1<html><head><META http-equiv="Content-Type" content="text/html; charset=iso-8859-1"><title>Apache Tomcat 6.0 (6.0.53) - Changelog</title><meta name="author" content="Remy Maucherat"><meta name="author" content="Yoav Shapira"><meta name="author" content="Filip Hanik"><meta name="author" content="Rainer Jung"><meta name="author" content="Peter Rossbach"><meta name="author" content="Konstantin Kolinko"><meta name="author" content="Jean-Frederic Clere"><meta name="author" content="Keiichi Fujino"><meta name="author" content="Mladen Turk"><meta name="author" content="Tim Whittington"><meta name="author" content="Sylvain Laurent"><meta name="author" content="Christopher Schultz"><meta name="author" content="Coty Sutherland"><style type="text/css" media="print"> 2 .noPrint {display: none;} 3 td#mainBody {width: 100%;} 4 </style></head><body bgcolor="#ffffff" text="#000000" link="#525D76" alink="#525D76" vlink="#525D76"><table border="0" width="100%" cellspacing="0"><!--PAGE HEADER--><tr><td><!--PROJECT LOGO--><a href="http://tomcat.apache.org/"><img src="./images/tomcat.gif" align="right" alt=" 5 The Apache Tomcat Servlet/JSP Container 6 " border="0"></a></td><td><h1><font face="arial,helvetica,sanserif">Apache Tomcat 6.0</font></h1><font face="arial,helvetica,sanserif">Version 6.0.53, Apr 2 2017</font></td><td><!--APACHE LOGO--><a href="http://www.apache.org/"><img src="./images/asf-logo.svg" align="right" alt="Apache Logo" border="0" style="width: 266px;height: 83px;"></a></td></tr></table><table border="0" width="100%" cellspacing="4"><!--HEADER SEPARATOR--><tr><td colspan="2"><hr noshade="noshade" size="1"></td></tr><tr><!--LEFT SIDE NAVIGATION--><td width="20%" valign="top" nowrap="nowrap" class="noPrint"><p><strong>Links</strong></p><ul><li><a href="index.html">Docs Home</a></li><li><a href="http://wiki.apache.org/tomcat/FAQ">FAQ</a></li></ul><p><strong>User Guide</strong></p><ul><li><a href="introduction.html">1) Introduction</a></li><li><a href="setup.html">2) Setup</a></li><li><a href="appdev/index.html">3) First webapp</a></li><li><a href="deployer-howto.html">4) Deployer</a></li><li><a href="manager-howto.html">5) Manager</a></li><li><a href="realm-howto.html">6) Realms and AAA</a></li><li><a href="security-manager-howto.html">7) Security Manager</a></li><li><a href="jndi-resources-howto.html">8) JNDI Resources</a></li><li><a href="jndi-datasource-examples-howto.html">9) JDBC DataSources</a></li><li><a href="class-loader-howto.html">10) Classloading</a></li><li><a href="jasper-howto.html">11) JSPs</a></li><li><a href="ssl-howto.html">12) SSL</a></li><li><a href="ssi-howto.html">13) SSI</a></li><li><a href="cgi-howto.html">14) CGI</a></li><li><a href="proxy-howto.html">15) Proxy Support</a></li><li><a href="mbeans-descriptor-howto.html">16) MBean Descriptor</a></li><li><a href="default-servlet.html">17) Default Servlet</a></li><li><a href="cluster-howto.html">18) Clustering</a></li><li><a href="balancer-howto.html">19) Load Balancer</a></li><li><a href="connectors.html">20) Connectors</a></li><li><a href="monitoring.html">21) Monitoring and Management</a></li><li><a href="logging.html">22) Logging</a></li><li><a href="apr.html">23) APR/Native</a></li><li><a href="virtual-hosting-howto.html">24) Virtual Hosting</a></li><li><a href="aio.html">25) Advanced IO</a></li><li><a href="extras.html">26) Additional Components</a></li><li><a href="maven-jars.html">27) Mavenized</a></li></ul><p><strong>Reference</strong></p><ul><li><a href="RELEASE-NOTES.txt">Release Notes</a></li><li><a href="config/index.html">Configuration</a></li><li><a href="api/index.html">Javadocs</a></li><li><a href="http://tomcat.apache.org/connectors-doc/">JK 1.2 Documentation</a></li></ul><p><strong>Apache Tomcat Development</strong></p><ul><li><a href="building.html">Building</a></li><li><a href="changelog.html">Changelog</a></li><li><a href="http://wiki.apache.org/tomcat/TomcatVersions">Status</a></li><li><a href="developers.html">Developers</a></li><li><a href="architecture/index.html">Architecture</a></li><li><a href="funcspecs/index.html">Functional Specs.</a></li></ul></td><!--RIGHT SIDE MAIN BODY--><td width="80%" valign="top" align="left" id="mainBody"><h1>Apache Tomcat 6.0</h1><h2>Changelog</h2><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif">
6<a name="Tomcat 6.0.53 (violetagg)"><!--()--></a><a name="Tomcat_6.0.53_(violetagg)"><strong>Tomcat 6.0.53 (violetagg)</strong></a></font></td></tr><tr><td><blockquote> 7 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.53 (violetagg)/Coyote"><!--()--></a><a name="Tomcat_6.0.53_(violetagg)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote> 8 <table border="0" cellpadding="2" cellspacing="2"> 9 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 10 Ensure that the socket is returned only once to the poller. (violetagg) 11 </td></tr> 12 </table> 13 </blockquote></td></tr></table> 14</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.52 (violetagg)"><!--()--></a><a name="Tomcat_6.0.52_(violetagg)"><strong>Tomcat 6.0.52 (violetagg)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote> 15 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.52 (violetagg)/Coyote"><!--()--></a><a name="Tomcat_6.0.52_(violetagg)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote> 16 <table border="0" cellpadding="2" cellspacing="2"> 17 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 18 Improve sendfile handling when requests are pipelined. (markt) 19 </td></tr> 20 </table> 21 </blockquote></td></tr></table> 22</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.51 (violetagg)"><!--()--></a><a name="Tomcat_6.0.51_(violetagg)"><strong>Tomcat 6.0.51 (violetagg)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2017-03-16</strong></font></td></tr><tr><td colspan="2"><blockquote> 23 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.51 (violetagg)/Jasper"><!--()--></a><a name="Tomcat_6.0.51_(violetagg)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote> 24 <table border="0" cellpadding="2" cellspacing="2"> 25 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 26 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=60613">60613</a>: Refactor code generated for JSPs to reduce the 27 size of the code required for tags. (markt) 28 </td></tr> 29 </table> 30 </blockquote></td></tr></table> 31 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.51 (violetagg)/Other"><!--()--></a><a name="Tomcat_6.0.51_(violetagg)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote> 32 <table border="0" cellpadding="2" cellspacing="2"> 33 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 34 Change Realm configuration in the default <code>conf/server.xml</code> 35 file to use a <code>org.apache.catalina.realm.LockOutRealm</code>. 36 The <code>LockOutRealm</code> is available since 6.0.19, but has 37 not been configured by default. (kkolinko) 38 </td></tr> 39 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 40 Update the packaged version of the Tomcat Native Library to 1.2.12 to 41 pick up the latest Windows binaries built with OpenSSL 1.0.2k. (violetagg) 42 </td></tr> 43 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 44 Update the NSIS Installer used to build the Windows installer to version 45 3.01. (markt) 46 </td></tr> 47 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 48 Refactor the build script and the NSIS installer script so that either 49 NSIS 2.x or NSIS 3.x can be used to build the installer. This is 50 primarily to re-enable building the installer on the Linux based CI 51 system where the combination of NSIS 3.x and wine leads to failed 52 installer builds. (markt) 53 </td></tr> 54 </table> 55 </blockquote></td></tr></table> 56</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.50 (violetagg)"><!--()--></a><a name="Tomcat_6.0.50_(violetagg)"><strong>Tomcat 6.0.50 (violetagg)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote> 57 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.50 (violetagg)/Web applications"><!--()--></a><a name="Tomcat_6.0.50_(violetagg)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote> 58 <table border="0" cellpadding="2" cellspacing="2"> 59 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 60 Ensure the ASF logo image is correctly displayed in ROOT, docs and 61 host-manager applications. (violetagg) 62 </td></tr> 63 </table> 64 </blockquote></td></tr></table> 65</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.49 (violetagg)"><!--()--></a>
65<a name="Tomcat_6.0.49_(violetagg)"><strong>Tomcat 6.0.49 (violetagg)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote> 66 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.49 (violetagg)/Coyote"><!--()--></a><a name="Tomcat_6.0.49_(violetagg)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote> 67 <table border="0" cellpadding="2" cellspacing="2"> 68 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 69 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57799">57799</a>: Remove useless sendfile check for NIO SSL. (remm) 70 </td></tr> 71 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 72 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=60409">60409</a>: When unable to complete sendfile request, ensure the 73 Processor will be added to the cache only once. (markt/violetagg) 74 </td></tr> 75 </table> 76 </blockquote></td></tr></table> 77 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.49 (violetagg)/Jasper"><!--()--></a><a name="Tomcat_6.0.49_(violetagg)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote> 78 <table border="0" cellpadding="2" cellspacing="2"> 79 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 80 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44294">44294</a>: Add support for varargs in UEL expressions. (markt) 81 </td></tr> 82 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 83 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=60356">60356</a>: Fix pre-compilation of JSPs that depend on nested tag 84 files packaged in a JAR. (markt) 85 </td></tr> 86 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 87 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=60431">60431</a>: Improve handling of varargs in UEL expressions. Based 88 on a patch by Ben Wolfe. (markt) 89 </td></tr> 90 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 91 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=60497">60497</a>: Restore previous tag reuse behavior following the use 92 of try/finally. (remm) 93 </td></tr> 94 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 95 Improve the error handling for simple tags to ensure that the tag is 96 released and destroyed once used. (remm) 97 </td></tr> 98 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 99 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=60497">60497</a>: Follow up fix using a better variable name for the 100 tag reuse flag. (remm) 101 </td></tr> 102 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 103 Revert use of try/finally for simple tags. (remm) 104 </td></tr> 105 </table> 106 </blockquote></td></tr></table> 107 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.49 (violetagg)/Web applications"><!--()--></a><a name="Tomcat_6.0.49_(violetagg)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote> 108 <table border="0" cellpadding="2" cellspacing="2"> 109 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 110 Correct a typo in Host Configuration Reference. 111 Issue reported via comments.apache.org. (violetagg) 112 </td></tr> 113 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 114 In the documentation web application, be explicit that clustering 115 requires a secure network for all of the cluster network traffic. 116 (markt) 117 </td></tr> 118 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 119 Update the ASF logos to the new versions. (markt) 120 </td></tr> 121 </table> 122 </blockquote></td></tr></table> 123 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.49 (violetagg)/Other"><!--()--></a>
123<a name="Tomcat_6.0.49_(violetagg)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote> 124 <table border="0" cellpadding="2" cellspacing="2"> 125 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 126 Update the ASF logos used in the Apache Tomcat installer for Windows to 127 use the new versions. (markt) 128 </td></tr> 129 </table> 130 </blockquote></td></tr></table> 131</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.48 (violetagg)"><!--()--></a><a name="Tomcat_6.0.48_(violetagg)"><strong>Tomcat 6.0.48 (violetagg)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2016-11-15</strong></font></td></tr><tr><td colspan="2"><blockquote> 132 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.48 (violetagg)/Catalina"><!--()--></a><a name="Tomcat_6.0.48_(violetagg)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 133 <table border="0" cellpadding="2" cellspacing="2"> 134 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 135 Correctly test for control characters when reading the provided shutdown 136 password. (markt) 137 </td></tr> 138 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 139 When configuring the JMX remote listener, specify the allowed types for 140 the credentials. (markt) 141 </td></tr> 142 </table> 143 </blockquote></td></tr></table> 144 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.48 (violetagg)/Coyote"><!--()--></a><a name="Tomcat_6.0.48_(violetagg)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote> 145 <table border="0" cellpadding="2" cellspacing="2"> 146 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 147 Correct the HTTP header parser so that DEL is not treated as a valid 148 token character. (markt) 149 </td></tr> 150 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 151 Add additional checks for valid characters to the HTTP request line 152 parsing so invalid request lines are rejected sooner. (markt) 153 </td></tr> 154 </table> 155 </blockquote></td></tr></table> 156 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.48 (violetagg)/Web applications"><!--()--></a><a name="Tomcat_6.0.48_(violetagg)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote> 157 <table border="0" cellpadding="2" cellspacing="2"> 158 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 159 Correct a typo in CGI How-To. 160 Issue reported via comments.apache.org. (violetagg) 161 </td></tr> 162 </table> 163 </blockquote></td></tr></table> 164 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Extras"><strong>Extras</strong></a></font></td></tr><tr><td><blockquote> 165 <table border="0" cellpadding="2" cellspacing="2"> 166 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 167 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=55017">55017</a>: Add the ability to configure the RMI bind address when 168 using the JMX remote listener. Patch provided by Alexey Noskov. (markt) 169 </td></tr> 170 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 171 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56039">56039</a>: Enable the JmxRemoteLifecycleListener to work over 172 SSL. Patch by esengstrom. (markt) 173 </td></tr> 174 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 175 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56096">56096</a>: When the attribute <code>rmiBindAddress</code> of the 176 JMX Remote Lifecycle Listener is specified it's value will be used when 177 constructing the address of a JMX API connector server. Patch is 178 provided by Jim Talbut. (markt) 179 </td></tr> 180 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 181 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57377">57377</a>: Remove the restriction that prevented the use of SSL 182 when specifying a bind address with the JMXRemoteLifecycleListener. Also 183 enable SSL to be configured for the registry as well as the server. 184 (markt) 185 </td></tr> 186 </table> 187 </blockquote></td></tr></table> 188</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.47 (violetagg)"><!--()--></a><a name="Tomcat_6.0.47_(violetagg)"><strong>Tomcat 6.0.47 (violetagg)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2016-10-16</strong></font></td></tr><tr><td colspan="2"><blockquote> 189 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.47 (violetagg)/Catalina"><!--()--></a><a name="Tomcat_6.0.47_(violetagg)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 190 <table border="0" cellpadding="2" cellspacing="2"> 191 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 192 Fixed a warning message that is logged during Tomcat startup. 193 (violetagg) 194 </td></tr> 195 </table> 196 </blockquote></td></tr></table> 197</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.46 (violetagg)"><!--()--></a><a name="Tomcat_6.0.46_(violetagg)"><strong>Tomcat 6.0.46 (violetagg)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote> 198 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.46 (violetagg)/Catalina"><!--()--></a><a name="Tomcat_6.0.46_(violetagg)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 199 <table border="0" cellpadding="2" cellspacing="2"> 200 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 201 Log a warning message if a user tries to configure the default session 202 timeout via the deprecated (and ignored) 203 <code>Manager.setMaxInactiveInterval()</code> method. (markt) 204 </td></tr> 205 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 206 Correct a regression introduced in 6.0.45 where the deprecated 207 <code>Manager.getMaxInactiveInterval()</code> method returned the 208 current default session timeout in minutes rather than seconds. (markt) 209 </td></tr> 210 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 211 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=58486">58486</a>: Expand memory leak protection to include additional 212 issues identified related to XML parsing. (markt) 213 </td></tr> 214 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 215 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=59123">59123</a>: Close <code>NamingEnumeration</code> objects used by 216 the <code>JNDIRealm</code> once they are no longer required. 217 (fschumacher/markt) 218 </td></tr> 219 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 220 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=59138">59138</a>: Correct a false positive warning for ThreadLocal 221 related memory leaks when the key class but not the value class has been 222 loaded by the web application class loader. (markt) 223 </td></tr> 224 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 225 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=59269">59269</a>: Correct the implementation of 226 <code>PersistentManagerBase</code> so that <code>minIdleSwap</code> 227 functions as designed and sessions are swapped out to keep the active 228 session count below <code>maxActiveSessions</code>. (markt) 229 </td></tr> 230 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 231 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=59247">59247</a>: Preload ResourceEntry as a workaround for security 232 manager issues on some JVMs. (kkolinko/remm) 233 </td></tr> 234 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 235 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=59310">59310</a>: Do not add a <code>Content-Length: 0</code> header for 236 custom responses to <code>HEAD</code> requests that do not set a 237 <code>Content-Length</code> value. (markt) 238 </td></tr> 239 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 240 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=59449">
24059449</a>: In <code>ContainerBase</code>, ensure that the process 241 to remove a child container is the reverse of the process to add one. 242 Patch provided by Huxing Zhang. (markt) 243 </td></tr> 244 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 245 RMI Target related memory leaks are avoidable which makes them an 246 application bug that needs to be fixed rather than a JRE bug to work 247 around. Therefore, start logging RMI Target related memory leaks on web 248 application stop. Add an option that controls if the check for these 249 leaks is made. Log a warning if running on Java 9 with this check 250 enabled but without the command line option it requires. (markt) 251 </td></tr> 252 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 253 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=59708">59708</a>: Modify the LockOutRealm logic. Valid authentication 254 attempts during the lock out period will no longer reset the lock out 255 timer to zero. (markt) 256 </td></tr> 257 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 258 By default, treat paths used to obtain a request dispatcher as encoded. 259 This behaviour can be changed per web application via the 260 <code>dispatchersUseEncodedPaths</code> attribute of the Context. 261 (markt) 262 </td></tr> 263 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 264 Provide a mechanism that enables the container to check if a component 265 (typically a web application) has been granted a given permission when 266 running under a SecurityManager without the current execution stack 267 having to have passed through the component. Use this new mechanism to 268 extend SecurityManager protection to the system property replacement 269 feature of the digester. (markt) 270 </td></tr> 271 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 272 When retrieving an object via a <code>ResourceLink</code>, ensure that 273 the object obtained is of the expected type. (markt) 274 </td></tr> 275 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 276 Switch the CGI servlet to the standard logging mechanism and remove 277 support for the debug attribute. (markt) 278 </td></tr> 279 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 280 Add a new initialisation parameter, <code>envHttpHeaders</code>, to 281 the CGI Servlet to mitigate <a href="https://httpoxy.org">httpoxy</a> 282 (<a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5388">CVE-2016-5388</a>) by default and to provide a mechanism that can be 283 used to mitigate any future, similar issues. (markt) 284 </td></tr> 285 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 286 When adding and removing <code>ResourceLink</code>s dynamically, ensure 287 that the global resource is only visible via the 288 <code>ResourceLinkFactory</code> when it is meant to be. (markt) 289 </td></tr> 290 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 291 Make timing attacks against the Realm implementations harder. 292 (schultz/markt) 293 </td></tr> 294 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 295 Ensure <code>Digester.useContextClassLoader</code> is considered in 296 case the class loader is used. (violetagg) 297 </td></tr> 298 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 299 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=60151">60151</a>: Improve the exception error messages when a 300 <code>ResourceLink</code> fails to specify the type, specifies an 301 unknown type or specifies the wrong type. (markt) 302 </td></tr> 303 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 304 Correct <code>basePackage</code> and <code>PrivilegedFindResourceByName 305 </code> in <code>SecurityClassLoad</code> so that tomcat can 306 successfully start with the Security Manager enabled. (csutherl) 307 </td></tr> 308 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 309 Improve the access checks for linked global resources to handle the case 310 where the current class loader is a child of the web application class 311 loader. (markt) 312 </td></tr> 313 </table> 314 </blockquote></td></tr></table> 315 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.46 (violetagg)/Coyote"><!--()--></a><a name="Tomcat_6.0.46_(violetagg)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote> 316 <table border="0" cellpadding="2" cellspacing="2"> 317 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 318 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=58646">58646</a>: Correct a problem with sendfile that resulted in a 319 Processor being added to the cache twice leading to broken responses. 320 (markt) 321 </td></tr> 322 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 323 Limit the default TLS ciphers for JSSE (BIO, NIO) and OpenSSL (APR) to 324 those currently considered secure. (markt) 325 </td></tr> 326 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 327 Add a new environment variable <code>JSSE_OPTS</code> that is intended 328 to be used to pass JVM wide configuration to the JSSE implementation. 329 The default value is <code>-Djdk.tls.ephemeralDHKeySize=2048</code> 330 which protects against weak Diffie-Hellman keys. (markt) 331 </td></tr> 332 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 333 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=59451">59451</a>: Correct Javadoc for <code>MessageBytes</code>. Patch 334 provided by Kyohei Nakamura. (markt) 335 </td></tr> 336 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
337 Ensure that requests with HTTP method names that are not tokens (as 338 required by RFC 7231) are rejected with a 400 response. (markt) 339 </td></tr> 340 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 341 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=59904">59904</a>: Add a limit (default 200) for the number of cookies 342 allowed per request. Based on a patch by gehui. (markt) 343 </td></tr> 344 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 345 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=60123">60123</a>: Avoid potential threading issues that could cause 346 excessively large vales to be returned for the processing time of 347 a current request. (markt) 348 </td></tr> 349 </table> 350 </blockquote></td></tr></table> 351 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.46 (violetagg)/Jasper"><!--()--></a><a name="Tomcat_6.0.46_(violetagg)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote> 352 <table border="0" cellpadding="2" cellspacing="2"> 353 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 354 Fix a memory leak in the expression language implementation that caused 355 the class loader of the first web application to use expressions to be 356 pinned in memory. (markt) 357 </td></tr> 358 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 359 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=59654">59654</a>: Enforce the requirements of section 7.3.1 of the JSP 360 specification regarding the permitted locations for TLD files. Patch 361 provided by Huxing Zhang. (markt) 362 </td></tr> 363 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 364 Catch and log any <code>Exception</code>s during calls to 365 <code>Servlet.destroy()</code> when destroying the Servlet associated 366 with a JSP page. (markt) 367 </td></tr> 368 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 369 Improve the error handling for custom tags to ensure that the tag is 370 returned to the pool or released and destroyed once used. (markt) 371 </td></tr> 372 </table> 373 </blockquote></td></tr></table> 374 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.46 (violetagg)/Web applications"><!--()--></a><a name="Tomcat_6.0.46_(violetagg)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote> 375 <table border="0" cellpadding="2" cellspacing="2"> 376 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 377 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=58935">58935</a>: Remove incorrect references in the documentation to 378 using <code>jar:file:</code> URLs with the Manager application. (markt) 379 </td></tr> 380 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 381 Correct the description of the 382 <code>ServletRequest.getServerPort()</code> in Proxy How-To. 383 Issue reported via comments.apache.org. (violetagg) 384 </td></tr> 385 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 386 Fix a potential indefinite wait in the Comet Chat servlet in the 387 examples web application. (markt) 388 </td></tr> 389 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 390 Update in the documentation the link to the maven repository where 391 Tomcat snapshot artifacts are deployed. (markt/violetagg) 392 </td></tr> 393 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 394 Clarify in the documentation that calls to 395 <code>ServletContext.log(String, Throwable)</code> or 396 <code>GenericServlet.log(String, Throwable)</code> are logged at the 397 SEVERE level. (violetagg) 398 </td></tr> 399 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 400 Correct a typo in SSL/TLS Configuration How-To. 401 Issue reported via comments.apache.org. (violetagg) 402 </td></tr> 403 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 404 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=58891">58891</a>: Update the SSL how-to. Based on a suggestion by 405 Alexander Kjäll. (markt) 406 </td></tr> 407 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 408 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=59642">59642</a>: Mention the <code>localDataSource</code> in the 409 <code>DataSourceRealm</code> section of the Realm How-To. (markt) 410 </td></tr> 411 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 412 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=60034">60034</a>: Correct a typo in the Manager How-To page of the 413 documentation web application. (markt) 414 </td></tr> 415 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 416 Add an example of using the <code>
416classesToInitialize</code> attribute 417 of the <code>JreMemoryLeakPreventionListener</code> to the documentation 418 web application. Based on a patch by Cris Berneburg. (markt) 419 </td></tr> 420 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 421 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=60192">60192</a>: Correct a typo in the status output of the Manager 422 application. Patch provided by Radhakrishna Pemmasani. (markt) 423 </td></tr> 424 </table> 425 </blockquote></td></tr></table> 426 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.46 (violetagg)/Other"><!--()--></a><a name="Tomcat_6.0.46_(violetagg)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote> 427 <table border="0" cellpadding="2" cellspacing="2"> 428 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 429 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=58283">58283</a>: Change the default download location for libraries 430 during the build process from <code>/usr/share/java</code> to 431 <code>${user.home}/temp</code>. Patch provided by Ahmed Hosni. (markt) 432 </td></tr> 433 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 434 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=59031">59031</a>: When using the Windows uninstaller, do not remove the 435 contents of any directories that have been symlinked into the Tomcat 436 directory structure. (markt) 437 </td></tr> 438 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 439 Modify the default <code>tomcat-users.xml</code> file to make it harder 440 for users to configure the entries intended for use with the examples 441 web application for the Manager application. (markt) 442 </td></tr> 443 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 444 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=59280">59280</a>: Update the NSIS Installer used to build the 445 Windows Installers to version 2.51. (kkolinko) 446 </td></tr> 447 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 448 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=58626">58626</a>: Add support for a new environment variable 449 (<code>USE_NOHUP</code>) that causes <code>nohup</code> to be used when 450 starting Tomcat. It is disabled by default except on HP-UX where it is 451 enabled by default since it is required when starting Tomcat at boot on 452 HP-UX. (markt) 453 </td></tr> 454 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 455 Use the mirror network rather than the ASF master site to download the 456 current ASF dependencies. (markt) 457 </td></tr> 458 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 459 Update the packaged version of the Tomcat Native Library to 1.2.10 to 460 pick up the latest Windows binaries built with OpenSSL 1.0.2j. (markt) 461 </td></tr> 462 </table> 463 </blockquote></td></tr></table> 464</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.45 (jfclere)"><!--()--></a><a name="Tomcat_6.0.45_(jfclere)"><strong>Tomcat 6.0.45 (jfclere)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2016-02-11</strong></font></td></tr><tr><td colspan="2"><blockquote> 465 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.45 (jfclere)/Catalina"><!--()--></a><a name="Tomcat_6.0.45_(jfclere)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 466 <table border="0" cellpadding="2" cellspacing="2"> 467 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 468 Back-port various improvements to the <code>AprLifecycleListener</code> 469 including the fix for <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57021">57021</a> that improves logging when the 470 Tomcat-Native DLL fails to load. (markt) 471 </td></tr> 472 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 473 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57154">57154</a>: Add support for web applications (Context elements) 474 that do not have a docBase. This is intended for use when embedding, 475 such as Tomcat unit tests, when a web application is configured 476 programmatically and does not serve any files. Based on a patch 477 provided by Huxing Zhang. (kkolinko) 478 </td></tr> 479 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 480 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57741">57741</a>: Enable the CGI servlet to use the standard error page 481 mechanism. Note that if the CGI servlet's debug init parameter is 482 set to 10 or higher then the standard error page mechanism will be 483 bypassed and a debug response generated by the CGI servlet will be 484 returned instead. (markt) 485 </td></tr> 486 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 487 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57896">57896</a>: Support defensive copying of "cookie" header so that 488 unescaping double quotes in a cookie value does not corrupt original 489 value of "cookie" header. This is an opt-in feature, enabled by 490 <code>org.apache.tomcat.util.http.ServerCookie.PRESERVE_COOKIE_HEADER</code> 491 or <code>org.apache.catalina.STRICT_SERVLET_COMPLIANCE</code> 492 system property. (kkolinko) 493 </td></tr> 494 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 495 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=58031">58031</a>: Make the (first) reason parameter parsing failed 496 available as a request attribute and then use it to provide a better 497 status code via the FailedRequstFilter (if configured). (markt) 498 </td></tr> 499 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 500 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=58313">58313</a>: Fix concurrent access of encoders map when clearing 501 encoders during Comet processing. (markt) 502 </td></tr> 503 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 504 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=58508">58508</a>: Escape role names when generating associated MBeans in 505 case the role name contains characters not permitted in an MBean name. 506 (markt) 507 </td></tr> 508 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 509 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=58582">58582</a>
509: Combined realm should perform background processing 510 on its sub-realms. Based upon a patch provided by Aidan. (kkolinko) 511 </td></tr> 512 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 513 Move the functionality that provides redirects for context roots and 514 directories where a trailing <code>/</code> is added from the Mapper to 515 the <code>DefaultServlet</code>. This enables such requests to be 516 processed by any configured Valves and Filters before the redirect is 517 made. This behaviour is configurable via the 518 <code>mapperContextRootRedirectEnabled</code> and 519 <code>mapperDirectoryRedirectEnabled</code> attributes of the Context 520 which may be used to restore the previous behaviour. (markt) 521 </td></tr> 522 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 523 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=58635">58635</a>: Enable break points to be set within agent code when 524 running Tomcat with a Java agent. Based on a patch by Huxing Zhang. 525 (markt) 526 </td></tr> 527 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 528 Add the <code>StatusManagerServlet</code> to the list of Servlets that 529 can only be loaded by privileged applications. (markt) 530 </td></tr> 531 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 532 Remove redundant copy of catalina.properties from o.a.c.startup. 533 Generate this copy during the ant "compile" task. (kkolinko) 534 </td></tr> 535 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 536 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=58817">58817</a>: Fix <code>ArrayIndexOutOfBoundsException</code> 537 caused by <code>MapperListener</code> when ROOT context is being 538 undeployed and mapperContextRootRedirectEnabled="false". (kkolinko) 539 </td></tr> 540 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 541 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=58836">58836</a>: Correctly merge query string parameters when 542 processing a forwarded request where the target includes a query string 543 that contains a parameter with no value. (markt/kkolinko) 544 </td></tr> 545 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 546 Allow singleton server instance stored by <code>ServerFactory</code> 547 to be cleared. 548 Allow <code>ResourceLinkFactory</code> to be initialized more than once. 549 This is used by unit tests when running several copies of Tomcat 550 sequentially in the same JVM. 551 When running with a SecurityManager the initialization method of 552 <code>ResourceLinkFactory</code> is protected by requiring a 553 <code>RuntimePermission</code>. (kkolinko) 554 </td></tr> 555 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 556 Extend the feature available in the cluster session manager 557 implementations that enables session attribute replication to be 558 filtered based on attribute name to all session manager implementations. 559 Note that configuration attribute name has changed from 560 <code>sessionAttributeFilter</code> to 561 <code>sessionAttributeNameFilter</code>. Apply the filter on load as 562 well as unload to ensure that configuration changes made while the web 563 application is stopped are applied to any persisted data. (markt) 564 </td></tr> 565 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 566 Extend the session attribute filtering options to include filtering 567 based on the implementation class of the value and optional 568 <code>WARN</code> level logging if an attribute is filtered. These 569 options are available for all of the Manager implementations that ship 570 with Tomcat. When a <code>SecurityManager</code> is used filtering will 571 be enabled by default. (markt) 572 </td></tr> 573 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 574 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=58946">58946</a>: Ensure that the request parameter map remains 575 immutable when processing via a RequestDispatcher. (markt) 576 </td></tr> 577 </table> 578 </blockquote></td></tr></table> 579 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.45 (jfclere)/Coyote"><!--()--></a><a name="Tomcat_6.0.45_(jfclere)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote> 580 <table border="0" cellpadding="2" cellspacing="2"> 581 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 582 Align the Java side of the tc-native connector with the Tomcat 7 583 implementation to ease future maintenance. (markt) 584 </td></tr> 585 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 586 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51503">51503</a>: Add additional validation that prevents a connector 587 from starting if it does not have a valid port number. (kkolinko) 588 </td></tr> 589 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 590 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52028">
59052028</a>: Add support for automatic binding to a free port by a 591 connector if the special value of zero is used for the port. This is 592 mainly useful in embedded and testing scenarios. (kkolinko) 593 </td></tr> 594 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 595 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52926">52926</a>: Avoid NPE when an NIO Comet connection times out on 596 one thread at the same time as it is closed on another thread. 597 (markt/kkolinko) 598 </td></tr> 599 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 600 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57943">57943</a>: Prevent the same socket being added to the cache 601 twice. Patch based on analysis by Ian Luo / Sun Qi. (markt/kkolinko) 602 </td></tr> 603 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 604 Improve HTTP header validation. (markt) 605 </td></tr> 606 </table> 607 </blockquote></td></tr></table> 608 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.45 (jfclere)/Jasper"><!--()--></a><a name="Tomcat_6.0.45_(jfclere)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote> 609 <table border="0" cellpadding="2" cellspacing="2"> 610 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 611 Ignore <code>engineOptionsClass</code> and <code>scratchdir</code> when 612 running under a security manager. (markt) 613 </td></tr> 614 </table> 615 </blockquote></td></tr></table> 616 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.45 (jfclere)/Web applications"><!--()--></a><a name="Tomcat_6.0.45_(jfclere)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote> 617 <table border="0" cellpadding="2" cellspacing="2"> 618 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 619 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57971">57971</a>: Correct the documentation for the cluster 620 configuration setting <code>recoverySleepTime</code>. (markt) 621 </td></tr> 622 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 623 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=58112">58112</a>: Update the documentation for using the Catalina tasks 624 in an Apache Ant build file. (markt) 625 </td></tr> 626 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 627 Improve the Javadoc for some of the APR socket read functions that have 628 inconsistent behaviour for return values. (markt) 629 </td></tr> 630 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 631 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=58255">58255</a>: Document the Semaphore valve. Patch provided by 632 Kyohei Nakamura. (markt) 633 </td></tr> 634 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 635 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=58631">58631</a>: Correct the continuation character use in the Windows 636 Service How-To page of the documentation web application. (markt) 637 </td></tr> 638 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 639 Correct some typos in the JNDI resources How-To. (markt) 640 </td></tr> 641 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 642 Add a redirect to the web interface to the root of the Manager web 643 application. (markt) 644 </td></tr> 645 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 646 Don't create sessions unnecessarily in the Manager application. (markt) 647 </td></tr> 648 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 649 Add a redirect to the web interface to the root of the Host Manager web 650 application. (markt) 651 </td></tr> 652 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 653 Don't create sessions unnecessarily in the Host Manager application. 654 (markt) 655 </td></tr> 656 </table> 657 </blockquote></td></tr></table> 658 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.45 (jfclere)/Other"><!--()--></a><a name="Tomcat_6.0.45_(jfclere)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote> 659 <table border="0" cellpadding="2" cellspacing="2"> 660 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 661 Ensure JULI adapters JAR in Tomcat extras package does not include 662 the LogFactoryImpl[$*] classes. Based on patch provided by 663 Benjamin Gandon. (kkolinko) 664 </td></tr> 665 <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td> 666 Convert test classes to JUnit 4. (kkolinko) 667 </td></tr> 668 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 669 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=58596">58596</a>: Clarify the description in RUNNING.txt of how 670 environment variables are used. (markt) 671 </td></tr> 672 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 673 Update the NSIS Installer used to build the Windows Installer
673s to 674 version 2.50. (markt/kkolinko) 675 </td></tr> 676 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 677 Add framework for client-server unit tests, porting it from 678 Tomcat 7. Add support for running the tests with Apache Ant. (kkolinko) 679 </td></tr> 680 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 681 Update to Tomcat Native Library version 1.1.34. (jfclere) 682 </td></tr> 683 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 684 Remove support for Intel Itanium CPU (i64, IA-64) in the Windows 685 installer, as the current release of Tomcat Native does not have 686 binaries for that processor architecture. (jfclere) 687 </td></tr> 688 </table> 689 </blockquote></td></tr></table> 690</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.44 (jfclere)"><!--()--></a><a name="Tomcat_6.0.44_(jfclere)"><strong>Tomcat 6.0.44 (jfclere)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2015-05-12</strong></font></td></tr><tr><td colspan="2"><blockquote> 691 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.44 (jfclere)/Catalina"><!--()--></a><a name="Tomcat_6.0.44_(jfclere)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 692 <table border="0" cellpadding="2" cellspacing="2"> 693 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 694 Correct typo in the message shown by HttpServlet for unexpected 695 HTTP method. (kkolinko) 696 </td></tr> 697 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 698 Allow to configure RemoteAddrValve and RemoteHostValve to 699 adopt behavior depending on the connector port. Implemented 700 by optionally adding the connector port to the string compared 701 with the patterns <code>allow</code> and <code>deny</code>. Configured 702 using <code>addConnectorPort</code> attribute on valve. (rjung) 703 </td></tr> 704 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 705 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56608">56608</a>: Fix IllegalStateException for JavaScript files when 706 switching from Writer to OutputStream. The special handling of this case 707 in the DefaultServlet was broken due to a MIME type change for 708 JavaScript. (markt) 709 </td></tr> 710 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 711 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57675">57675</a>: Correctly quote strings when using the extended 712 access log. (markt) 713 </td></tr> 714 </table> 715 </blockquote></td></tr></table> 716 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.44 (jfclere)/Coyote"><!--()--></a><a name="Tomcat_6.0.44_(jfclere)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote> 717 <table border="0" cellpadding="2" cellspacing="2"> 718 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 719 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57234">57234</a>: Make SSL protocol filtering to remove insecure 720 protocols case insensitive. Correct spelling of 721 filterInsecureProtocols method. (kkolinko/schultz) 722 </td></tr> 723 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 724 CVE-2014-0230: Add a new system property 725 <code>org.apache.coyote.MAX_SWALLOW_SIZE</code> (defaults to 2MB) 726 that limits amount of data Tomcat will swallow if request body 727 has not been fully read during normal request processing, e.g. 728 for an aborted upload. (Note: in Tomcat 7 and later this feature is 729 configured by <code>maxSwallowSize</code> attribute on a connector). 730 When applying the limit to a connection try to read that many bytes 731 first before closing the connection to give the client a chance to 732 read the response. 733 (markt) 734 </td></tr> 735 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 736 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57544">57544</a>: Fix a potential infinite loop when preparing a kept 737 alive HTTP connection for the next request. (markt) 738 </td></tr> 739 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 740 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57570">57570</a>: Make the processing of chunked encoding trailing 741 headers optional and disabled by default. (markt) 742 </td></tr> 743 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 744 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57581">57581</a>: Change statistics byte counter in coyote Request 745 object to be long to allow values above 2Gb. (kkolinko) 746 </td></tr> 747 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 748 Update the minimum recommended version of the Tomcat Native library (if 749 used) to 1.1.33. (markt) 750 </td></tr> 751 </table> 752 </blockquote></td></tr></table> 753 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.44 (jfclere)/Jasper"><!--()--></a><a name="Tomcat_6.0.44_(jfclere)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote> 754 <table border="0" cellpadding="2" cellspacing="2"> 755 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 756 CVE-2014-7810: 757 Do not use a privileged code block when evaluating EL expressions 758 when running under a security manager, which allowed to bypass code 759 restrictions. (markt/kkolinko) 760 </td></tr> 761 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 762 Fix an issue with BeanELResolver when running under a security 763 manager. Some classes may not be accessible but may have accessible 764 interfaces. (markt) 765 </td></tr> 766 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 767 Simplify code in <code>ProtectedFunctionMapper</code> class of 768 Jasper runtime. (kkolinko) 769 </td></tr> 770 </table> 771 </blockquote></td></tr></table> 772 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.44 (jfclere)/Web applications"><!--()--></a><a name="Tomcat_6.0.44_(jfclere)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote> 773 <table border="0" cellpadding="2" cellspacing="2"> 774 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 775 Update documentation for CGI servlet. Recommend to copy the servlet 776 declaration into web application instead of enabling it globally. 777 Correct documentation for cgiPathPrefix. (kkolinko) 778 </td></tr> 779 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 780 Improve Tomcat Manager documentation. Rearrange, add section on 781 HTML GUI, document /expire command and Server Status page. (kkolinko) 782 </td></tr> 783 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 784 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=54143">54143</a>: Add display of the memory pools usage (including 785 PermGen) to the Status page of the Manager web application. (kkolinko) 786 </td></tr> 787 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 788 Fix several issues with <code>status.xsd</code> schema in Manager web 789 application, testing it against actual output of StatusTransformer 790 class. (kkolinko) 791 </td></tr> 792 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 793 Align algorithm that generates anchor names in Tomcat documentation 794 with Tomcat 7/8/9. No visible changes, but may help with future 795 updates to the documentation. (kkolinko) 796 </td></tr> 797 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 798 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56058">56058</a>: Add links to the AccessLogValve documentation for 799 configuring reverse proxies and/or Tomcat to ensure that the desired 800 information is used entered in the access log when Tomcat is running 801 behind a reverse proxy. (markt) 802 </td></tr> 803 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 804 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57503">57503</a>: Make clear that the JULI integration for log4j only 805 works with log4j 1.2.x. (markt) 806 </td></tr> 807 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 808 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57644">57644</a>: Update examples to use Apache Standard Taglib 1.2.5. 809 (jboynes/kkolinko) 810 </td></tr> 811 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 812 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57706">57706</a>: Clarify the documentation for the AJP connector to 813 make clearer that when using 814 <code>tomcatAuthentication="false"</code> the user provided by 815 the reverse proxy will not be associated with any roles. (markt) 816 </td></tr> 817 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 818 Correct the documentation for deployOnStartup to make clear that if a 819 WAR file is updated while Tomcat is stopped and unpackWARs is true, 820 Tomcat will not detect the changed WAR file when it starts and will not 821 replace the unpacked WAR file with the contents of the updated WAR. 822 (markt) 823 </td></tr> 824 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 825 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57759">57759</a>: Add information to the keyAlias documentation to make 826 it clear that the order keys are read from the keystore is 827 implementation dependent. (markt) 828 </td></tr> 829 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 830 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57864">57864</a>: Update the documentation web application to make it 831 clearer that hex values are not valid for cluster send options. Based on 832 a patch by Kyohei Nakamura. (markt) 833 </td></tr> 834 </table> 835 </blockquote></td></tr></table> 836 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.44 (jfclere)/Other"><!--()--></a><a name="Tomcat_6.0.44_(jfclere)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote> 837 <table border="0" cellpadding="2" cellspacing="2"> 838 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 839 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57344">57344</a>: Provide sha1 checksum files for Tomcat downloads. 840 (kkolinko) 841 </td></tr> 842 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 843 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57558">57558</a>: Change <code>catalina-tasks.xml</code> to use all 844 jars in <code>${catalina.home}/lib</code> to define Tomcat Ant 845 tasks. This fixes a NoClassDefFoundError with <code>validate</code> 846 task. (kkolinko) 847 </td></tr> 848 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 849 Update to Tomcat Native Library version 1.1.33 to pick up the Windows
850 binaries that are based on OpenSSL 1.0.1m and APR 1.5.1. (markt) 851 </td></tr> 852 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 853 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57801">57801</a>: Improve the error message in the start script in case 854 the PID read from the PID file is already owned by a process. (rjung) 855 </td></tr> 856 </table> 857 </blockquote></td></tr></table> 858</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.43 (markt)"><!--()--></a><a name="Tomcat_6.0.43_(markt)"><strong>Tomcat 6.0.43 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2014-11-22</strong></font></td></tr><tr><td colspan="2"><blockquote> 859 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.43 (markt)/Catalina"><!--()--></a><a name="Tomcat_6.0.43_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 860 <table border="0" cellpadding="2" cellspacing="2"> 861 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 862 Assert that mapping result object is empty before performing mapping 863 work in <code>Mapper</code>. (kkolinko) 864 </td></tr> 865 </table> 866 </blockquote></td></tr></table> 867 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.43 (markt)/Coyote"><!--()--></a><a name="Tomcat_6.0.43_(markt)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote> 868 <table border="0" cellpadding="2" cellspacing="2"> 869 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 870 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53952">53952</a>: Add support for TLSv1.1 and TLSv1.2 for APR connector. 871 Based upon a patch by Marcel Šebek. (schultz/jfclere) 872 </td></tr> 873 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 874 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56780">56780</a>: Enable Tomcat to start when using SSL with an IBM JRE 875 in strict SP800-131a mode. (markt/kkolinko) 876 </td></tr> 877 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 878 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57102">57102</a>: Fix bug that meant sslEnabledProtocols setting was not 879 recognised for the HTTPS NIO connector. (markt) 880 </td></tr> 881 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 882 Disable SSLv3 by default for the APR/native HTTPS connector. 883 (markt/schultz) 884 </td></tr> 885 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 886 Do not increase remaining counter at end of stream in 887 IdentityInputFilter. (kkolinko) 888 </td></tr> 889 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 890 Disable SSLv3 by default (along with SSLv2 which was already disabled 891 by default) in light of the recently announced POODLE vulnerability 892 (CVE-2014-3566). (markt) 893 </td></tr> 894 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 895 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57116">57116</a>: Do not fallback to default protocol list for HTTPS BIO 896 connector if <code>sslEnabledProtocols</code> has no matches. (markt) 897 </td></tr> 898 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 899 Align calculation of default ciphers and default protocols for JSSE 900 HTTPS connectors with Tomcat 7 which allows for per connector defaults 901 based on the choice of <code>sslProtocol</code>. (markt/kkolinko) 902 </td></tr> 903 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 904 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57703">57703</a>: Update the <code>http-method</code> definition for 905 web applications using a Servlet 2.5 descriptor as per Servlet 2.5 MR 6. 906 (markt) 907 </td></tr> 908 </table> 909 </blockquote></td></tr></table> 910 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.43 (markt)/Web applications"><!--()--></a><a name="Tomcat_6.0.43_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote> 911 <table border="0" cellpadding="2" cellspacing="2"> 912 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 913 Configure the Javadoc tool to read sources as ISO-8859-1, suppress 914 timestamp comments and enable charset header. (kkolinko) 915 </td></tr> 916 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 917 Correct typos in configuration samples on SSL Configuration page 918 of Tomcat documentation. (kkolinko) 919 </td></tr> 920 </table> 921 </blockquote></td></tr></table> 922 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.43 (markt)/Other"><!--()--></a><a name="Tomcat_6.0.43_(markt)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote> 923 <table border="0" cellpadding="2" cellspacing="2"> 924 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 925 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56079">56079</a>: The Apache Tomcat Windows service and the Apache 926 Tomcat Windows service monitor application are now digitally 927 signed. (markt/kkolinko) 928 </td></tr> 929 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 930 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56988">56988</a>: Allow to use relative path in <code>base.path</code> 931 setting when building Tomcat. (kkolinko) 932 </td></tr> 933 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 934 Update documentation: the minimum version of Apache Ant required to 935 build Tomcat is 1.8.0. (kkolinko) 936 </td></tr> 937 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 938 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56596">56596</a>: Update to Tomcat Native Library version 1.1.32 to 939 pick up the Windows binaries that are based on OpenSSL 1.0.1j and APR 940 1.5.1. (markt) 941 </td></tr> 942 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 943 Fix timestamps in Tomcat build to use 24-hour instead of 12-hour format 944 and use UTC timezone. (kkolinko) 945 </td></tr> 946 </table> 947 </blockquote></td></tr></table> 948</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.42 (jfclere)"><!--()--></a><a name="Tomcat_6.0.42_(jfclere)"><strong>Tomcat 6.0.42 (jfclere)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote> 949 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.42 (jfclere)/Catalina"><!--()--></a><a name="Tomcat_6.0.42_(jfclere)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 950 <table border="0" cellpadding="2" cellspacing="2"> 951 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 952 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56600">56600</a>: In WebdavServlet: Do not waste time generating 953 response for broken PROPFIND request. (kkolinko) 954 </td></tr> 955 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 956 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56648">56648</a>: Reduce scope of synchronization when adding children to 957 a container (e.g. adding a Context to a Host) to prevent blocking 958 requests to other children while the new child starts. (markt) 959 </td></tr> 960 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 961 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56684">56684</a>: Ensure that Tomcat does not shut down if the socket 962 waiting for the shutdown command experiences a 963 <code>SocketTimeoutException</code>. (markt) 964 </td></tr> 965 </table> 966 </blockquote></td></tr></table> 967 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.42 (jfclere)/Coyote"><!--()--></a><a name="Tomcat_6.0.42_(jfclere)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote> 968 <table border="0" cellpadding="2" cellspacing="2"> 969 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 970 Fix CVE-2014-0227: 971 Various improvements to ChunkedInputFilter including clean-up, i18n for 972 error messages and adding an error flag to allow subsequent attempts at 973 reading after an error to fail fast. (markt) 974 </td></tr> 975 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 976 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56661">56661</a>: Support using AJP request attribute 977 <code>AJP_LOCAL_ADDR</code> to fix <code>getLocalAddr()</code>. (rjung) 978 </td></tr> 979 </table> 980 </blockquote></td></tr></table> 981 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.42 (jfclere)/Jasper"><!--()--></a><a name="Tomcat_6.0.42_(jfclere)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote> 982 <table border="0" cellpadding="2" cellspacing="2"> 983 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 984 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43001">43001</a>: Enable the JspC Ant task to set the JspC option 985 <code>mappedFile</code>. (kkolinko) 986 </td></tr> 987 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 988 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56334">56334</a>: Fix a regression in EL parsing when quoted string 989 follows a whitespace. (markt) 990 </td></tr> 991 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 992 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56560">56560</a>: Fix NoClassDefFoundError when using Jasper Ant task 993 defined by <code>catalina-tasks.xml</code> file. Patch provided by 994 M Gemmell. (kkolinko) 995 </td></tr> 996 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 997 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56561">56561</a>: Avoid <code>NoSuchElementException</code> while 998 handling attributes with empty string value. (violetagg) 999 </td></tr> 1000 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1001 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56612">56612</a>: Correctly parse consecutive escaped single quotes when 1002 used in an EL expression. (markt) 1003 </td></tr> 1004 <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td> 1005 Use <code>if { ... } else if { ... }</code> rather than multiple 1006 <code>if { ... }</code> for alternative branches in the JSP parser. 1007 (kkolinko) 1008 </td></tr> 1009 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1010 Fix a potential resource leak in JDTCompiler when checking whether
1011 a resource is a package. Reported by Coverity Scan. (fschumacher) 1012 </td></tr> 1013 </table> 1014 </blockquote></td></tr></table> 1015 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.42 (jfclere)/Other"><!--()--></a><a name="Tomcat_6.0.42_(jfclere)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote> 1016 <table border="0" cellpadding="2" cellspacing="2"> 1017 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1018 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56606">56606</a>: When creating <code>tomcat-users.xml</code> in the 1019 Windows Installer, use the new attribute name for the name of the user. 1020 (markt) 1021 </td></tr> 1022 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 1023 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56829">56829</a>: Add the ability for users to define their own values 1024 for <code>_RUNJAVA</code> and <code>_RUNJDB</code> environment 1025 variables. Be more strict with executable filename on Windows 1026 (s/java/java.exe/). Based on a patch by Neeme Praks. (markt/kkolinko) 1027 </td></tr> 1028 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1029 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56608">56608</a>: When deploying an external WAR, add watched resources 1030 in the expanded directory based on whether the expanded directory is 1031 expected to exist rather than if it does exist. 1032 </td></tr> 1033 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1034 When triggering a reload due to a modified watched resource, ensure 1035 that multiple changed watched resources only trigger one reload rather 1036 than a series of reloads. 1037 </td></tr> 1038 </table> 1039 </blockquote></td></tr></table> 1040</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.41 (markt)"><!--()--></a><a name="Tomcat_6.0.41_(markt)"><strong>Tomcat 6.0.41 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2014-05-23</strong></font></td></tr><tr><td colspan="2"><blockquote> 1041 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.41 (markt)/Jasper"><!--()--></a><a name="Tomcat_6.0.41_(markt)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote> 1042 <table border="0" cellpadding="2" cellspacing="2"> 1043 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1044 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56529">56529</a>: Avoid <code>NoSuchElementException</code> while handling 1045 attributes with empty string value in custom tags. Based on a patch 1046 provided by Hariprasad Manchi. (violetagg/kkolinko) 1047 </td></tr> 1048 </table> 1049 </blockquote></td></tr></table> 1050</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.40 (markt)"><!--()--></a><a name="Tomcat_6.0.40_(markt)"><strong>Tomcat 6.0.40 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote> 1051 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.40 (markt)/Catalina"><!--()--></a><a name="Tomcat_6.0.40_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 1052 <table border="0" cellpadding="2" cellspacing="2"> 1053 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1054 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56027">56027</a>: Add more options for managing FIPS mode in the 1055 AprLifecycleListener. (schultz/kkolinko) 1056 </td></tr> 1057 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1058 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56082">56082</a>: Fix a concurrency bug in JULI's LogManager 1059 implementation. (markt) 1060 </td></tr> 1061 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1062 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56236">56236</a>: Enable Tomcat to work with alternative Servlet and 1063 JSP API JARs that package the XML schemas in such as way as to require 1064 a dependency on the JSP API before enabling validation for web.xml. 1065 Tomcat has no such dependency. (markt) 1066 </td></tr> 1067 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1068 Change the default value of the <code>xmlBlockExternal</code> attribute 1069 of Context elements. It is now <code>true</code>. (kkolinko) 1070 </td></tr> 1071 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1072 Don't log to standard out in SSLValve. (kkolinko/markt) 1073 </td></tr> 1074 <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td> 1075 Use StringBuilder in DefaultServlet. (kkolinko) 1076 </td></tr> 1077 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1078 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56275">56275</a>: Allow web applications to be stopped cleanly even if 1079 filters throw exceptions when their destroy() method is called. 1080 (markt/kkolinko) 1081 </td></tr> 1082 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1083 Fix CVE-2014-0096: 1084 Redefine the <code>globalXsltFile</code> initialisation parameter of the 1085 DefaultServlet as relative to CATALINA_BASE/conf or CATALINA_HOME/conf. 1086 Prevent user supplied XSLTs used by the DefaultServlet from defining 1087 external entities. (markt) 1088 </td></tr> 1089 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1090 Add a work around for validating XML documents (often TLDs) that use 1091 just the file name to refer to refer to the JavaEE schema on which they 1092 are based. (kkolinko) 1093 </td></tr> 1094 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1095 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56369">56369</a>: Ensure that removing an MBean notification listener 1096 reverts all the operations performed when adding an MBean notification 1097 listener. (markt) 1098 </td></tr> 1099 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1100 Fix CVE-2014-0119: 1101 Only create XML parsing objects if required and fix associated potential 1102 memory leak in the default Servlet. 1103 Ensure that a TLD parser obtained from the cache has the correct value 1104 of <code>blockExternal</code>. 1105 Extend XML factory, parser etc. memory leak protection to cover some 1106 additional locations where, theoretically, a memory leak could occur. 1107 (markt/kkolinko) 1108 </td></tr> 1109 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 1110 Add the <code>org.apache.naming</code> package to the packages requiring 1111 code to have the <code>defineClassInPackage</code> permission when 1112 running under a security manager. (markt) 1113 </td></tr> 1114 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 1115 Add the <code>org.apache.naming.resources</code> package to the packages 1116 requiring code to have the <code>accessClassInPackage</code> permission 1117 when running under a security manager. (markt) 1118 </td></tr> 1119 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1120 Make the naming context tokens for containers more robust. Require 1121 RuntimePermission when introducing a new token. (markt/kkolinko) 1122 </td></tr> 1123 </table> 1124 </blockquote></td></tr></table> 1125 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.40 (markt)/Coyote"><!--()--></a><a name="Tomcat_6.0.40_(markt)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote> 1126 <table border="0" cellpadding="2" cellspacing="2"> 1127 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1128 Fix CVE-2014-0075: 1129 Improve processing of chuck size from chunked headers. Avoid overflow 1130 and use a bit shift instead of a multiplication as it is marginally 1131 faster. (markt/kkolinko) 1132 </td></tr> 1133 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1134 Fix CVE-2014-0099: 1135 Fix possible overflow when parsing long values from a byte array. 1136 (markt) 1137 </td></tr> 1138 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 1139 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56363">56363</a>: Update to version 1.1.30 of Tomcat Native library.
1140 The minimum required version of this library for APR connector is now 1141 1.1.30. (kkolinko) 1142 </td></tr> 1143 </table> 1144 </blockquote></td></tr></table> 1145 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.40 (markt)/Jasper"><!--()--></a><a name="Tomcat_6.0.40_(markt)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote> 1146 <table border="0" cellpadding="2" cellspacing="2"> 1147 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1148 Change the default behaviour of JspC to block XML external entities by 1149 default. (kkolinko) 1150 </td></tr> 1151 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1152 Restore the validateXml option to Jasper that was previously renamed 1153 validateTld. Both options are now supported. validateXml controls the 1154 validation of web.xml files when Jasper parses them and validateTld 1155 controls the validation of *.tld files when Jasper parses them. (markt) 1156 </td></tr> 1157 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1158 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=54475">54475</a>: Add Java 8 support to SMAP generation for JSPs. Patch 1159 by Robbie Gibson. (markt) 1160 </td></tr> 1161 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1162 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56010">56010</a>: Don't throw an 1163 <code>IllegalArgumentException</code> when 1164 <code>JspFactory.getPageContext</code> is used with 1165 <code>JspWriter.DEFAULT_BUFFER</code>. Based on a patch by Eugene Chung. 1166 (markt) 1167 </td></tr> 1168 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1169 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56265">56265</a>: Do not escape values of dynamic tag attributes 1170 containing EL expressions. (kkolinko) 1171 </td></tr> 1172 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1173 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56283">56283</a>: Add support for running Tomcat 6 with 1174 ecj-P20140317-1600.jar (as drop-in replacement for ecj-4.3.1.jar). Add 1175 support for value "1.8" for the <code>compilerSourceVM</code> and 1176 <code>compilerTargetVM</code> options. Note that ecj-P20140317-1600.jar 1177 can only be used when running with Java 6 or later. The "1.8" options 1178 make sense only when running with Java 8 (or later). (kkolinko) 1179 </td></tr> 1180 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1181 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56334">56334</a>: Fix a regression in the handling of back-slash 1182 escaping introduced by the fix for <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=55735">55735</a>. (markt/kkolinko) 1183 </td></tr> 1184 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1185 Correct the handling of back-slash escaping in the EL parser and no 1186 longer require that <code>\$</code> or <code>\#</code> must be followed 1187 by <code>{</code> in order for the back-slash escaping to take effect. 1188 (markt) 1189 </td></tr> 1190 </table> 1191 </blockquote></td></tr></table> 1192 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.40 (markt)/Cluster"><!--()--></a><a name="Tomcat_6.0.40_(markt)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote> 1193 <table border="0" cellpadding="2" cellspacing="2"> 1194 <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td> 1195 Refactor <code>AbstractReplicatedMap</code> and related classes to 1196 enable Tomcat 6 to be compiled using Java 8. (markt) 1197 </td></tr> 1198 </table> 1199 </blockquote></td></tr></table> 1200 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.40 (markt)/Web applications"><!--()--></a><a name="Tomcat_6.0.40_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote> 1201 <table border="0" cellpadding="2" cellspacing="2"> 1202 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 1203 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56093">56093</a>: Documentation for SSLValve. (markt/kkolinko) 1204 </td></tr> 1205 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1206 Correct documentation on Windows service options, aligning it with 1207 Apache Commons Daemon documentation. (kkolinko) 1208 </td></tr> 1209 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 1210 Add support for <code>version-major</code>, 1211 <code>version-major-minor</code> tags in documentation XSLT, to simplify 1212 documentation backports. (kkolinko) 1213 </td></tr> 1214 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1215 Fix target and rel attributes on links in documentation. They were 1216 lost during XSLT transformation. (kkolinko) 1217 </td></tr> 1218 </table> 1219 </blockquote></td></tr></table> 1220 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.40 (markt)/Other"><!--()--></a><a name="Tomcat_6.0.40_(markt)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote> 1221 <table border="0" cellpadding="2" cellspacing="2"> 1222 <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td> 1223 Remove svn keywords (such as $Id) from source files and documentation. 1224 (kkolinko) 1225 </td></tr> 1226 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 1227 Improvements to the Windows installer, to align it with installing 1228 the service with <code>service.bat</code>. Use explicit memory sizes 1229 (--JvmMs 128 Mb and --JvmMx 256 Mb). Specify log directory path 1230 when ininstalling, so that the log file is written to the Tomcat logs 1231 directory, instead of "%SystemRoot%\System32\LogFiles\Apache". 1232 (kkolinko) 1233 </td></tr> 1234 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 1235 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49993">49993</a>, <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56143">56143</a>: Improve <code>service.bat</code> 1236 script. Allow it to be launched from non-UAC console. The UAC prompt 1237 will be shown only once. Now there is no need to run the command shell 1238 with elevated privileges. Improve check for <code>JAVA_HOME</code> 1239 and add support for <code>JRE_HOME</code>. Warn if neither "client" 1240 nor "server" JVM is found. Align classpath, display name and other 1241 options with the <code>exe</code> installer. Make command names 1242 case-insensitive. Update documentation. (kkolinko) 1243 </td></tr> 1244 </table> 1245 </blockquote></td></tr></table> 1246</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.39 (markt)"><!--()--></a><a name="Tomcat_6.0.39_(markt)"><strong>Tomcat 6.0.39 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2014-01-31</strong></font></td></tr><tr><td colspan="2"><blockquote> 1247 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.39 (markt)/Catalina"><!--()--></a><a name="Tomcat_6.0.39_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 1248 <table border="0" cellpadding="2" cellspacing="2"> 1249 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1250 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=55166">55166</a>: Fix regression that broke XML validation when running 1251 on some Java 5 JVMs. (kkolinko) 1252 </td></tr> 1253 </table> 1254 </blockquote></td></tr></table> 1255 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.39 (markt)/Coyote"><!--()--></a><a name="Tomcat_6.0.39_(markt)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote> 1256 <table border="0" cellpadding="2" cellspacing="2"> 1257 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1258 Make the HTTP NIO connector tolerant of whitespace in the individual 1259 values used for the ciphers attribute. (markt) 1260 </td></tr> 1261 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1262 Remove dependency introduced on the jsp-api.jar as part of the XML 1263 validation changes introduced in 6.0.38. (markt) 1264 </td></tr> 1265 </table> 1266 </blockquote></td></tr></table> 1267 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.39 (markt)/Jasper"><!--()--></a><a name="Tomcat_6.0.39_(markt)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote> 1268 <table border="0" cellpadding="2" cellspacing="2"> 1269 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1270 Correct several errors in jspxml Schema and DTD. (kkolinko) 1271 </td></tr> 1272 </table> 1273 </blockquote></td></tr></table> 1274 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.39 (markt)/Cluster"><!--()--></a><a name="Tomcat_6.0.39_(markt)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote> 1275 <table border="0" cellpadding="2" cellspacing="2"> 1276 <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td> 1277 Remove an empty TestTwoPhaseCommit test from Tribes. (kkolinko) 1278 </td></tr> 1279 </table> 1280 </blockquote></td></tr></table> 1281 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.39 (markt)/Web applications"><!--()--></a><a name="Tomcat_6.0.39_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote> 1282 <table border="0" cellpadding="2" cellspacing="2"> 1283 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1284 Fix broken link in Jasper How-To documentation. (markt) 1285 </td></tr> 1286 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1287 Align index.html and index.jsp in ROOT web application. Correct links 1288 to specifications and to the Tomcat mailing lists. (kkolinko) 1289 </td></tr> 1290 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1291 Remove second copy of RUNNING.txt from the full-docs distribution. Some 1292 unpacking utilities can't handle multiple copies of a file with the same 1293 name in a directory. (kkolinko) 1294 </td></tr> 1295 </table> 1296 </blockquote></td></tr></table> 1297 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.39 (markt)/Other"><!--()--></a><a name="Tomcat_6.0.39_(markt)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote> 1298 <table border="0" cellpadding="2" cellspacing="2"> 1299 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 1300 Update sample Eclipse IDE project: use JUnit 4 library and prefer a 1301 Java 5 JDK when several JDKs are configured. Cleanup the Ant build 1302 files. (kkolinko) 1303 </td></tr> 1304 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1305 Correct Maven dependencies for individual JAR files. (markt) 1306 </td></tr> 1307 </table> 1308 </blockquote></td></tr></table> 1309</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.38 (markt)"><!--()--></a><a name="Tomcat_6.0.38_(markt)"><strong>Tomcat 6.0.38 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote> 1310 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.38 (markt)/Catalina"><!--()--></a><a name="Tomcat_6.0.38_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 1311 <table border="0" cellpadding="2" cellspacing="2"> 1312 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1313 Ensure that when Tomcat's anti-resource locking features are used 1314 that the temporary copy of the web application and not the original is 1315 removed when the web application stops. (markt/kkolinko) 1316 </td></tr> 1317 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1318 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=55019">55019</a>: Fix a potential exception when accessing JSPs while 1319 running under a SecurityManager. (jfclere) 1320 </td></tr> 1321 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1322 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=55052">55052</a>: Make JULI's LogManager to additionally look for 1323 logging properties without prefixes if the property cannot be found with 1324 a prefix. (kkolinko) 1325 </td></tr> 1326 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1327 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=55266">55266</a>: Ensure that the session ID is parsed from the request 1328 before any redirect as the session ID may need to be encoded as part of 1329 the redirect URL. (markt) 1330 </td></tr> 1331 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1332 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=55404">55404</a>: Log warnings about using security roles in web.xml as 1333 warnings. (markt) 1334 </td></tr> 1335 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1336 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=55268">55268</a>: Added optional --service-start-wait-time 1337 command-line option to change service start wait time from default 1338 of 10 seconds. (schultz) 1339 </td></tr> 1340 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1341 Correctly associate the default resource bundle with the English locale 1342 so that requests that specify an Accept-Language of English ahead of 1343 French, Spanish or Japanese get the English messages they asked for. 1344 (markt) 1345 </td></tr> 1346 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1347 Add missing JavaEE 5 XML schema definitions. (markt) 1348 </td></tr> 1349 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1350 When Catalina parses TLD files, always use a namespace aware parser to 1351 be consistent with how Jasper parses TLD files. The 1352 <code>tldNamespaceAware</code> attribute of the Context is now ignored. 1353 (markt) 1354 </td></tr> 1355 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1356 As per section SRV.14.4.3 of the Servlet 2.5 specification, a namespace 1357 aware, validating parser will be used when processing <code>*.tld</code> 1358 and <code>web.xml</code> files if the system property 1359 <code>org.apache.catalina.STRICT_SERVLET_COMPLIANCE</code> is set to 1360 <code>true</code>. (markt) 1361 </td></tr> 1362 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1363 Fix CVE-2014-0033: 1364 Ensure that sessions IDs are not parsed from URLs for Contexts where 1365 <code>disableURLRewriting</code> is <code>true</code>. (markt) 1366 </td></tr>
1366 1367 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 1368 Fix CVE-2013-4590: 1369 Add an option to the Context to control the blocking of XML external 1370 entities when parsing XML configuration files and enable this blocking 1371 by default when a security manager is used. The block is implemented via 1372 a custom resolver to enable the logging of any blocked entities. (markt) 1373 </td></tr> 1374 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1375 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56016">56016</a>: When loading resources for XML schema validation, take 1376 account of the possibility that servlet-api.jar and jsp-api.jar may not 1377 be loaded by the same class loader. Patch by Juan Carlos Estibariz. 1378 (markt) 1379 </td></tr> 1380 </table> 1381 </blockquote></td></tr></table> 1382 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.38 (markt)/Coyote"><!--()--></a><a name="Tomcat_6.0.38_(markt)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote> 1383 <table border="0" cellpadding="2" cellspacing="2"> 1384 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1385 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52811">52811</a>: Fix parsing of Content-Type header in 1386 <code>HttpServletResponse.setContentType()</code>. Introduces a new HTTP 1387 header parser that follows RFC2616. (markt) 1388 </td></tr> 1389 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1390 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=54691">54691</a>: Add configuration attribute "sslEnabledProtocols" 1391 to HTTP connector and document it. (Internally this attribute has 1392 been already implemented but not documented, under names "protocols" 1393 and "sslProtocols". Those names of this attribute are now deprecated). 1394 (schultz) 1395 </td></tr> 1396 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1397 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=54947">54947</a>: Fix the HTTP NIO connector that incorrectly rejected a 1398 request if the CRLF terminating the request line was split across 1399 multiple packets. Patch by Konstantin Preißer. (markt) 1400 </td></tr> 1401 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1402 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=55228">55228</a>: Allow web applications to set a HTTP Date header. 1403 (markt) 1404 </td></tr> 1405 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1406 Fix CVE-2013-4286: 1407 Better adherence to RFC2616 for content-length headers. (markt) 1408 </td></tr> 1409 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1410 Fix CVE-2013-4322: Add support for limiting the size of chunk extensions 1411 when using chunked encoding. (markt) 1412 </td></tr> 1413 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1414 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=55749">55749</a>: Improve the error message when SSLEngine is disabled 1415 in the AprLifecycleListener and SSL is configured for an APR/native 1416 connector. (markt) 1417 </td></tr> 1418 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1419 Avoid possible NPE if a content type is specified without a character set. 1420 (markt) 1421 </td></tr> 1422 </table> 1423 </blockquote></td></tr></table> 1424 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.38 (markt)/Jasper"><!--()--></a><a name="Tomcat_6.0.38_(markt)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote> 1425 <table border="0" cellpadding="2" cellspacing="2"> 1426 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1427 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=55198">55198</a>: Ensure attribute values in tagx files that include EL 1428 and quoted XML characters are correctly quoted in the output. (markt) 1429 </td></tr> 1430 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1431 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=55671">55671</a>: Consistently use the configuration option name 1432 <code>genStringAsCharArray</code> rather than a mixture of 1433 <code>genStrAsCharArray</code> and <code>genStringAsCharArray</code> but 1434 retain support for <code>genStrAsCharArray</code> as in initialisation 1435 parameter for the JSP servlet to retain backwards compatibility with 1436 existing configurations. (markt) 1437 </td></tr> 1438 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1439 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=55691">55691</a>: Fix <code>javax.el.ArrayELResolver</code> to correctly 1440 handle the case where the base object is an array of primitives. (markt) 1441 </td></tr> 1442 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1443 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=55973">55973</a>: Fix processing of XML schemas when validation is 1444 enabled in Jasper. (kkolinko) 1445 </td></tr> 1446 </table> 1447 </blockquote></td></tr></table> 1448 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.38 (markt)/Web applications"><!--()--></a><a name="Tomcat_6.0.38_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote> 1449 <table border="0" cellpadding="2" cellspacing="2"> 1450 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 1451 Add documentation for 1452 <code>o.a.c.tribes.group.interceptors.TcpFailureDetector</code>. 1453 (kfujino) 1454 </td></tr> 1455 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 1456 Complete the documentation for 1457 <code>
1457MessageDispatch15Interceptor</code>. (kfujino) 1458 </td></tr> 1459 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 1460 Add to cluster document a description of 1461 <code>notifyLifecycleListenerOnFailure</code> and 1462 <code>heartbeatBackgroundEnabled</code>. (kfujino) 1463 </td></tr> 1464 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1465 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=55746">55746</a>: Add documentation on the <code>allRolesMode</code> to 1466 the <code>CombinedRealm</code> and <code>LockOutRealm</code>. Patch by 1467 Cédric Couralet. (markt) 1468 </td></tr> 1469 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1470 Fix the sample configuration of <code>StaticMembershipInterceptor</code> 1471 in order to prevent warning log. uniqueId must be 16 bytes. (kfujino) 1472 </td></tr> 1473 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1474 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=55119">55119</a>: Avoid CVE-2013-1571 when generating Javadoc. (markt) 1475 </td></tr> 1476 </table> 1477 </blockquote></td></tr></table> 1478 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.38 (markt)/Other"><!--()--></a><a name="Tomcat_6.0.38_(markt)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote> 1479 <table border="0" cellpadding="2" cellspacing="2"> 1480 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 1481 Update Maven Central location used to download dependencies at build 1482 time to be <code>repo.maven.apache.org</code>. (kkolinko) 1483 </td></tr> 1484 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1485 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=55663">55663</a>: Minor correction to the wording of the NOTICE files to 1486 align them with the 1487 <a href="http://www.apache.org/legal/src-headers.html#notice">requirements 1488 for NOTICE files</a>. (violetagg) 1489 </td></tr> 1490 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1491 Add <code>@since</code> markers to the common annotations classes and 1492 fix a few specification compliance issues. (markt) 1493 </td></tr> 1494 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 1495 Update to Eclipse JDT Compiler 4.3.1. (markt) 1496 </td></tr> 1497 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 1498 Update the Apache Jakarta JSTL implementation used by the examples web 1499 application to 1.1.2. (markt) 1500 </td></tr> 1501 </table> 1502 </blockquote></td></tr></table> 1503</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.37 (jfclere)"><!--()--></a><a name="Tomcat_6.0.37_(jfclere)"><strong>Tomcat 6.0.37 (jfclere)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2013-05-03</strong></font></td></tr><tr><td colspan="2"><blockquote> 1504 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.37 (jfclere)/Catalina"><!--()--></a><a name="Tomcat_6.0.37_(jfclere)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 1505 <table border="0" cellpadding="2" cellspacing="2"> 1506 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1507 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52055">52055</a>: Ensure that filters are recycled. (markt/kkolinko) 1508 </td></tr> 1509 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1510 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52184">52184</a>: Reduce log level for invalid cookies. (markt) 1511 </td></tr> 1512 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1513 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53481">53481</a>
1513: Added support for SSLHonorCipherOrder to allow 1514 the server to impose its cipher order on the client. Based on a patch 1515 provided by Marcel Šebek. (schultz) 1516 </td></tr> 1517 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1518 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=54044">54044</a>: Correct bug in timestamp cache used by logging 1519 (including the access log valve) that meant entries could be made with 1520 an earlier timestamp than the true timestamp. (markt) 1521 </td></tr> 1522 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1523 Fix CVE-2013-2067: 1524 In FormAuthenticator: If it is configured to change Session IDs, 1525 do the change before displaying the login form. (kkolinko) 1526 </td></tr> 1527 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1528 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=54054">54054</a>: Do not share shell environment variables between 1529 multiple instances of the CGI servlet. (markt) 1530 </td></tr> 1531 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1532 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=54087">54087</a>: Correctly handle (ignore) invalid If-Modified-Since 1533 header rather than throwing an exception. (markt/kkolinko) 1534 </td></tr> 1535 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1536 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=54220">54220</a>: Ensure the ErrorReportValve only generates an error 1537 report if the error flag on the response has been set. (markt) 1538 </td></tr> 1539 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1540 Fix memory leak of servlet instances when running with a 1541 SecurityManager and either init() or destroy() methods fail 1542 or the servlet is a SingleThreadModel one, and of filter instances 1543 if their destroy() method fails with an Error. (kkolinko) 1544 </td></tr> 1545 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1546 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=54382">54382</a>: Fix NPE when SSI processing is enabled and an empty 1547 SSI directive is present. (markt) 1548 </td></tr> 1549 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1550 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=54483">54483</a>: Correct one of the Spanish translations. Based on a 1551 suggestion from adinamita. (kkolinko) 1552 </td></tr> 1553 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 1554 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=54527">54527</a>: Synchronize conf/web.xml mime mapping with Tomcat 7. 1555 (markt) 1556 </td></tr> 1557 </table> 1558 </blockquote></td></tr></table> 1559 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.37 (jfclere)/Coyote"><!--()--></a><a name="Tomcat_6.0.37_(jfclere)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote> 1560 <table border="0" cellpadding="2" cellspacing="2"> 1561 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1562 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=54248">54248</a>: Ensure that byte order marks are swallowed when using 1563 a Reader to read a request body with a BOM for those encodings that 1564 require byte order marks. (markt) 1565 </td></tr> 1566 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1567 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=54324">54324</a>: Allow APR connector to disable TLS compression 1568 if OpenSSL supports it. (schultz) 1569 </td></tr> 1570 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1571 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=54456">54456</a>: Ensure that if a client aborts a request when sending 1572 a chunked request body that this is communicated correctly to the client 1573 reading the request body. (markt) 1574 </td></tr> 1575 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 1576 Update the native component of the APR/native connector to 1.1.27 and 1577 make that version the recommended minimum version. (kkolinko) 1578 </td></tr> 1579 </table> 1580 </blockquote></td></tr></table> 1581 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.37 (jfclere)/Jasper"><!--()--></a><a name="Tomcat_6.0.37_(jfclere)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote> 1582 <table border="0" cellpadding="2" cellspacing="2"> 1583 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1584 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=54615">54615</a>: Tomcat 6 doesn't build against ecj 4.x (kkolinko) 1585 </td></tr> 1586 </table> 1587 </blockquote></td></tr></table> 1588 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.37 (jfclere)/Cluster"><!--()--></a><a name="Tomcat_6.0.37_(jfclere)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote> 1589 <table border="0" cellpadding="2" cellspacing="2"> 1590 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1591 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=54045">54045</a>: Make sure getMembers() returns available member when 1592 TcpFailureDetector works in static cluster. (kfujino) 1593 </td></tr> 1594 </table> 1595 </blockquote></td></tr></table> 1596 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.37 (jfclere)/Web applications"><!--()--></a><a name="Tomcat_6.0.37_(jfclere)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote> 1597 <table border="0" cellpadding="2" cellspacing="2"> 1598 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 1599 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=22278">22278</a>: Add a commented out sample configuration of 1600 <code>RemoteAddrValve</code> to <code>META-INF/context.xml</code> 1601 files of the Manager and Host Manager applications. (kkolinko) 1602 </td></tr> 1603 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1604 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=54080">54080</a>: Clarify documentation for initial value of 1605 <code>internalProxies</code> attribute of <code>RemoteIpValve</code>. 1606 (schultz/kkolinko) 1607 </td></tr> 1608 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1609 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=54198">54198</a>: Clarify that 1610 <code>HttpServletResponse.sendError(int)</code> results in an HTML 1611 response by default. (markt) 1612 </td></tr> 1613 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1614 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=54207">54207</a>: Correct JNDI factory package name in Javadoc for 1615 <code>org.apache.naming.java.javaURLContextFactory</code>. (markt) 1616 </td></tr> 1617 </table> 1618 </blockquote></td></tr></table> 1619 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.37 (jfclere)/Other"><!--()--></a><a name="Tomcat_6.0.37_(jfclere)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote> 1620 <table border="0" cellpadding="2" cellspacing="2"> 1621 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 1622 Add sample Apache Commons Daemon JSVC wrapper script bin/daemon.sh that 1623 can be used with /etc/init.d. (kkolinko) 1624 </td></tr> 1625 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 1626 In the build configuration: introduce property "tomcat.output" that is 1627 used to specify location of the build output directory. This simplifies 1628 configuration if someone wants to move the <code>output</code> directory 1629 elsewhere (e.g. out of the source tree). (kkolinko) 1630 </td></tr> 1631 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1632 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=54390">54390</a>: Use 'java_home' on Mac OS X to auto-detect JAVA_HOME. 1633 (schultz) 1634 </td></tr> 1635 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 1636 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=54601">54601</a>: Change catalina.sh to consistently use LOGGING_MANAGER 1637 variable to configure logging, instead of modifying JAVA_OPTS one. 1638 (kkolinko) 1639 </td></tr> 1640 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 1641 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=54890">54890</a>: Update to Apache Commons Daemon 1.0.15. (mturk) 1642 </td></tr> 1643 </table> 1644 </blockquote></td></tr></table> 1645</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.36 (jfclere)"><!--()--></a><a name="Tomcat_6.0.36_(jfclere)"><strong>Tomcat 6.0.36 (jfclere)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2012-10-19</strong></font></td></tr><tr><td colspan="2"><blockquote> 1646 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.36 (jfclere)/Catalina"><!--()--></a><a name="Tomcat_6.0.36_(jfclere)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 1647 <table border="0" cellpadding="2" cellspacing="2"> 1648 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 1649 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48692">48692</a>: Provide option to parse 1650 <code>application/x-www-form-urlencoded</code> PUT requests. (schultz) 1651 </td></tr> 1652 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 1653 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50306">50306</a>: New StuckThreadDetectionValve to detect requests that 1654 take a long time to process, which might indicate that their processing 1655 threads are stuck. Based on a patch provided by TomLu. (kkolinko) 1656 </td></tr> 1657 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1658 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50570">50570</a>: Enable FIPS mode to be set in AprLifecycleListener. 1659 Based upon a patch from Chris Beckey. Note that this mode requires 1660 tomcat-native 1.1.23 or later linked to a FIPS-capable OpenSSL library, 1661 which one has to build by themselves. (schultz/kkolinko) 1662 </td></tr> 1663 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1664 Improve synchronization and error handling in AprLifecycleListener. 1665 Do not allow to change SSL options if SSL has already been initialized. 1666 (schultz/kkolinko) 1667 </td></tr> 1668 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1669 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52225">52225</a>: Fix ClassCastException when adding an alias for an 1670 existing host via JMX. (kkolinko) 1671 </td></tr> 1672 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1673 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52293">52293</a>: Correctly handle the case when 1674 <code>antiResourceLocking</code> is enabled at the Context level when 1675 <code>unpackWARs</code> is disabled at the Host level. Correctly 1676 handle multi-level contexts when <code>antiResourceLocking</code> 1677 is enabled. Patch by Justin Miller. (kkolinko) 1678 </td></tr> 1679 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1680 Do not throw IllegalArgumentException from parseParameters() call 1681 when chunked POST request is too large, but treat it like an IO error. 1682 The <code>FailedRequestFilter</code> filter can be used to detect this 1683 condition. (kkolinko) 1684 </td></tr> 1685 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1686 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52384">52384</a>: Do not fail with parameter parsing when debug logging 1687 is enabled. (kkolinko) 1688 </td></tr> 1689 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1690 Do not flag extra '&' characters in parameters as parse errors. 1691 (kkolinko) 1692 </td></tr> 1693 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1694 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52488">52488</a>: Correct typos: exipre -> expire. Based on a patch by 1695 prockter. (markt) 1696 </td></tr> 1697 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1698 Reduce log level for the message about hitting 1699 <code>maxParameterCount</code> limit from WARN to INFO. 1700 Fix limit comparison to allow exactly <code>maxParameterCount</code> 1701 parameters, as documentation says, instead of 1702 <code>(maxParameterCount-1)</code>. (kkolinko) 1703 </td></tr> 1704 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1705 Slightly improve performance of UDecoder.convert(). Align 1706 <code>%2f</code> handling between implementations. (kkolinko) 1707 </td></tr> 1708 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 1709 Add <code>denyStatus</code> attribute to <code>RequestFilterValve</code> 1710 (<code>RemoteAddrValve</code>, <code>RemoteHostValve</code> valves). 1711 It allows to use different HTTP response code when rejecting denied 1712 request. E.g. 404 instead of 403. (kkolinko) 1713 </td></tr> 1714 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 1715 Add <code>SetCharacterEncodingFilter</code> (similar to the one 1716 contained in the examples web application) to the 1717 <code>org.apache.catalina.filters</code> package so that it is 1718 available for all web applications. (kkolinko) 1719 </td></tr> 1720 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 1721 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52500">52500</a>: Added configurable mechanism to retrieve user names 1722 from X509 client certificates. Based on a patch provided by 1723 Michael Furman. (schultz/kkolinko) 1724 </td></tr> 1725 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1726 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52719">52719</a>: Fix a theoretical resource leak in the JAR validation 1727 that checks for non-permitted classes in web application JARs. (markt) 1728 </td></tr> 1729 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1730 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52830">52830</a>: Correct JNDI lookups when using 1731 <code>javax.naming.Name</code> to identify the resource rather than a 1732 <code>java.lang.String</code>. (markt) 1733 </td></tr> 1734 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 1735 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52850">52850</a>: Extend memory leak prevention and detection code to 1736 work with IBM as well as Oracle JVMs. Based on a patch provided by
1737 Rohit Kelapure. (kkolinko) 1738 </td></tr> 1739 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 1740 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52996">52996</a>: In <code>StandardThreadExecutor</code>: 1741 Add the ability to configure a job queue size 1742 (<code>maxQueueSize</code> attribute). 1743 Add a variant of execute method that allows to specify a timeout for 1744 how long we want to try to add something to the queue. 1745 Based on a patch by Rüdiger Plüm. (kkolinko) 1746 </td></tr> 1747 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1748 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53047">53047</a>: If a JDBCRealm or DataSourceRealm is configured for 1749 an all roles mode that only requires authorization (and no roles) and no 1750 role table or column is defined, don't populate the Principal's roles. 1751 (markt/kkolinko) 1752 </td></tr> 1753 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1754 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53050">53050</a>: Fix handling of entropy value when initializing 1755 session id generator in session manager. Based on proposal by 1756 Andras Rozsa. (kkolinko) 1757 </td></tr> 1758 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1759 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53056">53056</a>: Add APR version number to tcnative version INFO log 1760 message. (schultz) 1761 </td></tr> 1762 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1763 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53057">53057</a>: Add OpenSSL version number INFO log message when 1764 initializing. (schultz) 1765 </td></tr> 1766 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1767 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53071">53071</a>: Use the message from the Throwable for the error 1768 report generated by the <code>ErrorReportValve</code> if none was 1769 specified via <code>sendError()</code>. Use the standard text for HTTP 1770 error codes. (markt/rjung) 1771 </td></tr> 1772 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 1773 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53230">53230</a>: Change session managers to throw 1774 TooManyActiveSessionsException instead of IllegalStateException 1775 when the maximum number of sessions has been exceeded and a new 1776 session will not be created. (schultz/kkolinko) 1777 </td></tr> 1778 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1779 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53267">53267</a>: Ensure that using the GC Daemon Protection feature of 1780 the <code>JreMemoryLeakPreventionListener</code> does not trigger a 1781 full GC every hour. (markt/kkolinko) 1782 </td></tr> 1783 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1784 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53531">53531</a>: Fix ExpandWar.expand to check the return value of 1785 File.mkdir and File.mkdirs. (schultz) 1786 </td></tr> 1787 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1788 Make the CSRF nonce cache in <code>CsrfPreventionFilter</code> 1789 serializable so that it can be replicated across a cluster and/or 1790 persisted across Tomcat restarts. (markt) 1791 </td></tr> 1792 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1793 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53584">53584</a>: Ignore path parameters when comparing URIs for FORM 1794 authentication. This prevents users being prompted twice for passwords 1795 when logging in when session IDs are being encoded as path parameters. 1796 (markt) 1797 </td></tr> 1798 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1799 CVE-2012-3439: 1800 Various improvements to the DIGEST authenticator including 1801 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52954">52954</a>, the disabling caching of an authenticated user in the 1802 session by default, tracking server rather than client nonces and better 1803 handling of stale nonce values. (markt) 1804 </td></tr> 1805 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1806 CVE-2012-3546: Fix bypass of security constraint checks with FORM 1807 authentication. Remove unneeded processing in <code>RealmBase</code>. 1808 (kkolinko) 1809 </td></tr> 1810 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1811 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53800">53800</a>: <code>FileDirContext.list()</code> did not provide 1812 correct paths for subdirectories. Patch provided by Kevin Wooten. 1813 (kkolinko) 1814 </td></tr> 1815 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1816 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53830">53830</a>: Better handling of <code>Manager.randomFile</code> 1817 default value on Windows. (kkolinko) 1818 </td></tr> 1819 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1820 CVE-2012-4431: Fix bypass of <code>CsrfPreventionFilter</code> when 1821 there is no session. Improve session management in the filter. 1822 (kkolinko) 1823 </td></tr> 1824 </table> 1825 </blockquote></td></tr></table> 1826 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.36 (jfclere)/Coyote"><!--()--></a><a name="Tomcat_6.0.36_(jfclere)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote> 1827 <table border="0" cellpadding="2" cellspacing="2"> 1828 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1829 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42181">42181</a>: Better handling of edge conditions in chunk header 1830 processing. (kkolinko) 1831 </td></tr> 1832 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 1833 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51477">51477</a>: Support all SSL protocol combinations in the APR/native 1834 connector. This only works when using the native library version 1.1.21 1835 or later. (rjung) 1836 </td></tr> 1837 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1838 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52055">52055</a> (comment 14): Correctly reset 1839 <code>ChunkedInputFilter.needCRLFParse</code> flag when the filter 1840 is recycled. (kkolinko) 1841 </td></tr> 1842 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1843 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52606">52606</a>: Ensure replayed POST bodies are available when using 1844 AJP. (markt) 1845 </td></tr> 1846 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1847 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52858">52858</a>, CVE-2012-4534: Fix high CPU load with SSL, NIO and 1848 sendfile when client breaks the connection before reading all the 1849 requested data. 1850 (fhanik/kkolinko) 1851 </td></tr> 1852 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1853 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53119">53119</a>: Prevent buffer overflow errors being reported when a 1854 client disconnects before the response has been fully written from an
1855 AJP connection using the APR/native connector. (kkolinko) 1856 </td></tr> 1857 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1858 CVE-2012-2733: 1859 Improve <code>InternalNioInputBuffer.parseHeaders()</code>. (kkolinko) 1860 </td></tr> 1861 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 1862 Implement <code>maxHeaderCount</code> attribute on Connector. 1863 It is equivalent of LimitRequestFields directive of 1864 <a href="http://httpd.apache.org/">Apache HTTPD</a>. 1865 Default value is 100. (kkolinko) 1866 </td></tr> 1867 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1868 In JkCoyoteHandler connector for AJP/1.3 protocol 1869 (in <code>JkMain.setProperty()</code>): 1870 Fix setting of properties when connector has already started for 1871 properties that have aliases. E.g. it now allows to change 1872 <code>maxHeaderCount</code> attribute on Connector MBean via JMX. 1873 (kkolinko) 1874 </td></tr> 1875 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1876 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53725">53725</a>: Fix possible corruption of GZIP'd output. (kkolinko) 1877 </td></tr> 1878 </table> 1879 </blockquote></td></tr></table> 1880 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.36 (jfclere)/Jasper"><!--()--></a><a name="Tomcat_6.0.36_(jfclere)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote> 1881 <table border="0" cellpadding="2" cellspacing="2"> 1882 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1883 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48097">48097</a> (comment 7), <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53366">53366</a> (comment 1): 1884 If JSP page unexpectedly fails to initialize PageContext instance, 1885 write exception to the logs instead of silent swallowing. (kkolinko) 1886 </td></tr> 1887 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1888 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52335">52335</a>: Only handle <code><\%</code> and not 1889 <code>\%</code> as escaped in template text. (markt) 1890 </td></tr> 1891 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1892 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52666">52666</a>: Correct coercion order in EL when processing the 1893 equality and inequality operators. (markt) 1894 </td></tr> 1895 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1896 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53001">53001</a>: Revert the fix for <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46915">46915</a> since the use case 1897 described in the bug is invalid since it breaks the EL specification. 1898 (markt) 1899 </td></tr> 1900 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1901 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53032">53032</a>: Modify <code>JspC</code> so it extends 1902 <code>org.apache.tools.ant.Task</code> enabling it to work with features 1903 such as namespaces within build.xml files. (markt) 1904 </td></tr> 1905 </table> 1906 </blockquote></td></tr></table> 1907 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.36 (jfclere)/Cluster"><!--()--></a><a name="Tomcat_6.0.36_(jfclere)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote> 1908 <table border="0" cellpadding="2" cellspacing="2"> 1909 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1910 Replicate principal in ClusterSingleSignOn. (kfujino) 1911 </td></tr> 1912 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1913 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53513">53513</a>: Fix race condition between the processing of session 1914 sync message and transfer complete message. (kfujino) 1915 </td></tr> 1916 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1917 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53606">53606</a>: Fix potential NPE in <code>
1917TcpPingInterceptor</code>. 1918 Based on a patch by F. Arnoud. (markt) 1919 </td></tr> 1920 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1921 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53607">53607</a>: To avoid NPE, set TCP PING data to ChannelMessage. 1922 Patch provided by F.Arnoud (kfujino) 1923 </td></tr> 1924 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1925 Fix a behavior of TcpPingInterceptor#useThread. 1926 Do not start a ping thread when useThread is set to false. (kfujino) 1927 </td></tr> 1928 </table> 1929 </blockquote></td></tr></table> 1930 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.36 (jfclere)/Web applications"><!--()--></a><a name="Tomcat_6.0.36_(jfclere)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote> 1931 <table border="0" cellpadding="2" cellspacing="2"> 1932 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1933 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52243">52243</a>: Improve windows service documentation to clarify how 1934 to include <code>#</code> and/or <code>;</code> in the value of an 1935 environment variable that is passed to the service. (markt) 1936 </td></tr> 1937 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1938 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52515">52515</a>: Make it clear in the Realm how-to in the documentation 1939 web application that digested password storage when using DIGEST 1940 authentication requires that MD5 digests are used. (markt) 1941 </td></tr> 1942 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1943 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52641">52641</a>: Remove mentioning of ldap.jar from docs. 1944 Patch provided by Felix Schumacher. (rjung) 1945 </td></tr> 1946 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1947 Remove obsolete bug warning from windows service 1948 documentation page. (rjung) 1949 </td></tr> 1950 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1951 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52983">52983</a>: Remove unnecessary code that makes switching to 1952 other authentication methods difficult. (markt) 1953 </td></tr> 1954 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1955 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53158">53158</a>: Fix documented defaults for DBCP. 1956 Patch provided by ph.dezanneau at gmail.com. (rjung) 1957 </td></tr> 1958 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 1959 Update JavaSE documentation links to point to the current 1960 docs.oracle.com site, instead of obsolete ones (download.oracle.com, 1961 java.sun.com). (kkolinko) 1962 </td></tr> 1963 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 1964 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53289">53289</a>: Clarify <code>ResourceLink</code> example that 1965 uses DataSource.getConnection(username, password) method. Not all 1966 data source implementations support it. (kkolinko) 1967 </td></tr> 1968 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1969 Prevent the custom error pages for the Manager and Host Manager 1970 applications from being accessed directly. Configure custom 1971 pages for error codes 401 and 403 in Host Manager application. 1972 (markt/kkolinko) 1973 </td></tr> 1974 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1975 Correct documentation for <code>enableLookups</code> attribute 1976 of a Connector. By default DNS lookups are disabled. (kkolinko) 1977 </td></tr> 1978 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1979 Fix several HTML markup errors in servlets of examples web application. 1980 (kkolinko) 1981 </td></tr> 1982 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 1983 Change the index page of ROOT webapp to mention "manager-gui" role 1984 instead of "manager" one. (kkolinko) 1985 </td></tr> 1986 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1987 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53473">53473</a>: Correct the allowed values for the SSI option 1988 <code>isVirtualWebappRelative</code> which are <code>true</code> or 1989 <code>false</code>. (markt) 1990 </td></tr> 1991 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1992 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53664">53664</a>: Minor JNDI Howto document enhancement concerning mail 1993 properties. Patch provided by Mark Eggers. (schultz) 1994 </td></tr> 1995 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 1996 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53601">53601</a>: Clarify that to build Apache Tomcat 6 from sources 1997 a Java 5 JDK is recommended. (kkolinko) 1998 </td></tr> 1999 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2000 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53793">53793</a>: Change links on the list of applications in the 2001 Manager to point to <code>/appname/</code> instead of 2002 <code>
2002/appname</code>. (kkolinko) 2003 </td></tr> 2004 </table> 2005 </blockquote></td></tr></table> 2006 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.36 (jfclere)/Other"><!--()--></a><a name="Tomcat_6.0.36_(jfclere)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote> 2007 <table border="0" cellpadding="2" cellspacing="2"> 2008 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2009 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49402">49402</a>, <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52124">52124</a>: Fix Maven publishing script: 2010 make sure it finds tomcat-juli.jar and use later version of 2011 wagon-ssh. (jfclere) 2012 </td></tr> 2013 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2014 Update Apache Commons Daemon to 1.0.10. It resolves <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52548">52548</a> 2015 which meant that services created with service.bat did not set the 2016 <code>catalina.home</code> and <code>catalina.base</code> system 2017 properties. (markt, kkolinko) 2018 </td></tr> 2019 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 2020 Update Apache Commons Pool to 1.5.7. (kkolinko) 2021 </td></tr> 2022 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 2023 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52579">52579</a>: Add a note about Sun's Charset.decode() bug to the 2024 RELEASE-NOTES file. (kkolinko) 2025 </td></tr> 2026 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 2027 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52805">52805</a>: Update to Eclipse JDT Compiler 3.7.2. (kkolinko) 2028 </td></tr> 2029 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 2030 Update the native component of the APR/native connectors to 1.1.23 2031 and take advantage of the simplified distribution. (kkolinko) 2032 </td></tr> 2033 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2034 When building a Windows installer do not copy whole "res" folder to 2035 output/dist, but only the files that we need. Apply fixcrlf filter 2036 only after the files are copied, so that <code>INSTALLLICENSE</code> 2037 file had correct line ends. (kkolinko) 2038 </td></tr> 2039 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 2040 Remove <code>res/License.rtf</code>. The file that is actually shown 2041 by the Windows installer is <code>res/INSTALLLICENSE</code>. 2042 (kkolinko) 2043 </td></tr> 2044 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 2045 Improve <code>RUNNING.txt</code>. (kkolinko) 2046 </td></tr> 2047 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 2048 Align the script that deploys Maven jars for Tomcat 2049 (<code>res/maven/mvn-pub.xml</code>) with the Tomcat 7 version, 2050 making full use of Nexus. (markt) 2051 </td></tr> 2052 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2053 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53034">53034</a>: Add <code>project.url</code> and 2054 <code>project.licenses</code> sections to the POMs for the Maven 2055 artifacts. (kkolinko) 2056 </td></tr> 2057 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2058 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53454">53454</a>: Return correct content-length header for HEAD requests 2059 when content length is greater than 2GB. (markt) 2060 </td></tr> 2061 </table> 2062 </blockquote></td></tr></table> 2063</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.35 (jfclere)"><!--()--></a><a name="Tomcat_6.0.35_(jfclere)"><strong>Tomcat 6.0.35 (jfclere)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2011-12-05</strong></font></td></tr><tr><td colspan="2"><blockquote> 2064 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.35 (jfclere)/Catalina"><!--()--></a><a name="Tomcat_6.0.35_(jfclere)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 2065 <table border="0" cellpadding="2" cellspacing="2"> 2066 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2067 Fix regression in decoding of parameters that contain spaces. 2068 Patch by Willem Fibbe. (kkolinko) 2069 </td></tr> 2070 </table> 2071 </blockquote></td></tr></table> 2072</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.34 (jfclere)"><!--()--></a><a name="Tomcat_6.0.34_(jfclere)"><strong>Tomcat 6.0.34 (jfclere)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote> 2073 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.34 (jfclere)/Catalina"><!--()--></a><a name="Tomcat_6.0.34_(jfclere)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 2074 <table border="0" cellpadding="2" cellspacing="2"> 2075 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2076 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51550">51550</a>: Display an error page rather than an empty response 2077 for an IllegalStateException caused by too many active sessions. (markt) 2078 </td></tr> 2079 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2080 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51640">51640</a>: Improve the memory leak prevention for leaks 2081 triggered by java.sql.DriverManager. (markt/kkolinko) 2082 </td></tr> 2083 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2084 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51688">51688</a>: JreMemoryLeakPreventionListener now protects against 2085 AWT thread creation. (schultz) 2086 </td></tr> 2087 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2088 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51758">51758</a>: The digester (used for processing XML files) used the 2089 logger name <code>org.apache.commons.digester.Digester</code> rather 2090 than the expected <code>org.apache.tomcat.util.digester.Digester</code>. 2091 The digester has been changed to use the expected logger name. 2092 (kkolinko) 2093 </td></tr> 2094 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2095 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51862">51862</a>: Added a <code>
2095classesToInitialize</code> attribute to 2096 <code>JreMemoryLeakPreventionListener</code> to allow pre-loading of configurable 2097 classes to avoid some classloader leaks. (slaurent) 2098 </td></tr> 2099 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2100 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51872">51872</a>: Ensure that the access log always uses the correct 2101 value for the remote IP address associated with the request and that 2102 requests with multiple errors do not result in multiple entries in 2103 the access log. (markt) 2104 </td></tr> 2105 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2106 Allow to overwrite the check for distributability 2107 of session attributes by session implementations. (rjung) 2108 </td></tr> 2109 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2110 Provide the log format "OneLineFormatter" for JULI that provides the same 2111 information as the default plus thread name but on a single line. 2112 (markt/rjung) 2113 </td></tr> 2114 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2115 Ensure that the memory leak protection for the HttpClient keep-alive 2116 always operates even if the thread has already stopped. (markt) 2117 </td></tr> 2118 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2119 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51940">51940</a>: Do not limit saving of request bodies during FORM 2120 authentication to POST requests since any HTTP method may include a 2121 request body. Based on a patch by Nicholas Sushkin. (kkolinko) 2122 </td></tr> 2123 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2124 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52091">52091</a>: Address performance issues related to lock contention 2125 in StandardWrapper. Based on patch provided by Taiki Sugawara. 2126 (kkolinko) 2127 </td></tr> 2128 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 2129 In GenericPrincipal, SerializablePrincipal: Do not sort lists of roles 2130 that have only one element. (kkolinko) 2131 </td></tr> 2132 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2133 Make configuration issue for CsrfPreventionFilter result in the 2134 failure of the filter rather than just a warning message. (kkolinko) 2135 </td></tr> 2136 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2137 Ensure changes to the configuration of RemoteAddrValve and 2138 RemoteHostValve via JMX are thread-safe. (kkolinko) 2139 </td></tr> 2140 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2141 Make configuration issue for RemoteAddrValve and 2142 RemoteHostValve result in the failure of the valve rather than 2143 just a warning message. (kkolinko) 2144 </td></tr> 2145 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 2146 In <code>RequestFilterValve</code> (<code>RemoteAddrValve</code>, 2147 <code>RemoteHostValve</code>): refactor value matching logic into 2148 separate method and expose this new method <code>isAllowed</code> 2149 through JMX. (kkolinko) 2150 </td></tr> 2151 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2152 Improve performance of parameter processing for GET and POST requests. 2153 Also add an option to limit the maximum number of parameters processed 2154 per request. This defaults to 10000. Excessive parameters are ignored. 2155 Note that <code>FailedRequestFilter</code> can be used to reject the 2156 request if some parameters were ignored. (markt/kkolinko) 2157 </td></tr> 2158 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2159 New filter <code>FailedRequestFilter</code> that will reject a request 2160 if there were errors during HTTP parameter parsing. (kkolinko) 2161 </td></tr> 2162 </table> 2163 </blockquote></td></tr></table> 2164 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.34 (jfclere)/Coyote"><!--()--></a><a name="Tomcat_6.0.34_(jfclere)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote> 2165 <table border="0" cellpadding="2" cellspacing="2"> 2166 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2167 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50394">50394</a>: Return -1 from read operation instead of throwing an 2168 exception when encountering an EOF with the HTTP APR connector. 2169 (kkolinko) 2170 </td></tr> 2171 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2172 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51698">51698</a>: Fix CVE-2011-3190. Prevent AJP message injection. 2173 (markt) 2174 </td></tr> 2175 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2176 Detect incomplete AJP messages and reject the associated request if one 2177 is found. (markt) 2178 </td></tr> 2179 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2180 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51794">51794</a>: Fix race condition in NioEndpoint selector. Patch 2181 provided by dlord. (fhanik) 2182 </td></tr> 2183 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2184 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51905">51905</a>: Fix infinite loop in AprEndpoint shutdown if 2185 acceptor unlock fails. Reduce timeout before forcefully closing 2186 the socket from 30s to 10s. (kkolinko) 2187 </td></tr> 2188 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2189 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52121">52121</a>: Fix possible output corruption when compression is 2190 enabled for a connector and the response is flushed. Test 2191 case provided by David Marcks. (kkolinko) 2192 </td></tr> 2193 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2194 Replace unneeded call that iterated events queue in NioEndpoint.Poller. 2195 (kkolinko) 2196 </td></tr> 2197 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2198 Improve MimeHeaders.toString(). (kkolinko) 2199 </td></tr> 2200 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2201 Allow the BIO HTTP connector to be used with SSL when running under Java 2202 7. (markt) 2203 </td></tr> 2204 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2205 Improve multi-byte character handling in all connectors. (rjung) 2206 </td></tr> 2207 </table> 2208 </blockquote></td></tr></table> 2209 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.34 (jfclere)/Jasper"><!--()--></a><a name="Tomcat_6.0.34_(jfclere)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote> 2210 <table border="0" cellpadding="2" cellspacing="2"> 2211 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2212 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51220">51220</a>: Correct copy/paste error in original commit for this 2213 issue. (markt) 2214 </td></tr> 2215 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2216 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52091">52091</a>: Address performance issues related to log creation 2217 in TagHandlerPool. Patch provided by Taiki Sugawara. (markt) 2218 </td></tr> 2219 </table> 2220 </blockquote></td></tr></table> 2221 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.34 (jfclere)/Cluster"><!--()--></a><a name="Tomcat_6.0.34_(jfclere)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote> 2222 <table border="0" cellpadding="2" cellspacing="2"> 2223 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2224 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51736">51736</a>: Make rpcTimeout configurable in BackupManager. 2225 (kfujino) 2226 </td></tr> 2227 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2228 New cluster manager attribute <code>sessionAttributeFilter</code> 2229 allows to filter which session attributes are replicated using a
2230 regular expression applied to the attribute name. (rjung) 2231 </td></tr> 2232 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2233 Avoid an unnecessary session ID change notice. 2234 Notice of changed session ID by JvmRouteBinderValve is unnecessary to 2235 BackupManager. In BackupManager, change of session ID is replicated by 2236 the call of a setId() method. (kfujino) 2237 </td></tr> 2238 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2239 Fix unneeded duplicate <code>resetDeltaRequest()</code> call in 2240 <code>DeltaSession.setId(String)</code>. (kkolinko) 2241 </td></tr> 2242 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2243 When Context manager does not exist, no context manager message is 2244 replied in order to avoid timeout (default 60 sec) of 2245 GET_ALL_SESSIONS sync phase. (kfujino) 2246 </td></tr> 2247 </table> 2248 </blockquote></td></tr></table> 2249 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.34 (jfclere)/Web applications"><!--()--></a><a name="Tomcat_6.0.34_(jfclere)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote> 2250 <table border="0" cellpadding="2" cellspacing="2"> 2251 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2252 Correct the documentation for the connectionLinger attribute of the HTTP 2253 connector. (markt) 2254 </td></tr> 2255 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2256 Show build date and version in the header on every documentation 2257 page. (kkolinko) 2258 </td></tr> 2259 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2260 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52049">52049</a>: Improve setup instructions for running as a Windows 2261 service: correct information on how a JRE is identified and selected. 2262 (markt) 2263 </td></tr> 2264 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 2265 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52172">52172</a>: Clarify Tomcat build instructions. Patch provided 2266 by bmargulies. (kkolinko) 2267 </td></tr> 2268 </table> 2269 </blockquote></td></tr></table> 2270 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.34 (jfclere)/Other"><!--()--></a><a name="Tomcat_6.0.34_(jfclere)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote> 2271 <table border="0" cellpadding="2" cellspacing="2"> 2272 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 2273 Update the native component of the APR/native connectors to 1.1.22. 2274 (markt) 2275 </td></tr> 2276 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 2277 Update the recommended version of the native component of the APR/native 2278 connectors to 1.1.22. (kkolinko) 2279 </td></tr> 2280 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 2281 Update the Eclipse compiler (used for JSPs) to 3.7. (markt) 2282 </td></tr> 2283 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2284 Correct two typos in the Windows installer. (kkolinko) 2285 </td></tr> 2286 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2287 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52059">52059</a>: In Windows uninstaller: Do not forget to remove 2288 Tomcat keys from 32-bit registry on deinstallation. (kkolinko) 2289 </td></tr> 2290 </table> 2291 </blockquote></td></tr></table> 2292</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.33 (jfclere)"><!--()--></a><a name="Tomcat_6.0.33_(jfclere)"><strong>Tomcat 6.0.33 (jfclere)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2011-08-18</strong></font></td></tr><tr><td colspan="2"><blockquote> 2293 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.33 (jfclere)/Catalina"><!--()--></a><a name="Tomcat_6.0.33_(jfclere)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 2294 <table border="0" cellpadding="2" cellspacing="2"> 2295 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2296 Allow to search the virtual paths before the webapp or after it. (rjung) 2297 </td></tr> 2298 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2299 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=27988">27988</a>: Improve reporting of missing files. (markt) 2300 </td></tr> 2301 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2302 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=28852">28852</a>: Add URL encoding where missing to parameters in URLs 2303 presented by Ant tasks to the Manager application. Based on a patch by 2304 Stephane Bailliez. (markt) 2305 </td></tr> 2306 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2307 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46252">46252</a>: Allow to specify character set to be used to write 2308 the access log in AccessLogValve. (kkolinko) 2309 </td></tr> 2310 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2311 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48863">48863</a>: Provide an warning if there is a problem with a class 2312 path entry but use debug level logging if it is expected due to catalina 2313 home/base split. (kkolinko) 2314 </td></tr> 2315 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2316 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49180">49180</a>: Add an option to disable file rotation in JULI 2317 FileHandler. (kkolinko) 2318 </td></tr> 2319 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2320 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50189">50189</a>: Once the application has finished writing to the 2321 response, prevent further reads from the request since this causes 2322 various problems in the connectors which do not expect this. (markt) 2323 </td></tr> 2324 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2325 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50700">50700</a>: Ensure that the override attribute of context 2326 parameters is correctly followed. (markt) 2327 </td></tr> 2328 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2329 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50734">50734</a>: Return 404 rather than 400 for requests to the ROOT 2330 context when no ROOT context is deployed. Patch provided by Violeta 2331 Georgieva. (markt) 2332 </td></tr> 2333 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2334 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50751">50751</a>
2334: When authenticating with the JNDI Realm, only attempt 2335 to read user attributes from the directory if attributes are required. 2336 (markt) 2337 </td></tr> 2338 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2339 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50752">50752</a>: Fix typo in debug message in 2340 <code>org.apache.catalina.startup.Embedded</code>. (markt) 2341 </td></tr> 2342 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2343 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50855">50855</a>: Fix NPE on AuthenticatorBase.register() when debug 2344 logging is enabled. (markt) 2345 </td></tr> 2346 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2347 Correctly format the timestamp reported by version.[sh|bat]. (markt) 2348 </td></tr> 2349 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2350 Remove unnecessary whitespace from MIME mapping entries in global 2351 web.xml file. (markt) 2352 </td></tr> 2353 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2354 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51042">51042</a>: Don't trigger session creation listeners when a 2355 session ID is changed as part of the authentication process. (markt) 2356 </td></tr> 2357 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2358 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51119">51119</a>: Add JAAS authentication support to the 2359 JMXRemoteLifecycleListener. Patch provided by Neil Laurance. (markt) 2360 </td></tr> 2361 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 2362 Implement display of multiple request headers in AccessLogValve: 2363 print not just the value of the first header, but of the all of them, 2364 separated by commas. (kkolinko) 2365 </td></tr> 2366 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2367 Correct the SSLValve so it returns the SSL key size as an Integer rather 2368 than as a String. (markt) 2369 </td></tr> 2370 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2371 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51162">51162</a>: Prevent possible NPE when removing a web application. 2372 (markt) 2373 </td></tr> 2374 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2375 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51249">51249</a>: Improve system property replacement code 2376 in ClassLoaderLogManager of Tomcat JULI to cover some corner cases. 2377 (kkolinko) 2378 </td></tr> 2379 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2380 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51315">51315</a>: Fix IAE when removing an authenticator valve from a 2381 container. Patch provided by Violeta Georgieva. (markt) 2382 </td></tr> 2383 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2384 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51324">51324</a>: Improve handling of exceptions when flushing the 2385 response buffer to ensure that the doFlush flag does not get stuck in 2386 the enabled state. Patch provided by Jeremy Norris. (kkolinko) 2387 </td></tr> 2388 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2389 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51348">51348</a>: Fix possible NPE when processing WebDAV locks. (markt) 2390 </td></tr> 2391 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2392 Add a container event that is fired when a session's ID is changed, 2393 e.g. on authentication. (markt) 2394 </td></tr> 2395 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2396 Fix CVE-2011-2204. Prevent user passwords appearing in log files if a 2397 runtime exception (e.g. OOME) occurs while creating a new user for a 2398 MemoryUserDatabase via JMX. (markt) 2399 </td></tr> 2400 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2401 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51400">51400</a>: Avoid jvm bottleneck on String/byte[] conversion 2402 triggered by a JVM bug. Based on patches by Dave Engberg and Konstantin 2403 Preißer. (markt) 2404 </td></tr> 2405 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2406 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51403">51403</a>: Avoid NPE in JULI FileHandler if formatter is 2407 misconfigured. (kkolinko) 2408 </td></tr> 2409 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 2410 Create a directory for access log or error log (in AccessLogValve and 2411 in JULI FileHandler) automatically when it is specified as a part of 2412 the file name, e.g. in the <code>prefix</code> attribute. Earlier this 2413 happened only if it was specified with the <code>directory</code> 2414 attribute. (kkolinko) 2415 </td></tr> 2416 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2417 Log a failure if access log file cannot be opened. Improve i18n 2418 of messages. (kkolinko) 2419 </td></tr> 2420 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2421 Improve handling of URLs with path parameters and prevent incorrect 404 2422 responses that could occur when path parameters were present. 2423 The method <code>getRequestURI()</code> was fixed to comply with 2424 specification (chapter SRV.3.1 of Servlet Spec. 2.5, javadoc) and now 2425 returns original request URI line from a HTTP request including any 2426 path parameters (such as jsessionid). See issues <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51833">51833</a> and 2427 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53584">53584</a>. 2428 (kkolinko/markt) 2429 </td></tr> 2430 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2431 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51473">51473</a>: Fix concatenation of values in 2432 <code>SecurityConfig.setSecurityProperty()</code>. (kkolinko) 2433 </td></tr> 2434 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2435 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51509">51509</a>: Fix potential concurrency issue in CSRF prevention 2436 filter that may lead to some requests failing that should not. (markt) 2437 </td></tr> 2438 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2439 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51588">51588</a>: Make it easier to extend the AccessLogValve to add 2440 support for custom elements. (markt) 2441 </td></tr> 2442 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2443 Unregister DataSource MBeans when web application stops. (kfujino) 2444 </td></tr> 2445 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2446 CVE-2011-1184: Add additional configuration options to the DIGEST
2447 authenticator. (markt) 2448 </td></tr> 2449 </table> 2450 </blockquote></td></tr></table> 2451 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.33 (jfclere)/Coyote"><!--()--></a><a name="Tomcat_6.0.33_(jfclere)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote> 2452 <table border="0" cellpadding="2" cellspacing="2"> 2453 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2454 Reduce level of log message for invalid URL parameters from WARNING to 2455 INFO. (kkolinko) 2456 </td></tr> 2457 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2458 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48208">48208</a>: Provide an option to specify a custom trust manager 2459 for BIO and NIO HTTP connectors using SSL. Based on a patch by Luciana 2460 Moreira. (markt) 2461 </td></tr> 2462 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2463 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49595">49595</a>: Protect against crashes when using the APR/native 2464 connector. (jfclere) 2465 </td></tr> 2466 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2467 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49929">49929</a>: Make sure flush packet is not send after END_RESPONSE 2468 packet. (mturk/markt) 2469 </td></tr> 2470 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2471 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50887">50887</a>: Enable the provider to be configured when generating 2472 SSL certs. Based on a patch by pknopp. (markt) 2473 </td></tr> 2474 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2475 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51073">51073</a>: Throw an exception and do not start the APR connector 2476 if it is configured for SSL and an invalid value is provided for 2477 SSLProtocol. (markt) 2478 </td></tr> 2479 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2480 Fix CVE 2011-2526. Protect against infinite loops (HTTP NIO) and crashes 2481 (HTTP APR) if sendfile is configured to send more data than is available 2482 in the file. (markt) 2483 </td></tr> 2484 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2485 Prevent NPEs when a socket is closed in non-error conditions after 2486 sendfile processing when using the HTTP NIO connector. (markt) 2487 </td></tr> 2488 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2489 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51515">51515</a>: Prevent immediate socket close when comet is used over 2490 HTTPS. (markt) 2491 </td></tr> 2492 </table> 2493 </blockquote></td></tr></table> 2494 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.33 (jfclere)/Jasper"><!--()--></a><a name="Tomcat_6.0.33_(jfclere)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote> 2495 <table border="0" cellpadding="2" cellspacing="2"> 2496 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2497 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=36362">36362</a>: Handle the case where tag file attributes (which can 2498 use any valid XML name) have a name which is not a Java identifier. 2499 (markt) 2500 </td></tr> 2501 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2502 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47371">47371</a>: Correctly coerce the empty string to zero when used as 2503 an operand in EL arithmetic. Patch provided by gbt. (markt) 2504 </td></tr> 2505 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2506 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50726">50726</a>: Ensure that the use of the genStringAsCharArray does 2507 not result in String constants that are too long for valid Java code. 2508 (markt) 2509 </td></tr> 2510 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2511 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50895">50895</a>: Don't initialize classes created during the 2512 compilation stage. (markt) 2513 </td></tr> 2514 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2515 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51124">51124</a>: Make Tomcat more robust if an OOME occurs. Usually 2516 after an OOME all bets are off but this change appears to help some 2517 users and the description of a 'recoverable' OOME in the bug 2518 is a plausible one. Based on a patch by Ramiro. (markt) 2519 </td></tr> 2520 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2521 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51177">51177</a>: Ensure Tomcat's MapELResolver and ListELResolver 2522 always return <code>Object.class</code> for <code>getType()</code> as 2523 required by the EL specification. (markt) 2524 </td></tr> 2525 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2526 Correct possible threading issue in JSP compilation when development 2527 mode is used. (markt) 2528 </td></tr> 2529 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2530 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51220">51220</a>: Add a system property to enable tag pooling with JSPs 2531 that use a custom base class. Based on a patch by Dan Mikusa. (markt) 2532 </td></tr> 2533 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2534 Broaden the exception handling in the EL Parser so that more failures to 2535 parse an expression include the failed expression in the exception 2536 message. Hopefully, this will help track down the cause of 2537 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51088">51088</a>. (markt) 2538 </td></tr> 2539 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2540 Improve error reporting of Jasper compilation. (schultz) 2541 </td></tr> 2542 </table> 2543 </blockquote></td></tr></table> 2544 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.33 (jfclere)/Cluster"><!--()--></a><a name="Tomcat_6.0.33_(jfclere)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote> 2545 <table border="0" cellpadding="2" cellspacing="2"> 2546 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2547 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50646">50646</a>: Fix cluster message data corruption if message size 2548 exceeds the underlying buffer size. Patch provided by Olivier Costet. 2549 (markt) 2550 </td></tr> 2551 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2552 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50771">50771</a>: Ensure HttpServletRequest#getAuthType() returns the 2553 name of the authentication scheme if request has already been 2554 authenticated. (kfujino) 2555 </td></tr> 2556 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2557 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50950">50950</a>: Correct possible NotSerializableException for an 2558 authenticated session when running with a security manager. (markt) 2559 </td></tr> 2560 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2561 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51306">51306</a>: Avoid NPE when handleSESSION_EXPIRED is processed 2562 while handleSESSION_CREATED is being processed. (kfujino) 2563 </td></tr> 2564 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2565 The change in session ID is notified to the container event listener on 2566 the backup node in cluster. This notification is controlled by 2567 notifyContainerListenersOnReplication. (kfujino) 2568 </td></tr> 2569 </table> 2570 </blockquote></td></tr></table> 2571 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.33 (jfclere)/Web applications"><!--()--></a><a name="Tomcat_6.0.33_(jfclere)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote> 2572 <table border="0" cellpadding="2" cellspacing="2"> 2573 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2574 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41498">41498</a>: Add the allRolesMode attribute to the Realm 2575 configuration page in the documentation web application. (markt) 2576 </td></tr> 2577 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2578 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48997">48997</a>: Fixed some typos and improve cross-referencing to the 2579 HTTP Connector and APR documentation with the SSL How-To page of the 2580 documentation web application. (markt) 2581 </td></tr> 2582 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2583 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50804">50804</a>: Update links for Servlet 2.5 and JSP 2.1 Javadoc. 2584 (markt) 2585 </td></tr> 2586 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 2587 Improve class loading documentation and logging documentation. 2588 (kkolinko) 2589 </td></tr> 2590 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 2591 Configure Security Manager How-To to include a copy of the actual 2592 conf/catalina.policy file when the documentation is built, rather 2593 than maintaining a copy of its content. (kkolinko) 2594 </td></tr> 2595 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2596 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51147">51147</a>: Fix deployment via HTML Manager that was broken by 2597 addition of CRSF protection. Patch provided by Alexis Hassler. (markt) 2598 </td></tr> 2599 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2600 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51156">51156</a>: Ensure session expiration option is available in 2601 Manager application was running web applications that were defined in 2602 server.xml. (markt) 2603 </td></tr> 2604 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2605 Correct the log4j configuration settings when defining conversion 2606 patterns in the documentation web application. (markt) 2607 </td></tr> 2608 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2609 Update Maven repository information in the documentation to reflect 2610 current usage. (markt) 2611 </td></tr> 2612 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2613 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51346">51346</a>: Update the documentation web application to make clear 2614 the circumstances in which the RequestDumperValve will consume the 2615 request's InputStream. Based on a patch by pid. (markt) 2616 </td></tr> 2617 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2618 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51443">51443</a>: Document the notifySessionListenersOnReplication 2619 attribute for the DeltaManager. (markt) 2620 </td></tr> 2621 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2622 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51516">51516</a>: Correct documentation web application to show correct 2623 system property name for changing the name of the SSO session cookie. 2624 (markt) 2625 </td></tr> 2626 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 2627 Update documentation to be even more explicit about the implications 2628 of setting the <code>path</code> attribute on a <code>Context</code> 2629 element in <code>server.xml</code>. (markt/kkolinko) 2630 </td></tr> 2631 </table> 2632 </blockquote></td></tr></table> 2633 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.33 (jfclere)/Other"><!--()--></a><a name="Tomcat_6.0.33_(jfclere)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote> 2634 <table border="0" cellpadding="2" cellspacing="2"> 2635 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 2636 Clarify error messages in *.sh files to mention that if a script is 2637 not found it might be because execute permission is needed. (kkolinko) 2638 </td></tr> 2639 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2640 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=33262">33262</a>, <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=40510">40510</a>, <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50949">50949</a>, <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51135">51135</a>: 2641 Various improvements to the Windows installer to be able to install 2642 several copies of Tomcat 6 side by side. Allow to configure service 2643 name, connector and shutdown ports. Allow to choose whether to install 2644 Start menu shortcuts and Apache Tomcat monitor application for all 2645 users or for the current one only. Improve auto-detection of JAVA_HOME 2646 for 64-bit Windows platforms: autoselect 32-bit JRE if it exists and 2647 64-bit one is not available. Improve server.xml file handling. 2648 Fix uninstallation icon. (markt/kkolinko) 2649 </td></tr> 2650 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2651 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50854">50854</a>: Add additional entries to the default catalina.policy
2652 file to support running the manager web application from CATALINA_HOME 2653 or CATALINA_BASE. (markt) 2654 </td></tr> 2655 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2656 Update default download sources to use the central Apache Maven 2 2657 repository as some libraries have been removed from the central Apache 2658 Maven 1 repository. (kkolinko) 2659 </td></tr> 2660 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2661 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51155">51155</a>: Add comments to @deprecated tags that have none. Patch 2662 provided by sebb. (kkolinko) 2663 </td></tr> 2664 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2665 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51309">51309</a>: Correct logic in catalina.sh stop when using a PID 2666 file to ensure the correct message is shown. Patch provided by Caio 2667 Cezar. (markt) 2668 </td></tr> 2669 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 2670 Update Apache Commons Pool to 1.5.6. (kkolinko) 2671 </td></tr> 2672 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 2673 Update Apache Commons Daemon to 1.0.7. (kkolinko) 2674 </td></tr> 2675 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 2676 At build time use two alternative download locations for components 2677 downloaded from apache.org. (kkolinko) 2678 </td></tr> 2679 </table> 2680 </blockquote></td></tr></table> 2681</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.32 (jfclere)"><!--()--></a><a name="Tomcat_6.0.32_(jfclere)"><strong>Tomcat 6.0.32 (jfclere)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2011-02-03</strong></font></td></tr><tr><td colspan="2"><blockquote> 2682 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.32 (jfclere)/Catalina"><!--()--></a><a name="Tomcat_6.0.32_(jfclere)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 2683 <table border="0" cellpadding="2" cellspacing="2"> 2684 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 2685 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48822">48822</a>: Include context name in reload and stop log statements. 2686 Based on the patch provided by Marc Guillemot. (kkolinko) 2687 </td></tr> 2688 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2689 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50673">50673</a>: Improve Catalina shutdown when running as a service. 2690 Do not call System.exit(). (kkolinko) 2691 </td></tr> 2692 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2693 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50689">50689</a>: Provide 100 Continue responses at appropriate points 2694 during FORM authentication if client indicates that they are expected. 2695 (kkolinko) 2696 </td></tr> 2697 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2698 Improve HTTP specification compliance in support of 2699 <code>Accept-Language</code> header. This protects from known exploit 2700 of the Oracle JVM bug that triggers a DoS, CVE-2010-4476. (kkolinko) 2701 </td></tr> 2702 </table> 2703 </blockquote></td></tr></table> 2704 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.32 (jfclere)/Coyote"><!--()--></a><a name="Tomcat_6.0.32_(jfclere)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote> 2705 <table border="0" cellpadding="2" cellspacing="2"> 2706 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2707 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49795">49795</a>: Backport AprEndpoint shutdown improvements, to make 2708 it more robust. (mturk/kkolinko) 2709 </td></tr> 2710 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2711 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50325">50325</a>: When the JVM indicates support for RFC 5746, disable 2712 Tomcat's <code>allowUnsafeLegacyRenegotiation</code> configuration 2713 attribute and use the JVM configuration to control renegotiation. 2714 (markt) 2715 </td></tr> 2716 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2717 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50631">50631</a>: InternalNioInputBuffer should honor 2718 <code>maxHttpHeadSize</code>. (kkolinko) 2719 </td></tr> 2720 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2721 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50651">50651</a>: Fix NPE in InternalNioOutputBuffer.recycle(). 2722 (kkolinko) 2723 </td></tr> 2724 </table> 2725 </blockquote></td></tr></table> 2726 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.32 (jfclere)/Cluster"><!--()--></a><a name="Tomcat_6.0.32_(jfclere)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote> 2727 <table border="0" cellpadding="2" cellspacing="2"> 2728 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2729 Be consistent with locks on sessionCreationTiming, 2730 sessionExpirationTiming in DeltaManager.resetStatistics(). (kkolinko) 2731 </td></tr> 2732 </table> 2733 </blockquote></td></tr></table> 2734</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.31 (jfclere)"><!--()--></a><a name="Tomcat_6.0.31_(jfclere)"><strong>Tomcat 6.0.31 (jfclere)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote> 2735 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.31 (jfclere)/Catalina"><!--()--></a><a name="Tomcat_6.0.31_(jfclere)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 2736 <table border="0" cellpadding="2" cellspacing="2"> 2737 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2738 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49543">49543</a>: Allow Tomcat to use shared data sources with per 2739 application credentials. (fhanik) 2740 </td></tr> 2741 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2742 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50205">50205</a>: Add the deployIgnorePaths attribute to the Host 2743 element. Based on a patch by Jim Riggs. (markt/kkolinko) 2744 </td></tr> 2745 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2746 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50413">50413</a>: Additional fix that ensures the error page is served 2747 regardless of any Range headers in the original request. (kkolinko) 2748 </td></tr> 2749 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2750 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50550">50550</a>: When a new directory is created (e.g. via WebDAV) 2751 ensure that a subsequent request for that directory does not result in a 2752 404 response. (markt/kkolinko) 2753 </td></tr> 2754 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2755 Provide session creation and destruction rate metrics in the session 2756 managers. (markt) 2757 </td></tr> 2758 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2759 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50606">50606</a>: Improve CGIServlet: Provide support for specifying 2760 empty value for the <code>executable</code> init-param. Provide support 2761 for explicit additional arguments for the executable. Those were 2762 broken when implementing fix for bug <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49657">49657</a>. (kkolinko) 2763 </td></tr> 2764 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2765 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50620">50620</a>: Stop exceptions that occur during 2766 <code>Session.endAccess()</code> from preventing the normal completion 2767 of <code>Request.recycle()</code>. (markt) 2768 </td></tr> 2769 </table> 2770 </blockquote></td></tr></table> 2771 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.31 (jfclere)/Coyote"><!--()--></a><a name="Tomcat_6.0.31_(jfclere)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote> 2772 <table border="0" cellpadding="2" cellspacing="2"> 2773 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2774 Remove a huge memory leak in the NIO connector introduced by the fix 2775 for <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49884">49884</a>. (markt) 2776 </td></tr> 2777 </table> 2778 </blockquote></td></tr></table> 2779 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.31 (jfclere)/Cluster"><!--()--></a><a name="Tomcat_6.0.31_(jfclere)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote> 2780 <table border="0" cellpadding="2" cellspacing="2"> 2781 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2782 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50600">50600</a>: Prevent a <code>ConcurrentModificationException</code> 2783 when removing a WAR file via the FarmWarDeployer. (markt) 2784 </td></tr> 2785 </table> 2786 </blockquote></td></tr></table> 2787</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.30 (jfclere)"><!--()--></a><a name="Tomcat_6.0.30_(jfclere)"><strong>Tomcat 6.0.30 (jfclere)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2011-01-13</strong></font></td></tr><tr><td colspan="2"><blockquote> 2788 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.30 (jfclere)/General"><!--()--></a><a name="Tomcat_6.0.30_(jfclere)/General"><strong>General</strong></a></font></td></tr><tr><td><blockquote> 2789 <table border="0" cellpadding="2" cellspacing="2"> 2790 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2791 Filter input of manager app servlets. (kkolinko) 2792 </td></tr> 2793 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2794 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43960">43960</a>: Expose available property of StandardWrapper via JMX. 2795 (markt) 2796 </td></tr> 2797 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 2798 Update to Commons Daemon 1.0.5. (mturk) 2799 </td></tr> 2800 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 2801 Switch to using the Eclipse compiler JAR directly rather than creating 2802 it from the larger JDT download. (markt) 2803 </td></tr> 2804 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2805 Allow the off-line building of the extras package. (markt) 2806 </td></tr> 2807 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 2808 Update to Commons Pool 1.5.5. (markt) 2809 </td></tr> 2810 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2811 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49728">49728</a>, <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50084">50084</a>: Improve PID file handling when 2812 another process is managing the PID file and Tomcat does not have write 2813 access. (markt) 2814 </td></tr> 2815 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2816 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49909">49909</a>, <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50201">50201</a>: Provide a mechanism to log requests 2817 rejected before they reach the AccessLogValve to appear in the access 2818 log. (markt/kkolinko) 2819 </td></tr> 2820 </table> 2821 </blockquote></td></tr></table> 2822 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.30 (jfclere)/Catalina"><!--()--></a><a name="Tomcat_6.0.30_(jfclere)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 2823 <table border="0" cellpadding="2" cellspacing="2"> 2824 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2825 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=38
2825113">38113</a>: Provide a system property that enables a strict 2826 interpretation of the specification for <code>getQueryString()</code> 2827 when an empty query string is provided by the user agent. (markt) 2828 </td></tr> 2829 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2830 Return a copy of the current URLs for the <code>WebappClassLoader</code> 2831 to prevent modification. This facilitated, although it wasn't the root 2832 cause, CVE-2010-1622. (markt) 2833 </td></tr> 2834 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2835 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48837">48837</a>: Extend thread local memory leak detection to include 2836 classes loaded by subordinate class loaders to the web 2837 application's class loader such as the Jasper class loader. 2838 Patch provided by Sylvain Laurent. (kkolinko) 2839 </td></tr> 2840 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2841 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48973">48973</a>: Avoid creating a SESSIONS.ser file when stopping an 2842 application if there's no session. Patch provided by Marc Guillemot. 2843 (slaurent) 2844 </td></tr> 2845 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2846 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49030">49030</a>: Failure during start of one connector should not leave 2847 some connectors started and some ignored. (kkolinko) 2848 </td></tr> 2849 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2850 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49195">49195</a>: Don't report an error when shutting down a Windows 2851 service for a Tomcat instance that has a disabled shutdown port. (markt) 2852 </td></tr> 2853 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2854 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49209">49209</a>: Fix problem with JDBC driver memory leak prevention 2855 when running under a security manager. Patch provided by Sylvain 2856 Laurent. (markt) 2857 </td></tr> 2858 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2859 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49613">49613</a>: Improve performance when using SSL for applications 2860 that make multiple class to <code>Request.getAttributeNames()</code>. 2861 Patch provided by Sampo Savolainen. (markt) 2862 </td></tr> 2863 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2864 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49657">49657</a>: Handle CGI executables with spaces in the path. 2865 (markt) 2866 </td></tr> 2867 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2868 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49667">49667</a>: Ensure that using the JDBC driver memory leak 2869 prevention code does not cause a one of the memory leaks it is meant to 2870 avoid. (markt) 2871 </td></tr> 2872 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2873 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49749">49749</a>: Respect <code>httpOnly</code> setting of Context 2874 when creating SSO cookie. (markt) 2875 </td></tr> 2876 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2877 Provide better web application state information via JMX. (markt) 2878 </td></tr> 2879 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2880 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49811">49811</a>: Add an option to disable URL rewriting on a per 2881 Context basis. The option name is <code>disableURLRewriting</code>. 2882 (markt) 2883 </td></tr> 2884 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2885 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49856">49856</a>: Expose the executor name for the connector via JMX. 2886 (markt) 2887 </td></tr> 2888 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2889 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49915">49915</a>: Make error more obvious, particularly when accessed 2890 via JConsole, if StandardServer.storeConfig() is called when there is 2891 no StoreConfig implementation present. (markt) 2892 </td></tr> 2893 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2894 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49965">49965</a>: Use correct i18n resources for StringManager in 2895 JAASRealm. (kkolinko) 2896 </td></tr> 2897 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2898 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49987">49987</a>: Fix potential data race in the population of the 2899 Servlet Context initialisation parameters. (markt) 2900 </td></tr> 2901 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2902 Code clean-up. Avoid some casts in StandardContext. (markt) 2903 </td></tr> 2904 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2905 Add security policy and token poller protection to the JRE memory leak 2906 protection provided in Tomcat 6. (markt/kkolinko) 2907 </td></tr> 2908 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2909 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50026">50026</a>: Add support for mapping the default servlet to URLs 2910 other than /. (timw) 2911 </td></tr> 2912 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2913 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50128">50128</a>: Improve exception handling in PersistentManagerBase 2914 when running with a security manager. (kkolinko) 2915 </td></tr> 2916 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2917 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50131">50131</a>: Avoid possible NPE in debug output in PersistentValve. 2918 Patch provided by sebb. (kkolinko) 2919 </td></tr> 2920 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2921 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50138">50138</a>: Fix threading issues in 2922 <code>org.apache.catalina.security.SecurityUtil</code>. (markt) 2923 </td></tr> 2924 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2925 Add a new filter, <code>org.apache.catalina.filters.CsrfPreventionFilter</code>, 2926 to provide generic cross-site request forgery (CSRF) 2927 protection for web applications. (markt) 2928 </td></tr> 2929 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2930 Make sure Contexts defined in server.xml pick up any <code>configClass</code> 2931 setting from the parent Host. (markt) 2932 </td></tr> 2933 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2934 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50222">50222</a>: Modify memory leak prevention code so it pins the 2935 system class loader in memory rather than than the common class loader, 2936 which is better for embedded systems. (schultz) 2937 </td></tr> 2938 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2939 Make memory leak prevention code that clears ThreadLocal instances more 2940 robust against objects with <code>toString()</code> methods that throw 2941 exceptions. (markt) 2942 </td></tr> 2943 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2944 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50282">50282</a>: Load <code>javax.security.auth.login.Configuration</code> 2945 with <code>JreMemoryLeakPreventionListener</code> to avoid memory leak 2946 when stopping a webapp that would use JAAS. 2947 (slaurent) 2948 </td></tr> 2949 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2950 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50413">50413</a>: Ensure 304s are not returned when using static files 2951 as error pages. (markt) 2952 </td></tr> 2953 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2954 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50453">50453</a>: Correctly handle multiple <code>X-Forwarded-For</code> 2955 headers in the RemoteIpValve. Patch provided by Jim Riggs. (markt) 2956 </td></tr> 2957 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2958 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50459">50459</a>: Fix thread/classloader binding issues in 2959 StandardContext. (slaurent) 2960 </td></tr> 2961 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 2962 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50527">50527</a>: Improve an error message shown by HttpServlet. (markt) 2963 </td></tr> 2964 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2965 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50556">50556</a>: Improve JreMemoryLeakPreventionListener to prevent 2966 a potential class loader leak caused by a thread spawned when the class 2967 <code>com.sun.jndi.ldap.LdapPoolManager</code> is initialized and the 2968 system property <code>com.sun.jndi.ldap.connect.pool.timeout</code> is 2969 set to a value greater than 0. (slaurent) 2970 </td></tr> 2971 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2972 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50642">50642</a>: Move the <code>sun.net.www.http.HttpClient</code> 2973 keep-alive thread memory leak protection from the 2974 JreMemoryLeakPreventionListener to the WebappClassLoader since the 2975 thread that triggers the memory leak is created on demand. (markt) 2976 </td></tr> 2977 </table> 2978 </blockquote></td></tr></table> 2979 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.30 (jfclere)/Coyote"><!--()--></a><a name="Tomcat_6.0.30_(jfclere)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote> 2980 <table border="0" cellpadding="2" cellspacing="2"> 2981 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2982 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47913">47913</a>: Return the IP address rather than null for 2983 <code>getRemoteHost()</code> with the APR connector if the IP address 2984 does not resolve. (markt) 2985 </td></tr> 2986 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2987 Avoid a NPE for APR connector unlockAccept with default soTimeout. 2988 (mturk) 2989 </td></tr> 2990 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2991 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48545">48545</a>: Allow JSSE trust stores to be used without providing 2992 a password. Based on a patch by smmwpf54. (kkolinko) 2993 </td></tr> 2994 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 2995 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48738">48738</a>: Add support for flushing gzipped output. Based on a 2996 patch by Jiong Wang. (markt) 2997 </td></tr> 2998 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 2999 Avoid a NPE in the DeltaManager when a parallel request invalidates the 3000 session before the current request has a chance to send the replication 3001 message. (markt) 3002 </td></tr> 3003 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3004 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48925">48925</a>: <code>request.getLocalAddr()</code> returns 3005 <code>null</code>
3005 when using the default Jk AJP/1.3 connector. (rjung) 3006 </td></tr> 3007 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3008 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49497">49497</a>: Stop accepting new requests (inc keep-alive) once the 3009 BIO connector is paused and the current request has finished processing. 3010 (markt) 3011 </td></tr> 3012 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3013 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49521">49521</a>: Disable scanning for a free port in Jk AJP/1.3 3014 connector by default. Do not change <code>maxPort</code> field value of ChannelSocket 3015 in its <code>setPort()</code> and <code>init()</code> methods. Add 3016 support for <code>maxPort</code> attribute on a <code>Connector</code> 3017 element as a synonym for <code>channelSocket.maxPort</code>. (kkolinko) 3018 </td></tr> 3019 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3020 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49625">49625</a>: Ensure Vary header is set if response may be 3021 compressed rather than only setting it if it is compressed. (markt) 3022 </td></tr> 3023 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3024 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49730">49730</a>: Fix race condition in StandardThreadExecutor that can 3025 lead to long delays in processing requests. Patch provided by Sylvain 3026 Laurent. (markt) 3027 </td></tr> 3028 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3029 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49860">49860</a>: Add support for trailing headers in chunked HTTP 3030 requests. The header length is limited to 8192 by default and the limit 3031 can be changed via a system property. (markt/kkolinko) 3032 </td></tr> 3033 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3034 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49972">49972</a>: Fix potential thread safe issue when formatting dates 3035 for use in HTTP headers. (markt) 3036 </td></tr> 3037 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3038 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50072">50072</a>: NIO connector can mis-read request line if not sent in 3039 a single packet. (markt/kkolinko) 3040 </td></tr> 3041 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3042 Improve recycling of processors in Http11NioProtocol. (kkolinko) 3043 </td></tr> 3044 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 3045 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50273">50273</a>: Provide a workaround for an HP-UX issue that can 3046 result in large numbers of SEVERE log messages appearing in the logs as 3047 a result of normal operation. (markt) 3048 </td></tr> 3049 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3050 Make SSL certificate encoding algorithm consistent between connectors by 3051 using the JVM default for all connectors. This also fixes an issue with 3052 the NIO connector on IBM JVMs. (markt) 3053 </td></tr> 3054 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3055 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50467">50467</a>: Protected against NPE triggered by a race condition 3056 that causes the NIO poller to fail, preventing the processing of further 3057 requests. (markt) 3058 </td></tr> 3059 </table> 3060 </blockquote></td></tr></table> 3061 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.30 (jfclere)/Jasper"><!--()--></a><a name="Tomcat_6.0.30_(jfclere)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote> 3062 <table border="0" cellpadding="2" cellspacing="2"> 3063 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 3064 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49217">49217</a>: Ensure that identifiers used in EL meet the 3065 requirements of the Java Language Specification. This check is off by 3066 default and can be enabled by setting a system property. (markt) 3067 </td></tr> 3068 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3069 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49555">49555</a>: Correctly handled Tag Libraries where functions are 3070 defined in static inner classes. (markt) 3071 </td></tr> 3072 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3073 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49665">49665</a>: Provide better information including JSP file name and 3074 location when a missing file is detected during TLD handling. Patch 3075 provided by Ted Leung. (markt) 3076 </td></tr> 3077 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3078 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49985">49985</a>: Fix thread safety issue in EL parser. (markt) 3079 </td></tr> 3080 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3081 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49986">49986</a>: Fix thread safety issue in JSP reloading. (timw)) 3082 </td></tr> 3083 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3084 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49998">49998</a>: Make jsp:root detection work with single quoted 3085 attributes as well. (timw) 3086 </td></tr> 3087 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3088 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50066">50066</a>: Compile a recursive tag file if it depends on a JAR. 3089 Patch provided by Sylvain Laurent. (markt) 3090 </td></tr> 3091 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3092 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50078">50078</a>: Fix threading issues in EL caches and make cache sizes 3093 configurable. Threading patch provided by Takayoshi Kimura. (markt) 3094 </td></tr> 3095 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3096 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50105">50105</a>: When processing composite EL expressions use 3097 <code>Enum.name()</code> rather than <code>Enum.toString()</code> as 3098 required by the EL specification. (markt) 3099 </td></tr> 3100 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3101 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50228">50228</a>: Improve recycling of <code>BodyContentImpl</code>. 3102 This avoids keeping a cached reference to a webapp-provided Writer 3103 used in JspFragment.invoke() calls. (kkolinko) 3104 </td></tr> 3105 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3106 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50460">50460</a>: Fix memory leak in JspDocumentParser triggered by 3107 first access to a jspx page. (kkolinko) 3108 </td></tr> 3109 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3110 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50500">50500</a>: Use correct coercions (as per the EL spec) for 3111 arithmetic operations involving string values containing '.', 3112 'e' or 'E'. Based on a patch by Brian Weisleder. 3113 (markt) 3114 </td></tr> 3115 </table> 3116 </blockquote></td></tr></table> 3117 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.30 (jfclere)/Cluster"><!--()--></a><a name="Tomcat_6.0.30_(jfclere)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote> 3118 <table border="0" cellpadding="2" cellspacing="2"> 3119 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3120 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49343">49343</a>: When ChannelException is thrown, remove listener from 3121 channel. (kfujino) 3122 </td></tr> 3123 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3124 Add Null check when CHANGE_SESSION_ID message received. (kfujino) 3125 </td></tr> 3126 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3127 When a cluster node disappears when using the backup manager, handle the 3128 failed ping message rather than propagating the exception (which just 3129 logs the stack trace but doesn't do anything to deal with the failure). 3130 (markt) 3131 </td></tr> 3132 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3133 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49905">49905</a>: Fix potential memory leak when using asynchronous 3134 session replication. (markt) 3135 </td></tr> 3136 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3137 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49924">49924</a>: When non-primary node changes into a primary node, 3138 make sure isPrimarySession is changed to true. (kfujino) 3139 </td></tr> 3140 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3141 Add support for <code>maxActiveSessions</code> attribute to 3142 BackupManager. (kfujino) 3143 </td></tr> 3144 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3145 Improve sending an access message in DeltaManager. 3146 Use <code>maxInactiveInterval</code> not of the Manager, but of the session. 3147 If <code>maxInactiveInterval</code> is negative, the access message is not 3148 being sent. (kfujino) 3149 </td></tr> 3150 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3151 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50547">50547</a>: Add time stamp for CHANGE_SESSION_ID message and 3152 SESSION_EXPIRED message. (kfujino) 3153 </td></tr> 3154 </table> 3155 </blockquote></td></tr></table> 3156 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.30 (jfclere)/Web applications"><!--()--></a><a name="Tomcat_6.0.30_(jfclere)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote> 3157 <table border="0" cellpadding="2" cellspacing="2"> 3158 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3159 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49585">49585</a>: Update JSVC documentation to reflect new packaging 3160 of Commons Daemon. (markt) 3161 </td></tr> 3162 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 3163 Configure the Manager web application to use the new CSRF protection. To 3164 take advantage of this protection, the <code>manager</code> role must be 3165 removed from all users and the new <code>manager-gui</code> and 3166 <code>manager-script</code> roles used instead. (markt) 3167 </td></tr> 3168 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 3169 Configure the Host Manager web application to use the new CSRF 3170 protection. To take advantage of this protection, the <code>admin</code> role 3171 must be removed from all users and the new <code>admin-gui</code> and 3172 <code>admin-script</code> roles used instead. (markt) 3173 </td></tr> 3174 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3175 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50303">50303</a>: Update JNDI how-to to reflect new JavaMail and JAF 3176 download locations and that JAF is now included in Java SE 6. (markt) 3177 </td></tr> 3178 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3179 CVE-2010-4172: Multiple XSS in Manager application. (markt/kkolinko) 3180 </td></tr> 3181 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 3182 Improve Tomcat Logging documentation. (kkolinko) 3183 </td></tr> 3184 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 3185 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50242">50242</a>: Provide a sample log4j configuration that more 3186 closely matches the default JULI configuration. Patch provided by 3187 Christopher Schultz. (kkolinko) 3188 </td></tr> 3189 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 3190 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50294">50294</a>: Add more information to documentation regarding format 3191 of configuration files. Patch provided by Luke Meyer. (markt) 3192 </td></tr> 3193 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 3194 Configure the Manager and Host-Manager web applications to use HttpOnly 3195 flag for their session cookies. (kkolinko) 3196 </td></tr> 3197 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3198 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50316">50316</a>: Fix display of negative values in the Manager web 3199 application. (kkolinko) 3200 </td></tr> 3201 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 3202 Improve documentation of database connection factory. (rjung) 3203 </td></tr> 3204 </table> 3205 </blockquote></td></tr></table> 3206 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.30 (jfclere)/Other"><!--()--></a><a name="Tomcat_6.0.30_(jfclere)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote> 3207 <table border="0" cellpadding="2" cellspacing="2"> 3208 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 3209 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48716">48716</a>: Do not call reset if the default LogManager is in use. 3210 (markt) 3211 </td></tr> 3212 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3213 Use native line endings for example Eclipse configuration files in 3214 source distribution. (markt) 3215 </td></tr> 3216 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3217 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49428">49428</a>: Add a work-around for the known namespace issues for 3218 some Microsoft WebDAV clients. Based on the patch provided by 3219 Panagiotis Astithas. (kkolinko) 3220 </td></tr> 3221 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3222 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49861">49861</a>: Fix formatting of log messages in JXM remote listener. 3223 Do not use commas when printing RMI port numbers. (markt) 3224 </td></tr> 3225 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3226 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50140">50140</a>: Don't ignore a user specified install directory 3227 on 64-bit platforms when using the Windows installer. (markt) 3228 </td></tr> 3229 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3230 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50552">50552</a>: Avoid NPE that hides error message when using Ant 3231 tasks. (schultz) 3232 </td></tr> 3233 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 3234 Numerous improvements to the Windows installer: update install/uninstall 3235 icons, create an installation log, allow 32-bit JVMs to be selected when 3236 installing on a 64-bit platform, replace the .ini files with the script 3237 equivalents, use the new manager and host-manager roles, provide the 3238 ability to edit the roles for the added user, add support for the 3239 <code>/?</code> command line switch, clean up fully after installation, 3240 add DetailPrint statements for operations that may take time and 3241 improve the descriptions of the components. (kkolinko, mturk, markt) 3242 </td></tr> 3243 </table> 3244 </blockquote></td></tr></table> 3245</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgco
3245lor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.29 (jfclere)"><!--()--></a><a name="Tomcat_6.0.29_(jfclere)"><strong>Tomcat 6.0.29 (jfclere)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2010-07-22</strong></font></td></tr><tr><td colspan="2"><blockquote> 3246 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.29 (jfclere)/Catalina"><!--()--></a><a name="Tomcat_6.0.29_(jfclere)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 3247 <table border="0" cellpadding="2" cellspacing="2"> 3248 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 3249 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48960">48960</a>: Add a new option to the SSI Servlet and SSI Filter to 3250 allow the disabling of the <code>exec</code> command. This is now 3251 disabled by default. Based on a patch by Yair Lenga. (markt) 3252 </td></tr> 3253 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3254 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49551">49551</a>: Allow default context.xml location to be specified 3255 using an absolute path. (markt) 3256 </td></tr> 3257 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3258 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49598">49598</a>: When session is changed and the session cookie is 3259 replaced, ensure that the new Set-Cookie header overwrites the old 3260 Set-Cookie header. (markt) 3261 </td></tr> 3262 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3263 Fix order when listing Webapp loader search URLs. (rjung) 3264 </td></tr> 3265 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 3266 Add support for <code>*.jar</code> pattern in VirtualWebappLoader. 3267 (kkolinko) 3268 </td></tr> 3269 </table> 3270 </blockquote></td></tr></table> 3271</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.28 (jfclere)"><!--()--></a><a name="Tomcat_6.0.28_(jfclere)"><strong>Tomcat 6.0.28 (jfclere)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2010-07-09</strong></font></td></tr><tr><td colspan="2"><blockquote> 3272 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.28 (jfclere)/Catalina"><!--()--></a><a name="Tomcat_6.0.28_(jfclere)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 3273 <table border="0" cellpadding="2" cellspacing="2"> 3274 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>Arrange filter logic. (jfclere) 3275 </td></tr> 3276 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3277 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49230">49230</a>: Enhance JRE leak prevention listener with protection 3278 for the keep-alive thread started by 3279 <code>sun.net.www.http.HttpClient</code>. Patch provided by Rob Kooper. 3280 (markt) 3281 </td></tr> 3282 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3283 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49351">49351</a>: Fix possible NPE when embedding and no name is 3284 specified for the Service. (markt) 3285 </td></tr> 3286 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3287 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49424">49424</a>: Avoid NPE if client provides no data with a chunked 3288 POST request. (markt) 3289 </td></tr> 3290 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3291 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49414">49414</a>: Improve diagnostic of memory leaks. 3292 Differentiate between request threads and application 3293 created threads when warning about still running threads when an 3294 application stops. (markt) 3295 </td></tr> 3296 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3297 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49443">49443</a>: Fix RemoteIpValve documentation. Use remoteIpHeader 3298 rather than remoteIPHeader consistently. (markt) 3299 </td></tr> 3300 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 3301 Add property <code>searchExternalFirst</code> to WebappLoader. 3302 If set, the external repositories will be searched before 3303 the WEB-INF ones. (rjung) 3304 </td></tr> 3305 </table> 3306 </blockquote></td></tr></table> 3307 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.28 (jfclere)/Cluster"><!--()--></a><a name="Tomcat_6.0.28_(jfclere)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote> 3308 <table border="0" cellpadding="2" cellspacing="2"> 3309 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3310 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49445">49445</a>: When session ID is changed after authentication, 3311 ensure the DeltaManager replicates the change in ID to the other nodes 3312 in the cluster. (kfujino) 3313 </td></tr> 3314 </table> 3315 </blockquote></td></tr></table> 3316 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.28 (jfclere)/Web applications"><!--()--></a><a name="Tomcat_6.0.28_(jfclere)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote> 3317 <table border="0" cellpadding="2" cellspacing="2"> 3318 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3319 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49213">49213</a>: Grant permissions required by manager application when 3320 running under a security manager. (markt/kkolinko) 3321 </td></tr> 3322 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3323 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49436">49436</a>: Correct documented default for <code>readonly</code> 3324 attribute of the UserDatabase component. (markt) 3325 </td></tr> 3326 </table> 3327 </blockquote></td></tr></table> 3328</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.27 (jfclere)"><!--()--></a><a name="Tomcat_6.0.27_(jfclere)"><strong>Tomcat 6.0.27 (jfclere)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote> 3329 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.27 (jfclere)/General"><!--()--></a><a name="Tomcat_6.0.27_(jfclere)/General"><strong>General</strong></a></font></td></tr><tr><td><blockquote> 3330 <table border="0" cellpadding="2" cellspacing="2"> 3331 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 3332 Update DBCP to 1.3. (markt) 3333 </td></tr> 3334 </table> 3335 </blockquote></td></tr></table> 3336 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.27 (jfclere)/Catalina"><!--()--></a><a name="Tomcat_6.0.27_(jfclere)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 3337 <table border="0" cellpadding="2" cellspacing="2"> 3338 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3339 Fix CVE-2010-1157. Prevent possible disclosure of host name or IP 3340 address via the HTTP WWW-Authenticate header when using BASIC or DIGEST 3341 authentication. (markt) 3342 </td></tr> 3343 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 3344 Include context name when reporting memory leaks to aid root cause 3345 identification. (markt) 3346 </td></tr> 3347 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3348 Improve exception handling on session de-serialization to assist in 3349 identifying the root cause of <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48007">48007</a>. (kkolinko) 3350 </td></tr> 3351 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 3352 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48379">48379</a>: Make session cookie name, domain and path configurable 3353 per context. (markt) 3354 </td></tr> 3355 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3356 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48589">48589</a>: Make JNDIRealm easier to extend. Based on a patch by 3357 Candid Dauth. (markt/kkolinko) 3358 </td></tr> 3359 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3360 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48629">48629</a>: Allow user names as well as DNs to be used with the 3361 nested role search. Add roleNested to the documentation. Patch provided 3362 by Felix Schumacher. (markt) 3363 </td></tr> 3364 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3365 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48661">48661</a>: Make error page behavior consistent, regardless of how 3366 the error page is defined. If a response has been committed, always 3367 include the error page. (markt) 3368 </td></tr> 3369 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3370 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48729">48729</a>: Return roles defined by both userRoleName and roleName
3371 mechanisms. Patch provided by 'eric'. Also make user's role list 3372 immutable.(markt) 3373 </td></tr> 3374 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3375 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48760">48760</a>: Fix potential multi-threading issue in static resource 3376 serving where multiple threads could try to use the same 3377 InputStream. (markt) 3378 </td></tr> 3379 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3380 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48790">48790</a>: Fix thread safety issue in the count of the maximum 3381 number of active session. (markt/kkolinko) 3382 </td></tr> 3383 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3384 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48793">48793</a>: Make catalina.sh more robust to different return 3385 values on different platforms. Patch provided by Thomas GL. (markt) 3386 </td></tr> 3387 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3388 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48840">48840</a>: Swallow output (if any) from use of cd when determining 3389 $CATALINA_HOME in catalina.sh and tool-wrapper.sh scripts. Based on patch 3390 provided by mdietze. (markt/kkolinko) 3391 </td></tr> 3392 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3393 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48895">48895</a>: Make clearing of ThreadLocals that are causing memory 3394 leaks on web application stop, reload or undeploy configurable since the 3395 process of clearing them is not thread-safe. (markt) 3396 </td></tr> 3397 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3398 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48903">48903</a>: Fix deadlock in webapp class loader. (rjung) 3399 </td></tr> 3400 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3401 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48971">48971</a>: Make stopping of leaking Timer threads optional and 3402 disabled by default. (markt) 3403 </td></tr> 3404 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3405 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48976">48976</a>: Document JAVA_ENDORSED_DIRS in start-up scripts. Patch 3406 provided by Laurent Vaills. (markt) 3407 </td></tr> 3408 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3409 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48983">48983</a>: Improve debug logging for situations when 3410 <code>RemoteIpValve</code> is bypassed. Patch provided by Cyrille Le 3411 Clerc. (markt) 3412 </td></tr> 3413 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3414 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49018">49018</a>: Fix processing of time argument in the Expire sessions 3415 action in the Manager web application. (kkolinko) 3416 </td></tr> 3417 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3418 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49116">49116</a>
3418: If session is already invalid, expire session to 3419 prevent memory leak. (kfujino) 3420 </td></tr> 3421 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3422 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49158">49158</a>: Ensure only one session cookie is returned for a 3423 single request. (markt/fhanik) 3424 </td></tr> 3425 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3426 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49245">49245</a>: Fix session expiration check in cross-context 3427 requests. (markt) 3428 </td></tr> 3429 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3430 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49398">49398</a>: ByteChunk.indexOf(String, int, int, int) could not 3431 find a string of length 1. (kkolinko) 3432 </td></tr> 3433 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3434 Fix possible overflows when calculating session statistics. (kkolinko) 3435 </td></tr> 3436 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 3437 Log unexpected exceptions when providing access to web application 3438 resources in ApplicationContext. (kkolinko) 3439 </td></tr> 3440 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3441 Improve exception handling in CatalinaShutdownHook. (kkolinko) 3442 </td></tr> 3443 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 3444 Expose properties of VirtualWebappLoader and WebappClassLoader via JMX. 3445 (rjung) 3446 </td></tr> 3447 </table> 3448 </blockquote></td></tr></table> 3449 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.27 (jfclere)/Coyote"><!--()--></a><a name="Tomcat_6.0.27_(jfclere)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote> 3450 <table border="0" cellpadding="2" cellspacing="2"> 3451 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3452 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48839">48839</a>: Correctly handle HTTP header folding in the NIO 3453 connector. Patch suggested by Richa Baronia. (markt) 3454 </td></tr> 3455 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3456 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48843">48843</a>: Prevent possible deadlock for worker allocation in 3457 connectors. (kkolinko) 3458 </td></tr> 3459 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3460 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48843">48843</a>: Fix handling of add queues in AprEndpoint.Poller and 3461 AprEndpoint.Sendfile. Do not miss wakeups. (kkolinko) 3462 </td></tr> 3463 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 3464 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48862">48862</a>: Add support for the backlog parameter to the AJP 3465 connector. (pero/markt) 3466 </td></tr> 3467 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3468 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48917">48917</a>: Correct name of mod_jk module in ApacheConfig. Patch 3469 provided by Todd Hicks. (markt) 3470 </td></tr> 3471 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3472 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49095">49095</a>: AprEndpoint did not wakeup acceptors during shutdown 3473 when deferAccept option was enabled. Based on a patch provided by 3474 Ruediger Pluem. (kkolinko) 3475 </td></tr> 3476 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 3477 Use chunked encoding for http 1.1 requests with no content-length 3478 (regardless of keep-alive) so client can differentiate between complete 3479 and partial responses. (markt) 3480 </td></tr> 3481 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3482 Correct the SSL session timeout attribute name so the code agrees with 3483 the documentation. (markt) 3484 </td></tr> 3485 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 3486 CoyotePrincipal now implements Serializable. (fhanik) 3487 </td></tr> 3488 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3489 Enable the BIO AJP connector to run under a security manager. (markt) 3490 </td></tr> 3491 </table> 3492 </blockquote></td></tr></table> 3493 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.27 (jfclere)/Jasper"><!--()--></a><a name="Tomcat_6.0.27_(jfclere)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote> 3494 <table border="0" cellpadding="2" cellspacing="2"> 3495 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3496 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45015">45015</a>: Correct a regression in quote handling caused by the 3497 re-factoring of attribute parsing. (markt) 3498 </td></tr> 3499 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3500 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48701">48701</a>: Add a system property to allow disabling enforcement 3501 of JSP.5.3. The specification recommends, but does not require, this 3502 enforcement. (kkolinko) 3503 </td></tr> 3504 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3505 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48737">48737</a>: Don't assume paths that start with /META-INF/... are 3506 always in JARs. This is not true for some IDEs. Patch provided by 3507 Fabrizio Giustina. (markt) 3508 </td></tr> 3509 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3510 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49081">49081</a>: Correctly handle EL expressions of the form #${...}. 3511 (markt) 3512 </td></tr> 3513 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3514 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49196">49196</a>: Avoid NullPointerException in PageContext.getErrorData() 3515 if an error-handling JSP page is called directly. (markt) 3516 </td></tr> 3517 </table> 3518 </blockquote></td></tr></table> 3519 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.27 (jfclere)/Cluster"><!--()--></a><a name="Tomcat_6.0.27_(jfclere)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote> 3520 <table border="0" cellpadding="2" cellspacing="2"> 3521 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3522 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48717">48717</a>: When a node joins a cluster and it receives all the 3523 current sessions, ensure the sessionCreated event is fired if the 3524 Manager is configured to replicate session events. (markt) 3525 </td></tr> 3526 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3527 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48934">48934</a>: Previous fix to handle dropped connections incorrectly 3528 permanently disabled session replication. (fhanik) 3529 </td></tr> 3530 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3531 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49051">49051</a>: memberAlive is not called if member has not already 3532 existed in membership. (kfujino) 3533 </td></tr> 3534 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3535 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49151">49151</a>: Avoid ClassCastException in BackupManager#stop. 3536 (kfujino) 3537 </td></tr> 3538 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3539 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49170">49170</a>: Do not send duplicated session. (kfujino) 3540 </td></tr> 3541 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3542 Add missing messages and ensure cluster listeners log messages to 3543 correct logger. (markt) 3544 </td></tr> 3545 </table> 3546 </blockquote></td></tr></table> 3547 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.27 (jfclere)/Web applications"><!--()--></a><a name="Tomcat_6.0.27_(jfclere)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote> 3548 <table border="0" cellpadding="2" cellspacing="2"> 3549 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
3550 Use underscores instead of spaces in anchor names in Tomcat 3551 documentation. (kkolinko) 3552 </td></tr> 3553 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 3554 Add support for displaying the Spring Security user name (if present) in 3555 the Manager application. (markt) 3556 </td></tr> 3557 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 3558 Improve the ChatServlet <a href="aio.html">Comet</a> example 3559 (/examples/jsp/chat/). (kkolinko) 3560 </td></tr> 3561 </table> 3562 </blockquote></td></tr></table> 3563 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.27 (jfclere)/Other"><!--()--></a><a name="Tomcat_6.0.27_(jfclere)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote> 3564 <table border="0" cellpadding="2" cellspacing="2"> 3565 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>Update to Commons Daemon 1.0.2. Use service launcher (procrun) 3566 from the Commons Daemon release. Do not keep a copy of it in our source 3567 tree. (mturk/kkolinko)</td></tr> 3568 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 3569 Update to NSIS 2.46. (kkolinko) 3570 </td></tr> 3571 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3572 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48990">48990</a>: Fix the <code>skip.installer</code> build property 3573 so if set, only the Windows installer is skipped. (markt) 3574 </td></tr> 3575 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3576 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49178">49178</a>: Provide in catalina.policy an example of additional
3577 permissions that might be needed for code located in 3578 <code>$CATALINA_BASE/lib</code>. (markt) 3579 </td></tr> 3580 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3581 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49236">49236</a>: Do not use indexing when packing Tomcat JARs. 3582 (kkolinko) 3583 </td></tr> 3584 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3585 Remove unused code from org.apache.tomcat.util.buf classes. (kkolinko) 3586 </td></tr> 3587 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 3588 Rearrange tomcat-juli.jar permissions and wrap long lines in the 3589 <code>conf/catalina.policy</code> file, to make the text more readable 3590 when cited in documentation. (kkolinko) 3591 </td></tr> 3592 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3593 Do not evaluate the <code>execute.installer</code> property when building 3594 a release. The <code>skip.installer</code> property is used instead. 3595 (kkolinko) 3596 </td></tr> 3597 </table> 3598 </blockquote></td></tr></table> 3599</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.26 (jfclere)"><!--()--></a><a name="Tomcat_6.0.26_(jfclere)"><strong>Tomcat 6.0.26 (jfclere)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2010-03-11</strong></font></td></tr><tr><td colspan="2"><blockquote> 3600 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.26 (jfclere)/Catalina"><!--()--></a><a name="Tomcat_6.0.26_(jfclere)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 3601 <table border="0" cellpadding="2" cellspacing="2"> 3602 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3603 Close security hole in unreleased 6.0.25 by ensuring new find leaks 3604 functionality is protected by a security constraint. (kkolinko) 3605 </td></tr> 3606 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3607 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48831">48831</a>: Improve logging shutdown behaviour. Use Catalina's 3608 shutdown hook to shutdown JULI. This enables them to be shutdown in the 3609 correct order. Do not shutdown global handlers several times. 3610 (markt/kkolinko) 3611 </td></tr> 3612 </table> 3613 </blockquote></td></tr></table> 3614 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.26 (jfclere)/Coyote"><!--()--></a><a name="Tomcat_6.0.26_(jfclere)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote> 3615 <table border="0" cellpadding="2" cellspacing="2"> 3616 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3617 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48584">48584</a>: Prevent the APR connector logging an error if the 3618 acceptor fails during shutdown since this is expected. (mturk) 3619 </td></tr> 3620 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3621 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48660">48660</a>: Using compression should not overwrite any Vary header 3622 set by a web application. (markt) 3623 </td></tr> 3624 </table> 3625 </blockquote></td></tr></table> 3626 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.26 (jfclere)/Jasper"><!--()--></a><a name="Tomcat_6.0.26_(jfclere)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote> 3627 <table border="0" cellpadding="2" cellspacing="2"> 3628 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3629 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48371">48371</a>: Ensure generated servlet mappings are inserted at the 3630 correct location when using JspC and allow the option that controls this 3631 to be configured on the command line. Also allow the encoding of web.xml 3632 to be configured when using JspC and deprecate some unused JspC methods. 3633 (markt/kkolinko) 3634 </td></tr> 3635 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3636 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48498">48498</a>: Avoid ArrayIndexOutOfBoundsException triggered by a 3637 Java 6/7 XML parser bug. (markt/kkolinko) 3638 </td></tr> 3639 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3640 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48668">48668</a>: Additional fixes to ensure deferred syntax is handled 3641 correctly. (kkolinko) 3642 </td></tr> 3643 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3644 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48827">48827</a>: Correct a regression in the fix for <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47977">47977</a> 3645 that caused an incorrect non-empty body error to be reported for valid 3646 JSP documents. (markt) 3647 </td></tr> 3648 </table> 3649 </blockquote></td></tr></table> 3650 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.26 (jfclere)/Web applications"><!--()--></a><a name="Tomcat_6.0.26_(jfclere)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote> 3651 <table border="0" cellpadding="2" cellspacing="2"> 3652 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 3653 Make changelog.xml be directly rendered as HTML by certain browsers. 3654 (kkolinko) 3655 </td></tr> 3656 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 3657 Add support for automated generation of TOC tables and for links to svn 3658 revisions to tomcat-docs.xsl in documentation. (kkolinko/fhanik) 3659 </td></tr> 3660 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 3661 Move Manager application JSPs that are not intended to be accessed 3662 directly under the WEB-INF directory. (kkolinko) 3663 </td></tr> 3664 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3665 Improve the messages displayed by the find leaks diagnostic in the 3666 Manager application. (kkolinko) 3667 </td></tr> 3668 </table> 3669 </blockquote></td></tr></table> 3670 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.26 (jfclere)/Other"><!--()--></a><a name="Tomcat_6.0.26_(jfclere)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote> 3671 <table border="0" cellpadding="2" cellspacing="2"> 3672 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3673 Encode all property files using ascii escaped UTF-8. Also fixes 3674 deployment problem when using French locale. (jfclere/rjung) 3675 </td></tr> 3676 </table> 3677 </blockquote></td></tr></table> 3678</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.25 (jfclere)"><!--()--></a><a name="Tomcat_6.0.25_(jfclere)"><strong>Tomcat 6.0.25 (jfclere)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote> 3679 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.25 (jfclere)/Catalina"><!--()--></a><a name="Tomcat_6.0.25_(jfclere)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 3680 <table border="0" cellpadding="2" cellspacing="2"> 3681 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3682 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48039">48039</a>: Return immediately if start() is called on an already 3683 started StandardService. (markt) 3684 </td></tr> 3685 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3686 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48109">48109</a>: Ensure InputStream is closed on error condition in web 3687 application class loader. (markt) 3688 </td></tr> 3689 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3690 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48179">48179</a>: Clean up dead code that was used to read tldCache 3691 file. (kkolinko) 3692 </td></tr> 3693 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3694 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48318">48318</a>: Handle case where WebDAV resource is in directory 3695 listing but is not accessible. (markt) 3696 </td></tr> 3697 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 3698 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48384">48384</a>: Add a per context xslt option for directory listings.
3699 Make the fallback options work as described in the documentation. 3700 (markt) 3701 </td></tr> 3702 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3703 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48577">48577</a>: Filter URL when displaying missing included page. 3704 (markt) 3705 </td></tr> 3706 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3707 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48612">48612</a>: Prevent exception on shutdown if the address attribute 3708 is specified for a connector. (markt) 3709 </td></tr> 3710 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3711 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48613">48613</a>: Further fixes to ensure APRLifecycleListener is only 3712 used if defined in server.xml. (fhanik) 3713 </td></tr> 3714 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3715 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48614">48614</a>: Correct JULI log file buffering so default behaviour 3716 is no buffering. (fhanik) 3717 </td></tr> 3718 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3719 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48625">48625</a>: Provide an option to exit if an error occurs during 3720 the initialization phase. (fhanik) 3721 </td></tr> 3722 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3723 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48645">48645</a>: Use specified encoding rather than null in calls to 3724 <code>RequestUtil.URLDecode(byte[] bytes, String enc)</code> (markt) 3725 </td></tr> 3726 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3727 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48653">48653</a>: Force request.secure and request.scheme to 3728 <code>false</code> and <code>http</code> if the X-Forwarded-Proto header 3729 has the value http. Patch provided by Cyrille Le Clerc. (markt) 3730 </td></tr> 3731 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3732 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48678">48678</a>: Remove duplicate server field from 3733 <code>org.apache.catalina.startup.Catalina</code>. (markt) 3734 </td></tr> 3735 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3736 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48694">48694</a>: Remove potential deadlock in web application class 3737 loader. (markt) 3738 </td></tr> 3739 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 3740 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48716">48716</a>: Provide additional configuration options for JULI. 3741 (markt) 3742 </td></tr> 3743 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3744 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48726">48726</a>: Prevent OOME when uploading large WAR files with the 3745 deployer. Patch provided by adam. (markt) 3746 </td></tr> 3747 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 3748 Improve memory leak protection by safely stopping threads started via 3749 <code>java.util.Timer</code> that an application starts but fails to 3750 stop and by clearing references retained due to the use of 3751 <code>java.util.ResourceBundle</code>. (markt) 3752 </td></tr> 3753 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 3754 Modify ThreadLocal memory leak detection to not report false positives 3755 and to simplify implementation. (markt/kkolinko) 3756 </td></tr> 3757 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 3758 Basic memory leak detection was added to the standard Host 3759 implementation and exposed via JMX to detect memory leaks on web 3760 application reload. (markt/kkolinko) 3761 </td></tr> 3762 </table> 3763 </blockquote></td></tr></table> 3764 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.25 (jfclere)/Coyote"><!--()--></a><a name="Tomcat_6.0.25_(jfclere)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote> 3765 <table border="0" cellpadding="2" cellspacing="2"> 3766 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 3767 Update the native/APR library version bundled with Tomcat to 1.1.20. 3768 (kkolinko) 3769 </td></tr> 3770 </table> 3771 </blockquote></td></tr></table> 3772 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.25 (jfclere)/Jasper"><!--()--></a><a name="Tomcat_6.0.25_(jfclere)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote> 3773 <table border="0" cellpadding="2" cellspacing="2"> 3774 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 3775 Add some debug logging to the compiler where exceptions were previously 3776 swallowed. (markt) 3777 </td></tr> 3778 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3779 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48170">48170</a>: Remove unnecessary synchronization that is causing 3780 issues under load. (markt) 3781 </td></tr> 3782 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3783 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48580">48580</a>: Prevent AccessControlException if first access is to a
3784 JSP that uses a FunctionMapper. (markt) 3785 </td></tr> 3786 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3787 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48582">48582</a>: Avoid NPE on background compilation failure. (markt) 3788 </td></tr> 3789 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3790 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48616">48616</a>: Don't declare or synchronize scripting variables for 3791 JSP fragments since they are scriptless. This is an alternative fix for 3792 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42390">42390</a> that avoids both the original problem and the 3793 regression in the first fix. (kkolinko) 3794 </td></tr> 3795 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3796 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48627">48627</a>: Fix regression in re-factored EL parsing. Keep 3797 literals as literals and handle deferredSyntaxAllowedAsLiteral. 3798 (kkolinko) 3799 </td></tr> 3800 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3801 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48668">48668</a>: When parsing JSPs only parse EL as EL if EL is enabled 3802 else strings such as ${ will be silently dropped. (markt) 3803 </td></tr> 3804 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3805 Various EL TCK failures. (markt) 3806 </td></tr> 3807 </table> 3808 </blockquote></td></tr></table> 3809 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.25 (jfclere)/Cluster"><!--()--></a><a name="Tomcat_6.0.25_(jfclere)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote> 3810 <table border="0" cellpadding="2" cellspacing="2"> 3811 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3812 Force a disconnect if an error occurs during replication such as 3813 a firewall dropping the connection. (fhanik) 3814 </td></tr> 3815 </table> 3816 </blockquote></td></tr></table> 3817 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.25 (jfclere)/Web applications"><!--()--></a><a name="Tomcat_6.0.25_(jfclere)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote> 3818 <table border="0" cellpadding="2" cellspacing="2"> 3819 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 3820 Add new "Find leaks" command to the Manager application. It allows to 3821 detect web applications that have caused memory leaks on stop, 3822 reload or undeploy. (markt/kkolinko) 3823 </td></tr> 3824 </table> 3825 </blockquote></td></tr></table> 3826 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.25 (jfclere)/Other"><!--()--></a><a name="Tomcat_6.0.25_(jfclere)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote> 3827 <table border="0" cellpadding="2" cellspacing="2"> 3828 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3829 Ensure files in conf directory have CRLF line endings when using the 3830 Windows installer. (kkolinko) 3831 </td></tr> 3832 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3833 Allow special characters recognized by the Windows command-line shell to 3834 be present in the names of CATALINA_HOME/_BASE and the current directory 3835 used to call the Tomcat scripts. (kkolinko) 3836 </td></tr> 3837 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3838 Don't use @Deprecated annotations in 3839 <code>javax.servlet.jsp.JspContext</code> since the specification does 3840 not include them in the API definition. (markt) 3841 </td></tr> 3842 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 3843 Improve the information in the JAR manifest files. (markt) 3844 </td></tr> 3845 </table> 3846 </blockquote></td></tr></table> 3847</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.24 (jfclere)"><!--()--></a><a name="Tomcat_6.0.24_(jfclere)"><strong>Tomcat 6.0.24 (jfclere)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2010-01-21</strong></font></td></tr><tr><td colspan="2"><blockquote> 3848 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.24 (jfclere)/Catalina"><!--()--></a><a name="Tomcat_6.0.24_(jfclere)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 3849 <table border="0" cellpadding="2" cellspacing="2"> 3850 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3851 Correct TCK failures with security manager caused by the original fix 3852 for <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47774">47774</a>. (markt) 3853 </td></tr> 3854 </table> 3855 </blockquote></td></tr></table> 3856 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.24 (jfclere)/Other"><!--()--></a><a name="Tomcat_6.0.24_(jfclere)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote> 3857 <table border="0" cellpadding="2" cellspacing="2"> 3858 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3859 Remove broken link in README.html. (jfclere) 3860 </td></tr> 3861 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3862 Add <code>.notice</code> files to the set of files that have their line 3863 endings changed. (markt) 3864 </td></tr> 3865 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3866 <code>.zip</code> distributions should have windows line endings. 3867 (markt) 3868 </td></tr> 3869 </table> 3870 </blockquote></td></tr></table> 3871</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.23 (jfclere)"><!--()--></a><a name="Tomcat_6.0.23_(jfclere)"><strong>Tomcat 6.0.23 (jfclere)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote> 3872 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.23 (jfclere)/Catalina"><!--()--></a><a name="Tomcat_6.0.23_(jfclere)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 3873 <table border="0" cellpadding="2" cellspacing="2"> 3874 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3875 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47774">47774</a>: Ensure web application class loader is used when 3876 calling session listeners. (markt) 3877 </td></tr> 3878 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 3879 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48006">48006</a>: Add additional information to the optional 3880 X-Powered-By header to align with the content suggested in the Servlet 3881 specification. (markt) 3882 </td></tr> 3883 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3884 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48345">48345</a>: Sessions timed out too early when using 3885 PersistentManager. Patch provided by Keiichi Fujino. (markt) 3886 </td></tr> 3887 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3888 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48398">48398</a>: Make objects used as locks final to ensure correct 3889 operation. Patch provided by sebb. (markt) 3890 </td></tr> 3891 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3892 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48417">48417</a>: Update French translations. Patch provided by André 3893 Warnier. (markt/kkolinko) 3894 </td></tr> 3895 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3896 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48421">48421</a>: Fix file descriptor and potential memory leak when a 3897 web application uses a local logging.properties file. Allow a web 3898 application's log files to be deleted once the web application has been 3899 stopped. (markt) 3900 </td></tr> 3901 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3902 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48454">48454</a>: Ensure stderr is completely read before terminating 3903 the CGI process. Patch provided by Markus Grieder. (markt) 3904 </td></tr> 3905 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3906 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48516">48516</a>: Prevent NPE in JNDIRealm if requested user does not 3907 exist. Patch provided by Kevin Conaway. (markt) 3908 </td></tr> 3909 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3910 Fix implementation of log buffer size and provide a cleaner interface. 3911 (fhanik/kkolinko) 3912 </td></tr> 3913 </table> 3914 </blockquote></td></tr></table> 3915 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.23 (jfclere)/Coyote"><!--()--></a><a name="Tomcat_6.0.23_(jfclere)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote> 3916 <table border="0" cellpadding="2" cellspacing="2"> 3917 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 3918 Update version of native bundled in Windows installer to 1.1.19. (mturk) 3919 </td></tr> 3920 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 3921 Update recommended version for native to 1.1.19. (rjung) 3922 </td></tr> 3923 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3924 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48004">
392448004</a>: All web applications to set the http 3925 <code>Server</code> header. (markt) 3926 </td></tr> 3927 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3928 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48470">48470</a>: Ensure Tomcat does not lock up if shut down under 3929 load. (markt) 3930 </td></tr> 3931 </table> 3932 </blockquote></td></tr></table> 3933 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.23 (jfclere)/Jasper"><!--()--></a><a name="Tomcat_6.0.23_(jfclere)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote> 3934 <table border="0" cellpadding="2" cellspacing="2"> 3935 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3936 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47977">47977</a>: Using a body with a tag that has an empty body should 3937 cause an error. (markt) 3938 </td></tr> 3939 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3940 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48112">48112</a>: Correct handling of } character in literals when parsing 3941 expressions. This also improves the fix for <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47413">47413</a>. (markt) 3942 </td></tr> 3943 </table> 3944 </blockquote></td></tr></table> 3945 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.23 (jfclere)/Web applications"><!--()--></a><a name="Tomcat_6.0.23_(jfclere)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote> 3946 <table border="0" cellpadding="2" cellspacing="2"> 3947 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 3948 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48530">48530</a>: Add information on the Manager Server Status page to 3949 the Manager How-To in the documentation webapp. Based on a patch by 3950 Arnaud Espy. (markt) 3951 </td></tr> 3952 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 3953 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48532">48532</a>: Add information to the BIO/NIO SSL configuration page 3954 in the documentation web application to specify how the defaults for the 3955 various trust store attributes are determined. (markt) 3956 </td></tr> 3957 </table> 3958 </blockquote></td></tr></table> 3959 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.23 (jfclere)/Other"><!--()--></a><a name="Tomcat_6.0.23_(jfclere)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote> 3960 <table border="0" cellpadding="2" cellspacing="2"> 3961 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3962 Remove hard coded version numbers and instead apply version filter 3963 already defined in ant scripts. (rjung) 3964 </td></tr> 3965 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3966 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47609">47609</a>: Correct regression in previous fix. (markt) 3967 </td></tr> 3968 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 3969 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48464">48464</a>: Provide an option to specify the command window title 3970 in catalina.bat on Windows. Patch provided by LiuYan. (markt) 3971 </td></tr> 3972 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 3973 Add some missing deprecation markers for 3974 <code>javax.servlet.jsp.JspContext</code>. (markt/kkolinko) 3975 </td></tr> 3976 </table> 3977 </blockquote></td></tr></table> 3978</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.22 (jfclere)"><!--()--></a><a name="Tomcat_6.0.22_(jfclere)"><strong>Tomcat 6.0.22 (jfclere)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote> 3979 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.22 (jfclere)/Catalina"><!--()--></a>
3979<a name="Tomcat_6.0.22_(jfclere)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 3980 <table border="0" cellpadding="2" cellspacing="2"> 3981 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 3982 Log errors if a web application starts a thread but fails to stop the 3983 thread when the web application stops or is reloaded. Failure to stop a 3984 thread is very likely to result in a memory leak. (markt) 3985 </td></tr> 3986 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 3987 Provide an option to stop any threads a web application starts but fails 3988 to stop when the web application stops or is reloaded. Using this option 3989 is very likely to result in instability and should be viewed as a last 3990 resort in development and is not recommended at all in production. 3991 (markt) 3992 </td></tr> 3993 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 3994 Log errors if a web application creates a ThreadLocal but fails to clear 3995 it when the web application stops or is reloaded. Failure to clear a 3996 ThreadLocal is very likely to result in a memory leak. (markt) 3997 </td></tr> 3998 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 3999 Clear any unintentional references remaining in 4000 <code>sun.rmi.transport.Target</code> when the web application stops or 4001 is reloaded. Failure to clear these is very likely to result in a memory 4002 leak. (markt) 4003 </td></tr> 4004 </table> 4005 </blockquote></td></tr></table> 4006 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.22 (jfclere)/Coyote"><!--()--></a><a name="Tomcat_6.0.22_(jfclere)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote> 4007 <table border="0" cellpadding="2" cellspacing="2"> 4008 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4009 Remove unneeded line from the method that normalizes decodedURI. 4010 (kkolinko) 4011 </td></tr> 4012 </table> 4013 </blockquote></td></tr></table> 4014 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.22 (jfclere)/Other"><!--()--></a><a name="Tomcat_6.0.22_(jfclere)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote> 4015 <table border="0" cellpadding="2" cellspacing="2"> 4016 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4017 Correct MD5 generation in the build process. (jfclere/kkolinko) 4018 </td></tr> 4019 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4020 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47609">47609</a>: Provide fail-safe EOL conversion for build process. 4021 Based on patches by sebb/kkolinko. (markt) 4022 </td></tr> 4023 </table> 4024 </blockquote></td></tr></table> 4025</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.21 (jfclere)"><!--()--></a><a name="Tomcat_6.0.21_(jfclere)"><strong>Tomcat 6.0.21 (jfclere)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote> 4026 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.21 (jfclere)/Catalina"><!--()--></a><a name="Tomcat_6.0.21_(jfclere)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 4027 <table border="0" cellpadding="2" cellspacing="2"> 4028 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4029 Fix issues with expression language when running under a 4030 SecurityManager. (markt) 4031 </td></tr> 4032 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4033 Remove duplicate mime-mapping entries in web.xml. Re-order entries 4034 alphabetically to make it easier to identify duplicates. (markt) 4035 </td></tr> 4036 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 4037 Use a more sensible default (webapps) for a Host's appBase. 4038 (markt/idarwin) 4039 </td></tr> 4040 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4041 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=37794">37794</a>: Support the parsing of parameters from chunked POSTs. 4042 (markt) 4043 </td></tr> 4044 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4045 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=37984">37984</a>: Strip {MD5} as well as {SHA} if present in digest 4046 passwords in LDAP directories. (markt) 4047 </td></tr> 4048 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4049 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=38352">38352</a>: Allow JSPs to write to the directory defined by 4050 <code>javax.servlet.context.tempdir</code> when running under a security 4051 manager. (markt) 4052 </td></tr> 4053 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4054 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=39231">39231</a>: Call LoginContext.logout() when using JAAS realm and 4055 session expires. (markt/kkolinko) 4056 </td></tr> 4057 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4058 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=40380">40380</a>: Fix potential synchronization issue in 4059 StandardSession.expire(). (markt) 4060 </td></tr> 4061 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4062 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41059">41059</a>: Reduce chances of errors when ENABLE_CLEAR_REFERENCES 4063 is used. Patch provided by Curt Arnold. (markt) 4064 </td></tr> 4065 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4066 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43343">43343</a>: Fix additional concurrency issues identified with the 4067 persistent session manager. (markt) 4068 </td></tr> 4069 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4070 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44041">44041</a>: Fix threading issue in WebappClassLoader that can lead 4071 to duplicate class definition under high load. (markt/fhanik) 4072 </td></tr> 4073 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4074 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44943">44943</a>: Use the same engine name in server.xml comments to 4075 reduce copy and pastes issues. (markt/kkolinko) 4076 </td></tr> 4077 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4078 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45255">45255</a>: Provide protection against session fixation by 4079 changing session ID automatically on authentication. (markt/kkolinko) 4080 </td></tr> 4081 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4082 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45403">45403</a>: Add additional checks on web application deployment 4083 and do not swallow IO errors. (kkolinko) 4084 </td></tr> 4085 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4086 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45785">45785</a>: Additional fix required for the extension validator. 4087 Based on a patch by Rolf Wojtech. (markt) 4088 </td></tr> 4089 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4090 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46908">46908</a>: Try and support java encoding names when using an xml 4091 parser provided via the endorsed mechanism. (markt) 4092 </td></tr> 4093 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4094 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46967">46967</a>: Better handling of errors when trying to use 4095 Manager.randomFile. Based on a patch by Kirk Wolf. (markt) 4096 </td></tr> 4097 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4098 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47046">47046</a>: Unregister all MBeans, including when non-default 4099 engine names are used. (markt) 4100 </td></tr> 4101 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4102 Use native2ascii to ensure non-ASCII characters in property files are 4103 handled correctly in all circumstances. (markt) 4104 </td></tr> 4105 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4106 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47050">
410647050</a>: Remove unnecessary filtering of error messages. 4107 (markt) 4108 </td></tr> 4109 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4110 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47080">47080</a>: Fix NPE in RealmBase when uri is null. (markt) 4111 </td></tr> 4112 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4113 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47158">47158</a>: Fix some thread safety issues in the AccessLogValve. 4114 (markt) 4115 </td></tr> 4116 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4117 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47228">47228</a>: Correct French translations. Patch provided by sebb. 4118 (markt) 4119 </td></tr> 4120 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4121 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47299">47299</a>: Simplify code and make embedding easier. (markt) 4122 </td></tr> 4123 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4124 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47316">47316</a>: Allow different values for Service name and Engine 4125 name. This corrects a regression introduced by the fix for 4126 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42707">42707</a>. (markt) 4127 </td></tr> 4128 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4129 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47343">47343</a>: Editing context.xml for a directory should not delete 4130 the directory. This was a regression caused by the fix for 4131 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42747">42747</a>. (markt) 4132 </td></tr> 4133 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4134 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47364">47364</a>: Improve Javadoc for 4135 org.apache.catalina.connector.Request.getAttributeNames() to include 4136 information on the handling of Tomcat's internal request attributes. 4137 (markt) 4138 </td></tr> 4139 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4140 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47451">47451</a>: Don't throw an NPE if the various response.setHeader() 4141 methods are called with null header name, zero length header name or 4142 null value. Silently ignore the calls in the same way they are ignored 4143 if the response has already been committed. (markt) 4144 </td></tr> 4145 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4146 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47462">47462</a>: Allow individual web applications to override metadata 4147 complete if set in the global web.xml. Patch provided by Keiichi Fujino. 4148 (markt) 4149 </td></tr> 4150 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4151 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47495">47495</a>: Provide a more meaningful error message is server.xml 4152 is not readable and exit immediately if a server cannot be created. 4153 (funkman/kkolinko) 4154 </td></tr> 4155 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4156 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47518">47518</a>: Correct reference in Valve Javadoc that referred to an 4157 old method. Patch provided by Christopher Schultz. (markt) 4158 </td></tr> 4159 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4160 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47537">47537</a>: Return an error page rather than a zero length 200 4161 response if the forward to the login or error page fails during FORM 4162 authentication. (markt) 4163 </td></tr> 4164 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4165 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47718">47718</a>: Fix file descriptor leak on context stop/reload. Patch 4166 provided by George Sexton. (markt) 4167 </td></tr> 4168 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4169 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47796">47796</a>: Fix OpenEJB integration. Reset annotation processor on 4170 context stop. (markt) 4171 </td></tr> 4172 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4173 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47826">47826</a>: Correct error in debug message in 4174 org.apache.catalina.Bootstrap (markt) 4175 </td></tr> 4176 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4177 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47836">47836</a>: Clear cached TLD information on context reload. 4178 (markt) 4179 </td></tr> 4180 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4181 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47841">47841</a>: When using the CombinedRealm, if one of the nested 4182 Realms fails to start, skip that Realm rather than preventing the 4183 CombinedRealm from starting. (markt) 4184 </td></tr> 4185 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4186 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47881">47881</a>: Fix processing of startd and stopd arguments. Patch 4187 provided by Qingyang Xu. (kkolinko) 4188 </td></tr> 4189 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4190 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47918">47918</a>: Correct mbean descriptors for the host deployer. Patch 4191 provided by Uwe Günther. (markt) 4192 </td></tr> 4193 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4194 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47930">47930</a>: Fix thread safety issues on session swap-in in the 4195 persistent session manager. (markt/kkolinko) 4196 </td></tr> 4197 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4198 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47976">47976</a>: Correct usage message and Javadoc for 4199 <code>org.apache.catalina.startup.Catalina</code>. (markt) 4200 </td></tr> 4201 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4202 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47997">47997</a>: Ensure the NamingContextListener applies to all naming 4203 contexts, not just the global one. Patch provided by Michael Allman. 4204 (markt) 4205 </td></tr> 4206 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4207 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48049">48049</a>: Fix copy and paste error so 4208 <code>NamingContext.destroySubContext()</code> works correctly. 4209 Patch provided by gingyang.xu (markt) 4210 </td></tr> 4211 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 4212 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48097">48097</a>: Make WebappClassLoader to do not swallow 4213 AccessControlException. (kkolinko) 4214 </td></tr> 4215 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4216 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48097">48097</a>: Avoid throwing an AccessControlException which can 4217 lead to a NoClassDefFoundError on first access of first jsp. 4218 (kkolinko/markt) 4219 </td></tr> 4220 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4221 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48257">48257</a>: Correct error in Spanish translations. Patch provided 4222 by Guillermo Gutiérrez. (markt) 4223 </td></tr> 4224 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4225 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48306">48306</a>, <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48307">48307</a>: Correct French translations. Patches 4226 provided by Marc Paquette. (markt) 4227 </td></tr> 4228 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4229 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48322">48322</a>: Single quote characters are not HTTP separators and 4230 should not be treated as such in the cookie handling. (markt) 4231 </td></tr> 4232 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4233 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48413">48413</a>: Correct some French translations. Patch provided by 4234 André Warnier. (markt) 4235 </td></tr> 4236 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 4237 Deprecate the <code>caseSensitive</code> option on the 4238 <code>StandardContext</code> which will be removed in Tomcat 7 onwards. 4239 (markt) 4240 </td></tr> 4241 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4242 Log deployments consistently for WAR, directory and descriptor 4243 deployments. (markt) 4244 </td></tr> 4245 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 4246 Better logging for parameter decoding issues to help identify broken 4247 requests. (markt) 4248 </td></tr> 4249 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 4250 Update Apache Commons Pool from 1.4 to 1.5.4. This update includes 4251 various fixes to prevent deadlocks, reduces synchronization and makes 4252 object allocation occur fairly - i.e. objects are allocated to threads 4253 in the order that the threads request them. This update fixes a number 4254 of issues in Tomcat's built-in copy of DBCP. (markt) 4255 </td></tr> 4256 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 4257 Allow log file encoding to be configured for JULI FileHandler. (kkolinko) 4258 </td></tr> 4259 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 4260 Provide debug logging for JNDI lookups. (markt) 4261 </td></tr> 4262 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4263 Correct JDBC driver de-registration on web application stop and fix NPE 4264 that is exposed by the fix. (markt) 4265 </td></tr> 4266 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4267 Ensure JDBC driver de-registration works with a security manager. 4268 (markt) 4269 </td></tr> 4270 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4271 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48214">48214</a>: Ensure JDBC driver de-registration is not too zealous. 4272 (markt) 4273 </td></tr> 4274 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 4275 Various JNDI realm improvements for Active Directory. These include the 4276 ability to specify a default role, optional handling for nested roles
4277 and an option to ignore PartialResultExceptions (markt). 4278 </td></tr> 4279 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 4280 Expose Servlet Filters via JMX. Based on a patch by Xie Xiaodong as part 4281 of GSOC2009. (markt) 4282 </td></tr> 4283 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 4284 Tomcat now uses the Platform MBean server by default so all MBeans 4285 registered by Tomcat will be exposed via JMX (eg via JConsole) without 4286 requiring any additional configuration. (markt) 4287 </td></tr> 4288 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 4289 The JMX Remote Lifecycle Listener allows the ports used by JMX to be 4290 fixed, making it easier to configure firewalls to all JMX traffic to 4291 pass through. Part of the extras package. (markt) 4292 </td></tr> 4293 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4294 Make context deployment error message for fixDocBase() more meaningful. 4295 (markt) 4296 </td></tr> 4297 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4298 Add an additional permission required by JULI when running under newer 4299 JDKs and a security manager. (markt) 4300 </td></tr> 4301 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4302 Remove unnecessary reference to tomcat-coyote.jar from the bootstrap JAR 4303 manifest. (kkolinko) 4304 </td></tr> 4305 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4306 Use correct method to create URLs in VirtualWebappLoader. (kkolinko) 4307 </td></tr> 4308 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4309 Provide a new listener to protect against a memory leak caused by a 4310 change in the Sun JRE from version 1.6.0_15 onwards. Also include 4311 protection against locked JAR files, memory leaks triggered by 4312 XML parsing and the GC Daemon. (markt) 4313 </td></tr> 4314 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4315 Don't swallow exceptions in ApplicationContextFacade.doPrivileged() 4316 (kkolinko) 4317 </td></tr> 4318 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4319 Close resource stream in WebappClassLoader after read error. (pero) 4320 </td></tr> 4321 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 4322 Include attribute name into the text of Non-serializable exception 4323 that might be thrown by Session.setAttribute() in distributable 4324 applications. (mturk) 4325 </td></tr> 4326 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 4327 Add RemoteIpValve, a port of mod_remoteip. Patch provided by Cyrille Le 4328 Clerc. (markt) 4329 </td></tr> 4330 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 4331 Allow per instance configuration of JULI or log4j for core Tomcat 4332 logging when using CATALINA_BASE. (markt/kkolinko) 4333 </td></tr> 4334 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4335 Prevent NPE in JULI during shutdown when resources try to log messages 4336 after JULI has been shutdown. (fhanik/kkolinko) 4337 </td></tr> 4338 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 4339 Make the JULI FileHandler easier to extend. (fhanik) 4340 </td></tr> 4341 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 4342 Make buffer size for FileHandler configurable. (fhanik) 4343 </td></tr> 4344 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4345 Make JULI FileHandler thread safe. (fhanik) 4346 </td></tr> 4347 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 4348 Provide an option to disable buffering in the JULI FileHandler. 4349 (kkolinko) 4350 </td></tr> 4351 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4352 Ensure log messages are not lost on shutdown. (markt) 4353 </td></tr> 4354 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 4355 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44679">44679</a>: Provide an option to allow the equals character in 4356 unquoted cookie values. (markt) 4357 </td></tr> 4358 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
4359 Add support for a connectionTimeout parameter to the JNDIRealm. (markt) 4360 </td></tr> 4361 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4362 Various (un)deployment related improvements including better handling of 4363 failed (un)deployment, additional checking for valid zip entries that 4364 don't make sense in a WAR and improved validation of WAR file names. 4365 (markt) 4366 </td></tr> 4367 </table> 4368 </blockquote></td></tr></table> 4369 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.21 (jfclere)/Coyote"><!--()--></a><a name="Tomcat_6.0.21_(jfclere)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote> 4370 <table border="0" cellpadding="2" cellspacing="2"> 4371 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>Implement <code>socket.unlockTimeout</code> attribute for NIO connector.</td></tr> 4372 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 4373 Update version of native bundled in Windows installer 4374 to 1.1.18. (kkolinko) 4375 </td></tr> 4376 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 4377 Update minimum required version for native to 1.1.17. (rjung) 4378 </td></tr> 4379 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4380 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46950">46950</a>: Fix doing SSL renegotiation when a resource with CLIENT-CERT 4381 auth is requested. (markt) 4382 </td></tr> 4383 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4384 Align tcnative native and Java method names. (rjung) 4385 </td></tr> 4386 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>Dont report thread count from connector if an external executor is used.</td></tr> 4387 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4388 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=39637">39637</a>: Enable the AJP connectors to correctly handle client 4389 certificate chains. Patch by Patrik Schnellmann. (markt) 4390 </td></tr> 4391 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4392 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46985">46985</a>: Clean up code and remove impossible condition. 4393 (markt/kkolinko) 4394 </td></tr> 4395 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4396 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47225">47225</a>: Fix error in calculation of a buffer length in the 4397 mapper. (markt) 4398 </td></tr> 4399 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4400 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47320">47320</a>: Don't rely on the platform default encoding being 4401 suitable to parse the session ID. (markt) 4402 </td></tr> 4403 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4404 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47499">47499</a>: Don't swallow bind exceptions. (markt) 4405 </td></tr> 4406 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4407 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47744">47744</a>: Prevent a medium term memory leak if using SSL with 4408 the JSSE provider and also using a security manager. Based on a patch by 4409 Greg Vanore. (markt) 4410 </td></tr> 4411 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4412 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47963">47963</a>: Ensure that any HTTP status messages are compliant 4413 with RFC2616. (markt/kkolinko) 4414 </td></tr> 4415 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4416 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47987">47987</a>: Limit size of not found resources cache. (markt) 4417 </td></tr> 4418 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4419 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48009">48009</a>: Protect against the situation where editing a 4420 context.xml file may result in the file disappearing for a very short 4421 time. (markt) 4422 </td></tr> 4423 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4424 Use correct connector attribute (SSLEnabled) rather than secure to 4425 determine if SSL should be used. (fhanik) 4426 </td></tr> 4427 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4428 Provide a workaround for CVE-2009-3555, the TLS renegotiation issue, for 4429 the default Blocking IO Java connector. 4430 </td></tr> 4431 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4432 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48252">48252</a>: Fix stack overflow exception when setting jkHome on
4433 NIO connector. (fhanik) 4434 </td></tr> 4435 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4436 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48311">48311</a>: Only the APR lifecycle listener should try and 4437 initialise APR. (markt) 4438 </td></tr> 4439 </table> 4440 </blockquote></td></tr></table> 4441 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.21 (jfclere)/Jasper"><!--()--></a><a name="Tomcat_6.0.21_(jfclere)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote> 4442 <table border="0" cellpadding="2" cellspacing="2"> 4443 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4444 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=38797">38797</a>: Fix a regression in the previous patch for 4445 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=37933">37933</a>. (markt) 4446 </td></tr> 4447 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4448 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=38897">38897</a>: Add uri of broken TLD to error message to aid 4449 debugging. (markt) 4450 </td></tr> 4451 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4452 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41661">41661</a>: Fix thread safety issue with JspConfig.init() (markt) 4453 </td></tr> 4454 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4455 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41824">41824</a>: Need to use canonical rather than binary form when 4456 writing code. (markt) 4457 </td></tr> 4458 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4459 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42390">42390</a>: Fix compilation issue with some nested tag files and 4460 simple tags. (kkolinko/markt) 4461 </td></tr> 4462 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4463 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43656">43656</a>: Correctly coerce <code>null</code> to zero when the 4464 target type is <code>Number</code>. (markt) 4465 </td></tr> 4466 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4467 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46907">46907</a>: Don't swallow input stream when debug logging is 4468 enabled. (markt) 4469 </td></tr> 4470 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4471 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47318">47318</a>: Process directives found in include preludes and 4472 codas. (markt) 4473 </td></tr> 4474 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4475 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47331">47331</a>: Treat uninterpreted tags as template text for JSP.2.2. 4476 (markt) 4477 </td></tr> 4478 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4479 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47413">47413</a>: Ensure expressions of the form "${a}${b}" 4480 are correctly coerced to String. (kkolinko) 4481 </td></tr> 4482 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4483 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47453">47453</a>: Handle void return types for deferred methods. 4484 (funkman) 4485 </td></tr> 4486 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 4487 Remove the code that auto-detects the value for compilerSourceVM, 4488 compilerTargetVM options of Jasper, because we know that this version 4489 of Tomcat cannot run on JDK 1.4 and thus the value is always "1.5". 4490 (kkolinko) 4491 </td></tr> 4492 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 4493 Change default values for JDK version compliance options of JspC 4494 (-source and -target when running from command line) 4495 to be "1.5", to be the same as the ones used by Jasper servlet. 4496 (kkolinko) 4497 </td></tr> 4498 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4499 Make constants in the TagHandlerPool really constant. (markt) 4500 </td></tr> 4501 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4502 When development mode is enabled and a JSP is deleted, ensure next 4503 request for that JSP is consistent with the JSP having been removed. 4504 (markt/kkolinko) 4505 </td></tr> 4506 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4507 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48019">48019</a>: Be more careful about skipping content that does not 4508 need to be parsed. (markt) 4509 </td></tr> 4510 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4511 Better handling of exception in JSP if parsed JSP source is not 4512 available. (markt) 4513 </td></tr> 4514 </table> 4515 </blockquote></td></tr></table> 4516 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.21 (jfclere)/Cluster"><!--()--></a><a name="Tomcat_6.0.21_(jfclere)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote> 4517 <table border="0" cellpadding="2" cellspacing="2"> 4518 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4519 DeltaSession needs endAccess so that CrossContext replication works. (pero) 4520 </td></tr> 4521 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4522 DeltaManager needs to replicate changed attributes even if session 4523 gets invalidated. Otherwise session listeners will not see the right 4524 data on the secondary nodes. (rjung) 4525 </td></tr> 4526 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4527 Spurious startup errors during session transfer. 4528 Sessions get transferred, but node still waits until timeout. (rjung) 4529 </td></tr> 4530 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 4531 Perform deserialization events with context class loader. (fhanik) 4532 </td></tr> 4533 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4534 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47515">47515</a>: Correctly replicate timestamp during startup. (fhanik) 4535 </td></tr> 4536 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4537 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47478">47478</a>: Call replication listeners when using BackupManager. (fhanik) 4538 </td></tr> 4539 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4540 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47369">47369</a>: Reset data diff after replication. (fhanik) 4541 </td></tr> 4542 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4543 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=40551">40551</a>: Enable the JvmRouteBinderValve to work with 4544 PersistentManagers as well as clustering. Based on a patch by Chris 4545 Chandler. (markt) 4546 </td></tr> 4547 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4548 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47342">47342</a>: Fix potential NPE on replicated context start. Patch 4549 provided by Keiichi Fujino. (markt) 4550 </td></tr> 4551 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4552 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47389">47389</a>: DeltaManager doesn't do session replication if 4553 notifySessionListenersOnReplication=false. 4554 Patch by Keiichi Fujino. (fhanik) 4555 </td></tr> 4556 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4557 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47502">47502</a>: Don't replicate session attributes known not to be 4558 serializable. (funkman) 4559 </td></tr> 4560 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4561 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47554">47554</a>: Include httpOnly attribute when re-writing session 4562 cookie after fail over. (markt) 4563 </td></tr> 4564 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4565 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47799">47799</a>: Enable the domain to be configured for Membership and 4566 DomainFilterInterceptor. Patch provided by Keiichi Fujino. (markt) 4567 </td></tr> 4568 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4569 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48113">48113</a>: Display IP addresses using 0 to 255 rather than -128 4570 to +127. Based on a patch by Quintin Beukes. (fhanik/kkolinko) 4571 </td></tr> 4572 </table> 4573 </blockquote></td></tr></table> 4574 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.21 (jfclere)/Web applications"><!--()--></a><a name="Tomcat_6.0.21_(jfclere)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote> 4575 <table border="0" cellpadding="2" cellspacing="2"> 4576 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4577 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41564">41564</a>: Add some documentation on installing Tomcat as a 4578 service on operating systems with User Account Control, e.g. Vista. 4579 (markt) 4580 </td></tr> 4581 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4582 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47161">47161</a>: Report thread count correctly in Manager when executors 4583 are used and return -1 when it can not easily be determined. (markt) 4584 </td></tr> 4585 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4586 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47235">47235</a>: Remove use of autoReconnect from MySQL examples. 4587 (markt) 4588 </td></tr> 4589 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4590 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47324">47324</a>: Fix submit URL for session list page so it works 4591 behind a reverse proxy. Patch provided by Maik Jablonski. (markt) 4592 </td></tr> 4593 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4594 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47425">47425</a>: Add crlFile attribute to the SSL configuration 4595 documentation. (markt) 4596 </td></tr> 4597 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4598 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47444">47444</a>: Remove Jakarta references from the documentation. 4599 (markt) 4600 </td></tr> 4601 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4602 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47656">47656</a>: Add information to documentation on system property 4603 replacement in configuration files. (markt) 4604 </td></tr> 4605 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4606 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47705">47705</a>: Fix division by zero error in the manager when trying 4607 to expire sessions when the session timeout is set to infinite. 4608 (funkman) 4609 </td></tr> 4610 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4611 Fix display of session information pages of Manager application 4612 in Internet Explorer. (kkolinko) 4613 </td></tr> 4614 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 4615 Do not reuse windows (tabs) for session detail pages in Manager 4616 application. (kkolinko) 4617 </td></tr> 4618 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4619 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47769">47769</a>: Clarify the JNDI docs with respect to use of 4620 <resource-ref> and related elements, specifically when they are 4621 required and when they may be omitted. (markt) 4622 </td></tr> 4623 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4624 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48381">48381</a>: Add information on how Tomcat treats host names to the 4625 host configuration documentation. (markt) 4626 </td></tr> 4627 </table> 4628 </blockquote></td></tr></table> 4629 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.21 (jfclere)/Other"><!--()--></a><a name="Tomcat_6.0.21_(jfclere)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote> 4630 <table border="0" cellpadding="2" cellspacing="2"> 4631 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 4632 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=37847">37847</a>: Make location and filename of catalina.out configurable 4633 in catalina.sh. (fhanik) 4634 </td></tr> 4635 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4636 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=37848">37848</a>: Re-fix not outputting info messages when there is no 4637 terminal. (markt) 4638 </td></tr> 4639 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4640 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=39194">39194</a>: Make classpath configuration consistent in the startup 4641 scripts. (markt/kkolinko) 4642 </td></tr> 4643 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 4644 Update Tomcat Windows service application (procrun) to version 2.0.5. 4645 It contains a fix for issue <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41538">41538</a> (mturk) 4646 </td></tr> 4647 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4648 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=40786">40786</a>: Include 64-bit Windows service wrapper in 4649 distributions. Update the Windows installer to automatically use the 4650 correct binary on 64-bit machines. (markt) 4651 </td></tr> 4652 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 4653 Update Windows Installer to use NSIS 2.45. They say that this version 4654 provides support for the upcoming Microsoft Windows 7. (kkolinko) 4655 </td></tr> 4656 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4657 Don't add blank lines to end of files when fixing line-endings for 4658 tar.gz distribution. (markt) 4659 </td></tr> 4660 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4661 Use explicit encoding during filtering operations when building Tomcat 4662 for distribution. (kkolinko) 4663 </td></tr> 4664 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 4665 Remove references to unused commons-collections from the build scripts. 4666 (markt) 4667 </td></tr> 4668 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4669 Fix download task check for commons-pool and commons-dbcp in the 4670 build scripts. (kkolinko) 4671 </td></tr> 4672 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 4673 Include deployer-howto.html into the deployer distributive. (kkolinko) 4674 </td></tr> 4675 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4676 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47149">47149</a>: Build scripts: Explicitly specify encoding when 4677 compiling. (kkolinko) 4678 </td></tr> 4679 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4680 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47267">47267</a>: Ensure release notes displayed by Windows installer 4681 have CRLF line-endings regardless of which OS the install package is 4682 built on. (markt/kkolinko) 4683 </td></tr> 4684 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 4685 Include NOTICE, LICENSE and manifest files in all Tomcat JARs and add a 4686 mechanism to the build process to enable these files to be customised 4687 per JAR as required. (markt) 4688 </td></tr> 4689 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4690 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47699">47699</a>: Provide better handling of PID files. (markt) 4691 </td></tr> 4692 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4693 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47824">47824</a>: Make Servlet API an optional dependency for JULI when 4694 using Maven. (markt) 4695 </td></tr> 4696 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 4697 Add support for per instance (using $CATALINA_BASE) log4j.properties 4698 files, JDBC drivers etc by adding ${catalina.base}/lib and 4699 ${catalina.base}/lib/*.jar to the start of the common loader class 4700 path. (markt) 4701 </td></tr> 4702 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4703 Correct CVE-2009-3548. When installed via the Windows installer and 4704 using defaults, don't create an administrative user with a blank 4705 password. Additionally, the administrative user is only created if the 4706 manager or host-manager web applications are selected for installation. 4707 (markt) 4708 </td></tr> 4709 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 4710 Further improvements to the administrative user name and password 4711 handling in the Windows installer. (kkolinko) 4712 </td></tr> 4713 </table> 4714 </blockquote></td></tr></table> 4715</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.20 (remm)"><!--()--></a><a name="Tomcat_6.0.20_(remm)"><strong>Tomcat 6.0.20 (remm)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2009-06-03</strong></font></td></tr><tr><td colspan="2"><blockquote> 4716 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.20 (remm)/Catalina"><!--()--></a><a name="Tomcat_6.0.20_(remm)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 4717 <table border="0" cellpadding="2" cellspacing="2"> 4718 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4719 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42579">42579</a>: Handle both relative and absolute search results in 4720 the JNDIRealm. Patch provided by Brandon DuRette. (markt) 4721 </td></tr> 4722 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4723 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46562">46562</a>: Close shtml files after processing to allow other 4724 processes to modify the files. (markt) 4725 </td></tr> 4726 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4727 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46815">46815</a>: Make the MemoryUserDatabase read-only by default. 4728 (markt) 4729 </td></tr> 4730 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4731 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46816">46816</a>: Align session manager mbean descriptor with 4732 implementation. (markt) 4733 </td></tr> 4734 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4735 Fix a typo in the OPTIONS response from the default servlet. (markt) 4736 </td></tr> 4737 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4738 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46822">46822</a>: Remove unnecessary object creation from 4739 StandardContext. Patch provided by Anthony Whitford. (markt) 4740 </td></tr> 4741 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4742 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46866">46866</a>: Better initialisation of Random objects. (markt) 4743 </td></tr> 4744 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4745 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46875">46875</a>: Catch and handle possible IllegalStateExceptions 4746 in CometConnectionManagerValve related to session expiration. (markt) 4747 </td></tr> 4748 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4749 Correct some errors reported when testing the WebDAV servlet with the 4750 Litmus test suite. (markt) 4751 </td></tr> 4752 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 4753 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46933">46933</a>: Update StringManager to use Java 5 features. Patch 4754 provided by Jens Kapitza. (markt) 4755 </td></tr> 4756 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4757 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46990">46990</a>: Fix synchronization issues reported by FindBugs. Patch 4758 provided by Sebb. (markt) 4759 </td></tr> 4760 </table> 4761 </blockquote></td></tr></table> 4762 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.20 (remm)/Coyote"><!--()--></a><a name="Tomcat_6.0.20_(remm)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote> 4763 <table border="0" cellpadding="2" cellspacing="2"> 4764 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 4765 Allow huge request body packets for AJP13. (rjung) 4766 </td></tr> 4767 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4768 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45026">45026</a>: Never return an empty HTTP status reason phrase. 4769 mod_jk and httpd 2.x do not like that. (rjung) 4770 </td></tr> 4771 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 4772 Set remote port for AJP connectors from the optional request 4773 attribute AJP_REMOTE_PORT. (rjung) 4774 </td></tr> 4775 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 4776 Update tc-native to 1.1.16 (markt) 4777 </td></tr> 4778 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4779 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46982">46982</a>: Correct reporting of DST offset in access logs. 4780 (markt) 4781 </td></tr> 4782 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4783 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46984">46984</a>: Invalid characters in HTTP request method now result 4784 in a 400 response. (markt) 4785 </td></tr> 4786 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4787 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46991">46991</a>: Fix AJP connector always reporting bytes received as 4788 zero. (markt) 4789 </td></tr> 4790 </table> 4791 </blockquote></td></tr></table> 4792 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.20 (remm)/Jasper"><!--()--></a><a name="Tomcat_6.0.20_(remm)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote> 4793 <table border="0" cellpadding="2" cellspacing="2"> 4794 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4795 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=37929">37929</a>: Fix invalidated session causing pageContext methods to 4796 fail. (markt) 4797 </td></tr> 4798 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4799 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41606">41606</a>: Prevent double initialisation of JSPs. Patch provided 4800 by Chris Halstead. (markt) 4801 </td></tr> 4802 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4803 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46354">46354</a>: ArrayIndexOutOfBoundsException when using 4804 org.apache.jasper.runtime.BodyContentImpl.LIMIT_BUFFER=true 4805 Patch provided by Konstantin Kolinko. (markt) 4806 </td></tr> 4807 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4808 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46909">46909</a>: Only include semi-colon in type attribute for 4809 <jsp:plugin> when it is required. (markt) 4810 </td></tr> 4811 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4812 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47013">47013</a>: Use system property rather than hard-coded string for 4813 pre-compilation flag. (markt) 4814 </td></tr> 4815 </table> 4816 </blockquote></td></tr></table> 4817 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.20 (remm)/Cluster"><!--()--></a><a name="Tomcat_6.0.20_(remm)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote> 4818 <table border="0" cellpadding="2" cellspacing="2"> 4819 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4820 A node should ignore its own heartbeat messages. (rjung) 4821 </td></tr> 4822 </table> 4823 </blockquote></td></tr></table> 4824 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.20 (remm)/Web applications"><!--()--></a><a name="Tomcat_6.0.20_(remm)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote> 4825 <table border="0" cellpadding="2" cellspacing="2"> 4826 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4827 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46509">
482746509</a>: Use correct link on error page in JSP security 4828 example. Patch provided by Michael Moody. (markt) 4829 </td></tr> 4830 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4831 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46599">46599</a>: Document known DAEMON issue. (markt) 4832 </td></tr> 4833 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4834 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46807">46807</a>: Correct docs for configuration of tag pooling. (markt) 4835 </td></tr> 4836 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4837 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46924">46924</a>: Clarify behaviour when auto deployment is enabled and 4838 a WAR, directory or context file is deleted or updated. (markt) 4839 </td></tr> 4840 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4841 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46958">46958</a>: All xml manager status output to work regardless of 4842 context path. (markt) 4843 </td></tr> 4844 </table> 4845 </blockquote></td></tr></table> 4846 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.20 (remm)/Other"><!--()--></a><a name="Tomcat_6.0.20_(remm)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote> 4847 <table border="0" cellpadding="2" cellspacing="2"> 4848 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4849 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46351">46351</a>: Refactor the build script. Patch provided by Marc 4850 Guillemot. (markt) 4851 </td></tr> 4852 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4853 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46910">46910</a>: Properties files corrupted by build process. (remm) 4854 </td></tr> 4855 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4856 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46915">46915</a>: When resolving ResourceBundle properties, don't claim 4857 to have resolved the property unless we really have resolved it. (markt) 4858 </td></tr> 4859 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4860 Fix .pdf and .exe corruption in -src.tar.gz distribution. (markt) 4861 </td></tr> 4862 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 4863 Enable running Tomcat directly from the build directory on linux 4864 systems. (markt) 4865 </td></tr> 4866 </table> 4867 </blockquote></td></tr></table> 4868</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.19 (remm)"><!--()--></a><a name="Tomcat_6.0.19_(remm)"><strong>Tomcat 6.0.19 (remm)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote> 4869 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.19 (remm)/Catalina"><!--()--></a><a name="Tomcat_6.0.19_(remm)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 4870 <table border="0" cellpadding="2" cellspacing="2"> 4871 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 4872 Manager application prints FAIL if application was deployed but failed to start (fhanik) 4873 </td></tr> 4874 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 4875 When shutdown port is disabled, print user friendly message and not a stack trace. (fhanik) 4876 </td></tr> 4877 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4878 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=37458">37458</a>: Correct sync issue that leads to NPE in rare 4879 circumstances. Patch provided by Konstantin Kolinko. (markt) 4880 </td></tr> 4881 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4882 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=38553">38553</a>: Return 401 rather than 400 if client does not present 4883 a certificate CLIENT-CERT authentication. (markt) 4884 </td></tr> 4885 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4886 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=38570">38570</a>: When checking docBase against appBase, make sure we 4887 check for an exact match against the appBase. (markt) 4888 </td></tr> 4889 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4890 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=39013">39013</a>: When testing for invalid docBase, test for an exact 4891 match with the appBase dir. (markt) 4892 </td></tr> 4893 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4894 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=39396">39396</a>: Don't include TRACE in OPTIONS response unless we
4895 know it hasn't been disabled in the connector. (markt) 4896 </td></tr> 4897 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4898 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42747">42747</a>: Ensure context.xml takes effect on first deployment 4899 for WAR and DIR deployments. context.xml is now copied to 4900 CATALINA_BASE/<engine name>/<host name> for DIR as well as 4901 WAR deployments. (markt) 4902 </td></tr> 4903 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td><a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43071">43071</a>: Start poller before acceptor (r719267)</td></tr> 4904 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 4905 Fix read/write timeout of async comet operations 4906 (r719264) 4907 </td></tr> 4908 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 4909 Implement async close behaviour for Comet/NIO. 4910 No-op for APR (same behavior as before) 4911 (r719262) 4912 </td></tr> 4913 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4914 Default thread count for HTTP connectors is 200. (r713186) 4915 </td></tr> 4916 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4917 Comet should always invoke END and properly invoke READ (r713174) 4918 </td></tr> 4919 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4920 Fix class cast exception when shutting down a replicated context but no cluster has been configured in server.xml (r713177) 4921 </td></tr> 4922 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4923 Dererence socket when its no longer used. Frees up socket buffers and memory. No functional change. (r713175) 4924 </td></tr> 4925 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4926 Correct wrong "No role found" debug message, 4927 logged in RealmBase even if a role was found. (rjung) 4928 </td></tr> 4929 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td><a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44809">44809</a>: Improve AprLifecycleListener Error Messages. (jfclere)</td></tr> 4930 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4931 Log AccessControlException for context specific logging.properties 4932 during startup with security manager. (rjung) 4933 </td></tr> 4934 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 4935 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41407">41407</a>: Add CLIENT-CERT support to the JAAS Realm. (markt) 4936 </td></tr> 4937 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4938 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42409">42409</a>: Make custom and standard error page handling 4939 consistent by using resetBuffer() which will not alter previously set 4940 headers. (markt) 4941 </td></tr> 4942 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4943 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42673">42673</a>: Fix SSI virtual includes for multi-level contexts. 4944 Patch provided by Peter Jodeleit. (markt) 4945 </td></tr> 4946 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4947 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42707">42707</a>: Make adding a host alias via JMX take effect 4948 immediately. (markt) 4949 </td></tr> 4950 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4951 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43656">43656</a>: Correct regression in previous fix for this bug. Patch 4952 provided by Nils Eckert. (markt) 4953 </td></tr> 4954 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4955 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45419">45419</a>: Set Accept-Ranges for static resources served by 4956 DefaultServlet. (markt) 4957 </td></tr> 4958 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4959 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45441">45441</a>: Correctly map filters for FORWARD and INCLUDE. (markt) 4960 </td></tr> 4961 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4962 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45447">45447</a>: Convert Spanish resource files to use UTF-8 and provide 4963 translations where previously missing. Patch provided by Jesus Marin. 4964 (markt) 4965 </td></tr> 4966 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4967 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45453">45453</a>: Remove potential race condition in JDBC Realm. 4968 Based on a patch by Santtu Hyrkk. (markt) 4969 </td></tr> 4970 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 4971 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45576">45576</a>: Add DIGEST support to the JAAS Realm. (markt) 4972 </td></tr> 4973 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4974 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45585">45585</a>: Allow Tomcat to start if using 4975 <code>$CATALINA_BASE</code> but not JULI. Patch based on a suggestion by 4976 Ian Ward Comfort. (markt) 4977 </td></tr> 4978 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4979 The JAAS Realm did not assign roles to authenticated users. (markt) 4980 </td></tr> 4981 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 4982 Provide full stacktrace and message when the ErrorReportValve
4982Class can't 4983 be instantiated. (funkman) 4984 </td></tr> 4985 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4986 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45608">45608</a>: Make allocated servlet count synchronized to ensure 4987 the correct allocated servlet count is available during shutdown. 4988 (markt) 4989 </td></tr> 4990 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4991 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45628">45628</a>: When checking MANIFEST dependencies, JARs without 4992 dependencies should allows be considered to be full-filled. (markt) 4993 </td></tr> 4994 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4995 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45735">45735</a>: Improve ETag handling. (remm) 4996 </td></tr> 4997 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 4998 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45785">45785</a>: Ignore directories named xxx.jar in WEB-INF/lib. 4999 (markt) 5000 </td></tr> 5001 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5002 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45823">45823</a>: Log missing request headers as '-' not 'null'. Based 5003 on a patch by Per Landberg. (markt) 5004 </td></tr> 5005 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5006 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45825">45825</a>: Correctly handle annotations in parent classes. Based 5007 on a patch by Florent Benoit. (markt) 5008 </td></tr> 5009 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5010 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45906">45906</a>: Further ETag handling improvements. Patch provided by 5011 Chris Hubick. (markt) 5012 </td></tr> 5013 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 5014 Add the CombinedRealm that enables authentication to be attempted 5015 against multiple realms. (markt) 5016 </td></tr> 5017 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 5018 Add the LockOutRealm that enables a standard Realm to be wrapped with 5019 the functionality to lock out a user after too many failed logins. 5020 (markt) 5021 </td></tr> 5022 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 5023 Make the upper size limit of the static resource cache configurable 5024 since the default of <code>cacheMaxSize/20</code> gave too high a value 5025 for large caches. (markt) 5026 </td></tr> 5027 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5028 Fix HTML decoding error in SSI processing. (markt) 5029 </td></tr> 5030 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5031 Fix cast error in JULI log factory. (markt) 5032 </td></tr> 5033 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5034 Fix some thread safety issues in date formatting. (markt) 5035 </td></tr> 5036 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5037 Fix a String comparison bug in the digester property replacement that 5038 resulted in non-optimal operation. (markt) 5039 </td></tr> 5040 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5041 Correct handle multi-level contexts defined using context.xml files. 5042 (markt) 5043 </td></tr> 5044 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5045 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45933">45933</a>: Don't use xml parser from web-app to process tld 5046 files. (markt) 5047 </td></tr> 5048 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 5049 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45951">45951</a>: Support changing of JSESSIONID cookie name and 5050 jsessionid path parameter name. Based on a patch by Jean-frederic Clere. 5051 (markt) 5052 </td></tr> 5053 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5054 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46011">46011</a>: Make Principal accessible (if set) via 5055 <code>Subject.getSubject(AccessController.getContext())</code> when 5056 processing filters. Based on a patch by tsveg1. (markt) 5057 </td></tr> 5058 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5059 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46075">46075</a>: When uploading files, don't create buffers at the 5060 maximum configured size. Use the default size and let the buffers grow 5061 to the maximum size if necessary. (markt) 5062 </td></tr> 5063 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5064 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46085">46085</a>: Fix a rare thread safety issue with session 5065 expiration. (markt) 5066 </td></tr> 5067 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5068 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46096">46096</a>: Support annotation processing whilst running under a 5069 security manager. (markt) 5070 </td></tr> 5071 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5072 The invoker servlet has been deprecated and will be removed in Tomcat 7 5073 onwards. (markt) 5074 </td></tr> 5075 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5076 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46105">46105</a>: Correctly set URI encoding when replaying a request 5077 after FORM authentication. (markt) 5078 </td></tr> 5079 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5080 Remove unnecessary reference to commons-logging from the bootstrap JAR 5081 manifest. (markt) 5082 </td></tr> 5083 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5084 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46232">46232</a>: Enabled the XMl parser to be over-ridden using the 5085 standard endorsed mechanism. (markt) 5086 </td></tr> 5087 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5088 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46261">46261</a>: Treat %2F in a context name literally rather than 5089 converting it (inconsistently) to '/' - that is what '#' is for. (markt) 5090 </td></tr> 5091 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5092 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46298">46298</a>: Throw an SQLException with a useful message rather
5093 than a NPE if the URL for the JDBCRealm is invalid. Based on a patch by 5094 Owen Jacobson. (markt) 5095 </td></tr> 5096 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5097 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46304">46304</a>: Further fixes to make Principal accessible (if set) 5098 via <code>Subject.getSubject(AccessController.getContext())</code> when 5099 processing filters. (markt) 5100 </td></tr> 5101 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5102 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46403">46403</a>: Provide a workaround for an IE and Safari bug that 5103 means the Max-Age attribute of a cookie is ignored. (markt) 5104 </td></tr> 5105 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5106 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46408">46408</a>: Fix invalid cast in security utility package. (markt) 5107 </td></tr> 5108 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5109 Remove duplicate normalisation implementations and make normalise 5110 behaviour consistent throughout code base. (markt) 5111 </td></tr> 5112 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5113 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46683">46683</a>: Fix typo in French localisation file name for the 5114 org.apache.catalina.loader package. (markt) 5115 </td></tr> 5116 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5117 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46606">46606</a>: Make the max DEPTH for a WebDAV request configurable. 5118 The default is still 3. (markt) 5119 </td></tr> 5120 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 5121 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44382">44382</a>: Add support for using httpOnly for session cookies. 5122 This is disabled by default. (markt/fhanik) 5123 </td></tr> 5124 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5125 Fix possible NCDFE when using FORM authentication. (jfclere) 5126 </td></tr> 5127 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5128 Fix possible synchronisation bottleneck in cookie creation. (markt) 5129 </td></tr> 5130 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5131 Fix various spelling errors reported on the mailing lists. (markt) 5132 </td></tr> 5133 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 5134 Make the logging manager and properties file configurable via 5135 environment variables. (fhanik) 5136 </td></tr> 5137 </table> 5138 </blockquote></td></tr></table> 5139 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.19 (remm)/Coyote"><!--()--></a><a name="Tomcat_6.0.19_(remm)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote> 5140 <table border="0" cellpadding="2" cellspacing="2"> 5141 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td><a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45154">45154</a>: 5142 Implement SEND_FILE behavior for SSL connections using NIO (fhanik) 5143 </td></tr> 5144 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 5145 Fix file descriptor leak during NIO send file behavior. (fhanik) 5146 </td></tr> 5147 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 5148 Implement usage of keyAlias attribute for NIO, previously attribute was ignored. (fhanik) 5149 </td></tr> 5150 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 5151 Prevent server from calling close on an already closed NIO socket. One that had timed out. (fhanik) 5152 </td></tr> 5153 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 5154 Fix bug with SEND_FILE behavior in NIO. Send file would delay until selector timed out, even though socket was ready to be written. (fhanik) 5155 </td></tr> 5156 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 5157 Fix possible NPE in NioEndpoint.java (fhanik) 5158 </td></tr> 5159 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 5160 Update tc-native to 1.1.15 in build.properties.default (jfclere) 5161 </td></tr> 5162 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5163 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43327">43327</a>
5163: Socket bind fails when using APR on a system with IPv6 5164 enabled but no explicit IPv6 address configured. (markt/jfclere) 5165 </td></tr> 5166 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 5167 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44285">44285</a>: Make the SSL session cache size and timeout 5168 configurable. (markt) 5169 </td></tr> 5170 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5171 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45074">45074</a>: Add configuration parameters to enable the tuning 5172 of sendfile and poller thread count in the APR HTTP connector. Patch 5173 provided by Alex Barclay. (jfclere/markt) 5174 </td></tr> 5175 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5176 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45528">45528</a>: Add detection for invalid SSL configuration to prevent 5177 infinite logging loop on start-up. (markt) 5178 </td></tr> 5179 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5180 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45591">45591</a>: NPE on start-up failure in some cases. Based on a 5181 patch by Matt Passell. (markt) 5182 </td></tr> 5183 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5184 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46077">46077</a>: Expose deferAccept for configuration. Patch provided 5185 by Michael Leinartas. (markt) 5186 </td></tr> 5187 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 5188 Don't swallow input if we know the connection is going to be closed. (billbarker) 5189 </td></tr> 5190 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5191 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46125">46125</a>: Return a status code of 400 if the request headers are 5192 too large. (markt) 5193 </td></tr> 5194 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5195 Make certain that classes are first loaded by trusted code when working in a sandbox. (billbarker) 5196 </td></tr> 5197 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 5198 Log a message if we reach maxThreads in a connector thread pool. (markt) 5199 </td></tr> 5200 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 5201 Enable the thread pool limits to be modified via JMX. (markt) 5202 </td></tr> 5203 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5204 Fix HTTP/1.0 redirects handling with APR AJP connector. (remm) 5205 </td></tr> 5206 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5207 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46666">46666</a>: keepAliveTimeout should be used regardless of setting 5208 of disableUploadTimeout. (markt) 5209 </td></tr> 5210 </table> 5211 </blockquote></td></tr></table> 5212 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.19 (remm)/Jasper"><!--()--></a><a name="Tomcat_6.0.19_(remm)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote> 5213 <table border="0" cellpadding="2" cellspacing="2"> 5214 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5215 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=36923">36923</a>: Treat EL expressions as template text if EL 5216 expressions are disabled. (markt) 5217 </td></tr> 5218 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5219 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=37515">37515</a>: Support 1.6 and 1.7 as source and target for 5220 compilation. (markt) 5221 </td></tr> 5222 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5223 ClassCastException in EL ExpressionBuilder. (rjung) 5224 </td></tr> 5225 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 5226 Use more generics in EL to improve type safety. (rjung) 5227 </td></tr> 5228 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5229 Use a lookahead to remove potential ambiguity in EL parsing. (markt) 5230 </td></tr> 5231 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5232 Correct typo in JSP EL examples. (markt) 5233 </td></tr> 5234 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5235 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=38
5235197">38197</a>: Take account of jsp:attribute elements when pooling 5236 tags. (markt) 5237 </td></tr> 5238 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5239 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42077">42077</a>: Ensure the iterator returned by 5240 javax.el.CompositeELResolver#getFeatureDescriptor() skips any null 5241 FeatureDescriptors. Patch provided by Mathias Broekelmann. (markt) 5242 </td></tr> 5243 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5244 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42693">42693</a>: Fix JSP generation error with recursive tag file 5245 structure. (markt) 5246 </td></tr> 5247 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5248 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45427">45427</a>: Correctly handle unmatched quotes in EL expressions. 5249 (markt) 5250 </td></tr> 5251 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5252 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45511">45511</a>: The failure of the <code>empty</code> keyword was a 5253 regression caused by the previous fix for <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42565">42565</a>. The original 5254 fix for <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42565">42565</a> has been reverted and a new fix applied. 5255 (markt) 5256 </td></tr> 5257 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5258 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45648">45648</a>: Don't trim the last character when parsing the EL 5259 namespace. (markt) 5260 </td></tr> 5261 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5262 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45666">45666</a>: Prevent infinite loop on include. (markt) 5263 </td></tr> 5264 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5265 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45691">45691</a>: Prevent generation of duplicate variable names when 5266 generating code for JSPs. (markt) 5267 </td></tr> 5268 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5269 Correct signed/unsigned conversion error in ASCII parsing. (markt) 5270 </td></tr> 5271 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5272 Fix various edge-cases when parsing EL, particularly inside attribute 5273 values. Note that the Expert Group has confirmed that JSP.1.6 takes 5274 precedence over JSP.1.3.10. Therefore EL in attributes must be escaped 5275 twice. (markt) 5276 </td></tr> 5277 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5278 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46047">46047</a>: Include the path to the JAR when recording 5279 dependencies that are located inside a JAR file. Patch provided by 5280 Cédric Mailleux. (markt) 5281 </td></tr> 5282 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5283 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46381">46381</a>: Composite expressions used for attribute values must 5284 be coerced to Strings. (markt) 5285 </td></tr> 5286 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5287 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46397">46397</a>: Don't pool tag instances that implement JspIdConsumer. 5288 (markt) 5289 </td></tr> 5290 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5291 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46462">46462</a>: Limit package test to just the o.a.jsp package to 5292 allow use of packages such as o.a.jspwiki. (markt) 5293 </td></tr> 5294 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5295 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46471">46471</a>: Fix naming clash when tags in different libraries have
5296 the same name. (markt) 5297 </td></tr> 5298 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5299 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46564">46564</a>: Make page encoding check for tagx compilation 5300 case-insensitive. (markt) 5301 </td></tr> 5302 </table> 5303 </blockquote></td></tr></table> 5304 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.19 (remm)/Cluster"><!--()--></a><a name="Tomcat_6.0.19_(remm)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote> 5305 <table border="0" cellpadding="2" cellspacing="2"> 5306 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 5307 Prevent NPE for ReplicationValve (pero) 5308 </td></tr> 5309 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 5310 Provide TCP only start-up option when using static membership. (fhanik) 5311 </td></tr> 5312 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 5313 Document the multicast recovery options. (fhanik) 5314 </td></tr> 5315 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 5316 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45261">45261</a>: Add a new SimpleCoordinator for tribes provided by 5317 Robert Newson. (markt) 5318 </td></tr> 5319 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5320 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45618">45618</a>: Make sure NIO selector is closed when no longer used. 5321 Unlikely to be an issue in normal usage. (markt) 5322 </td></tr> 5323 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5324 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45851">45851</a>: Fix out of order message processing issues with the 5325 FarmWarDeployer. (markt) 5326 </td></tr> 5327 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5328 Fix small memory leak in FarmWarDeployer. (markt) 5329 </td></tr> 5330 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5331 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46357">46357</a>: Corrected test for host's parent must be an engine. 5332 (markt) 5333 </td></tr> 5334 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5335 Fix so that JvmrouteBinderValve can rewrite session suffix with parallel 5336 requests from same client. (pero) 5337 </td></tr> 5338 </table> 5339 </blockquote></td></tr></table> 5340 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.19 (remm)/Web applications"><!--()--></a><a name="Tomcat_6.0.19_(remm)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote> 5341 <table border="0" cellpadding="2" cellspacing="2"> 5342 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5343 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45940">45940</a>: Correct name of username attribute for JDBC resources 5344 in JNDI how to. (markt) 5345 </td></tr> 5346 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5347 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46035">46035</a>: Fix multiple typos in monitoring how to. (markt) 5348 </td></tr> 5349 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5350 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46067">46067</a>: Fix typos in Advanced IO how to. (markt) 5351 </td></tr> 5352 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5353 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46115">46115</a>: Correct Manager UI to show that path is required when 5354 using the deploy command. (markt) 5355 </td></tr> 5356 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5357 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46121">46121</a>: Add note to manager documentation regarding possible 5358 naming clash with new Ant 1.7 resources datatype and how to avoid it. 5359 (markt) 5360 </td></tr> 5361 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5362 Remove unsed parameters from Native/APR example connector configuration 5363 in docs. (markt) 5364 </td></tr> 5365 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5366 Use CSS based solution for printer-friendly docs. Patch provided by 5367 vitezslav.smid as part of GSoc with additional work by Tim Funk. (markt) 5368 </td></tr> 5369 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5370 Update the FAQ linsk in the docs to refer to the wiki. Use xlst task 5371 rather than style task to generate docs. (funkman/markt) 5372 </td></tr> 5373 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5374 Document the LifecycleListeners. (markt) 5375 </td></tr> 5376 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5377 Fix broken URL mapping in the examples. (markt) 5378 </td></tr> 5379 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5380 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46563">46563</a>
5380: Update doc for correct default for pollerThreadCount. 5381 (markt) 5382 </td></tr> 5383 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5384 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46600">46600</a>: Document maxKeepAliveRequests for the NIO connector. 5385 (markt) 5386 </td></tr> 5387 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5388 Fix CVE-2009-0781. XSS in calendar example. (markt) 5389 </td></tr> 5390 </table> 5391 </blockquote></td></tr></table> 5392 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.19 (remm)/Other"><!--()--></a><a name="Tomcat_6.0.19_(remm)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote> 5393 <table border="0" cellpadding="2" cellspacing="2"> 5394 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5395 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41861">41861</a>: Update service name to Apache Tomcat 6 to prevent 5396 conflicts with previous major Tomcat versions. (markt/rjung) 5397 </td></tr> 5398 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5399 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45852">45852</a>: Add special handling for cp932 (aka ms932) when 5400 creating tomcat-users.xml with Windows installer. (markt) 5401 </td></tr> 5402 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5403 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45878">45878</a>: Restore manifest, licence and notice files to the jsp 5404 and servlet jars. (markt) 5405 </td></tr> 5406 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5407 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45879">45879</a>: Move NOTICE file from documentation webapp to the 5408 installation directory. (markt) 5409 </td></tr> 5410 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5411 Add a workaround for DBCP-191. Tomcat will now build without error on a 5412 1.6 JDK but because it does this by skipping DBCP, release builds must 5413 be generated with a 1.5 JDK. (costin/markt) 5414 </td></tr> 5415 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5416 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46366">46366</a>: Correct information in RUNNING.txt regarding use of 5417 CATALINA_HOME and CATALINA_BASE. (markt) 5418 </td></tr> 5419 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5420 Use more useful JPDA defaults in catalina.bat. (markt) 5421 </td></tr> 5422 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5423 Correct error in 2.5 web-app XSD. 5424 </td></tr> 5425 </table> 5426 </blockquote></td></tr></table> 5427</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.18 (remm)"><!--()--></a><a name="Tomcat_6.0.18_(remm)"><strong>Tomcat 6.0.18 (remm)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2008-07-31</strong></font></td></tr><tr><td colspan="2"><blockquote> 5428 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.18 (remm)/Catalina"><!--()--></a><a name="Tomcat_6.0.18_(remm)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 5429 <table border="0" cellpadding="2" cellspacing="2"> 5430 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5431 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42727">42727</a>: Correctly handle request lines that are exact 5432 multiples of 4096 in length. Patch provided by Will Pugh. (markt) 5433 </td></tr> 5434 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5435 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42678">
543542678</a>: Only ignore docBase if it really is a subdir of 5436 appBase. Patch provided by juergen. (markt) 5437 </td></tr> 5438 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5439 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42722">42722</a>: Possible NPE in CGI Servlet. (markt) 5440 </td></tr> 5441 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 5442 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45285">45285</a>: Look for annotations in class hierarchy. (markt) 5443 </td></tr> 5444 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5445 Add additional checks for URI normalization. (remm) 5446 </td></tr> 5447 </table> 5448 </blockquote></td></tr></table> 5449 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.18 (remm)/Jasper"><!--()--></a><a name="Tomcat_6.0.18_(remm)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote> 5450 <table border="0" cellpadding="2" cellspacing="2"> 5451 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5452 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42565">42565</a>: Make EL ternary expression without space before colon 5453 work. Patch provided by Lucas Galfaso. (markt) 5454 </td></tr> 5455 </table> 5456 </blockquote></td></tr></table> 5457 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.18 (remm)/Web applications"><!--()--></a><a name="Tomcat_6.0.18_(remm)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote> 5458 <table border="0" cellpadding="2" cellspacing="2"> 5459 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 5460 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45323">45323</a>: Add note that context.xml files can only contain a 5461 single Context element. (markt) 5462 </td></tr> 5463 </table> 5464 </blockquote></td></tr></table> 5465 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.18 (remm)/Cluster"><!--()--></a><a name="Tomcat_6.0.18_(remm)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote> 5466 <table border="0" cellpadding="2" cellspacing="2"> 5467 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 5468 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45317">45317</a>: Properly document and log the value of the state transfer timeout flag (fhanik) 5469 </td></tr> 5470 </table> 5471 </blockquote></td></tr></table> 5472 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.18 (remm)/Other"><!--()--></a><a name="Tomcat_6.0.18_(remm)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote> 5473 <table border="0" cellpadding="2" cellspacing="2"> 5474 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 5475 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45332">45332</a>: Specify the correct encoding (the current Windows code 5476 page) rather than assuming UTF-8 when creating tomcat-users.xml with the 5477 Windows installer. (markt) 5478 </td></tr> 5479 </table> 5480 </blockquote></td></tr></table> 5481</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.17 (remm)"><!--()--></a><a name="Tomcat_6.0.17_(remm)"><strong>Tomcat 6.0.17 (remm)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote> 5482 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.17 (remm)/General"><!--()--></a><a name="Tomcat_6.0.17_(remm)/General"><strong>General</strong></a></font></td></tr><tr><td><blockquote> 5483 <table border="0" cellpadding="2" cellspacing="2"> 5484 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 5485 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45315">45315</a>: Add Unix support for NSIS. (remm) 5486 </td></tr> 5487 </table> 5488 </blockquote></td></tr></table> 5489 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.17 (remm)/Catalina"><!--()--></a><a name="Tomcat_6.0.17_(remm)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 5490 <table border="0" cellpadding="2" cellspacing="2"> 5491 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td><a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45272">45272</a>: Put in work around for Internet Explorer not accepting a quoted Path: value using the Set-Cookie header (fhanik)</td></tr> 5492 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5493 APR connector now adds connection to poller after using send file. 5494 (remm) 5495 </td></tr> 5496 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 5497 Add ManagerBase session getLastAccessedTimestamp and 5498 getCreationTimestamp for better remote JMX access. (pero) 5499 </td></tr> 5500 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 5501 Expose alwaysSend flag for message dispatch interceptor. (fhanik) 5502 </td></tr> 5503 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5504 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=29936">29936</a>: Create digesters and parsers earlier so we aren't 5505 using the webapp class loader when we create them. (markt) 5506 </td></tr> 5507 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5508 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42662">42662</a>: Properly resolve reflection proxies during session 5509 replication. (fhanik) 5510 </td></tr> 5511 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5512 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=427
551250">42750</a>: Request line should be tolerant of multiple 5513 whitespaces. (markt/fhanik) 5514 </td></tr> 5515 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5516 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42934">42934</a>: Change the order of events on context start so 5517 <code>contextInitialized()</code> event is fired before 5518 <code>sessionDidActivate()</code>. The spec isn't 100% clear on the 5519 required order but this seems more logical than the current behaviour. 5520 (markt) 5521 </td></tr> 5522 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5523 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43079">43079</a>: Fix identification of suspicious URL patterns. Patch 5524 provided by John Kew. (markt) 5525 </td></tr> 5526 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5527 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43080">43080</a>: Log suspicious URL patterns to the correct web app. 5528 (markt) 5529 </td></tr> 5530 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5531 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43117">43117</a>: Setting an empty workDir could result in all of 5532 CATALINA_HOME being deleted. Patch provided by Takayuki Kaneko. (markt) 5533 </td></tr> 5534 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5535 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43142">43142</a>: Don't assume a directory named xxx.war is a war file. 5536 (markt) 5537 </td></tr> 5538 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5539 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43150">43150</a>: Allow Tomcat to start correctly when installed on a 5540 path that contains a # character. (markt) 5541 </td></tr> 5542 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 5543 The fix for <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43285">43285</a> had the side-effect of coercing 5544 <code>null</code> values to zero. This side-effect has been made 5545 configurable with a system property, 5546 <code>org.apache.el.parser.COERCE_TO_ZERO</code> which defaults to 5547 <code>true</code>. Patch provided by Nils Eckert. (markt) 5548 </td></tr> 5549 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5550 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43343">43343</a>: Correctly handle requesting a session we are in the 5551 middle of persisting. Based on a suggestion by Wade Chandler. (markt) 5552 </td></tr> 5553 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5554 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43425">43425</a>: Make annotations spec compliant. Patch provided by 5555 Dain Sundstrom. (markt) 5556 </td></tr> 5557 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5558 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43470">43470</a>: Fix various class cast exceptions. Based on a patch 5559 by Lucas Galfaso. (markt) 5560 </td></tr> 5561 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5562 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43578">43578</a>: Fix startup when installation path contains a space. 5563 Patch provided by Ray Sauers. (markt) 5564 </td></tr> 5565 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5566 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43683">43683</a>: Fix 404 that could occur if a Servlet is accessed 5567 while the context is reloading. (markt) 5568 </td></tr> 5569 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>ExtendedAccessLogValve cs-uri not print empty querystring. (pero) 5570 </td></tr> 5571 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 5572 ServletContext.getResource("noslash/resource") only requires forward 5573 slash if STRICT_SERVLET_COMPLIANCE flag is set to true. This mimics the 5574 behavior of 6.0.15 and earlier. (fhanik) 5575 </td></tr> 5576 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5577 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44021">44021</a>: Add support for using the # character to define 5578 multi-level contexts in WARs and directories in the appBase. (markt) 5579 </td></tr> 5580 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5581 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44282">44282</a>: Fix TRACE level class loader logging message when a 5582 security manager is used. (markt) 5583 </td></tr> 5584 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5585 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44337">44337</a>: Dir listing crashes if no readme-file present. 5586 (funkman) 5587 </td></tr> 5588 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5589 If listener declared in web.xml, only add it once. (funkman) 5590 </td></tr> 5591 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5592 Fix NPE when iterating through sessions for expiration. (fhanik/jim) 5593 </td></tr> 5594 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5595 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44380">44380</a>: Don't scan non-file URLs for TLDs. Patch provided by 5596 Florent Benoit. (markt) 5597 </td></tr> 5598 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5599 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44389">44389</a>: Fix memory leak that occurred if using a 5600 RequestDispatcher. Patch provided by Arto Huusko. (markt) 5601 </td></tr> 5602 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5603 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44529">44529</a>: Correct handling of resource constraints so no roles 5604 (deny all) overrides no aoth-constraint (allow all). (markt) 5605 </td></tr> 5606 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5607 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44562">44562</a>: HEAD requests cannot use includes. Patch provided by 5608 David Jencks. (markt) 5609 </td></tr> 5610 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5611 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44595">44595</a>: Add possibility to request the QueueSize of an 5612 executor via JMX. (jfclere) 5613 </td></tr> 5614 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5615 Fix CGI Servlet so it correctly reads the environment variables on 5616 Vista. (markt) 5617 </td></tr> 5618 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5619 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44611">44611</a>: DirContextURLConnection didn't implement 5620 getHeaderFields(), getHeaderField(String name) was case sensitive and 5621 returned "" rather than null for header values that did not exist. Patch 5622 provided by Chris Hubick. (markt) 5623 </td></tr> 5624 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5625 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44633">44633</a>: Provide a more helpful error message if a class can't 5626 be loaded due to a version error. (rjung/markt) 5627 </td></tr> 5628 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5629 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44646">44646</a>: Correct various issues, including an ISE, in 5630 CometConnectionManagerValve. (markt) 5631 </td></tr> 5632 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5633 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44673">44673</a>: ServletInputStream is no longer readable once closed. 5634 (markt) 5635 </td></tr> 5636 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5637 Better handling of lack of permission for context specific logging. 5638 (markt) 5639 </td></tr> 5640 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5641 Add permission required to read JDK logging config. (markt) 5642 </td></tr> 5643 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5644 Update web.xml to reflect packaging of SSI and CGI. (markt) 5645 </td></tr> 5646 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5647 Add missing access check for ThreadWithAttributes. (markt) 5648 </td></tr> 5649 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5650 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44833">44833</a>: Correctly override StandardSession methods from 5651 DeltaSession. (fhanik) 5652 </td></tr> 5653 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5654 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44943">44943</a>
5654: Use the same engine name in server.xml comments to 5655 reduce copy and pastes issues. (markt) 5656 </td></tr> 5657 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5658 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44988">44988</a>: Use Java5 syntax for debug options. Patch provided 5659 by Cédrik Lime. (markt) 5660 </td></tr> 5661 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5662 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45101">45101</a>: Format header dates obtained from 5663 <code>DirContextURLConnection</code> as per the HTTP spec. Patch 5664 provided by Chris Hubick. (markt) 5665 </td></tr> 5666 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 5667 A new valve, <code>org.apache.catalina.valves.WebdavFixValve</code>, 5668 that forces MS clients connecting to the WebDAV Servlet on port 80 to 5669 use a client that works rather than the default broken one. (markt) 5670 </td></tr> 5671 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5672 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45195">45195</a>: Passing in null into setAttribute or removeAttribute 5673 cause NPE. (markt) 5674 </td></tr> 5675 </table> 5676 </blockquote></td></tr></table> 5677 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.17 (remm)/Coyote"><!--()--></a><a name="Tomcat_6.0.17_(remm)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote> 5678 <table border="0" cellpadding="2" cellspacing="2"> 5679 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 5680 NIO: Fix bug in NIO sendfile, symptoms during heavy traffic is that 5681 connection don't get closed. For previous versions, one can disable 5682 sendfile to work around the problem. (fhanik) 5683 </td></tr> 5684 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 5685 APR: Allow to specify the "random device" to use to collect the entropy. 5686 (jfclere) 5687 </td></tr> 5688 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 5689 Fix NIO/SSL live lock during client disconnect. (fhanik) 5690 </td></tr> 5691 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5692 Fix possible ArrayIndexOutOfBoundsException. Patch provided by Charles R 5693 Caldarale. (markt/jim) 5694 </td></tr> 5695 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 5696 Add support for keystore types that do not need a file. Based on a patch 5697 by Bruno Harbulot. (markt) 5698 </td></tr> 5699 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 5700 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43094">43094</a>: Allow specification of keystore providers. Based on a 5701 patch by Bruno Harbulot. (markt) 5702 </td></tr> 5703 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5704 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43191">43191</a>: Make it possible to override the defaults with the 5705 compressableMimeType attribute. Based on a patch by Len Popp. (markt) 5706 </td></tr> 5707 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5708 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44391">44391</a>: Correct handling of escaped values in SSI processing. 5709 (markt) 5710 </td></tr> 5711 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5712 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44392">44392</a>: HTML entities now handled correctly in SSI processing. 5713 (markt) 5714 </td></tr> 5715 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5716 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44558">44558</a>: Improve error message so address is included if 5717 binding fails. (markt) 5718 </td></tr> 5719 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5720 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44494">44494</a>: Character input limited to 8KB. (remm) 5721 </td></tr> 5722 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5723 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44620">44620</a>
5723: Infinite loop in NIO connector. (markt) 5724 </td></tr> 5725 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5726 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44785">44785</a>: Correctly document default maxThreads for AJP 5727 connector. (markt) 5728 </td></tr> 5729 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 5730 Log errors for AJP signoffs at DEBUG level, 5731 since it is harmless if mod_jk has hung up the phone. (billbarker) 5732 </td></tr> 5733 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5734 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44968">44968</a>: Provide more information when the load of a keystore 5735 fails. (markt) 5736 </td></tr> 5737 </table> 5738 </blockquote></td></tr></table> 5739 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.17 (remm)/Jasper"><!--()--></a><a name="Tomcat_6.0.17_(remm)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote> 5740 <table border="0" cellpadding="2" cellspacing="2"> 5741 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5742 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=31257">31257</a>: Quote endorsed dirs if they contain a space. (markt) 5743 </td></tr> 5744 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5745 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42943">42943</a>: Make sure nested element is inside <jsp:text> 5746 element before throwing exception. (markt) 5747 </td></tr> 5748 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5749 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43617">43617</a>: Correctly escape attribute values in tag files. 5750 Based on a patch by Lucas Galfaso. (markt) 5751 </td></tr> 5752 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5753 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43656">43656</a>: Fix various numeric coercion bugs. Includes a patch by 5754 Nils Eckert and fixes related issues identified in a test case provided 5755 by Konstantin Kolinko. (markt) 5756 </td></tr> 5757 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5758 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43741">43741</a>: Correctly handle dependencies for tag files in JARs. 5759 (markt) 5760 </td></tr> 5761 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5762 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44408">44408</a>: Reduce synchronisation when evaluating EL expressions. 5763 Patch provided by Robert Andersson. (markt) 5764 </td></tr> 5765 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5766 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44428">44428</a>: Fix possible NPE during serialization. (markt) 5767 </td></tr> 5768 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5769 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44766">44766</a>: EL doesn't coerce custom Number subclasses. (markt) 5770 </td></tr> 5771 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5772 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44877">44877</a>: Prevent collisions on tag pool names. (markt) 5773 </td></tr> 5774 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5775 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44986">44986</a>: Make page encoding consistency checks 5776 case-insensitive. (markt) 5777 </td></tr> 5778 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5779 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44994">44994</a>: Enable nested conditional expressions in JSP EL. Patch 5780 provided by James Manger. (markt) 5781 </td></tr> 5782 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5783 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45015">45015</a>: You can't use an unescaped quote if you quote the 5784 value with that character. (markt/fhanik) 5785 </td></tr> 5786 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 5787 Add HTML filtering of error messages for included resources in case the 5788 app has tried to include an unsafe URL that does not exist. This is 5789 really an app responsibility but the filtering has been added for XSS 5790 safety. (markt) 5791 </td></tr> 5792 </table> 5793 </blockquote></td></tr></table> 5794 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.17 (remm)/Web applications"><!--()--></a><a name="Tomcat_6.0.17_(remm)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote> 5795 <table border="0" cellpadding="2" cellspacing="2"> 5796 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
5797 Update documentation to use correct version number, correct file paths 5798 and to use $CATALINA_BASE rather than $CATALINA_HOME where applicable. 5799 (markt/jim) 5800 </td></tr> 5801 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 5802 Add a section on available system property configuration options. 5803 (markt) 5804 </td></tr> 5805 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5806 Amend the JNDI datasource doc to reflect new value for no limit used by 5807 updated commons-pool and commons-DBCP. (markt) 5808 </td></tr> 5809 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5810 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43333">43333</a>: Fix errors in sendfile documentation. (markt) 5811 </td></tr> 5812 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5813 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43366">43366</a>: Provide backwards compatibility for manager sessions 5814 command. (markt) 5815 </td></tr> 5816 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5817 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44541">44541</a>: Document packetSize attribute for AJP connector. 5818 (markt) 5819 </td></tr> 5820 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5821 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44715">44715</a>: Document secret attribute for AJP connector. (markt) 5822 </td></tr> 5823 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5824 Fix some links in the ROOT application that are broken if ROOT is 5825 renamed. (markt) 5826 </td></tr> 5827 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5828 Align the Realm documentation so that both the configuration and the 5829 how-to are consistent. (markt) 5830 </td></tr> 5831 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5832 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45277">45277</a>: Fix typo in logging docs. (markt) 5833 </td></tr> 5834 </table> 5835 </blockquote></td></tr></table> 5836 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.17 (remm)/Cluster"><!--()--></a><a name="Tomcat_6.0.17_(remm)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote> 5837 <table border="0" cellpadding="2" cellspacing="2"> 5838 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5839 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45212">45212</a>: AbstractReplicatedMap.entrySet() now returns entries 5840 rather than vaules. (markt) 5841 </td></tr> 5842 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td><a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45279">45279</a>: Properly close multicast socket.</td></tr> 5843 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 5844 Fix session replication dead lock during non sticky load balancing. 5845 (fhanik) 5846 </td></tr> 5847 </table> 5848 </blockquote></td></tr></table> 5849 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.17 (remm)/Other"><!--()--></a><a name="Tomcat_6.0.17_(remm)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote> 5850 <table border="0" cellpadding="2" cellspacing="2"> 5851 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 5852 Improve the Tests for unit tests for the cookie issues. (jfclere) 5853 </td></tr> 5854 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5855 Fix build for JavaDoc. Patch provided by Stephen Bannasch. (markt) 5856 </td></tr> 5857 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5858 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44955">44955</a>: Use correct location for endorsed directory in Windows 5859 installer. (markt) 5860 </td></tr> 5861 </table> 5862 </blockquote></td></tr></table> 5863</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.16 (remm)"><!--()--></a><a name="Tomcat_6.0.16_(remm)"><strong>Tomcat 6.0.16 (remm)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2008-02-08</strong></font></td></tr><tr><td colspan="2"><blockquote> 5864 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.16 (remm)/General"><!--()--></a><a name="Tomcat_6.0.16_(remm)/General"><strong>General</strong></a></font></td></tr><tr><td><blockquote> 5865 <table border="0" cellpadding="2" cellspacing="2"> 5866 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 5867 Update commons-logging to version 1.1.1 and the NSIS installer to 2.34. 5868 (markt) 5869 </td></tr> 5870 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 5871 Update to commons-pool version 1.4, native version 1.1.12 and update 5872 the download location for the commons libraries. (markt) 5873 </td></tr> 5874 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 5875 Change chunked input parsing, always parse CRLF directly after a chunk has been 5876 received, except if data is not available. If data is not available for CRLF 5877 parsing, we run into BZ 11117, and must defer the parsing of CRLF to the next read event. 5878 This fixes the incorrect blocking when using CometProcessor and the draining data during the READ event 5879 where it before would block incorrectly waiting for the next chunk (fhanik) 5880 </td></tr> 5881 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 5882 The CometProcessor interface now extends the javax.servlet.Servlet interface(fhanik) 5883 </td></tr> 5884 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5885 Fix CVE-2007-5342 by limiting permissions granted to JULI. (markt) 5886 </td></tr> 5887 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 5888 Fix handling of CometEvent.close when called during BEGIN event (fhanik) 5889 </td></tr> 5890 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5891 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43594">43594</a>: Use setenv from CATALINA_BASE (if set) in preference 5892 to the one in CATALINA_HOME. Patch provided by Shaddy Baddah. 5893 (markt/jim) 5894 </td></tr> 5895 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5896 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43692">43692</a>: Clean up unused entries from build scripts. Patch 5897 provided by Paul Shemansky. (markt) 5898 </td></tr> 5899 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5900 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43775">43775</a>: Don't try to change line endings of binary files in 5901 the source distribution. (markt) 5902 </td></tr> 5903 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td><a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43846">43846</a>: 5904 Fix block simulated read and writes causing timeouts. 5905 Add non blocking parsing of HTTP request headers. 5906 Perf improvements(fhanik) 5907 </td></tr> 5908 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5909 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43957">43957</a>: Service.bat doesn't configure logging correctly. Patch 5910 provided by Richard Fearn. (markt/jim) 5911 </td></tr> 5912 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 5913 Cookie handling/parsing changes! 5914 The following behavior has been changed with regards to Tomcat's cookie handling 5915 a) Cookies containing control characters, except 0x09(HT), are rejected using an InvalidArgumentException <br> 5916 b) If cookies are not quoted, they will be quoted if they contain tspecials(ver0), tspecials2(ver1) characters<br> 5917 c) Escape character '\\' is allowed and respected as a escape character, will be unescaped during parsing 5918 </td></tr> 5919 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5920 Cookie parsing of $Version regression from 6.0.15 has been fixed 5921 </td></tr> 5922 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5923 The script that builds the windows installer was including additional 5924 files due to the way it processes recurrsive file selectors. The 5925 selectors have been modified to only include the intended files. (markt) 5926 </td></tr> 5927 </table> 5928 </blockquote></td></tr></table> 5929 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.16 (remm)/Catalina"><!--()--></a><a name="Tomcat_6.0.16_(remm)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 5930 <table border="0" cellpadding="2" cellspacing="2"> 5931 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5932 Fix ManagerServlet.expireSessions throws Exceptions as iterate longer 5933 session lists at production servers. (pero) 5934 </td></tr> 5935 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5935<a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=38131">38131</a>: WatchedResource doesn't work if app is outside host appbase webapps. 5936 Patch provided by Peter Lynch (pero) 5937 </td></tr> 5938 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>Add -Dorg.apache.catalina.tribes.dns_lookups=false as default. The ability to turn off reverse DNS lookups for membership.(fhanik)</td></tr> 5939 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5940 Set correct StandardManager.sessionCounter after reload/restart. (pero) 5941 </td></tr> 5942 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5943 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42503">42503</a>: ServletContext.getResourceAsStream() could return 5944 stale data. Patch provided by Arvind Srinivasan. (funkman/jim) 5945 </td></tr> 5946 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5947 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43236">43236</a>: When resetting the response, also reset the flags 5948 associated with using a writer or an output stream to allow the user to 5949 change character set after the reset. (markt) 5950 </td></tr> 5951 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5952 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43241">43241</a>: Make ServletContext.getResourceAsStream() conform to 5953 the specification. Patch provided by John Kew. (markt) 5954 </td></tr> 5955 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5956 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43530">43530</a>: doc link fixes provided by Paul Shemansky (funkman) 5957 </td></tr> 5958 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5959 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43675">43675</a>: Fix a possible logging related classloader leak. 5960 (markt) 5961 </td></tr> 5962 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td><a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43687">43687</a>: Remove conditional headers on Form Auth replay, 5963 since the UA (esp. FireFox) isn't expecting it. 5964 </td></tr> 5965 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5966 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43706">43706</a>: WebDAV copy/move now returns 201 on success. Based on 5967 a patch by Panagiotis Astithas. (markt) 5968 </td></tr> 5969 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5970 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43840">43840</a>: Include user principal if possible when serializing / 5971 de-serializing sessions. (markt) 5972 </td></tr> 5973 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5974 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43868">43868</a>: MBean methods getInvoke and getSetter were broken. 5975 (markt) 5976 </td></tr> 5977 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5978 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43887">43887</a>: Make error messages much more helpful when illegal 5979 Servlet names are used. Based on a patch provided by Mike Baranczak. 5980 (markt) 5981 </td></tr> 5982 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5983 Fix a bug that causes CGI Servlet to fail when it is included. (markt) 5984 </td></tr> 5985 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 5986 Improve the webDAV Servlet Javadocs to make clear that the WebDAV 5987 Servlet can not be used as the default servlet. (markt) 5988 </td></tr> 5989 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5990 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43993">43993</a>: mime mapping for WS-Policy. Patch by Fabian Ritzmann (funkman) 5991 </td></tr> 5992 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5993 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44041">44041</a>: Fix duplicate class definition under load. (markt) 5994 </td></tr> 5995 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 5996 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44084">
599644084</a>: JASSRealm was broken for application provided 5997 Principals. Patch provided by Noah Levitt. (markt) 5998 </td></tr> 5999 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6000 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44223">44223</a>: Use the javax.net.ssl.trustStoreType setting if no 6001 explicit connector configuration is provided and the property is set. 6002 (markt/jim) 6003 </td></tr> 6004 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 6005 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44268">44268</a>: Log a warning if a duplicate listener configuration is 6006 ignored. (markt/jim) 6007 </td></tr> 6008 </table> 6009 </blockquote></td></tr></table> 6010 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.16 (remm)/Coyote"><!--()--></a><a name="Tomcat_6.0.16_(remm)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote> 6011 <table border="0" cellpadding="2" cellspacing="2"> 6012 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6013 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43622">43622</a>: Don't overwrite the min compression size set by the 6014 compression attribute with the default. (markt/jim) 6015 </td></tr> 6016 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6017 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43839">43839</a>: URL based session tracking failed when a session 6018 cookie from a parent context was present. Based on a patch by Yuan 6019 Qingyun. (markt) 6020 </td></tr> 6021 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6022 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43914">43914</a>: URLs in location headers should be encoded. Patch 6023 provided by Ivan Todoroski. (markt) 6024 </td></tr> 6025 </table> 6026 </blockquote></td></tr></table> 6027 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.16 (remm)/Jasper"><!--()--></a><a name="Tomcat_6.0.16_(remm)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote> 6028 <table border="0" cellpadding="2" cellspacing="2"> 6029 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6030 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43285">43285</a>: Missing EL Coercion causes argument type mismatch. 6031 Patch provided by Bernhard Huemer. (funkman/jim) 6032 </td></tr> 6033 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6034 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43675">43675</a>: Fix a possible logging related classloader leak. 6035 (markt) 6036 </td></tr> 6037 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6038 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43702">43702</a>: Inner class files have unnecessarily long names. 6039 (markt) 6040 </td></tr> 6041 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6042 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43743">43743</a>: Fix NPE when compiling nest tag files packaged in a 6043 JAR. (markt) 6044 </td></tr> 6045 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6046 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43757">43757</a>: Rather than use string matching to work out the line 6047 in the JSP with the error, use the SMAP info and the knowledge that for 6048 a scriptlet there is a one to one line mapping. (markt/jim) 6049 </td></tr> 6050 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6051 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43758">43758</a>: Fix NPE when scripting elements are empty. (markt) 6052 </td></tr> 6053 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6054 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43909">43909</a>: Make sure locale maps to wrapped ELContext. Patch 6055 provided by Tuomas Kiviaho. (markt) 6056 </td></tr> 6057 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6058 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43944">43944</a>: Fix a missing resource exception. (markt) 6059 </td></tr> 6060 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6061 Improve docs for Jasper configuration. Put options in alphabetical 6062 order, add some missing options, deprecate an unused one and address 6063 feedback about the page provided on the users list. 6064 </td></tr> 6065 </table> 6066 </blockquote></td></tr></table> 6067 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.16 (remm)/Web applications"><!--()--></a><a name="Tomcat_6.0.16_(remm)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote> 6068 <table border="0" cellpadding="2" cellspacing="2"> 6069 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6070 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43173">43173</a>: Fix typo in logging documentation regarding location 6071 of logging.properties. (markt) 6072 </td></tr> 6073 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6074 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43344">43344</a>
6074: Fix typo in if.jsp example. Patch provided by Tim 6075 Nowaczyk. (markt) 6076 </td></tr> 6077 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6078 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43468">43468</a>: Fix possible NPE when listing contexts in the Manager 6079 application. (markt) 6080 </td></tr> 6081 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6082 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43515">43515</a>: Fix bug in Manager application that may have caused 6083 problems when listing contexts. Patch provided by Lucas Galfaso. (markt) 6084 </td></tr> 6085 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6086 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43611">43611</a>: Provide an error message if user tries to upload a war 6087 for a context defined in server.xml rather than failing silently. 6088 (markt/jim) 6089 </td></tr> 6090 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6091 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43800">43800</a>: Make relationship between APR and the native connector 6092 clearer. (markt) 6093 </td></tr> 6094 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6095 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44088">44088</a>: Fix expire session button in manager. (markt) 6096 </td></tr> 6097 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6098 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44094">44094</a>: Add a note about the side effects of configuring a 6099 context as privileged. (markt) 6100 </td></tr> 6101 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 6102 Update JNDI documentation to refer to configuring contexts via 6103 context.xml rather than server.xml. (markt/jim) 6104 </td></tr> 6105 </table> 6106 </blockquote></td></tr></table> 6107 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.16 (remm)/Cluster"><!--()--></a><a name="Tomcat_6.0.16_(remm)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote> 6108 <table border="0" cellpadding="2" cellspacing="2"> 6109 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6110 Fix FarmWarDeployer can be only configured as host subelement (pero) 6111 </td></tr> 6112 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6113 Fix wrong && at ReplicationValve (pero) 6114 </td></tr> 6115 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 6116 Add get/set methods for properties in the Tcp Failure detector. 6117 (fhanik/jim) 6118 </td></tr> 6119 </table> 6120 </blockquote></td></tr></table> 6121</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.15 (remm)"><!--()--></a><a name="Tomcat_6.0.15_(remm)"><strong>Tomcat 6.0.15 (remm)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote> 6122 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.15 (remm)/General"><!--()--></a><a name="Tomcat_6.0.15_(remm)/General"><strong>General</strong></a></font></td></tr><tr><td><blockquote> 6123 <table border="0" cellpadding="2" cellspacing="2"> 6124 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>Fix the MD5 file contents in distribution</td></tr> 6125 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 6126 Add ANT script to be able to publish signed Tomcat JAR's to ASF Maven repo (fhanik) 6127 </td></tr> 6128 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 6129 Use Eclipse JDT 3.3.1. (pero) 6130 </td></tr> 6131 </table> 6132 </blockquote></td></tr></table> 6133 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.15 (remm)/Catalina"><!--()--></a><a name="Tomcat_6.0.15_(remm)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 6134 <table border="0" cellpadding="2" cellspacing="2"> 6135 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>Guess java location from the PATH environment and improve fix for 37284</td></tr> 6136 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>Add NIO connector to server.xml parsing warning, remove Connector as exception case</td></tr> 6137 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td><a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43653">43653</a>: Fix SSL buffer mixup when response is unable to write more than socket buffer can handle</td></tr> 6138 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td><a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43643">43643</a>: If connector doesn't support external executor, display warning</td></tr> 6139 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td><a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43641">43641</a>: Property bind multicast address for cluster membership</td></tr> 6140 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td><a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42693">42693</a>: Fix JSP compiler bug</td></tr> 6141 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>Add mbean descriptor for virtual webapp loader</td></tr> 6142 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td><a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43487">43487</a>: 6143 Fix request processing stats 6144 </td></tr> 6145 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6146 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43435">43435</a>: Don't iterate and relocate sessions if they are not part of the map. 6147 </td></tr> 6148 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6149 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43356">43356</a>: Keystore parameter is relative to CATALINA_BASE, 6150 Truststore is either defined as parameter, javax.net.ssl.trustStore or if empty 6151 defaults to the keystore. 6152 SSL Client cert authentication changed from boolean to "true|false|want" (fhanik) 6153 </td></tr> 6154 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6155 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=30949">30949</a>: Improve previous fix. Ensure requests are re-cycled 6156 on cross-context includes and forwards when an exception occurs in the 6157 target page. (markt) 6158 </td></tr> 6159 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6160 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42944">42944</a>: Correctly handle servlet mappings that use a '+' 6161 character as part of the url pattern. (markt) 6162 </td></tr> 6163 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6164 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42951">42951</a>: Don't use CATALINA_OPTS when stopping Tomcat. This 6165 allows options for starting and stopping to be set on JAVA_OPTS and 6166 options for starting only to be set on CATALINA_OPTS. Without this 6167 fix, some startup options (eg the port for remote JMX) would cause 6168 stop to fail. Based on a fix suggested by Michael Vorburger. 6169 Port of r454193 (<a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=36976">36976</a>) from Tomcat 5.5.x. (markt,rjung) 6170 </td></tr> 6171 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 6172 Validation of attributes and elements used in server.xml. (remm) 6173 </td></tr> 6174 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6175 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43175">43175</a>: Fix typos in servlet XSD files. Patch provided by 6176 Takayuki Kaneko. (markt) 6177 </td></tr> 6178 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6179 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43216">43216</a>: Set correct StandardSession#accessCount as StandardSession.ACTIVITY_CHECK is true. 6180 Patch provided by Takayuki Kaneko (pero) 6181 </td></tr> 6182 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 6183 Made session createTime accessible for all SessionManager via JMX (pero) 6184 </td></tr> 6185 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 6186 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43129">43129</a>: Support logging of all response header values at AccessLogValve (ex. add %{Set-Cookie}o to your pattern). (pero) 6187 </td></tr> 6188 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 6189 Support logging of all response header values at ExtendedAccessLogValve (ex. add x-O(Set-Cookie) to your pattern). (pero) 6190 </td></tr> 6191 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 6192 Support logging of current thread name at AccessLogValve (ex. add %I to your pattern). 6193 Usefull to compare access logging entry later with a stacktraces. (pero) 6194 </td></tr> 6195 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6196 Improve large-file support (more then 4 Gb) at all AccessLogValves, backp
6196ort from 5.5.25. (pero) 6197 </td></tr> 6198 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 6199 Optimized JDBCAccessLogValve combined pattern request attribute access. (pero) 6200 </td></tr> 6201 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6202 o.a.juli.ClassLoaderLogManager handle more then one system property replacement at file logging.properties. (pero) 6203 </td></tr> 6204 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6205 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43338">43338</a>: Support '*' servlet-name mapping at filter-mapping. 6206 Patch provided by Keiichi Fujino. (pero) 6207 </td></tr> 6208 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6209 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41797">41797</a>: CNFE/NPE thrown from function mapper when externalizing 6210 Patch by Tuomas Kiviaho- tuomas.kiviahos at ikis fi (funkman) 6211 </td></tr> 6212 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6213 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43453">43453</a>: ClassCastException at 6214 org.apache.catalina.core.StandardContext.findStatusPage(int) 6215 (funkman) 6216 </td></tr> 6217 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6218 Fix important vulnerability when webdav is enabled for write. (markt) 6219 </td></tr> 6220 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6221 Call stopAwait in StandardServer.stop if port == -1. (pero) 6222 </td></tr> 6223 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6224 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43668">43668</a>: Fix NPE when the outer most wrapper is a ServletRequest/ResponseWrapper, but not a HttpServletRequest/ResponseWrapper on a Forward. (billbarker) 6225 </td></tr> 6226 </table> 6227 </blockquote></td></tr></table> 6228 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.15 (remm)/Coyote"><!--()--></a><a name="Tomcat_6.0.15_(remm)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote> 6229 <table border="0" cellpadding="2" cellspacing="2"> 6230 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6231 Harmonize with HTTP java.io code. Otherwise the socket is not closed. 6232 </td></tr> 6233 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6234 In the APR connector, start accepting connections after fully starting 6235 the connector, to prevent possible exceptions due to non initialized fields. (remm) 6236 </td></tr> 6237 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 6238 Cookie parser refactoring, submitted by John Kew. (remm) 6239 </td></tr> 6240 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6241 Make cookie escaping / unescaping consistent. (markt) 6242 </td></tr> 6243 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6244 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43479">43479</a>: Memory leak cleaning up sendfile connections, submitted by Chris Elving. (remm) 6245 </td></tr> 6246 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6247 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42925">42925</a>: Add maintain for sendfile. (remm) 6248 </td></tr> 6249 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6250 Fix explicit flush before response commit in the org.apache.jk AJP connector. (pero) 6251 </td></tr> 6252 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6253 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43621">43621</a>: Fix possible Dos condition when using the experimental NIO/AJP Connector (billbarker) 6254 </td></tr> 6255 </table> 6256 </blockquote></td></tr></table> 6257 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.15 (remm)/Jasper"><!--()--></a><a name="Tomcat_6.0.15_(remm)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote> 6258 <table border="0" cellpadding="2" cellspacing="2"> 6259 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6260 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=37326">37326</a>: No error reported when an included page does not 6261 exist. (markt) 6262 </td></tr> 6263 </table> 6264 </blockquote></td></tr></table> 6265 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.15 (remm)/Web applications"><!--()--></a><a name="Tomcat_6.0.15_(remm)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote> 6266 <table border="0" cellpadding="2" cellspacing="2"> 6267 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6268 Fix WebDAV Servlet so it works correctly with MS clients. (markt) 6269 </td></tr> 6270 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6271 Fix CVE-2007-5461, an important information disclosure vulnerability in 6272 the WebDAV Servlet. Based on a patch by Marc Schoenefeld. (markt) 6273 </td></tr> 6274 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6275 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42979">42979</a>: Update sample.war to include recent security fixes 6276 in the source code. (markt) 6277 </td></tr> 6278 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6279 Minor connector doc fix. (jfclere) 6280 </td></tr> 6281 </table> 6282 </blockquote></td></tr></table> 6283 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.15 (remm)/Cluster"><!--()--></a><a name="Tomcat_6.0.15_(remm)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote> 6284 <table border="0" cellpadding="2" cellspacing="2"> 6285 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6286 Set correct BioReceiver transfer buffer size. (pero) 6287 </td></tr> 6288 </table> 6289 </blockquote></td></tr></table> 6290 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.15 (remm)/Other"><!--()--></a><a name="Tomcat_6.0.15_(remm)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote> 6291 <table border="0" cellpadding="2" cellspacing="2"> 6292 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 6293 Tests for unit tests for the cookie issues. (jfclere) 6294 </td></tr> 6295 </table> 6296 </blockquote></td></tr></table> 6297 6298</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.14 (remm)"><!--()--></a><a name="Tomcat_6.0.14_(remm)"><strong>Tomcat 6.0.14 (remm)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2007-08-13</strong></font></td></tr><tr><td colspan="2"><blockquote> 6299 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.14 (remm)/General"><!--()--></a><a name="Tomcat_6.0.14_(remm)/General"><strong>General</strong></a></font></td></tr><tr><td><blockquote> 6300 <table border="0" cellpadding="2" cellspacing="2"> 6301 <tr><td><img alt="docs" class="icon" src="./images/docs.gif"></td><td> 6302 Correct j.u.l log levels in JULI docs. (rjung) 6303 </td></tr> 6304 </table> 6305 </blockquote></td></tr></table> 6306 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.14 (remm)/Catalina"><!--()--></a><a name="Tomcat_6.0.14_(remm)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 6307 <table border="0" cellpadding="2" cellspacing="2"> 6308 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6309 Handle special case of ROOT when re-loading webapp after ROOT.xml has 6310 been modified. In some circumstances the reloaded ROOT webapp had no 6311 associated resources. (markt) 6312 </td></tr> 6313 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6314 Remove invalid attribute "encoding" of MBean MemoryUserDatabase, 6315 which lead to errors in the manager webapp JMXProxy output. (rjung) 6316 </td></tr> 6317 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6318 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=33774">33774</a>: Retry JNDI authentication on ServiceUnavailableException 6319 as at least one provider throws this after an idle connection has been 6320 closed. (markt) 6321 </td></tr> 6322 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6323 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=39875">39875</a>: Fix BPE in RealmBase.init(). Port of yoavs's fix from 6324 Tomcat 5. (markt) 6325 </td></tr> 6326 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6327 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41722">41722</a>: Make the role-link element optional (as required by 6328 the spec) when using a security-role-ref element. (markt) 6329 </td></tr> 6330 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6331 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42361">42361</a>: Handle multi-part forms when saving requests during 6332 FORM authentication process. Patch provided by Peter Runge. (markt) 6333 </td></tr> 6334 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6335 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42401">42401</a>: Update RUNNING.txt with better JRE/JDK information. 6336 (markt) 6337 </td></tr> 6338 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6339 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42444">42444</a>: prevent NPE for AccessLogValve 6340 Patch provided by Nils Hammar (funkman) 6341 </td></tr> 6342 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6343 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42449">42449</a>: 6344 JNDIRealm does not catch NullPointerException for Sun's 6345 LDAP provider (See bug for details) (funkman) 6346 </td></tr> 6347 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6348 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42497">42497</a>: Ensure ETag header is present in a 304 response. 6349 Patch provided by Len Popp. (markt) 6350 </td></tr> 6351 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6352 Fix XSS security vulnerability (CVE-2007-2450) in the Manager and Host 6353 Manager. Reported by Daiki Fukumori. (markt) 6354 </td></tr> 6355 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6356 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42547">42547</a>: Fix NPE when a ResourceLink in context.xml tries to 6357 override an env-entry in web.xml. (markt) 6358 </td></tr> 6359 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6360 Avoid some casting in ErrorReportValve (remm) 6361 </td></tr> 6362 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6363 Fix persistence API annotation, submitted by Bill Burke (remm) 6364 </td></tr> 6365 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6366 In Comet mode, if bytes are not read, send an error event (otherwise, 6367 fields referring to the connection could remain) (remm) 6368 </td></tr> 6369 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6370 Fix Comet when running Tomcat with the security manager (remm) 6371 </td></tr> 6372 </table> 6373 </blockquote></td></tr></table> 6374 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.14 (remm)/Jasper"><!--()--></a><a name="Tomcat_6.0.14_(remm)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote> 6375 <table border="0" cellpadding="2" cellspacing="2"> 6376 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6377 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=39425">39425</a>: Add additional system property permission to 6378 catalina.policy for pre-compiled JSPs. (markt) 6379 </td></tr> 6380 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6381 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42438">42438</a>: Duplicate temporary variables were created when 6382 jsp:attribute was used in conjunction with custom tags. Patch provided 6383 by Brian Lenz. (markt) 6384 </td></tr> 6385 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6386 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42643">42643</a>: Prevent creation of duplicate JSP function mapper 6387 variables. (markt) 6388 </td></tr> 6389 </table> 6390 </blockquote></td></tr></table> 6391 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.14 (remm)/Coyote"><!--()--></a><a name="Tomcat_6.0.14_(remm)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote> 6392 <table border="0" cellpadding="2" cellspacing="2"> 6393 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6394 Separate sequence increment from getter in ThreadPool to avoid 6395 misleading increments during monitoring via JMX. (rjung) 6396 </td></tr> 6397 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6398 Add back missing socketBuffer attribute in the java.io HTTP connector (remm) 6399 </td></tr> 6400 </table> 6401 </blockquote></td></tr></table> 6402 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.14 (remm)/Web applications"><!--()--></a><a name="Tomcat_6.0.14_(remm)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote> 6403 <table border="0" cellpadding="2" cellspacing="2"> 6404 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6405 Don't write error on System.out, use log() instead. (rjung) 6406 </td></tr> 6407 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6408 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=39813">39813</a>: Correct handling of new line characters in JMX 6409 attributes. Patch provided by R Bramley. Ported from tc5.5.x r415029. (markt,rjung) 6410 </td></tr> 6411 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6412 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42459">42459</a>: Fix Tomcat Web Application Manager table error. (rjung) 6413 </td></tr> 6414 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6415 Fix XSS security vulnerabilities (CVE-2007-2449) in the examples. 6416 Reported by Toshiharu Sugiyama. (markt) 6417 </td></tr> 6418 </table> 6419 </blockquote></td></tr></table> 6420</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.13 (remm)"><!--()--></a><a name="Tomcat_6.0.13_(remm)"><strong>Tomcat 6.0.13 (remm)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2007-05-15</strong></font></td></tr><tr><td colspan="2"><blockquote> 6421 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.13 (remm)/Catalina"><!--()--></a><a name="Tomcat_6.0.13_(remm)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 6422 <table border="0" cellpadding="2" cellspacing="2"> 6423 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6424 More accurate available() method. (remm) 6425 </td></tr> 6426 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6427 Add recycle check in the event object, since it is a facade like the others. (remm) 6428 </td></tr> 6429 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6430 When processing a read event, enforce that the servlet consumes all available bytes. (remm) 6431 </td></tr> 6432 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 6433 Add a flag in ContainerBase which could be used in embedded scenarios to avoid a double start 6434 of contexts (this problem generally occurs when adding contexts to a started host). (remm) 6435 </td></tr> 6436 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6437 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42309">42309</a>: Ability to create a connector using a custom protocol specification for embedded. 6438 (fhanik) 6439 </td></tr> 6440 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6441 Add SSL engine flag to AprLifecycleListener. (fhanik) 6442 </td></tr> 6443 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6444 Improve event processing, so that an END event is generated
6444when encountering EOF, and an 6445 ERROR is always generated on client disconnects. (remm) 6446 </td></tr> 6447 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6448 Add declarations for the new XSD files. (remm) 6449 </td></tr> 6450 </table> 6451 </blockquote></td></tr></table> 6452 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.13 (remm)/Coyote"><!--()--></a><a name="Tomcat_6.0.13_(remm)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote> 6453 <table border="0" cellpadding="2" cellspacing="2"> 6454 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6455 Add heartbeatBackgroundEnabled flag to SimpleTcpCluster. 6456 Enable this flag don't forget to disable the channel heartbeat thread (pero) 6457 </td></tr> 6458 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6459 Possible memory leak when using comet, caused by adding the socket to the poller before 6460 cleaning up the connection tracking structure. (remm) 6461 </td></tr> 6462 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6463 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42308">42308</a>: nextRequest recycles the request, which caused issues with statistics. (remm) 6464 </td></tr> 6465 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6466 Fix non recycled comet flag in the APR connector. (remm) 6467 </td></tr> 6468 </table> 6469 </blockquote></td></tr></table> 6470 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.13 (remm)/Cluster"><!--()--></a><a name="Tomcat_6.0.13_(remm)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote> 6471 <table border="0" cellpadding="2" cellspacing="2"> 6472 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6473 Add heartbeatBackgroundEnabled flag to SimpleTcpCluster. 6474 Enable this flag don't forget to disable the channel heartbeat thread (pero) 6475 </td></tr> 6476 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6477 Method name cleanup. (fhanik) 6478 </td></tr> 6479 </table> 6480 </blockquote></td></tr></table> 6481 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.13 (remm)/Web applications"><!--()--></a><a name="Tomcat_6.0.13_(remm)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote> 6482 <table border="0" cellpadding="2" cellspacing="2"> 6483 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6484 Some examples webapp fixes. Submitted by Frank McCown. (remm) 6485 </td></tr> 6486 </table> 6487 </blockquote></td></tr></table> 6488</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.12 (remm)"><!--()--></a><a name="Tomcat_6.0.12_(remm)"><strong>Tomcat 6.0.12 (remm)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote> 6489 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.12 (remm)/General"><!--()--></a><a name="Tomcat_6.0.12_(remm)/General"><strong>General</strong></a></font></td></tr><tr><td><blockquote> 6490 <table border="0" cellpadding="2" cellspacing="2"> 6491 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6492 License source headers. Submitted by Niall Pemberton. (remm) 6493 </td></tr> 6494 </table> 6495 </blockquote></td></tr></table> 6496 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.12 (remm)/Catalina"><!--()--></a><a name="Tomcat_6.0.12_(remm)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 6497 <table border="0" cellpadding="2" cellspacing="2"> 6498 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6499 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42039">42039</a>: Log a stack trace if a servlet throws an 6500 UnavailableException. Patch provided by Kawasima Kazuh. (markt) 6501 </td></tr> 6502 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6503 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41990">41990</a>: Add some additional mime-type mappings. (markt) 6504 </td></tr> 6505 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6506 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41655">41655</a>: Fix message translations. Japanese translations 6507 provided by Suzuki Yuichiro. (markt) 6508 </td></tr> 6509 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 6510 Add enabled attribute to AccessLogValve (pero) 6511 </td></tr> 6512 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6513 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42085">42085</a>: Avoid adding handlers for the root logger twice when they are explicitly 6514 specified. (remm) 6515 </td></tr> 6516 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6517 Reduce thread local manipulation in the request dispatcher. Submitted by 6518 Arvind Srinivasan. (remm) 6519 </td></tr> 6520 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6521 Avoid keeping references to loggers tied to the webapp classloaders after a reload in 6522 a couple more places. (remm) 6523 </td></tr> 6524 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6525 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42202">42202</a>: Fix container parsing of TLDs in webapps when Tomcat is installed in 6526 a URL encodable path. (remm) 6527 </td></tr> 6528 </table> 6529 </blockquote></td></tr></table> 6530 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.12 (remm)/Coyote"><!--()--></a><a name="Tomcat_6.0.12_(remm)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote> 6531 <table border="0" cellpadding="2" cellspacing="2"> 6532 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6533 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42119">42119</a>: Fix return value for request.getCharacterEncoding() when 6534 Content-Type headers contain parameters other than charset. Patch by 6535 Leigh L Klotz Jr. (markt) 6536 </td></tr> 6537 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 6538 Move away from using a thread local processor for the APR and java.io 6539 connectors, as this does not work well when using an executor. (remm) 6540 </td></tr> 6541 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6542 Remove Comet timeout hack in the APR connector. Comet connections will now 6543 use the regular timeout or the keepalive timeout if specified. (remm) 6544 </td></tr> 6545 </table> 6546 </blockquote></td></tr></table> 6547 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.12 (remm)/Web applications"><!--()--></a><a name="Tomcat_6.0.12_(remm)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote> 6548 <table border="0" cellpadding="2" cellspacing="2"> 6549 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6550 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42025">42025</a>: Update valve documentation to refer to correct regular 6551 expression implementation. (markt) 6552 </td></tr> 6553 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6554 Fix various paths in the manager webapps (remm) 6555 </td></tr> 6556 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 6557 Session viewer and editor for the HTML manager. Submitted by Cédrik Lime. (remm) 6558 </td></tr> 6559 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 6560 Session handling tools for the manager. Submitted by Rainer Jung.
6560(remm) 6561 </td></tr> 6562 </table> 6563 </blockquote></td></tr></table> 6564 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.12 (remm)/Jasper"><!--()--></a><a name="Tomcat_6.0.12_(remm)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote> 6565 <table border="0" cellpadding="2" cellspacing="2"> 6566 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6567 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41869">41869</a>: TagData.getAttribute() should return 6568 TagData.REQUEST_TIME_VALUE when the attribute value is an EL expression. 6569 (markt) 6570 </td></tr> 6571 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6572 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42071">42071</a>: Fix IllegalStateException on multiple requests to 6573 an unavailable JSP. Patch provided by Kawasima Kazuh. (markt) 6574 </td></tr> 6575 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6576 After a JSP throws an UnavailableException allow it to be accessed once 6577 the unavailable period has expired. (markt) 6578 </td></tr> 6579 </table> 6580 </blockquote></td></tr></table> 6581 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.12 (remm)/Cluster"><!--()--></a><a name="Tomcat_6.0.12_(remm)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote> 6582 <table border="0" cellpadding="2" cellspacing="2"> 6583 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6584 Add toString method to better logging session replication message at tribes MESSAGES (pero) 6585 </td></tr> 6586 </table> 6587 </blockquote></td></tr></table> 6588</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.11 (remm)"><!--()--></a><a name="Tomcat_6.0.11_(remm)"><strong>Tomcat 6.0.11 (remm)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote> 6589 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.11 (remm)/General"><!--()--></a><a name="Tomcat_6.0.11_(remm)/General"><strong>General</strong></a></font></td></tr><tr><td><blockquote> 6590 <table border="0" cellpadding="2" cellspacing="2"> 6591 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 6592 Update DBCP to 1.2.2, pool to 1.3, JDT to 3.2.2 and remove collections 6593 build dependency (pero, remm) 6594 </td></tr> 6595 </table> 6596 </blockquote></td></tr></table> 6597 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.11 (remm)/Catalina"><!--()--></a><a name="Tomcat_6.0.11_(remm)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 6598 <table border="0" cellpadding="2" cellspacing="2"> 6599 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6600 Don't log pattern subtoken at ExtendedAccesLogValve (pero) 6601 </td></tr> 6602 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6603 Add some missing JMX attributes for new AccessLogValve (pero) 6604 </td></tr> 6605 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6606 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41786">41786</a>: Incorrect reference to catalina_home in catalina.sh/bat Patch provided by Mike Hanafey (fhanik) 6607 </td></tr> 6608 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6609 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41703">41703</a>: SingleSignOnMessage invalid setter, patch provided by Nils Hammar (fhanik) 6610 </td></tr> 6611 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6612 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41682">41682</a>: ClassCastException when logging is turned on (fhanik) 6613 </td></tr> 6614 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6615 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41530">41530</a>: Don't log error messages when connector is stopped (fhanik) 6616 </td></tr> 6617 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6618 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41166">41166</a>: Invalid handling when using replicated context (fhanik) 6619 </td></tr> 6620 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
6621 Added SENDFILE support for the NIO connector. (fhanik) <br> 6622 </td></tr> 6623 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 6624 Added support for shared thread pools by adding in the <Executor> 6625 element as a nested element to the <Service> element. (fhanik) 6626 </td></tr> 6627 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6628 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41666">41666</a>: Correct handling of boundary conditions for 6629 If-Unmodified-Since and If-Modified-Since headers. Patch provided by 6630 Suzuki Yuichiro. (markt) 6631 </td></tr> 6632 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6633 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41739">41739</a>: Correct handling of servlets with a load-on-startup 6634 value of zero. These are now the first servlets to be started. (markt) 6635 </td></tr> 6636 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6637 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41747">41747</a>: Correct example ant script for deploy task. (markt) 6638 </td></tr> 6639 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6640 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41752">41752</a>: Correct error message on exception in MemoryRealm. 6641 (markt) 6642 </td></tr> 6643 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 6644 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=39883">39883</a>: Add documentation warning about using antiResourceLocking 6645 on a webapp outside the Host's appBase. (yoavs) 6646 </td></tr> 6647 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6648 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=40150">40150</a>: Ensure user and roll classnames are validated on startup. Patch by 6649 Tom. (yoavs) 6650 </td></tr> 6651 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 6652 Refactor extend access log valve using the optimized access log valve. Submitted by 6653 Takayuki Kaneko. (remm) 6654 </td></tr> 6655 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6656 Possible deadlock in classloading when defining packages. (remm) 6657 </td></tr> 6658 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6659 Remove excessive syncing from listener support. (remm) 6660 </td></tr> 6661 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 6662 Web services support. The actual factory implementations are implemented in the 6663 extras. Submitted by Fabien Carrion. (remm) 6664 </td></tr> 6665 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 6666 Add logging to display APR capabilities on the platform. (remm) 6667 </td></tr> 6668 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6669 Expose executors in JMX. (remm) 6670 </td></tr> 6671 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6672 CRLF inside a URL pattern is always invalid. (remm) 6673 </td></tr> 6674 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6675 Tweak startup time display. (remm) 6676 </td></tr> 6677 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6678 Adjustments to handling exceptions with Comet. (remm) 6679 </td></tr> 6680 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6681 If the event is closed asynchronously, generate an end event for cleanup on the 6682 next event. (remm) 6683 </td></tr> 6684 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6685 Cleanup hello webapp from the docs and fix a XSS issue in the JSP. (remm) 6686 </td></tr> 6687 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6688 Examples webapp cleanup. Submitted by Takayuki Kaneko and Markus Schönhaber. (remm) 6689 </td></tr> 6690 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6691 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41289">41289</a>: Create configBase, since it is no longer created elsewhere. 6692 Submitted by Shiva Kumar H R. (remm) 6693 </td></tr> 6694 </table> 6695 </blockquote></td></tr></table> 6696 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.11 (remm)/Coyote"><!--()--></a><a name="Tomcat_6.0.11_(remm)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote> 6697 <table border="0" cellpadding="2" cellspacing="2"> 6698 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 6699 Fixed NIO memory leak caused by the NioChannel cache not working properly. 6700 </td></tr> 6701 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 6702 Added flag to enable/disable the usage of the pollers selector instead of a Selector pool 6703 when the serviet is reading/writing from the input/output streams 6704 The flag is <code>-Dorg.apache.tomcat.util.net.NioSelectorShared=true</code> 6705 </td></tr> 6706 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6707 Requests with multiple content-length headers are now rejected. (markt) 6708 </td></tr> 6709 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 6710 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41675">41675</a>: Add a couple of DEBUG-level logging statements to Http11Processors 6711 when sending error responses. Patch by Ralf Hauser. (yoavs) 6712 </td></tr> 6713 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6714 Reuse digester used by the modeler. (remm) 6715 </td></tr> 6716 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 6717 When the platform does not support deferred accept, put accepted sockets in the 6718 poller. (remm) 6719 </td></tr> 6720 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6721 Fix problem with blocking reads for keepalive when using an executor (the number 6722 of busy threads is always 0). (remm) 6723 </td></tr> 6724 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 6725 The poller now has good performance, so remove firstReadTimeout. (remm) 6726 </td></tr> 6727 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6728 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42119">42119</a>: Fix return value for request.getCharacterEncoding() when 6729 Content-Type headers contain parameters other than charset. Patch by 6730 Leigh L Klotz Jr. (markt) 6731 </td></tr> 6732 </table> 6733 </blockquote></td></tr></table> 6734 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.11 (remm)/Web applications"><!--()--></a><a name="Tomcat_6.0.11_(remm)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote> 6735 <table border="0" cellpadding="2" cellspacing="2"> 6736 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6737 Fix previous update to servlet 2.5 xsd to use correct declaration. 6738 (markt) 6739 </td></tr> 6740 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 6741 Update host configuration document for new behaviour for directories 6742 in appBase. (markt) 6743 </td></tr> 6744 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 6745 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=39540">39540</a>: Add link to httpd 2.2 mod_proxy_ajp docs in AJP connector doc. (yoavs) 6746 </td></tr> 6747 </table> 6748 </blockquote></td></tr></table> 6749 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.11 (remm)/Jasper"><!--()--></a><a name="Tomcat_6.0.11_(remm)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote> 6750 <table border="0" cellpadding="2" cellspacing="2"> 6751 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6752 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41227">41227</a>
6752: Add a bit of DEBUG-level logging to JspC so users know 6753 which file is being compiled. (yoavs) 6754 </td></tr> 6755 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 6756 Remove some dead utility code, and refactor stream capture as part of the Ant compiler. (remm) 6757 </td></tr> 6758 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6759 Support the trim directive of JSP 2.1 as an equivalent of Jasper's own parameter. (remm) 6760 </td></tr> 6761 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6762 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41790">41790</a>: Close file stream used to read the Java source. (remm) 6763 </td></tr> 6764 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6765 Fix reporting of errors which do not correspond to a portion of the JSP source. (remm) 6766 </td></tr> 6767 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6768 Remove try/catch usage for annotation processing in classic tags. The usage 6769 of the log method might have been questionable as well. (remm) 6770 </td></tr> 6771 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6772 Cleanup of the message that is displayed for compilation errors. (remm) 6773 </td></tr> 6774 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6775 Skip BOM when reading a JSP file. (remm) 6776 </td></tr> 6777 </table> 6778 </blockquote></td></tr></table> 6779 </blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.10 (remm)"><!--()--></a><a name="Tomcat_6.0.10_(remm)"><strong>Tomcat 6.0.10 (remm)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2007-02-28</strong></font></td></tr><tr><td colspan="2"><blockquote> 6780 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.10 (remm)/Catalina"><!--()--></a><a name="Tomcat_6.0.10_(remm)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 6781 <table border="0" cellpadding="2" cellspacing="2"> 6782 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 6783 Unify usage of security manager flag, submitted by Arvind Srinivasan. (remm) 6784 </td></tr> 6785 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6786 Fix formatting of CGI variable SCRIPT_NAME. (markt) 6787 </td></tr> 6788 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6789 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41521">41521</a>: Support * for servlet-name, submitted by Paul McMahan. (remm) 6790 </td></tr> 6791 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 6792 Cache getServletContext value, submitted by Arvind Srinivasan. (remm) 6793 </td></tr> 6794 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6795 Add options for handling special URL characters in paths, and disallow '\' and encoded '/' 6796 due to possible differences in behavior between Tomcat and a front end webserver. (remm) 6797 </td></tr> 6798 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6799 Fix bad comparison for FORM processing, submitted by Anil Saldhana. (remm) 6800 </td></tr> 6801 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6802 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41608">41608</a>: Make log levels consistent when Servlet.service() 6803 throws an exception. (markt) 6804 </td></tr> 6805 </table> 6806 </blockquote></td></tr></table> 6807 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.10 (remm)/Coyote"><!--()--></a><a name="Tomcat_6.0.10_(remm)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote> 6808 <table border="0" cellpadding="2" cellspacing="2"> 6809 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6810 Reduce usage of MessageBytes.getLength(), submitted by Arvind Srinivasan. (remm) 6811 </td></tr> 6812 </table> 6813 </blockquote></td></tr></table> 6814 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.10 (remm)/Jasper"><!--()--></a><a name="Tomcat_6.0.10_(remm)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote> 6815 <table border="0" cellpadding="2" cellspacing="2"> 6816 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6817 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41558">41558</a>: Don't call synced method on every request, submitted by Arvind Srinivasan. (remm) 6818 </td></tr> 6819 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6820 Switch to a thread local page context pool. (remm) 6821 </td></tr> 6822 </table> 6823 </blockquote></td></tr></table> 6824</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.9 (remm)"><!--()--></a><a name="Tomcat_6.0.9_(remm)"><strong>Tomcat 6.0.9 (remm)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>beta, 2007-02-08</strong></font></td></tr><tr><td colspan="2"><blockquote> 6825 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.9 (remm)/General"><!--()--></a><a name="Tomcat_6.0.9_(remm)/General"><strong>General</strong></a></font></td></tr><tr><td><blockquote> 6826 <table border="0" cellpadding="2" cellspacing="2"> 6827 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6828 Use 2.5 xsd in Tomcat webapps. (markt) 6829 </td></tr> 6830 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6831 Compression filter improvements, submitted by Eric Hedström. (markt) 6832 </td></tr> 6833 </table> 6834 </blockquote></td></tr></table> 6835 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.9 (remm)/Catalina"><!--()--></a><a name="Tomcat_6.0.9_(remm)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 6836 <table border="0" cellpadding="2" cellspacing="2"> 6837 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6838 Properly return connector names. (remm) 6839 </td></tr> 6840 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6841 Remove logging of the XML validation flag. (remm) 6842 </td></tr> 6843 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6844 Correct error messages for context.xml. (markt) 6845 </td></tr> 6846 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6847 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41217">41217</a>: Set secure flag correctly on SSO cookie, submitted by 6848 Chris Halstead. (markt) 6849 </td></tr> 6850 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6851 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=40524">40524</a>: request.getAuthType() now returns CLIENT_CERT rather 6852 than CLIENT-CERT. (markt) 6853 </td></tr> 6854 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6855 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=40526">40526</a>: Return support for JPDA_OPTS to catalina.bat and add 6856 a new option JPDA_SUSPEND, submitted by by Kurt Roy. (markt) 6857 </td></tr> 6858 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6859 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41265">41265</a>: In embedded, remove the code that resets checkInterval 6860 values of zero to 300. (markt) 6861 </td></tr> 6862 </table> 6863 </blockquote></td></tr></table> 6864 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.9 (remm)/Coyote"><!--()--></a><a name="Tomcat_6.0.9_(remm)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote> 6865 <table border="0" cellpadding="2" cellspacing="2"> 6866 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6867 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=37869">37869</a>: Fix getting client certificate, submitted by Christophe Pierret. (remm) 6868 </td></tr> 6869 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6870 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=40960">40960</a>: Throw a timeout exception when getting a timeout rather than a 6871 generic IOE, submitted by Christophe Pierret. (remm) 6872 </td></tr> 6873 </table> 6874 </blockquote></td></tr></table> 6875 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.9 (remm)/Jasper"><!--()--></a><a name="Tomcat_6.0.9_(remm)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote> 6876 <table border="0" cellpadding="2" cellspacing="2"> 6877 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6878 EL validation fixes for attributes. (remm) 6879 </td></tr> 6880 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6881 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41327">41327</a>: Show full URI for a 404. (markt) 6882 </td></tr> 6883 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6884 JspException now uses getCause() as the result for getRootCause(). (markt) 6885 </td></tr> 6886 </table> 6887 </blockquote></td></tr></table> 6888 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.9 (remm)/Cluster"><!--()--></a><a name="Tomcat_6.0.9_(remm)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote> 6889 <table border="0" cellpadding="2" cellspacing="2"> 6890 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6891 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41466">41466</a>: When using the NioChannel and SecureNioChannel its 6892 important to use the channels buffers. (fhanik) 6893 </td></tr> 6894 </table> 6895 </blockquote></td></tr></table> 6896</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.8 (remm)"><!--()--></a><a name="Tomcat_6.0.8_(remm)"><strong>Tomcat 6.0.8 (remm)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>alpha</strong></font></td></tr><tr><td colspan="2"><blockquote> 6897 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.8 (remm)/Catalina"><!--()--></a><a name="Tomcat_6.0.8_(remm)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 6898 <table border="0" cellpadding="2" cellspacing="2"> 6899 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6900 Make provided instances of RequestDispatcher thread safe. (markt) 6901 </td></tr> 6902 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 6903 Optional development oriented loader implementation. (funkman) 6904 </td></tr> 6905 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 6906 Optimized access log valve, submitted by Takayuki Kaneko. (remm) 6907 </td></tr> 6908 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6909 Fix error messages when parsing context.xml that incorrectly referred to 6910 web.xml. (markt) 6911 </td></tr> 6912 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6913 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41217">41217</a>
6913: Set secure attribute on SSO cookie when cookie is 6914 created during a secure request. Patch provided by Chris Halstead. 6915 (markt) 6916 </td></tr> 6917 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6918 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=40524">40524</a>: HttpServletRequest.getAuthType() now returns 6919 CLIENT_CERT rather than CLIENT-CERT for certificate authentication 6920 as per the spec. Note that web.xml continues to use CLIENT-CERT to 6921 specify the certificate authentication should be used. (markt) 6922 </td></tr> 6923 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6924 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41401">41401</a>: Add support for JPDA_OPTS to catalina.bat and add a 6925 JPDA_SUSPEND environment variable to both startup scripts. Patch 6926 provided by Kurt Roy. (markt) 6927 </td></tr> 6928 </table> 6929 </blockquote></td></tr></table> 6930 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.8 (remm)/Coyote"><!--()--></a><a name="Tomcat_6.0.8_(remm)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote> 6931 <table border="0" cellpadding="2" cellspacing="2"> 6932 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6933 Use the tomcat-native-1.1.10 as recommended version. 6934 OpenSSL detection on some platforms was broken 1.1.8 will continue to work, 6935 although on some platforms there can be JVM crash if IPV6 is enabled and 6936 platform doesn't support IPV4 mapped addresses on IPV6 sockets. 6937 </td></tr> 6938 </table> 6939 </blockquote></td></tr></table> 6940 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.8 (remm)/Jasper"><!--()--></a><a name="Tomcat_6.0.8_(remm)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote> 6941 <table border="0" cellpadding="2" cellspacing="2"> 6942 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6943 When displaying JSP source after an exception, handle included files. 6944 (markt) 6945 </td></tr> 6946 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6947 Display the JSP source when a compilation error occurs and display 6948 the correct line number rather than start of a scriptlet block. (markt) 6949 </td></tr> 6950 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6951 Fix NPE when processing dynamic attributes. (remm) 6952 </td></tr> 6953 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6954 More accurate EL usage validation. (remm) 6955 </td></tr> 6956 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6957 Fix regression for implicit taglib and page data version numbers. (remm) 6958 </td></tr> 6959 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6960 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41265">41265</a>: Allow JspServlet checkInterval init parameter to be 6961 explicitly set to the stated default value of zero by removing the 6962 code that resets it to 300 if explicitly specified as zero. (markt) 6963 </td></tr> 6964 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6965 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41327">41327</a>: Show full URI for a 404. Patch provided by Vijay. 6966 (markt) 6967 </td></tr> 6968 </table> 6969 </blockquote></td></tr></table> 6970 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.8 (remm)/Web applications"><!--()--></a><a name="Tomcat_6.0.8_(remm)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote> 6971 <table border="0" cellpadding="2" cellspacing="2"> 6972 <tr><td><img alt="docs" class="icon" src="./images/docs.gif"></td><td> 6973 Add a virtual hosting how-to contributed by Hassan Schroeder. (markt) 6974 </td></tr> 6975 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 6976 Update all webapps to use the servlet 2.5 xsd. (markt) 6977 </td></tr> 6978 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6979 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=39572">39572</a>: Improvements to CompressionFilter example provided by 6980 Eric Hedström. (markt) 6981 </td></tr> 6982 </table> 6983 </blockquote></td></tr></table> 6984</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.7 (remm)"><!--()--></a><a name="Tomcat_6.0.7_(remm)"><strong>Tomcat 6.0.7 (remm)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>beta, 2007-01-10</strong></font></td></tr><tr><td colspan="2"><blockquote> 6985 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.7 (remm)/General"><!--()--></a><a name="Tomcat_6.0.7_(remm)/General"><strong>General</strong></a></font></td></tr><tr><td><blockquote> 6986 <table border="0" cellpadding="2" cellspacing="2"> 6987 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6988 Fix installer's bitmap (mturk) 6989 </td></tr> 6990 </table> 6991 </blockquote></td></tr></table> 6992 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.7 (remm)/Catalina"><!--()--></a><a name="Tomcat_6.0.7_(remm)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 6993 <table border="0" cellpadding="2" cellspacing="2"> 6994 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 6995 Refactor logging of errors which may occur when reading a post body (remm) 6996 </td></tr> 6997 </table> 6998 </blockquote></td></tr></table> 6999 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.7 (remm)/Coyote"><!--()--></a><a name="Tomcat_6.0.7_(remm)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote> 7000 <table border="0" cellpadding="2" cellspacing="2"> 7001 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 7002 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=37869">37869</a>: Also use the SSL_INFO_CLIENT_CERT field if the chain is empty, 7003 submitted by Grzegorz Grzybek (remm) 7004 </td></tr> 7005 </table> 7006 </blockquote></td></tr></table> 7007</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.6 (remm)"><!--()--></a><a name="Tomcat_6.0.6_(remm)"><strong>Tomcat 6.0.6 (remm)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>alpha</strong></font></td></tr><tr><td colspan="2"><blockquote> 7008 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.6 (remm)/General"><!--()--></a><a name="Tomcat_6.0.6_(remm)/General"><strong>General</strong></a></font></td></tr><tr><td><blockquote> 7009 <table border="0" cellpadding="2" cellspacing="2"> 7010 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 7011 Fix tagging which did not include 6.0.5's changelog (remm) 7012 </td></tr> 7013 </table> 7014 </blockquote></td></tr></table> 7015</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.5 (remm)"><!--()--></a><a name="Tomcat_6.0.5_(remm)"><strong>Tomcat 6.0.5 (remm)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote> 7016 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.5 (remm)/Catalina"><!--()--></a><a name="Tomcat_6.0.5_(remm)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 7017 <table border="0" cellpadding="2" cellspacing="2"> 7018 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 7019 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=40585">40585</a>: Fix parameterised constructor for o.a.juli.FileHandler 7020 so parameters have an effect. (markt) 7021 </td></tr> 7022 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 7023 Escape invalid characters from request.getLocale. (markt, remm) 7024 </td></tr> 7025 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
7026 Update required version for native to 1.1.8. (remm) 7027 </td></tr> 7028 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 7029 Do not log broken pipe errors which can occur when flushing the content of an error page. (remm) 7030 </td></tr> 7031 </table> 7032 </blockquote></td></tr></table> 7033 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.5 (remm)/Coyote"><!--()--></a><a name="Tomcat_6.0.5_(remm)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote> 7034 <table border="0" cellpadding="2" cellspacing="2"> 7035 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 7036 Fix firstReadTimeout behavior for the AJP connector. (remm) 7037 </td></tr> 7038 </table> 7039 </blockquote></td></tr></table> 7040 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.5 (remm)/Jasper"><!--()--></a><a name="Tomcat_6.0.5_(remm)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote> 7041 <table border="0" cellpadding="2" cellspacing="2"> 7042 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 7043 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41057">41057</a>: Make jsp:plugin output XHTML compliant. (markt) 7044 </td></tr> 7045 </table> 7046 </blockquote></td></tr></table> 7047 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.5 (remm)/Cluster"><!--()--></a><a name="Tomcat_6.0.5_(remm)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote> 7048 <table border="0" cellpadding="2" cellspacing="2"> 7049 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 7050 Cluster interface cleanup. (fhanik) 7051 </td></tr> 7052 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 7053 Refactoring to allow usage of executors. (fhanik) 7054 </td></tr> 7055 </table> 7056 </blockquote></td></tr></table> 7057</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.4 (remm)"><!--()--></a><a name="Tomcat_6.0.4_(remm)"><strong>Tomcat 6.0.4 (remm)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>alpha</strong></font></td></tr><tr><td colspan="2"><blockquote> 7058 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.4 (remm)/General"><!--()--></a><a name="Tomcat_6.0.4_(remm)/General"><strong>General</strong></a></font></td></tr><tr><td><blockquote> 7059 <table border="0" cellpadding="2" cellspacing="2"> 7060 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 7061 Update to NSIS 2.22 (remm) 7062 </td></tr> 7063 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 7064 Fix regression in 6.0.3 with Windows wrapper (mturk) 7065 </td></tr> 7066 </table> 7067 </blockquote></td></tr></table> 7068</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.3 (remm)"><!--()--></a><a name="Tomcat_6.0.3_(remm)"><strong>Tomcat 6.0.3 (remm)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote> 7069 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.3 (remm)/General"><!--()--></a><a name="Tomcat_6.0.3_(remm)/General"><strong>General</strong></a></font></td></tr><tr><td><blockquote> 7070 <table border="0" cellpadding="2" cellspacing="2"> 7071 </table> 7072 </blockquote></td></tr></table> 7073 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.3 (remm)/Catalina"><!--()--></a><a name="Tomcat_6.0.3_(remm)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 7074 <table border="0" cellpadding="2" cellspacing="2"> 7075 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 7076 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=37509">37509</a>: Do not remove whitespace from the end of values 7077 defined in logging.properties files. (markt) 7078 </td></tr> 7079 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 7080 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=38
7080198">38198</a>: Add reference to Context documentation from Host 7081 documentation that explains how Context name is obtained from the 7082 Context filename. (markt) 7083 </td></tr> 7084 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 7085 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=40844">40844</a>: Missing syncs in JDBCRealm. (markt) 7086 </td></tr> 7087 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 7088 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=40901">40901</a>: Encode directory listing output. Based on a patch 7089 provided by Chris Halstead. (markt) 7090 </td></tr> 7091 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 7092 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=40929">40929</a>: Correct JavaDoc for StandardClassLoader. (markt) 7093 </td></tr> 7094 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 7095 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41008">41008</a>: Allow POST to be used for indexed queries with CGI 7096 Servlet. Patch provided by Chris Halstead. (markt) 7097 </td></tr> 7098 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 7099 Fix usage of print on the servlet output stream if the processor never used 7100 a writer (fhanik) 7101 </td></tr> 7102 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 7103 Fix logic of sameSameObjects used to determine correct wrapping of request and 7104 response objects (fhanik) 7105 </td></tr> 7106 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 7107 Update TLD scan lists, and disable caching for now (remm) 7108 </td></tr> 7109 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 7110 Add system property to WebappClassLoader to allow disabling setting references 7111 to null when stopping it (remm) 7112 </td></tr> 7113 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 7114 Add clustered SSO code, submitted by Fabien Carrion (remm) 7115 </td></tr> 7116 </table> 7117 </blockquote></td></tr></table> 7118 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.3 (remm)/Coyote"><!--()--></a><a name="Tomcat_6.0.3_(remm)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote> 7119 <table border="0" cellpadding="2" cellspacing="2"> 7120 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 7121 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=40860">40860</a>: Log exceptions and other problems during parameter 7122 processing. (markt) 7123 </td></tr> 7124 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 7125 Enable JMX for trust store attributes for SSL connector. (markt) 7126 </td></tr> 7127 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 7128 Port memory usage reduction changes to the java.io HTTP connector. (remm) 7129 </td></tr> 7130 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 7131 MessageBytes.setString(null) will remove the String value. (remm) 7132 </td></tr> 7133 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 7134 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41057">41057</a>: Caching large strings is not useful and takes too much 7135 memory, so don't cache these (remm) 7136 </td></tr> 7137 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 7138 Add keepAliveTimeout attribute to most connectors (mturk, remm) 7139 </td></tr> 7140 </table> 7141 </blockquote></td></tr></table> 7142 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.3 (remm)/Jasper"><!--()--></a><a name="Tomcat_6.0.3_(remm)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote> 7143 <table border="0" cellpadding="2" cellspacing="2"> 7144 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 7145 Relax EL type validation for litterals. (remm) 7146 </td></tr> 7147 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 7148 Update some version numbers to 2.1. (funkman, remm) 7149 </td></tr> 7150 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 7151 Add xsds for JSP 2.1 (remm) 7152 </td></tr> 7153 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 7154 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41106">41106</a>
7154: Update validation checks for EL to also include 7155 legacy 1.2 tags (remm) 7156 </td></tr> 7157 </table> 7158 </blockquote></td></tr></table> 7159 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.3 (remm)/Web applications"><!--()--></a><a name="Tomcat_6.0.3_(remm)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote> 7160 <table border="0" cellpadding="2" cellspacing="2"> 7161 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 7162 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=40677">40677</a>: Update SSL documentation to indicate that PKCS11 7163 keystores may be used. (markt) 7164 </td></tr> 7165 </table> 7166 </blockquote></td></tr></table> 7167</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.2 (remm)"><!--()--></a><a name="Tomcat_6.0.2_(remm)"><strong>Tomcat 6.0.2 (remm)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>beta, 2006-11-23</strong></font></td></tr><tr><td colspan="2"><blockquote> 7168 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.2 (remm)/General"><!--()--></a><a name="Tomcat_6.0.2_(remm)/General"><strong>General</strong></a></font></td></tr><tr><td><blockquote> 7169 <table border="0" cellpadding="2" cellspacing="2"> 7170 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 7171 Various tweaks to distribution (remm, funkman) 7172 </td></tr> 7173 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 7174 Update Tomcat native to 1.1.7 (mturk) 7175 </td></tr> 7176 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 7177 Update to JDT 3.2.1 (remm) 7178 </td></tr> 7179 </table> 7180 </blockquote></td></tr></table> 7181 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.2 (remm)/Catalina"><!--()--></a><a name="Tomcat_6.0.2_(remm)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 7182 <table border="0" cellpadding="2" cellspacing="2"> 7183 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 7184 Fix EJB annotation interface (remm) 7185 </td></tr> 7186 </table> 7187 </blockquote></td></tr></table> 7188 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.2 (remm)/Coyote"><!--()--></a><a name="Tomcat_6.0.2_(remm)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote> 7189 <table border="0" cellpadding="2" cellspacing="2"> 7190 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 7191 Fix passing of the keystore password for the NIO connector (fhanik) 7192 </td></tr> 7193 </table> 7194 </blockquote></td></tr></table> 7195</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.1 (remm)"><!--()--></a><a name="Tomcat_6.0.1_(remm)"><strong>Tomcat 6.0.1 (remm)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>alpha</strong></font></td></tr><tr><td colspan="2"><blockquote> 7196 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.1 (remm)/General"><!--()--></a><a name="Tomcat_6.0.1_(remm)/General"><strong>General</strong></a></font></td></tr><tr><td><blockquote> 7197 <table border="0" cellpadding="2" cellspacing="2"> 7198 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 7199 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=37439">37439</a>, <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=40823">40823</a>: Documentation cleanup (markt) 7200 </td></tr> 7201 </table> 7202 </blockquote></td></tr></table> 7203 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.1 (remm)/Catalina"><!--()--></a><a name="Tomcat_6.0.1_(remm)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 7204 <table border="0" cellpadding="2" cellspacing="2"> 7205 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 7206 Refactor exception processing using Throwable.getCause to improve exception chaining (remm) 7207 </td></tr> 7208 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 7209 Remove dead code involving the Logger (funkman) 7210 </td></tr> 7211 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 7212 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=37458">37458</a>: Fix some exceptions which could happen during classloading (markt) 7213 </td></tr> 7214 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 7215 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=40817">40817</a>: Fix CGI path (markt) 7216 </td></tr> 7217 <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td> 7218 <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=34956">34956</a>: Add the possibility to enforce usage of request and response 7219 wrapper objects (markt) 7220 </td></tr> 7221 </table> 7222 </blockquote></td></tr></table> 7223 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.1 (remm)/Jasper"><!--()--></a><a name="Tomcat_6.0.1_(remm)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote> 7224 <table border="0" cellpadding="2" cellspacing="2"> 7225 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 7226 Many fixes for JSP 2.1 compliance, involving tag files handling, deferred expressions 7227 validation, bom encoding support (remm) 7228 </td></tr> 7229 </table> 7230 </blockquote></td></tr></table> 7231 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.1 (remm)/Coyote"><!--()--></a><a name="Tomcat_6.0.1_(remm)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote> 7232 <table border="0" cellpadding="2" cellspacing="2"> 7233 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 7234 Many HTTP NIO connector fixes and refactorings (fhanik) 7235 </td></tr> 7236 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 7237 HTTP NIO connector performance improvements (fhanik) 7238 </td></tr> 7239 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 7240 Add packetSize option for the classic AJP connector (jfclere) 7241 </td></tr> 7242 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 7243 Implement explicit flushing in AJP (mturk) 7244 </td></tr> 7245 </table> 7246 </blockquote></td></tr></table> 7247</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.0 (remm)"><!--()--></a><a name="Tomcat_6.0.0_(remm)"><strong>Tomcat 6.0.0 (remm)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>alpha</strong></font></td></tr><tr><td colspan="2"><blockquote> 7248 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.0 (remm)/Catalina"><!--()--></a><a name="Tomcat_6.0.0_(remm)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote> 7249 <table border="0" cellpadding="2" cellspacing="2"> 7250 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 7251 SSLEngine attribute added to the AprLifecycleListener(fhanik) 7252 </td></tr> 7253 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 7254 Add API for Comet IO handling (remm, fhanik) 7255 </td></tr> 7256 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 7257 Servlet 2.5 support (remm) 7258 </td></tr> 7259 </table> 7260 </blockquote></td></tr></table> 7261 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.0 (remm)/Jasper"><!--()--></a><a name="Tomcat_6.0.0_(remm)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote> 7262 <table border="0" cellpadding="2" cellspacing="2"> 7263 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 7264 JSP 2.1 support (jhook, remm) 7265 </td></tr> 7266 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 7267 Unifed EL 2.1 support (jhook) 7268 </td></tr> 7269 </table> 7270 </blockquote></td></tr></table> 7271 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.0 (remm)/Coyote"><!--()--></a><a name="Tomcat_6.0.0_(remm)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote> 7272 <table border="0" cellpadding="2" cellspacing="2"> 7273 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 7274 SSLEnabled attribute required for SSL to be turned on, on all HTTP connectors (fhanik) 7275 </td></tr> 7276 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 7277 Memory usage reduction for the HTTP connectors, except java.io (remm) 7278 </td></tr> 7279 <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td> 7280 Modeler update to use dynamic mbeans rather than model mbeans, which consume more 7281 resources (costin) 7282 </td></tr> 7283 </table> 7284 </blockquote></td></tr></table> 7285 <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.0 (remm)/Cluster"><!--()--></a><a name="Tomcat_6.0.0_(remm)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote> 7286 <table border="0" cellpadding="2" cellspacing="2"> 7287 <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td> 7288 New cluster configuration and new documentation (fhanik) 7289 </td></tr> 7290 </table> 7291 </blockquote></td></tr></table> 7292</blockquote></td></tr></table></td></tr><!--FOOTER SEPARATOR--><tr><td colspan="2"><hr noshade="noshade" size="1"></td></tr><!--PAGE FOOTER--><tr><td colspan="2"><div align="center"><font color="#525D76" size="-1"><em>
7293 Copyright © 1999-2017, Apache Software Foundation 7294 </em></font></div></td></tr></table></body></html>
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.