Bug report for Tomcat 3 [2008/06/01]

2008-06-02 Thread bugzilla
+---+ | Bugzilla Bug ID | | +-+ | | Status: UNC=Unconfirmed NEW=New ASS=Assigned

Bug report for Watchdog [2008/06/01]

2008-06-02 Thread bugzilla
+---+ | Bugzilla Bug ID | | +-+ | | Status: UNC=Unconfirmed NEW=New ASS=Assigned

Bug report for Tomcat 5 [2008/06/01]

2008-06-02 Thread bugzilla
+---+ | Bugzilla Bug ID | | +-+ | | Status: UNC=Unconfirmed NEW=New ASS=Assigned

Bug report for Tomcat 4 [2008/06/01]

2008-06-02 Thread bugzilla
+---+ | Bugzilla Bug ID | | +-+ | | Status: UNC=Unconfirmed NEW=New ASS=Assigned

DO NOT REPLY [Bug 45106] org.apache.catalina.startup. Bootstrap ends up on task bar and you can' t shut down your Mac without manually shutting it down.

2008-06-02 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=45106 Mark Thomas [EMAIL PROTECTED] changed: What|Removed |Added Status|NEW |RESOLVED

Re: svn commit: r661653 - /tomcat/connectors/trunk/jni/xdocs/miscellaneous/changelog.xml

2008-06-02 Thread jean-frederic clere
[EMAIL PROTECTED] wrote: Author: mturk Date: Fri May 30 04:25:04 2008 New Revision: 661653 URL: http://svn.apache.org/viewvc?rev=661653view=rev Log: Add note to changelog about BZ45071 Modified: tomcat/connectors/trunk/jni/xdocs/miscellaneous/changelog.xml Thanks I missed the file name

Re: svn commit: r660175 - in /tomcat/connectors/trunk/jni: CHANGELOG.txt native/src/poll.c

2008-06-02 Thread jean-frederic clere
Mladen Turk wrote: jean-frederic clere wrote: [EMAIL PROTECTED] wrote: Author: mturk Date: Mon May 26 05:42:11 2008 New Revision: 660175 URL: http://svn.apache.org/viewvc?rev=660175view=rev Log: Fix 45071 by updating ttl for signaled but not removed sockets Modified:

DO NOT REPLY [Bug 45108] JSPX source containing amp; renders in output page

2008-06-02 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=45108 Julian Reschke [EMAIL PROTECTED] changed: What|Removed |Added CC||[EMAIL

DO NOT REPLY [Bug 45108] JSPX source containing amp; renders in output page

2008-06-02 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=45108 --- Comment #4 from Julian Reschke [EMAIL PROTECTED] 2008-06-02 05:09:28 PST --- Ampersands in content need to be escaped, both in HTML and XML. This isn't even a validity, but an XML-wellformedness error. -- Configure bugmail:

DO NOT REPLY [Bug 45102] IllegalStateException getting HttpSession from HttpServletRequest

2008-06-02 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=45102 Mark Thomas [EMAIL PROTECTED] changed: What|Removed |Added Status|NEW |NEEDINFO ---

DO NOT REPLY [Bug 45108] JSPX source containing amp; renders in output page

2008-06-02 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=45108 Simon Gibbs [EMAIL PROTECTED] changed: What|Removed |Added Status|RESOLVED|REOPENED

svn commit: r662582 - /tomcat/trunk/java/org/apache/catalina/manager/host/HTMLHostManagerServlet.java

2008-06-02 Thread markt
Author: markt Date: Mon Jun 2 14:41:28 2008 New Revision: 662582 URL: http://svn.apache.org/viewvc?rev=662582view=rev Log: Fix potential XSS in host-manager. This is CVE-2008-1947. Modified: tomcat/trunk/java/org/apache/catalina/manager/host/HTMLHostManagerServlet.java Modified:

svn commit: r662583 - /tomcat/container/tc5.5.x/webapps/host-manager/WEB-INF/classes/org/apache/catalina/hostmanager/HTMLHostManagerServlet.java

2008-06-02 Thread markt
Author: markt Date: Mon Jun 2 14:41:36 2008 New Revision: 662583 URL: http://svn.apache.org/viewvc?rev=662583view=rev Log: Fix potential XSS in host-manager. This is CVE-2008-1947. Modified:

svn commit: r662584 - in /tomcat/site/trunk: docs/security-5.html docs/security-6.html xdocs/security-5.xml xdocs/security-6.xml

2008-06-02 Thread markt
Author: markt Date: Mon Jun 2 14:42:03 2008 New Revision: 662584 URL: http://svn.apache.org/viewvc?rev=662584view=rev Log: Document potential XSS in host-manager. This is CVE-2008-1947. Modified: tomcat/site/trunk/docs/security-5.html tomcat/site/trunk/docs/security-6.html

svn commit: r662585 - /tomcat/tc6.0.x/trunk/java/org/apache/catalina/manager/host/HTMLHostManagerServlet.java

2008-06-02 Thread markt
Author: markt Date: Mon Jun 2 14:44:22 2008 New Revision: 662585 URL: http://svn.apache.org/viewvc?rev=662585view=rev Log: Fix potential XSS in host-manager. This is CVE-2008-1947. Modified: tomcat/tc6.0.x/trunk/java/org/apache/catalina/manager/host/HTMLHostManagerServlet.java Modified:

[SECURITY] CVE-2008-1947: Tomcat host-manager XSS vulnerability

2008-06-02 Thread Mark Thomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 CVE-2008-1947: Tomcat host-manager XSS vulnerability Severity: Low Vendor: The Apache Software Foundation Versions Affected: Tomcat 5.5.9 to 5.5.26 Tomcat 6.0.0 to 6.0.16 This issue has been fixed in the source repositories for each version and