Re: [VOTE] Release Apache Tomcat 8.5.75 (clarified version numbers, again)

2022-01-19 Thread Igal Sapir
On Tue, Jan 18, 2022 at 2:26 PM Christopher Schultz <
ch...@christopherschultz.net> wrote:

> The proposed Apache Tomcat 8.5.75 release is now available for voting.
>
> The proposed 8.5.75 release is:
> [ ] Broken - do not release
> [X] Stable - go ahead and release as 8.5.75 (stable)
>

+1

Igal



>
> -chris
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: dev-h...@tomcat.apache.org
>
>


Re: [VOTE] Release Apache Tomcat 8.5.75 (clarified version numbers, again)

2022-01-19 Thread Rémy Maucherat
On Tue, Jan 18, 2022 at 11:26 PM Christopher Schultz
 wrote:
>
> The proposed Apache Tomcat 8.5.75 release is now available for voting.
>
> The one notable change compared to 8.5.74 (which was not released due to
> this bug) is:
>
> - Correct a regression in the fix for BZ 65785 that broke HTTP/2
>  server push.
>
> The notable changes compared to 8.5.73 are:
>
> - Provide protection against a known OS bug that causes the acceptor to
> report an incoming connection more than once.
>
> - Fix several potential JVM crashes when using the APR connector.
>
> - Implement a workaround for a JVM bug that can trigger a file
> descriptor leak when using multi-part upload and the application does
> not explicitly close an input stream for an uploaded file that was
> cached on disk.
>
> - Fix exceptions when the security manager is enabled and the first
> request received after starting is an HTTP request to a TLS enabled
> NIO2 connector.
>
> - Implement support for HTTP/1.1 upgrade when the request includes a
> body. The maximum permitted size of the body is controlled by
> maxSavePostSize.
>
> - Improve handling of various cases where one request/response
> processing thread attempts to manage the asynchronous IO for a
> different request/response.
>
>
> Along with lots of other bug fixes and improvements.
>
> For full details, see the changelog:
> https://ci.apache.org/projects/tomcat/tomcat-8.5.x/docs/changelog.html
>
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-8/v8.5.75/
> The Maven staging repo is:
> https://repository.apache.org/content/repositories/orgapachetomcat-1355
> The tag is:
> https://github.com/apache/tomcat/tree/8.5.75/
> Commit b5c9c3a25a17f777989408973013f5312acdb8e2
>
> The proposed 8.5.75 release is:
> [ ] Broken - do not release
> [X] Stable - go ahead and release as 8.5.75 (stable)

Rémy

>
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: dev-h...@tomcat.apache.org
>

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Re: [VOTE] Release Apache Tomcat 8.5.75 (clarified version numbers, again)

2022-01-18 Thread Christopher Schultz

All,

Apologies for the copy/paste errors in previous [VOTE] messages. 
Thunderbird is refusing to find more than one instance of a string an an 
outgoing message. :/


Vote and details are below...

On 1/18/22 17:26, Christopher Schultz wrote:

The proposed Apache Tomcat 8.5.75 release is now available for voting.

The one notable change compared to 8.5.74 (which was not released due to 
this bug) is:


- Correct a regression in the fix for BZ 65785 that broke HTTP/2
     server push.

The notable changes compared to 8.5.73 are:

- Provide protection against a known OS bug that causes the acceptor to
    report an incoming connection more than once.

- Fix several potential JVM crashes when using the APR connector.

- Implement a workaround for a JVM bug that can trigger a file
    descriptor leak when using multi-part upload and the application does
    not explicitly close an input stream for an uploaded file that was
    cached on disk.

- Fix exceptions when the security manager is enabled and the first
    request received after starting is an HTTP request to a TLS enabled
    NIO2 connector.

- Implement support for HTTP/1.1 upgrade when the request includes a
    body. The maximum permitted size of the body is controlled by
    maxSavePostSize.

- Improve handling of various cases where one request/response
    processing thread attempts to manage the asynchronous IO for a
    different request/response.


Along with lots of other bug fixes and improvements.

For full details, see the changelog:
https://ci.apache.org/projects/tomcat/tomcat-8.5.x/docs/changelog.html

It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-8/v8.5.75/
The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1355
The tag is:
https://github.com/apache/tomcat/tree/8.5.75/
Commit b5c9c3a25a17f777989408973013f5312acdb8e2

The proposed 8.5.75 release is:
[ ] Broken - do not release
[X] Stable - go ahead and release as 8.5.75 (stable)


Works with a standard boring web application in a development environment.

Unit tests pass (except those expected to fail) on Linux and also 
Windows 10.


Details:

* Environment
*  Java (build): openjdk version "1.8.0_292" OpenJDK Runtime 
Environment (build 1.8.0_292-8u292-b10-0+deb9u1-b10) OpenJDK 64-Bit 
Server VM (build 25.292-b10, mixed mode)
*  Java (test): openjdk version "1.8.0_292" OpenJDK Runtime 
Environment (build 1.8.0_292-8u292-b10-0+deb9u1-b10) OpenJDK 64-Bit 
Server VM (build 25.292-b10, mixed mode)

*  OS:   Linux 4.19.0-18-amd64 x86_64
*  cc:   cc (Debian 8.3.0-6) 8.3.0
*  make: GNU Make 4.2.1
*  OpenSSL:  OpenSSL 1.1.1 11 Sep 2018
*  APR:  1.6.5
*
* Valid SHA-512 signature for apache-tomcat-8.5.75.zip
* Valid GPG signature for apache-tomcat-8.5.75.zip
* Valid SHA-512 signature for apache-tomcat-8.5.75.tar.gz
* Valid GPG signature for apache-tomcat-8.5.75.tar.gz
* Valid SHA-512 signature for apache-tomcat-8.5.75.exe
* Valid GPG signature for apache-tomcat-8.5.75.exe
* Valid Windows Digital Signature for apache-tomcat-8.5.75.exe
* Valid SHA512 signature for apache-tomcat-8.5.75-src.zip
* Valid GPG signature for apache-tomcat-8.5.75-src.zip
* Valid SHA512 signature for apache-tomcat-8.5.75-src.tar.gz
* Valid GPG signature for apache-tomcat-8.5.75-src.tar.gz
*
* Binary Zip and tarball: Same
* Source Zip and tarball: Same
*
* Building dependencies returned: 0
* tcnative builds cleanly
* Tomcat builds cleanly
* Junit Tests: FAILED
*
* Tests that failed:
* org.apache.tomcat.util.net.openssl.ciphers.TestCipher.APR.txt
* org.apache.tomcat.util.net.openssl.ciphers.TestCipher.NIO.txt
* org.apache.tomcat.util.net.openssl.ciphers.TestCipher.NIO2.txt
* 
org.apache.tomcat.util.net.openssl.ciphers.TestOpenSSLCipherConfigurationParser.APR.txt
* 
org.apache.tomcat.util.net.openssl.ciphers.TestOpenSSLCipherConfigurationParser.NIO.txt
* 
org.apache.tomcat.util.net.openssl.ciphers.TestOpenSSLCipherConfigurationParser.NIO2.txt


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[VOTE] Release Apache Tomcat 8.5.75 (clarified version numbers, again)

2022-01-18 Thread Christopher Schultz

The proposed Apache Tomcat 8.5.75 release is now available for voting.

The one notable change compared to 8.5.74 (which was not released due to 
this bug) is:


- Correct a regression in the fix for BZ 65785 that broke HTTP/2
server push.

The notable changes compared to 8.5.73 are:

- Provide protection against a known OS bug that causes the acceptor to
   report an incoming connection more than once.

- Fix several potential JVM crashes when using the APR connector.

- Implement a workaround for a JVM bug that can trigger a file
   descriptor leak when using multi-part upload and the application does
   not explicitly close an input stream for an uploaded file that was
   cached on disk.

- Fix exceptions when the security manager is enabled and the first
   request received after starting is an HTTP request to a TLS enabled
   NIO2 connector.

- Implement support for HTTP/1.1 upgrade when the request includes a
   body. The maximum permitted size of the body is controlled by
   maxSavePostSize.

- Improve handling of various cases where one request/response
   processing thread attempts to manage the asynchronous IO for a
   different request/response.


Along with lots of other bug fixes and improvements.

For full details, see the changelog:
https://ci.apache.org/projects/tomcat/tomcat-8.5.x/docs/changelog.html

It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-8/v8.5.75/
The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1355
The tag is:
https://github.com/apache/tomcat/tree/8.5.75/
Commit b5c9c3a25a17f777989408973013f5312acdb8e2

The proposed 8.5.75 release is:
[ ] Broken - do not release
[ ] Stable - go ahead and release as 8.5.75 (stable)

-chris

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[VOTE] Release Apache Tomcat 8.5.75 (clarified version number)

2022-01-18 Thread Christopher Schultz

The proposed Apache Tomcat 8.5.75 release is now available for voting.

The one notable change compared to 8.5.74 (which was not released due to 
this bug) is:


- Correct a regression in the fix for BZ 65785 that broke HTTP/2
server push.

The notable changes compared to 8.5.73 are:

- Provide protection against a known OS bug that causes the acceptor to
   report an incoming connection more than once.

- Fix several potential JVM crashes when using the APR connector.

- Implement a workaround for a JVM bug that can trigger a file
   descriptor leak when using multi-part upload and the application does
   not explicitly close an input stream for an uploaded file that was
   cached on disk.

- Fix exceptions when the security manager is enabled and the first
   request received after starting is an HTTP request to a TLS enabled
   NIO2 connector.

- Implement support for HTTP/1.1 upgrade when the request includes a
   body. The maximum permitted size of the body is controlled by
   maxSavePostSize.

- Improve handling of various cases where one request/response
   processing thread attempts to manage the asynchronous IO for a
   different request/response.


Along with lots of other bug fixes and improvements.

For full details, see the changelog:
https://ci.apache.org/projects/tomcat/tomcat-8.5.x/docs/changelog.html

It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-8/v8.5.75/
The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1355
The tag is:
https://github.com/apache/tomcat/tree/8.5.75/
Commit b5c9c3a25a17f777989408973013f5312acdb8e2

The proposed 8.5.74 release is:
[ ] Broken - do not release
[ ] Stable - go ahead and release as 8.5.75 (stable)

-chris

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Re: [VOTE] Release Apache Tomcat 8.5.75

2022-01-17 Thread Igal Sapir
On Mon, Jan 17, 2022 at 2:43 PM Christopher Schultz <
ch...@christopherschultz.net> wrote:

> The proposed 8.5.75 release is:
> [ ] Broken - do not release
> [X] Stable - go ahead and release as 8.5.75 (stable)
>

Unit tests passed on Ubuntu with Java 11

Igal


>
> -chris
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: dev-h...@tomcat.apache.org
>
>


Re: [VOTE] Release Apache Tomcat 8.5.75

2022-01-17 Thread Igal Sapir
Chris,

On Mon, Jan 17, 2022 at 2:43 PM Christopher Schultz <
ch...@christopherschultz.net> wrote:

> The proposed Apache Tomcat 8.5.74 release is now available for voting.
>
> The one notable change compared to 8.5.74 (which was not released due to
> this bug) is:
>

The old version 8.5.74 is in various places of the body of the email.  Not
a big deal as we know we're voting for 8.5.75 but you might consider
to send a different email to avoid confusion?  Just a thought.

Igal



>
> - Correct a regression in the fix for BZ 65785 that broke HTTP/2
>  server push.
>
> The notable changes compared to 8.5.73 are:
>
> - Provide protection against a known OS bug that causes the acceptor to
> report an incoming connection more than once.
>
> - Fix several potential JVM crashes when using the APR connector.
>
> - Implement a workaround for a JVM bug that can trigger a file
> descriptor leak when using multi-part upload and the application does
> not explicitly close an input stream for an uploaded file that was
> cached on disk.
>
> - Fix exceptions when the security manager is enabled and the first
> request received after starting is an HTTP request to a TLS enabled
> NIO2 connector.
>
> - Implement support for HTTP/1.1 upgrade when the request includes a
> body. The maximum permitted size of the body is controlled by
> maxSavePostSize.
>
> - Improve handling of various cases where one request/response
> processing thread attempts to manage the asynchronous IO for a
> different request/response.
>
>
> Along with lots of other bug fixes and improvements.
>
> For full details, see the changelog:
> https://ci.apache.org/projects/tomcat/tomcat-8.5.x/docs/changelog.html
>
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-8/v8.5.75/
> The Maven staging repo is:
> https://repository.apache.org/content/repositories/orgapachetomcat-1355
> The tag is:
> https://github.com/apache/tomcat/tree/8.5.75/
> Commit b5c9c3a25a17f777989408973013f5312acdb8e2
>
> The proposed 8.5.74 release is:
> [ ] Broken - do not release
> [ ] Stable - go ahead and release as 8.5.75 (stable)
>
> -chris
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: dev-h...@tomcat.apache.org
>
>


[VOTE] Release Apache Tomcat 8.5.75

2022-01-17 Thread Christopher Schultz

The proposed Apache Tomcat 8.5.74 release is now available for voting.

The one notable change compared to 8.5.74 (which was not released due to 
this bug) is:


- Correct a regression in the fix for BZ 65785 that broke HTTP/2
server push.

The notable changes compared to 8.5.73 are:

- Provide protection against a known OS bug that causes the acceptor to
   report an incoming connection more than once.

- Fix several potential JVM crashes when using the APR connector.

- Implement a workaround for a JVM bug that can trigger a file
   descriptor leak when using multi-part upload and the application does
   not explicitly close an input stream for an uploaded file that was
   cached on disk.

- Fix exceptions when the security manager is enabled and the first
   request received after starting is an HTTP request to a TLS enabled
   NIO2 connector.

- Implement support for HTTP/1.1 upgrade when the request includes a
   body. The maximum permitted size of the body is controlled by
   maxSavePostSize.

- Improve handling of various cases where one request/response
   processing thread attempts to manage the asynchronous IO for a
   different request/response.


Along with lots of other bug fixes and improvements.

For full details, see the changelog:
https://ci.apache.org/projects/tomcat/tomcat-8.5.x/docs/changelog.html

It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-8/v8.5.75/
The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1355
The tag is:
https://github.com/apache/tomcat/tree/8.5.75/
Commit b5c9c3a25a17f777989408973013f5312acdb8e2

The proposed 8.5.74 release is:
[ ] Broken - do not release
[ ] Stable - go ahead and release as 8.5.75 (stable)

-chris

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org