomcat) 40/46: Share the Url and Redirect tag plugin URLs with their params remm
  • (tomcat) 37/46: Store the Set tag plugin deferred value in the variable mapper remm
  • (tomcat) 09/46: Avoid NullPointerException in include error path for non-JAR pages remm
  • (tomcat) 06/46: Avoid NullPointerException when the JSP source cannot be read for an error detail remm
  • (tomcat) 13/46: Report a translation error for an empty taglib URI remm
  • (tomcat) 42/46: Avoid NullPointerException rendering a null entry remm
  • (tomcat) 28/46: Avoid registering TLD listeners twice for a duplicate taglib URI remm
  • (tomcat) 18/46: Correct the assignability check for Graal bean property writes remm
  • (tomcat) 31/46: Expose the ForEach tag plugin loop variable as an Integer remm
  • (tomcat) 01/46: Fix jspc handling of the full stop (--) argument remm
  • (tomcat) 45/46: Match duplicate page directive attribute names exactly remm
  • (tomcat) 43/46: Keep UniqueAttributesImpl tracking in step with its attributes remm
  • (tomcat) 14/46: Report a translation error for an invalid TLD jsp-version remm
  • (tomcat) 44/46: Build UniqueAttributesImpl.setAttributes() from the incoming set remm
  • (tomcat) 12/46: Extract the SMAP from the end of the compiled class file remm
  • (tomcat) 16/46: Omit the id from validation messages without one remm
  • (tomcat) 24/46: Use the canonical enum name in the optimized string interpreter remm
  • (tomcat) 32/46: Validate begin, end and step in the ForEach and ForTokens tag plugins remm
  • (tomcat) 21/46: Keep the wrapped exception in the JSP EL exception cause chain remm
  • (tomcat) 17/46: Reject jsp:element with multiple name attributes remm
  • (tomcat) 34/46: Compute the ForEach tag plugin's state flags per request remm

• Earlier messages
• Later messages