PageSourceSearch

https://mahatma.org.in/docs/changelog.html

html mahatma.org.in collected 2026-09-24 19:00:00 UTC 521,309 bytes, 7,294 lines download raw bytes

1<html><head><META http-equiv="Content-Type" content="text/html; charset=iso-8859-1"><title>Apache Tomcat 6.0 (6.0.53) - Changelog</title><meta name="author" content="Remy Maucherat"><meta name="author" content="Yoav Shapira"><meta name="author" content="Filip Hanik"><meta name="author" content="Rainer Jung"><meta name="author" content="Peter Rossbach"><meta name="author" content="Konstantin Kolinko"><meta name="author" content="Jean-Frederic Clere"><meta name="author" content="Keiichi Fujino"><meta name="author" content="Mladen Turk"><meta name="author" content="Tim Whittington"><meta name="author" content="Sylvain Laurent"><meta name="author" content="Christopher Schultz"><meta name="author" content="Coty Sutherland"><style type="text/css" media="print">
2			.noPrint {display: none;}
3			td#mainBody {width: 100%;}
4		</style></head><body bgcolor="#ffffff" text="#000000" link="#525D76" alink="#525D76" vlink="#525D76"><table border="0" width="100%" cellspacing="0"><!--PAGE HEADER--><tr><td><!--PROJECT LOGO--><a href="http://tomcat.apache.org/"><img src="./images/tomcat.gif" align="right" alt="
5      The Apache Tomcat Servlet/JSP Container
6    " border="0"></a></td><td><h1><font face="arial,helvetica,sanserif">Apache Tomcat 6.0</font></h1><font face="arial,helvetica,sanserif">Version 6.0.53, Apr 2 2017</font></td><td><!--APACHE LOGO--><a href="http://www.apache.org/"><img src="./images/asf-logo.svg" align="right" alt="Apache Logo" border="0" style="width: 266px;height: 83px;"></a></td></tr></table><table border="0" width="100%" cellspacing="4"><!--HEADER SEPARATOR--><tr><td colspan="2"><hr noshade="noshade" size="1"></td></tr><tr><!--LEFT SIDE NAVIGATION--><td width="20%" valign="top" nowrap="nowrap" class="noPrint"><p><strong>Links</strong></p><ul><li><a href="index.html">Docs Home</a></li><li><a href="http://wiki.apache.org/tomcat/FAQ">FAQ</a></li></ul><p><strong>User Guide</strong></p><ul><li><a href="introduction.html">1) Introduction</a></li><li><a href="setup.html">2) Setup</a></li><li><a href="appdev/index.html">3) First webapp</a></li><li><a href="deployer-howto.html">4) Deployer</a></li><li><a href="manager-howto.html">5) Manager</a></li><li><a href="realm-howto.html">6) Realms and AAA</a></li><li><a href="security-manager-howto.html">7) Security Manager</a></li><li><a href="jndi-resources-howto.html">8) JNDI Resources</a></li><li><a href="jndi-datasource-examples-howto.html">9) JDBC DataSources</a></li><li><a href="class-loader-howto.html">10) Classloading</a></li><li><a href="jasper-howto.html">11) JSPs</a></li><li><a href="ssl-howto.html">12) SSL</a></li><li><a href="ssi-howto.html">13) SSI</a></li><li><a href="cgi-howto.html">14) CGI</a></li><li><a href="proxy-howto.html">15) Proxy Support</a></li><li><a href="mbeans-descriptor-howto.html">16) MBean Descriptor</a></li><li><a href="default-servlet.html">17) Default Servlet</a></li><li><a href="cluster-howto.html">18) Clustering</a></li><li><a href="balancer-howto.html">19) Load Balancer</a></li><li><a href="connectors.html">20) Connectors</a></li><li><a href="monitoring.html">21) Monitoring and Management</a></li><li><a href="logging.html">22) Logging</a></li><li><a href="apr.html">23) APR/Native</a></li><li><a href="virtual-hosting-howto.html">24) Virtual Hosting</a></li><li><a href="aio.html">25) Advanced IO</a></li><li><a href="extras.html">26) Additional Components</a></li><li><a href="maven-jars.html">27) Mavenized</a></li></ul><p><strong>Reference</strong></p><ul><li><a href="RELEASE-NOTES.txt">Release Notes</a></li><li><a href="config/index.html">Configuration</a></li><li><a href="api/index.html">Javadocs</a></li><li><a href="http://tomcat.apache.org/connectors-doc/">JK 1.2 Documentation</a></li></ul><p><strong>Apache Tomcat Development</strong></p><ul><li><a href="building.html">Building</a></li><li><a href="changelog.html">Changelog</a></li><li><a href="http://wiki.apache.org/tomcat/TomcatVersions">Status</a></li><li><a href="developers.html">Developers</a></li><li><a href="architecture/index.html">Architecture</a></li><li><a href="funcspecs/index.html">Functional Specs.</a></li></ul></td><!--RIGHT SIDE MAIN BODY--><td width="80%" valign="top" align="left" id="mainBody"><h1>Apache Tomcat 6.0</h1><h2>Changelog</h2><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif">
6<a name="Tomcat 6.0.53 (violetagg)"><!--()--></a><a name="Tomcat_6.0.53_(violetagg)"><strong>Tomcat 6.0.53 (violetagg)</strong></a></font></td></tr><tr><td><blockquote>
7  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.53 (violetagg)/Coyote"><!--()--></a><a name="Tomcat_6.0.53_(violetagg)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>
8    <table border="0" cellpadding="2" cellspacing="2">
9      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
10        Ensure that the socket is returned only once to the poller. (violetagg)
11      </td></tr>
12    </table>
13  </blockquote></td></tr></table>
14</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.52 (violetagg)"><!--()--></a><a name="Tomcat_6.0.52_(violetagg)"><strong>Tomcat 6.0.52 (violetagg)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote>
15  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.52 (violetagg)/Coyote"><!--()--></a><a name="Tomcat_6.0.52_(violetagg)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>
16    <table border="0" cellpadding="2" cellspacing="2">
17      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
18        Improve sendfile handling when requests are pipelined. (markt)
19      </td></tr>
20    </table>
21  </blockquote></td></tr></table>
22</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.51 (violetagg)"><!--()--></a><a name="Tomcat_6.0.51_(violetagg)"><strong>Tomcat 6.0.51 (violetagg)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2017-03-16</strong></font></td></tr><tr><td colspan="2"><blockquote>
23  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.51 (violetagg)/Jasper"><!--()--></a><a name="Tomcat_6.0.51_(violetagg)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>
24    <table border="0" cellpadding="2" cellspacing="2">
25      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
26        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=60613">60613</a>: Refactor code generated for JSPs to reduce the
27        size of the code required for tags. (markt)
28      </td></tr>
29    </table>
30  </blockquote></td></tr></table>
31  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.51 (violetagg)/Other"><!--()--></a><a name="Tomcat_6.0.51_(violetagg)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>
32    <table border="0" cellpadding="2" cellspacing="2">
33      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
34        Change Realm configuration in the default <code>conf/server.xml</code>
35        file to use a <code>org.apache.catalina.realm.LockOutRealm</code>.
36        The <code>LockOutRealm</code> is available since 6.0.19, but has
37        not been configured by default. (kkolinko)
38      </td></tr>
39      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
40        Update the packaged version of the Tomcat Native Library to 1.2.12 to
41        pick up the latest Windows binaries built with OpenSSL 1.0.2k. (violetagg)
42      </td></tr>
43      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
44        Update the NSIS Installer used to build the Windows installer to version
45        3.01. (markt)
46      </td></tr>
47      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
48        Refactor the build script and the NSIS installer script so that either
49        NSIS 2.x or NSIS 3.x can be used to build the installer. This is
50        primarily to re-enable building the installer on the Linux based CI
51        system where the combination of NSIS 3.x and wine leads to failed
52        installer builds. (markt)
53      </td></tr>
54    </table>
55  </blockquote></td></tr></table>
56</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.50 (violetagg)"><!--()--></a><a name="Tomcat_6.0.50_(violetagg)"><strong>Tomcat 6.0.50 (violetagg)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote>
57  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.50 (violetagg)/Web applications"><!--()--></a><a name="Tomcat_6.0.50_(violetagg)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>
58    <table border="0" cellpadding="2" cellspacing="2">
59      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
60        Ensure the ASF logo image is correctly displayed in ROOT, docs and
61        host-manager applications. (violetagg)
62      </td></tr>
63    </table>
64  </blockquote></td></tr></table>
65</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.49 (violetagg)"><!--()--></a>
65<a name="Tomcat_6.0.49_(violetagg)"><strong>Tomcat 6.0.49 (violetagg)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote>
66  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.49 (violetagg)/Coyote"><!--()--></a><a name="Tomcat_6.0.49_(violetagg)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>
67    <table border="0" cellpadding="2" cellspacing="2">
68      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
69        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57799">57799</a>: Remove useless sendfile check for NIO SSL. (remm)
70      </td></tr>
71      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
72        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=60409">60409</a>: When unable to complete sendfile request, ensure the
73        Processor will be added to the cache only once. (markt/violetagg)
74      </td></tr>
75    </table>
76  </blockquote></td></tr></table>
77  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.49 (violetagg)/Jasper"><!--()--></a><a name="Tomcat_6.0.49_(violetagg)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>
78    <table border="0" cellpadding="2" cellspacing="2">
79      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
80        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44294">44294</a>: Add support for varargs in UEL expressions. (markt)
81      </td></tr>
82      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
83        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=60356">60356</a>: Fix pre-compilation of JSPs that depend on nested tag
84        files packaged in a JAR. (markt)
85      </td></tr>
86      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
87        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=60431">60431</a>: Improve handling of varargs in UEL expressions. Based
88        on a patch by Ben Wolfe. (markt)
89      </td></tr>
90      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
91        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=60497">60497</a>: Restore previous tag reuse behavior following the use
92        of try/finally. (remm)
93      </td></tr>
94      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
95        Improve the error handling for simple tags to ensure that the tag is
96        released and destroyed once used. (remm)
97      </td></tr>
98      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
99        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=60497">60497</a>: Follow up fix using a better variable name for the
100        tag reuse flag. (remm)
101      </td></tr>
102      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
103        Revert use of try/finally for simple tags. (remm)
104      </td></tr>
105    </table>
106  </blockquote></td></tr></table>
107  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.49 (violetagg)/Web applications"><!--()--></a><a name="Tomcat_6.0.49_(violetagg)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>
108    <table border="0" cellpadding="2" cellspacing="2">
109      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
110        Correct a typo in Host Configuration Reference.
111        Issue reported via comments.apache.org. (violetagg)
112      </td></tr>
113      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
114        In the documentation web application, be explicit that clustering
115        requires a secure network for all of the cluster network traffic.
116        (markt)
117      </td></tr>
118      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
119        Update the ASF logos to the new versions. (markt)
120      </td></tr>
121    </table>
122  </blockquote></td></tr></table>
123  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.49 (violetagg)/Other"><!--()--></a>
123<a name="Tomcat_6.0.49_(violetagg)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>
124    <table border="0" cellpadding="2" cellspacing="2">
125      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
126        Update the ASF logos used in the Apache Tomcat installer for Windows to
127        use the new versions. (markt)
128      </td></tr>
129    </table>
130  </blockquote></td></tr></table>
131</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.48 (violetagg)"><!--()--></a><a name="Tomcat_6.0.48_(violetagg)"><strong>Tomcat 6.0.48 (violetagg)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2016-11-15</strong></font></td></tr><tr><td colspan="2"><blockquote>
132  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.48 (violetagg)/Catalina"><!--()--></a><a name="Tomcat_6.0.48_(violetagg)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
133    <table border="0" cellpadding="2" cellspacing="2">
134      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
135        Correctly test for control characters when reading the provided shutdown
136        password. (markt)
137      </td></tr>
138      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
139        When configuring the JMX remote listener, specify the allowed types for
140        the credentials. (markt)
141      </td></tr>
142    </table>
143  </blockquote></td></tr></table>
144  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.48 (violetagg)/Coyote"><!--()--></a><a name="Tomcat_6.0.48_(violetagg)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>
145    <table border="0" cellpadding="2" cellspacing="2">
146      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
147        Correct the HTTP header parser so that DEL is not treated as a valid
148        token character. (markt)
149      </td></tr>
150      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
151        Add additional checks for valid characters to the HTTP request line
152        parsing so invalid request lines are rejected sooner. (markt)
153      </td></tr>
154    </table>
155  </blockquote></td></tr></table>
156  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.48 (violetagg)/Web applications"><!--()--></a><a name="Tomcat_6.0.48_(violetagg)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>
157    <table border="0" cellpadding="2" cellspacing="2">
158      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
159        Correct a typo in CGI How-To.
160        Issue reported via comments.apache.org. (violetagg)
161      </td></tr>
162    </table>
163  </blockquote></td></tr></table>
164  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Extras"><strong>Extras</strong></a></font></td></tr><tr><td><blockquote>
165    <table border="0" cellpadding="2" cellspacing="2">
166      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
167        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=55017">55017</a>: Add the ability to configure the RMI bind address when
168        using the JMX remote listener. Patch provided by Alexey Noskov. (markt)
169      </td></tr>
170      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
171        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56039">56039</a>: Enable the JmxRemoteLifecycleListener to work over
172        SSL. Patch by esengstrom. (markt)
173      </td></tr>
174      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
175        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56096">56096</a>: When the attribute <code>rmiBindAddress</code> of the
176        JMX Remote Lifecycle Listener is specified it's value will be used when
177        constructing the address of a JMX API connector server. Patch is
178        provided by Jim Talbut. (markt)
179      </td></tr>
180      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
181        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57377">57377</a>: Remove the restriction that prevented the use of SSL
182        when specifying a bind address with the JMXRemoteLifecycleListener. Also
183        enable SSL to be configured for the registry as well as the server.
184        (markt)
185      </td></tr>
186    </table>
187  </blockquote></td></tr></table>
188</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.47 (violetagg)"><!--()--></a><a name="Tomcat_6.0.47_(violetagg)"><strong>Tomcat 6.0.47 (violetagg)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2016-10-16</strong></font></td></tr><tr><td colspan="2"><blockquote>
189  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.47 (violetagg)/Catalina"><!--()--></a><a name="Tomcat_6.0.47_(violetagg)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
190    <table border="0" cellpadding="2" cellspacing="2">
191      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
192        Fixed a warning message that is logged during Tomcat startup.
193        (violetagg)
194      </td></tr>
195    </table>
196  </blockquote></td></tr></table>
197</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.46 (violetagg)"><!--()--></a><a name="Tomcat_6.0.46_(violetagg)"><strong>Tomcat 6.0.46 (violetagg)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote>
198  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.46 (violetagg)/Catalina"><!--()--></a><a name="Tomcat_6.0.46_(violetagg)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
199    <table border="0" cellpadding="2" cellspacing="2">
200      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
201        Log a warning message if a user tries to configure the default session
202        timeout via the deprecated (and ignored)
203        <code>Manager.setMaxInactiveInterval()</code> method. (markt)
204      </td></tr>
205      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
206        Correct a regression introduced in 6.0.45 where the deprecated
207        <code>Manager.getMaxInactiveInterval()</code> method returned the
208        current default session timeout in minutes rather than seconds. (markt)
209      </td></tr>
210      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
211        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=58486">58486</a>: Expand memory leak protection to include additional
212        issues identified related to XML parsing. (markt)
213      </td></tr>
214      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
215        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=59123">59123</a>: Close <code>NamingEnumeration</code> objects used by
216        the <code>JNDIRealm</code> once they are no longer required.
217        (fschumacher/markt)
218      </td></tr>
219      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
220        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=59138">59138</a>: Correct a false positive warning for ThreadLocal
221        related memory leaks when the key class but not the value class has been
222        loaded by the web application class loader. (markt)
223      </td></tr>
224      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
225        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=59269">59269</a>: Correct the implementation of
226        <code>PersistentManagerBase</code> so that <code>minIdleSwap</code>
227        functions as designed and sessions are swapped out to keep the active
228        session count below <code>maxActiveSessions</code>. (markt)
229      </td></tr>
230      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
231        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=59247">59247</a>: Preload ResourceEntry as a workaround for security
232        manager issues on some JVMs. (kkolinko/remm)
233      </td></tr>
234      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
235        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=59310">59310</a>: Do not add a <code>Content-Length: 0</code> header for
236        custom responses to <code>HEAD</code> requests that do not set a
237        <code>Content-Length</code> value. (markt)
238      </td></tr>
239      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
240        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=59449">
24059449</a>: In <code>ContainerBase</code>, ensure that the process
241        to remove a child container is the reverse of the process to add one.
242        Patch provided by Huxing Zhang. (markt)
243      </td></tr>
244      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
245        RMI Target related memory leaks are avoidable which makes them an
246        application bug that needs to be fixed rather than a JRE bug to work
247        around. Therefore, start logging RMI Target related memory leaks on web
248        application stop. Add an option that controls if the check for these
249        leaks is made. Log a warning if running on Java 9 with this check
250        enabled but without the command line option it requires. (markt)
251      </td></tr>
252      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
253        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=59708">59708</a>: Modify the LockOutRealm logic. Valid authentication
254        attempts during the lock out period will no longer reset the lock out
255        timer to zero. (markt)
256      </td></tr>
257      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
258        By default, treat paths used to obtain a request dispatcher as encoded.
259        This behaviour can be changed per web application via the
260        <code>dispatchersUseEncodedPaths</code> attribute of the Context.
261        (markt)
262      </td></tr>
263      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
264        Provide a mechanism that enables the container to check if a component
265        (typically a web application) has been granted a given permission when
266        running under a SecurityManager without the current execution stack
267        having to have passed through the component. Use this new mechanism to
268        extend SecurityManager protection to the system property replacement
269        feature of the digester. (markt)
270      </td></tr>
271      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
272        When retrieving an object via a <code>ResourceLink</code>, ensure that
273        the object obtained is of the expected type. (markt)
274      </td></tr>
275      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
276        Switch the CGI servlet to the standard logging mechanism and remove
277        support for the debug attribute. (markt)
278      </td></tr>
279      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
280        Add a new initialisation parameter, <code>envHttpHeaders</code>, to
281        the CGI Servlet to mitigate <a href="https://httpoxy.org">httpoxy</a>
282        (<a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5388">CVE-2016-5388</a>) by default and to provide a mechanism that can be
283        used to mitigate any future, similar issues. (markt)
284      </td></tr>
285      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
286        When adding and removing <code>ResourceLink</code>s dynamically, ensure
287        that the global resource is only visible via the
288        <code>ResourceLinkFactory</code> when it is meant to be. (markt)
289      </td></tr>
290      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
291        Make timing attacks against the Realm implementations harder.
292        (schultz/markt)
293      </td></tr>
294      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
295        Ensure <code>Digester.useContextClassLoader</code> is considered in
296        case the class loader is used. (violetagg)
297      </td></tr>
298      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
299        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=60151">60151</a>: Improve the exception error messages when a
300        <code>ResourceLink</code> fails to specify the type, specifies an
301        unknown type or specifies the wrong type. (markt)
302      </td></tr>
303      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
304        Correct <code>basePackage</code> and <code>PrivilegedFindResourceByName
305        </code> in <code>SecurityClassLoad</code> so that tomcat can
306        successfully start with the Security Manager enabled. (csutherl)
307      </td></tr>
308      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
309        Improve the access checks for linked global resources to handle the case
310        where the current class loader is a child of the web application class
311        loader. (markt)
312      </td></tr>
313    </table>
314  </blockquote></td></tr></table>
315  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.46 (violetagg)/Coyote"><!--()--></a><a name="Tomcat_6.0.46_(violetagg)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>
316    <table border="0" cellpadding="2" cellspacing="2">
317      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
318        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=58646">58646</a>: Correct a problem with sendfile that resulted in a
319        Processor being added to the cache twice leading to broken responses.
320        (markt)
321      </td></tr>
322      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
323        Limit the default TLS ciphers for JSSE (BIO, NIO) and OpenSSL (APR) to
324        those currently considered secure. (markt) 
325      </td></tr>
326      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
327        Add a new environment variable <code>JSSE_OPTS</code> that is intended
328        to be used to pass JVM wide configuration to the JSSE implementation.
329        The default value is <code>-Djdk.tls.ephemeralDHKeySize=2048</code>
330        which protects against weak Diffie-Hellman keys. (markt)
331      </td></tr>
332      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
333        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=59451">59451</a>: Correct Javadoc for <code>MessageBytes</code>. Patch
334        provided by Kyohei Nakamura. (markt)
335      </td></tr>
336      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
337        Ensure that requests with HTTP method names that are not tokens (as
338        required by RFC 7231) are rejected with a 400 response. (markt)
339      </td></tr>
340      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
341        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=59904">59904</a>: Add a limit (default 200) for the number of cookies
342        allowed per request. Based on a patch by gehui. (markt)
343      </td></tr>
344      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
345        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=60123">60123</a>: Avoid potential threading issues that could cause
346        excessively large vales to be returned for the processing time of
347        a current request. (markt)
348      </td></tr>
349    </table>
350  </blockquote></td></tr></table>
351  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.46 (violetagg)/Jasper"><!--()--></a><a name="Tomcat_6.0.46_(violetagg)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>
352    <table border="0" cellpadding="2" cellspacing="2">
353      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
354        Fix a memory leak in the expression language implementation that caused
355        the class loader of the first web application to use expressions to be
356        pinned in memory. (markt)
357      </td></tr>
358      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
359        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=59654">59654</a>: Enforce the requirements of section 7.3.1 of the JSP
360        specification regarding the permitted locations for TLD files. Patch
361        provided by Huxing Zhang. (markt)
362      </td></tr>
363      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
364        Catch and log any <code>Exception</code>s during calls to
365        <code>Servlet.destroy()</code> when destroying the Servlet associated
366        with a JSP page. (markt)
367      </td></tr>
368      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
369        Improve the error handling for custom tags to ensure that the tag is
370        returned to the pool or released and destroyed once used. (markt)
371      </td></tr>
372    </table>
373  </blockquote></td></tr></table>
374  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.46 (violetagg)/Web applications"><!--()--></a><a name="Tomcat_6.0.46_(violetagg)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>
375    <table border="0" cellpadding="2" cellspacing="2">
376      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
377        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=58935">58935</a>: Remove incorrect references in the documentation to
378        using <code>jar:file:</code> URLs with the Manager application. (markt) 
379      </td></tr>
380      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
381        Correct the description of the
382        <code>ServletRequest.getServerPort()</code> in Proxy How-To.
383        Issue reported via comments.apache.org. (violetagg)
384      </td></tr>
385      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
386        Fix a potential indefinite wait in the Comet Chat servlet in the
387        examples web application. (markt)
388      </td></tr>
389      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
390        Update in the documentation the link to the maven repository where
391        Tomcat snapshot artifacts are deployed. (markt/violetagg)
392      </td></tr>
393      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
394        Clarify in the documentation that calls to
395        <code>ServletContext.log(String, Throwable)</code> or
396        <code>GenericServlet.log(String, Throwable)</code> are logged at the
397        SEVERE level. (violetagg)
398      </td></tr>
399      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
400        Correct a typo in SSL/TLS Configuration How-To.
401        Issue reported via comments.apache.org. (violetagg)
402      </td></tr>
403      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
404        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=58891">58891</a>: Update the SSL how-to. Based on a suggestion by
405        Alexander Kj&auml;ll. (markt)
406      </td></tr>
407      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
408        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=59642">59642</a>: Mention the <code>localDataSource</code> in the
409        <code>DataSourceRealm</code> section of the Realm How-To. (markt)
410      </td></tr>
411      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
412        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=60034">60034</a>: Correct a typo in the Manager How-To page of the
413        documentation web application. (markt) 
414      </td></tr>
415      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
416        Add an example of using the <code>
416classesToInitialize</code> attribute
417        of the <code>JreMemoryLeakPreventionListener</code> to the documentation
418        web application. Based on a patch by Cris Berneburg. (markt)
419      </td></tr>
420      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
421        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=60192">60192</a>: Correct a typo in the status output of the Manager
422        application. Patch provided by  Radhakrishna Pemmasani. (markt)
423      </td></tr>
424    </table>
425  </blockquote></td></tr></table>
426  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.46 (violetagg)/Other"><!--()--></a><a name="Tomcat_6.0.46_(violetagg)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>
427    <table border="0" cellpadding="2" cellspacing="2">
428      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
429        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=58283">58283</a>: Change the default download location for libraries
430        during the build process from <code>/usr/share/java</code> to
431        <code>${user.home}/temp</code>. Patch provided by Ahmed Hosni. (markt)
432      </td></tr>
433      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
434        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=59031">59031</a>: When using the Windows uninstaller, do not remove the
435        contents of any directories that have been symlinked into the Tomcat
436        directory structure. (markt)
437      </td></tr>
438      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
439        Modify the default <code>tomcat-users.xml</code> file to make it harder
440        for users to configure the entries intended for use with the examples
441        web application for the Manager application. (markt)
442      </td></tr>
443      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
444        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=59280">59280</a>: Update the NSIS Installer used to build the
445        Windows Installers to version 2.51. (kkolinko)
446      </td></tr>
447      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
448        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=58626">58626</a>: Add support for a new environment variable
449        (<code>USE_NOHUP</code>) that causes <code>nohup</code> to be used when
450        starting Tomcat. It is disabled by default except on HP-UX where it is
451        enabled by default since it is required when starting Tomcat at boot on
452        HP-UX. (markt)
453      </td></tr>
454      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
455        Use the mirror network rather than the ASF master site to download the
456        current ASF dependencies. (markt)
457      </td></tr>
458      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
459        Update the packaged version of the Tomcat Native Library to 1.2.10 to
460        pick up the latest Windows binaries built with OpenSSL 1.0.2j. (markt)
461      </td></tr>
462    </table>
463  </blockquote></td></tr></table>
464</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.45 (jfclere)"><!--()--></a><a name="Tomcat_6.0.45_(jfclere)"><strong>Tomcat 6.0.45 (jfclere)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2016-02-11</strong></font></td></tr><tr><td colspan="2"><blockquote>
465  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.45 (jfclere)/Catalina"><!--()--></a><a name="Tomcat_6.0.45_(jfclere)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
466    <table border="0" cellpadding="2" cellspacing="2">
467      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
468        Back-port various improvements to the <code>AprLifecycleListener</code>
469        including the fix for <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57021">57021</a> that improves logging when the
470        Tomcat-Native DLL fails to load. (markt)
471      </td></tr>
472      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
473        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57154">57154</a>: Add support for web applications (Context elements)
474        that do not have a docBase. This is intended for use when embedding,
475        such as Tomcat unit tests, when a web application is configured
476        programmatically and does not serve any files. Based on a patch
477        provided by Huxing Zhang. (kkolinko)
478      </td></tr>
479      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
480        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57741">57741</a>: Enable the CGI servlet to use the standard error page
481        mechanism. Note that if the CGI servlet's debug init parameter is
482        set to 10 or higher then the standard error page mechanism will be
483        bypassed and a debug response generated by the CGI servlet will be
484        returned instead. (markt)
485      </td></tr>
486      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
487        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57896">57896</a>: Support defensive copying of "cookie" header so that
488        unescaping double quotes in a cookie value does not corrupt original
489        value of "cookie" header. This is an opt-in feature, enabled by
490        <code>org.apache.tomcat.util.http.ServerCookie.PRESERVE_COOKIE_HEADER</code>
491        or <code>org.apache.catalina.STRICT_SERVLET_COMPLIANCE</code>
492        system property. (kkolinko)
493      </td></tr>
494      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
495        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=58031">58031</a>: Make the (first) reason parameter parsing failed
496        available as a request attribute and then use it to provide a better
497        status code via the FailedRequstFilter (if configured). (markt)
498      </td></tr>
499      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
500        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=58313">58313</a>: Fix concurrent access of encoders map when clearing
501        encoders during Comet processing. (markt)
502      </td></tr>
503      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
504        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=58508">58508</a>: Escape role names when generating associated MBeans in
505        case the role name contains characters not permitted in an MBean name.
506        (markt)
507      </td></tr>
508      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
509        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=58582">58582</a>
509: Combined realm should perform background processing
510        on its sub-realms. Based upon a patch provided by Aidan. (kkolinko)
511      </td></tr>
512      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
513        Move the functionality that provides redirects for context roots and
514        directories where a trailing <code>/</code> is added from the Mapper to
515        the <code>DefaultServlet</code>. This enables such requests to be
516        processed by any configured Valves and Filters before the redirect is
517        made. This behaviour is configurable via the
518        <code>mapperContextRootRedirectEnabled</code> and
519        <code>mapperDirectoryRedirectEnabled</code> attributes of the Context
520        which may be used to restore the previous behaviour. (markt)
521      </td></tr>
522      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
523        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=58635">58635</a>: Enable break points to be set within agent code when
524        running Tomcat with a Java agent. Based on a patch by Huxing Zhang.
525        (markt) 
526      </td></tr>
527      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
528        Add the <code>StatusManagerServlet</code> to the list of Servlets that
529        can only be loaded by privileged applications. (markt)
530      </td></tr>
531      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
532        Remove redundant copy of catalina.properties from o.a.c.startup.
533        Generate this copy during the ant "compile" task. (kkolinko)
534      </td></tr>
535      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
536        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=58817">58817</a>: Fix <code>ArrayIndexOutOfBoundsException</code>
537        caused by <code>MapperListener</code> when ROOT context is being
538        undeployed and mapperContextRootRedirectEnabled="false". (kkolinko)
539      </td></tr>
540      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
541        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=58836">58836</a>: Correctly merge query string parameters when
542        processing a forwarded request where the target includes a query string
543        that contains a parameter with no value. (markt/kkolinko)
544      </td></tr>
545      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
546        Allow singleton server instance stored by <code>ServerFactory</code>
547        to be cleared.
548        Allow <code>ResourceLinkFactory</code> to be initialized more than once.
549        This is used by unit tests when running several copies of Tomcat
550        sequentially in the same JVM.
551        When running with a SecurityManager the initialization method of
552        <code>ResourceLinkFactory</code> is protected by requiring a
553        <code>RuntimePermission</code>. (kkolinko)
554      </td></tr>
555      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
556        Extend the feature available in the cluster session manager
557        implementations that enables session attribute replication to be
558        filtered based on attribute name to all session manager implementations.
559        Note that configuration attribute name has changed from
560        <code>sessionAttributeFilter</code> to
561        <code>sessionAttributeNameFilter</code>. Apply the filter on load as
562        well as unload to ensure that configuration changes made while the web
563        application is stopped are applied to any persisted data. (markt)
564      </td></tr>
565      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
566        Extend the session attribute filtering options to include filtering
567        based on the implementation class of the value and optional
568        <code>WARN</code> level logging if an attribute is filtered. These
569        options are available for all of the Manager implementations that ship
570        with Tomcat. When a <code>SecurityManager</code> is used filtering will
571        be enabled by default. (markt)
572      </td></tr>
573      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
574        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=58946">58946</a>: Ensure that the request parameter map remains
575        immutable when processing via a RequestDispatcher. (markt)
576      </td></tr>
577    </table>
578  </blockquote></td></tr></table>
579  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.45 (jfclere)/Coyote"><!--()--></a><a name="Tomcat_6.0.45_(jfclere)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>
580    <table border="0" cellpadding="2" cellspacing="2">
581      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
582        Align the Java side of the tc-native connector with the Tomcat 7
583        implementation to ease future maintenance. (markt)
584      </td></tr>
585      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
586        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51503">51503</a>: Add additional validation that prevents a connector
587        from starting if it does not have a valid port number. (kkolinko)
588      </td></tr>
589      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
590        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52028">
59052028</a>: Add support for automatic binding to a free port by a
591        connector if the special value of zero is used for the port. This is
592        mainly useful in embedded and testing scenarios. (kkolinko)
593      </td></tr>
594      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
595        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52926">52926</a>: Avoid NPE when an NIO Comet connection times out on
596        one thread at the same time as it is closed on another thread.
597        (markt/kkolinko)
598      </td></tr>
599      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
600        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57943">57943</a>: Prevent the same socket being added to the cache
601        twice. Patch based on analysis by Ian Luo / Sun Qi. (markt/kkolinko)
602      </td></tr>
603      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
604        Improve HTTP header validation. (markt)
605      </td></tr>
606    </table>
607  </blockquote></td></tr></table>
608  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.45 (jfclere)/Jasper"><!--()--></a><a name="Tomcat_6.0.45_(jfclere)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>
609    <table border="0" cellpadding="2" cellspacing="2">
610      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
611        Ignore <code>engineOptionsClass</code> and <code>scratchdir</code> when
612        running under a security manager. (markt)
613      </td></tr>
614    </table>
615  </blockquote></td></tr></table>
616  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.45 (jfclere)/Web applications"><!--()--></a><a name="Tomcat_6.0.45_(jfclere)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>
617    <table border="0" cellpadding="2" cellspacing="2">
618      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
619        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57971">57971</a>: Correct the documentation for the cluster
620        configuration setting <code>recoverySleepTime</code>. (markt)
621      </td></tr>
622      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
623        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=58112">58112</a>: Update the documentation for using the Catalina tasks
624        in an Apache Ant build file. (markt) 
625      </td></tr>
626      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
627        Improve the Javadoc for some of the APR socket read functions that have
628        inconsistent behaviour for return values. (markt)
629      </td></tr>
630      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
631        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=58255">58255</a>: Document the Semaphore valve. Patch provided by
632        Kyohei Nakamura. (markt)
633      </td></tr>
634      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
635        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=58631">58631</a>: Correct the continuation character use in the Windows
636        Service How-To page of the documentation web application. (markt)
637      </td></tr>
638      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
639        Correct some typos in the JNDI resources How-To. (markt)
640      </td></tr>
641      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
642        Add a redirect to the web interface to the root of the Manager web
643        application. (markt)
644      </td></tr>
645      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
646        Don't create sessions unnecessarily in the Manager application. (markt)
647      </td></tr>
648      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
649        Add a redirect to the web interface to the root of the Host Manager web
650        application. (markt)
651      </td></tr>
652      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
653        Don't create sessions unnecessarily in the Host Manager application.
654        (markt)
655      </td></tr>
656    </table>
657  </blockquote></td></tr></table>
658  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.45 (jfclere)/Other"><!--()--></a><a name="Tomcat_6.0.45_(jfclere)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>
659    <table border="0" cellpadding="2" cellspacing="2">
660      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
661        Ensure JULI adapters JAR in Tomcat extras package does not include
662        the LogFactoryImpl[$*] classes. Based on patch provided by
663        Benjamin Gandon. (kkolinko)
664      </td></tr>
665      <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td>
666        Convert test classes to JUnit 4. (kkolinko)
667      </td></tr>
668      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
669        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=58596">58596</a>: Clarify the description in RUNNING.txt of how
670        environment variables are used. (markt)
671      </td></tr>
672      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
673        Update the NSIS Installer used to build the Windows Installer
673s to
674        version 2.50. (markt/kkolinko)
675      </td></tr>
676      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
677        Add framework for client-server unit tests, porting it from
678        Tomcat 7. Add support for running the tests with Apache Ant. (kkolinko)
679      </td></tr>
680      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
681        Update to Tomcat Native Library version 1.1.34. (jfclere)
682      </td></tr>
683      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
684        Remove support for Intel Itanium CPU (i64, IA-64) in the Windows
685        installer, as the current release of Tomcat Native does not have
686        binaries for that processor architecture. (jfclere)
687      </td></tr>
688    </table>
689  </blockquote></td></tr></table>
690</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.44 (jfclere)"><!--()--></a><a name="Tomcat_6.0.44_(jfclere)"><strong>Tomcat 6.0.44 (jfclere)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2015-05-12</strong></font></td></tr><tr><td colspan="2"><blockquote>
691  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.44 (jfclere)/Catalina"><!--()--></a><a name="Tomcat_6.0.44_(jfclere)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
692    <table border="0" cellpadding="2" cellspacing="2">
693      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
694        Correct typo in the message shown by HttpServlet for unexpected
695        HTTP method. (kkolinko)
696      </td></tr>
697      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
698        Allow to configure RemoteAddrValve and RemoteHostValve to
699        adopt behavior depending on the connector port. Implemented
700        by optionally adding the connector port to the string compared
701        with the patterns <code>allow</code> and <code>deny</code>. Configured
702        using <code>addConnectorPort</code> attribute on valve. (rjung)
703      </td></tr>
704      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
705        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56608">56608</a>: Fix IllegalStateException for JavaScript files when
706        switching from Writer to OutputStream. The special handling of this case
707        in the DefaultServlet was broken due to a MIME type change for
708        JavaScript. (markt)
709      </td></tr>
710      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
711        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57675">57675</a>: Correctly quote strings when using the extended
712        access log. (markt)
713      </td></tr>
714    </table>
715  </blockquote></td></tr></table>
716  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.44 (jfclere)/Coyote"><!--()--></a><a name="Tomcat_6.0.44_(jfclere)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>
717    <table border="0" cellpadding="2" cellspacing="2">
718      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
719        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57234">57234</a>: Make SSL protocol filtering to remove insecure
720        protocols case insensitive. Correct spelling of
721        filterInsecureProtocols method. (kkolinko/schultz)
722      </td></tr>
723      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
724        CVE-2014-0230: Add a new system property
725        <code>org.apache.coyote.MAX_SWALLOW_SIZE</code> (defaults to 2MB)
726        that limits amount of data Tomcat will swallow if request body
727        has not been fully read during normal request processing, e.g.
728        for an aborted upload. (Note: in Tomcat 7 and later this feature is
729        configured by <code>maxSwallowSize</code> attribute on a connector).
730        When applying the limit to a connection try to read that many bytes
731        first before closing the connection to give the client a chance to
732        read the response.
733        (markt)
734      </td></tr>
735      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
736        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57544">57544</a>: Fix a potential infinite loop when preparing a kept
737        alive HTTP connection for the next request. (markt)
738      </td></tr>
739      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
740        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57570">57570</a>: Make the processing of chunked encoding trailing
741        headers optional and disabled by default. (markt)
742      </td></tr>
743      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
744        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57581">57581</a>: Change statistics byte counter in coyote Request
745        object to be long to allow values above 2Gb. (kkolinko)
746      </td></tr>
747      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
748        Update the minimum recommended version of the Tomcat Native library (if
749        used) to 1.1.33. (markt)
750      </td></tr>
751    </table>
752  </blockquote></td></tr></table>
753  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.44 (jfclere)/Jasper"><!--()--></a><a name="Tomcat_6.0.44_(jfclere)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>
754    <table border="0" cellpadding="2" cellspacing="2">
755      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
756        CVE-2014-7810:
757        Do not use a privileged code block when evaluating EL expressions
758        when running under a security manager, which allowed to bypass code
759        restrictions. (markt/kkolinko)
760      </td></tr>
761      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
762        Fix an issue with BeanELResolver when running under a security
763        manager. Some classes may not be accessible but may have accessible
764        interfaces. (markt)
765      </td></tr>
766      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
767        Simplify code in <code>ProtectedFunctionMapper</code> class of
768        Jasper runtime. (kkolinko)
769      </td></tr>
770    </table>
771  </blockquote></td></tr></table>
772  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.44 (jfclere)/Web applications"><!--()--></a><a name="Tomcat_6.0.44_(jfclere)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>
773    <table border="0" cellpadding="2" cellspacing="2">
774      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
775        Update documentation for CGI servlet. Recommend to copy the servlet
776        declaration into web application instead of enabling it globally.
777        Correct documentation for cgiPathPrefix. (kkolinko)
778      </td></tr>
779      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
780        Improve Tomcat Manager documentation. Rearrange, add section on
781        HTML GUI, document /expire command and Server Status page. (kkolinko)
782      </td></tr>
783      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
784        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=54143">54143</a>: Add display of the memory pools usage (including
785        PermGen) to the Status page of the Manager web application. (kkolinko)
786      </td></tr>
787      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
788        Fix several issues with <code>status.xsd</code> schema in Manager web
789        application, testing it against actual output of StatusTransformer
790        class. (kkolinko)
791      </td></tr>
792      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
793        Align algorithm that generates anchor names in Tomcat documentation
794        with Tomcat 7/8/9. No visible changes, but may help with future
795        updates to the documentation. (kkolinko)
796      </td></tr>
797      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
798        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56058">56058</a>: Add links to the AccessLogValve documentation for
799        configuring reverse proxies and/or Tomcat to ensure that the desired
800        information is used entered in the access log when Tomcat is running
801        behind a reverse proxy. (markt)
802      </td></tr>
803      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
804        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57503">57503</a>: Make clear that the JULI integration for log4j only
805        works with log4j 1.2.x. (markt)
806      </td></tr>
807      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
808        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57644">57644</a>: Update examples to use Apache Standard Taglib 1.2.5.
809        (jboynes/kkolinko)
810      </td></tr>
811      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
812        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57706">57706</a>: Clarify the documentation for the AJP connector to
813        make clearer that when using
814        <code>tomcatAuthentication="false"</code> the user provided by
815        the reverse proxy will not be associated with any roles. (markt)
816      </td></tr>
817      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
818        Correct the documentation for deployOnStartup to make clear that if a
819        WAR file is updated while Tomcat is stopped and unpackWARs is true,
820        Tomcat will not detect the changed WAR file when it starts and will not
821        replace the unpacked WAR file with the contents of the updated WAR.
822        (markt)
823      </td></tr>
824      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
825        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57759">57759</a>: Add information to the keyAlias documentation to make
826        it clear that the order keys are read from the keystore is
827        implementation dependent. (markt)
828      </td></tr>
829      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
830        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57864">57864</a>: Update the documentation web application to make it
831        clearer that hex values are not valid for cluster send options. Based on
832        a patch by Kyohei Nakamura. (markt)
833      </td></tr>
834    </table>
835  </blockquote></td></tr></table>
836  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.44 (jfclere)/Other"><!--()--></a><a name="Tomcat_6.0.44_(jfclere)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>
837    <table border="0" cellpadding="2" cellspacing="2">
838      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
839        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57344">57344</a>: Provide sha1 checksum files for Tomcat downloads.
840        (kkolinko)
841      </td></tr>
842      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
843        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57558">57558</a>: Change <code>catalina-tasks.xml</code> to use all
844        jars in <code>${catalina.home}/lib</code> to define Tomcat Ant
845        tasks. This fixes a NoClassDefFoundError with <code>validate</code>
846        task. (kkolinko)
847      </td></tr>
848      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
849        Update to Tomcat Native Library version 1.1.33 to pick up the Windows
850        binaries that are based on OpenSSL 1.0.1m and APR 1.5.1. (markt)
851      </td></tr>
852      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
853        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57801">57801</a>: Improve the error message in the start script in case
854        the PID read from the PID file is already owned by a process. (rjung)
855      </td></tr>
856    </table>
857  </blockquote></td></tr></table>
858</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.43 (markt)"><!--()--></a><a name="Tomcat_6.0.43_(markt)"><strong>Tomcat 6.0.43 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2014-11-22</strong></font></td></tr><tr><td colspan="2"><blockquote>
859  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.43 (markt)/Catalina"><!--()--></a><a name="Tomcat_6.0.43_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
860    <table border="0" cellpadding="2" cellspacing="2">
861      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
862        Assert that mapping result object is empty before performing mapping
863        work in <code>Mapper</code>. (kkolinko)
864      </td></tr>
865    </table>
866  </blockquote></td></tr></table>
867  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.43 (markt)/Coyote"><!--()--></a><a name="Tomcat_6.0.43_(markt)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>
868    <table border="0" cellpadding="2" cellspacing="2">
869      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
870        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53952">53952</a>: Add support for TLSv1.1 and TLSv1.2 for APR connector.
871        Based upon a patch by Marcel &#352;ebek. (schultz/jfclere)
872      </td></tr>
873      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
874        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56780">56780</a>: Enable Tomcat to start when using SSL with an IBM JRE
875        in strict SP800-131a mode. (markt/kkolinko) 
876      </td></tr>
877      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
878        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57102">57102</a>: Fix bug that meant sslEnabledProtocols setting was not
879        recognised for the HTTPS NIO connector. (markt)
880      </td></tr>
881      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
882        Disable SSLv3 by default for the APR/native HTTPS connector.
883        (markt/schultz)
884      </td></tr>
885      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
886        Do not increase remaining counter at end of stream in
887        IdentityInputFilter. (kkolinko)
888      </td></tr>
889      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
890        Disable SSLv3 by default (along with SSLv2 which was already disabled
891        by default) in light of the recently announced POODLE vulnerability
892        (CVE-2014-3566). (markt)
893      </td></tr>
894      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
895        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57116">57116</a>: Do not fallback to default protocol list for HTTPS BIO
896        connector if <code>sslEnabledProtocols</code> has no matches. (markt)
897      </td></tr>
898      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
899        Align calculation of default ciphers and default protocols for JSSE
900        HTTPS connectors with Tomcat 7 which allows for per connector defaults
901        based on the choice of <code>sslProtocol</code>. (markt/kkolinko)
902      </td></tr>
903      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
904        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=57703">57703</a>: Update the <code>http-method</code> definition for
905        web applications using a Servlet 2.5 descriptor as per Servlet 2.5 MR 6.
906        (markt)
907      </td></tr>
908    </table>
909  </blockquote></td></tr></table>
910  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.43 (markt)/Web applications"><!--()--></a><a name="Tomcat_6.0.43_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>
911    <table border="0" cellpadding="2" cellspacing="2">
912      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
913        Configure the Javadoc tool to read sources as ISO-8859-1, suppress
914        timestamp comments and enable charset header. (kkolinko)
915      </td></tr>
916      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
917        Correct typos in configuration samples on SSL Configuration page
918        of Tomcat documentation. (kkolinko)
919      </td></tr>
920    </table>
921  </blockquote></td></tr></table>
922  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.43 (markt)/Other"><!--()--></a><a name="Tomcat_6.0.43_(markt)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>
923    <table border="0" cellpadding="2" cellspacing="2">
924      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
925        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56079">56079</a>: The Apache Tomcat Windows service and the Apache
926        Tomcat Windows service monitor application are now digitally
927        signed. (markt/kkolinko)
928      </td></tr>
929      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
930        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56988">56988</a>: Allow to use relative path in <code>base.path</code>
931        setting when building Tomcat. (kkolinko)
932      </td></tr>
933      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
934        Update documentation: the minimum version of Apache Ant required to
935        build Tomcat is 1.8.0. (kkolinko)
936      </td></tr>
937      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
938        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56596">56596</a>: Update to Tomcat Native Library version 1.1.32 to
939        pick up the Windows binaries that are based on OpenSSL 1.0.1j and APR
940        1.5.1. (markt)
941      </td></tr>
942      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
943        Fix timestamps in Tomcat build to use 24-hour instead of 12-hour format
944        and use UTC timezone. (kkolinko)
945      </td></tr>
946    </table>
947  </blockquote></td></tr></table>
948</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.42 (jfclere)"><!--()--></a><a name="Tomcat_6.0.42_(jfclere)"><strong>Tomcat 6.0.42 (jfclere)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote>
949  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.42 (jfclere)/Catalina"><!--()--></a><a name="Tomcat_6.0.42_(jfclere)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
950    <table border="0" cellpadding="2" cellspacing="2">
951      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
952        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56600">56600</a>: In WebdavServlet: Do not waste time generating
953        response for broken PROPFIND request. (kkolinko)
954      </td></tr>
955      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
956       <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56648">56648</a>: Reduce scope of synchronization when adding children to
957       a container (e.g. adding a Context to a Host) to prevent blocking
958       requests to other children while the new child starts. (markt)
959      </td></tr>
960      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
961        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56684">56684</a>: Ensure that Tomcat does not shut down if the socket
962        waiting for the shutdown command experiences a
963        <code>SocketTimeoutException</code>. (markt)
964      </td></tr>
965    </table>
966  </blockquote></td></tr></table>
967  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.42 (jfclere)/Coyote"><!--()--></a><a name="Tomcat_6.0.42_(jfclere)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>
968    <table border="0" cellpadding="2" cellspacing="2">
969      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
970        Fix CVE-2014-0227:
971        Various improvements to ChunkedInputFilter including clean-up, i18n for
972        error messages and adding an error flag to allow subsequent attempts at
973        reading after an error to fail fast. (markt)
974      </td></tr>
975      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
976        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56661">56661</a>:  Support using AJP request attribute
977        <code>AJP_LOCAL_ADDR</code> to fix <code>getLocalAddr()</code>. (rjung)
978      </td></tr>
979    </table>
980  </blockquote></td></tr></table>
981  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.42 (jfclere)/Jasper"><!--()--></a><a name="Tomcat_6.0.42_(jfclere)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>
982    <table border="0" cellpadding="2" cellspacing="2">
983      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
984        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43001">43001</a>: Enable the JspC Ant task to set the JspC option
985        <code>mappedFile</code>. (kkolinko)
986      </td></tr>
987      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
988        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56334">56334</a>: Fix a regression in EL parsing when quoted string
989        follows a whitespace. (markt)
990      </td></tr>
991      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
992        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56560">56560</a>: Fix NoClassDefFoundError when using Jasper Ant task
993        defined by <code>catalina-tasks.xml</code> file. Patch provided by
994        M Gemmell. (kkolinko)
995      </td></tr>
996      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
997        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56561">56561</a>: Avoid <code>NoSuchElementException</code> while
998        handling attributes with empty string value. (violetagg)
999      </td></tr>
1000      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1001        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56612">56612</a>: Correctly parse consecutive escaped single quotes when
1002        used in an EL expression. (markt)
1003      </td></tr>
1004      <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td>
1005        Use <code>if { ... } else if { ... }</code> rather than multiple
1006        <code>if { ... }</code> for alternative branches in the JSP parser.
1007        (kkolinko)
1008      </td></tr>
1009      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1010        Fix a potential resource leak in JDTCompiler when checking whether
1011        a resource is a package. Reported by Coverity Scan. (fschumacher)
1012      </td></tr>
1013    </table>
1014  </blockquote></td></tr></table>
1015  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.42 (jfclere)/Other"><!--()--></a><a name="Tomcat_6.0.42_(jfclere)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>
1016    <table border="0" cellpadding="2" cellspacing="2">
1017      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1018        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56606">56606</a>: When creating <code>tomcat-users.xml</code> in the
1019        Windows Installer, use the new attribute name for the name of the user.
1020        (markt)
1021      </td></tr>
1022      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
1023        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56829">56829</a>: Add the ability for users to define their own values
1024        for <code>_RUNJAVA</code> and <code>_RUNJDB</code> environment
1025        variables. Be more strict with executable filename on Windows
1026        (s/java/java.exe/). Based on a patch by Neeme Praks. (markt/kkolinko)
1027      </td></tr>
1028      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1029        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56608">56608</a>: When deploying an external WAR, add watched resources
1030        in the expanded directory based on whether the expanded directory is
1031        expected to exist rather than if it does exist.
1032      </td></tr>
1033      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1034         When triggering a reload due to a modified watched resource, ensure
1035         that multiple changed watched resources only trigger one reload rather
1036         than a series of reloads.
1037      </td></tr>
1038    </table>
1039  </blockquote></td></tr></table>
1040</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.41 (markt)"><!--()--></a><a name="Tomcat_6.0.41_(markt)"><strong>Tomcat 6.0.41 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2014-05-23</strong></font></td></tr><tr><td colspan="2"><blockquote>
1041  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.41 (markt)/Jasper"><!--()--></a><a name="Tomcat_6.0.41_(markt)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>
1042    <table border="0" cellpadding="2" cellspacing="2">
1043      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1044        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56529">56529</a>: Avoid <code>NoSuchElementException</code> while handling
1045        attributes with empty string value in custom tags. Based on a patch
1046        provided by Hariprasad Manchi. (violetagg/kkolinko)
1047      </td></tr>
1048    </table>
1049  </blockquote></td></tr></table>
1050</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.40 (markt)"><!--()--></a><a name="Tomcat_6.0.40_(markt)"><strong>Tomcat 6.0.40 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote>
1051  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.40 (markt)/Catalina"><!--()--></a><a name="Tomcat_6.0.40_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
1052    <table border="0" cellpadding="2" cellspacing="2">
1053      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1054        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56027">56027</a>: Add more options for managing FIPS mode in the
1055        AprLifecycleListener. (schultz/kkolinko)
1056      </td></tr>
1057      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1058        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56082">56082</a>: Fix a concurrency bug in JULI's LogManager
1059        implementation. (markt)
1060      </td></tr>
1061      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1062        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56236">56236</a>: Enable Tomcat to work with alternative Servlet and
1063        JSP API JARs that package the XML schemas in such as way as to require
1064        a dependency on the JSP API before enabling validation for web.xml.
1065        Tomcat has no such dependency. (markt)
1066      </td></tr>
1067      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1068        Change the default value of the <code>xmlBlockExternal</code> attribute
1069        of Context elements. It is now <code>true</code>. (kkolinko) 
1070      </td></tr>
1071      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1072        Don't log to standard out in SSLValve. (kkolinko/markt)
1073      </td></tr>
1074      <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td>
1075        Use StringBuilder in DefaultServlet. (kkolinko)
1076      </td></tr>
1077      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1078        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56275">56275</a>: Allow web applications to be stopped cleanly even if
1079        filters throw exceptions when their destroy() method is called.
1080        (markt/kkolinko)
1081      </td></tr>
1082      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1083        Fix CVE-2014-0096:
1084        Redefine the <code>globalXsltFile</code> initialisation parameter of the
1085        DefaultServlet as relative to CATALINA_BASE/conf or CATALINA_HOME/conf.
1086        Prevent user supplied XSLTs used by the DefaultServlet from defining
1087        external entities. (markt)
1088      </td></tr>
1089      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1090        Add a work around for validating XML documents (often TLDs) that use
1091        just the file name to refer to refer to the JavaEE schema on which they
1092        are based. (kkolinko)
1093      </td></tr>
1094      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1095        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56369">56369</a>: Ensure that removing an MBean notification listener
1096        reverts all the operations performed when adding an MBean notification
1097        listener. (markt)
1098      </td></tr>
1099      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1100        Fix CVE-2014-0119:
1101        Only create XML parsing objects if required and fix associated potential
1102        memory leak in the default Servlet.
1103        Ensure that a TLD parser obtained from the cache has the correct value
1104        of <code>blockExternal</code>.
1105        Extend XML factory, parser etc. memory leak protection to cover some
1106        additional locations where, theoretically, a memory leak could occur.
1107        (markt/kkolinko)
1108      </td></tr>
1109      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
1110        Add the <code>org.apache.naming</code> package to the packages requiring
1111        code to have the <code>defineClassInPackage</code> permission when
1112        running under a security manager. (markt)
1113      </td></tr>
1114      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
1115        Add the <code>org.apache.naming.resources</code> package to the packages
1116        requiring code to have the <code>accessClassInPackage</code> permission
1117        when running under a security manager. (markt)
1118      </td></tr>
1119      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1120        Make the naming context tokens for containers more robust. Require
1121        RuntimePermission when introducing a new token. (markt/kkolinko)
1122      </td></tr>
1123    </table>
1124  </blockquote></td></tr></table>
1125  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.40 (markt)/Coyote"><!--()--></a><a name="Tomcat_6.0.40_(markt)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>
1126    <table border="0" cellpadding="2" cellspacing="2">
1127      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1128        Fix CVE-2014-0075:
1129        Improve processing of chuck size from chunked headers. Avoid overflow
1130        and use a bit shift instead of a multiplication as it is marginally
1131        faster. (markt/kkolinko)
1132      </td></tr>
1133      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1134        Fix CVE-2014-0099:
1135        Fix possible overflow when parsing long values from a byte array.
1136        (markt)
1137      </td></tr>
1138      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
1139        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56363">56363</a>: Update to version 1.1.30 of Tomcat Native library.
1140        The minimum required version of this library for APR connector is now
1141        1.1.30. (kkolinko)
1142      </td></tr>
1143    </table>
1144  </blockquote></td></tr></table>
1145  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.40 (markt)/Jasper"><!--()--></a><a name="Tomcat_6.0.40_(markt)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>
1146    <table border="0" cellpadding="2" cellspacing="2">
1147      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1148        Change the default behaviour of JspC to block XML external entities by
1149        default. (kkolinko) 
1150      </td></tr>
1151      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1152        Restore the validateXml option to Jasper that was previously renamed
1153        validateTld. Both options are now supported. validateXml controls the
1154        validation of web.xml files when Jasper parses them and validateTld
1155        controls the validation of *.tld files when Jasper parses them. (markt)
1156      </td></tr>
1157      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1158        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=54475">54475</a>: Add Java 8 support to SMAP generation for JSPs. Patch
1159        by Robbie Gibson. (markt)
1160      </td></tr>
1161      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1162        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56010">56010</a>: Don't throw an
1163        <code>IllegalArgumentException</code> when
1164        <code>JspFactory.getPageContext</code> is used with
1165        <code>JspWriter.DEFAULT_BUFFER</code>. Based on a patch by Eugene Chung.
1166        (markt)
1167      </td></tr>
1168      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1169        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56265">56265</a>: Do not escape values of dynamic tag attributes
1170        containing EL expressions. (kkolinko)
1171      </td></tr>
1172      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1173        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56283">56283</a>: Add support for running Tomcat 6 with
1174        ecj-P20140317-1600.jar (as drop-in replacement for ecj-4.3.1.jar). Add
1175        support for value "1.8" for the <code>compilerSourceVM</code> and
1176        <code>compilerTargetVM</code> options. Note that ecj-P20140317-1600.jar
1177        can only be used when running with Java 6 or later. The "1.8" options
1178        make sense only when running with Java 8 (or later). (kkolinko)
1179      </td></tr>
1180      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1181        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56334">56334</a>: Fix a regression in the handling of back-slash
1182        escaping introduced by the fix for <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=55735">55735</a>. (markt/kkolinko)
1183      </td></tr>
1184      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1185        Correct the handling of back-slash escaping in the EL parser and no
1186        longer require that <code>\$</code> or <code>\#</code> must be followed
1187        by <code>{</code> in order for the back-slash escaping to take effect.
1188        (markt)
1189      </td></tr>
1190    </table>
1191  </blockquote></td></tr></table>
1192  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.40 (markt)/Cluster"><!--()--></a><a name="Tomcat_6.0.40_(markt)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>
1193    <table border="0" cellpadding="2" cellspacing="2">
1194      <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td>
1195        Refactor <code>AbstractReplicatedMap</code> and related classes to
1196        enable Tomcat 6 to be compiled using Java 8. (markt)
1197      </td></tr>
1198    </table>
1199  </blockquote></td></tr></table>
1200  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.40 (markt)/Web applications"><!--()--></a><a name="Tomcat_6.0.40_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>
1201    <table border="0" cellpadding="2" cellspacing="2">
1202      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
1203        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56093">56093</a>: Documentation for SSLValve. (markt/kkolinko)
1204      </td></tr>
1205      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1206        Correct documentation on Windows service options, aligning it with
1207        Apache Commons Daemon documentation. (kkolinko)
1208      </td></tr>
1209      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
1210        Add support for <code>version-major</code>,
1211        <code>version-major-minor</code> tags in documentation XSLT, to simplify
1212        documentation backports. (kkolinko)
1213      </td></tr>
1214      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1215        Fix target and rel attributes on links in documentation. They were
1216        lost during XSLT transformation. (kkolinko)
1217      </td></tr>
1218    </table>
1219  </blockquote></td></tr></table>
1220  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.40 (markt)/Other"><!--()--></a><a name="Tomcat_6.0.40_(markt)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>
1221    <table border="0" cellpadding="2" cellspacing="2">
1222      <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td>
1223        Remove svn keywords (such as $Id) from source files and documentation.
1224        (kkolinko)
1225      </td></tr>
1226      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
1227        Improvements to the Windows installer, to align it with installing
1228        the service with <code>service.bat</code>. Use explicit memory sizes
1229        (--JvmMs 128 Mb and --JvmMx 256 Mb). Specify log directory path
1230        when ininstalling, so that the log file is written to the Tomcat logs
1231        directory, instead of "%SystemRoot%\System32\LogFiles\Apache".
1232        (kkolinko)
1233      </td></tr>
1234      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
1235        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49993">49993</a>, <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56143">56143</a>: Improve <code>service.bat</code>
1236        script. Allow it to be launched from non-UAC console. The UAC prompt
1237        will be shown only once. Now there is no need to run the command shell
1238        with elevated privileges. Improve check for <code>JAVA_HOME</code>
1239        and add support for <code>JRE_HOME</code>. Warn if neither "client"
1240        nor "server" JVM is found. Align classpath, display name and other
1241        options with the <code>exe</code> installer. Make command names
1242        case-insensitive. Update documentation. (kkolinko)
1243      </td></tr>
1244    </table>
1245  </blockquote></td></tr></table>
1246</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.39 (markt)"><!--()--></a><a name="Tomcat_6.0.39_(markt)"><strong>Tomcat 6.0.39 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2014-01-31</strong></font></td></tr><tr><td colspan="2"><blockquote>
1247  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.39 (markt)/Catalina"><!--()--></a><a name="Tomcat_6.0.39_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
1248    <table border="0" cellpadding="2" cellspacing="2">
1249      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1250        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=55166">55166</a>: Fix regression that broke XML validation when running
1251        on some Java 5 JVMs. (kkolinko)
1252      </td></tr>
1253    </table>
1254  </blockquote></td></tr></table>
1255  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.39 (markt)/Coyote"><!--()--></a><a name="Tomcat_6.0.39_(markt)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>
1256    <table border="0" cellpadding="2" cellspacing="2">
1257      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1258        Make the HTTP NIO connector tolerant of whitespace in the individual
1259        values used for the ciphers attribute. (markt)
1260      </td></tr>
1261      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1262        Remove dependency introduced on the jsp-api.jar as part of the XML
1263        validation changes introduced in 6.0.38. (markt)
1264      </td></tr>
1265    </table>
1266  </blockquote></td></tr></table>
1267  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.39 (markt)/Jasper"><!--()--></a><a name="Tomcat_6.0.39_(markt)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>
1268    <table border="0" cellpadding="2" cellspacing="2">
1269      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1270        Correct several errors in jspxml Schema and DTD. (kkolinko)
1271      </td></tr>
1272    </table>
1273  </blockquote></td></tr></table>
1274  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.39 (markt)/Cluster"><!--()--></a><a name="Tomcat_6.0.39_(markt)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>
1275    <table border="0" cellpadding="2" cellspacing="2">
1276      <tr><td><img alt="code" class="icon" src="./images/code.gif"></td><td>
1277        Remove an empty TestTwoPhaseCommit test from Tribes. (kkolinko)
1278      </td></tr>
1279    </table>
1280  </blockquote></td></tr></table>
1281  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.39 (markt)/Web applications"><!--()--></a><a name="Tomcat_6.0.39_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>
1282    <table border="0" cellpadding="2" cellspacing="2">
1283      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1284        Fix broken link in Jasper How-To documentation. (markt)
1285      </td></tr>
1286      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1287        Align index.html and index.jsp in ROOT web application. Correct links
1288        to specifications and to the Tomcat mailing lists. (kkolinko)
1289      </td></tr>
1290      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1291        Remove second copy of RUNNING.txt from the full-docs distribution. Some
1292        unpacking utilities can't handle multiple copies of a file with the same
1293        name in a directory. (kkolinko)
1294      </td></tr>
1295    </table>
1296  </blockquote></td></tr></table>
1297  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.39 (markt)/Other"><!--()--></a><a name="Tomcat_6.0.39_(markt)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>
1298    <table border="0" cellpadding="2" cellspacing="2">
1299      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
1300        Update sample Eclipse IDE project: use JUnit 4 library and prefer a
1301        Java 5 JDK when several JDKs are configured. Cleanup the Ant build
1302        files. (kkolinko)
1303      </td></tr>
1304      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1305        Correct Maven dependencies for individual JAR files. (markt)
1306      </td></tr>
1307    </table>
1308  </blockquote></td></tr></table>
1309</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.38 (markt)"><!--()--></a><a name="Tomcat_6.0.38_(markt)"><strong>Tomcat 6.0.38 (markt)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote>
1310  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.38 (markt)/Catalina"><!--()--></a><a name="Tomcat_6.0.38_(markt)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
1311    <table border="0" cellpadding="2" cellspacing="2">
1312      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1313        Ensure that when Tomcat's anti-resource locking features are used
1314        that the temporary copy of the web application and not the original is
1315        removed when the web application stops. (markt/kkolinko) 
1316      </td></tr>
1317      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1318        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=55019">55019</a>: Fix a potential exception when accessing JSPs while
1319        running under a SecurityManager. (jfclere)
1320      </td></tr>
1321      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1322        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=55052">55052</a>: Make JULI's LogManager to additionally look for
1323        logging properties without prefixes if the property cannot be found with
1324        a prefix. (kkolinko)
1325      </td></tr>
1326      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1327        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=55266">55266</a>: Ensure that the session ID is parsed from the request
1328        before any redirect as the session ID may need to be encoded as part of
1329        the redirect URL. (markt)
1330      </td></tr>
1331      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1332        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=55404">55404</a>: Log warnings about using security roles in web.xml as
1333        warnings. (markt)
1334      </td></tr>
1335      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1336        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=55268">55268</a>: Added optional --service-start-wait-time
1337        command-line option to change service start wait time from default
1338        of 10 seconds. (schultz)
1339      </td></tr>
1340      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1341        Correctly associate the default resource bundle with the English locale
1342        so that requests that specify an Accept-Language of English ahead of
1343        French, Spanish or Japanese get the English messages they asked for.
1344        (markt) 
1345      </td></tr>
1346      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1347        Add missing JavaEE 5 XML schema definitions. (markt)
1348      </td></tr>
1349      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1350        When Catalina parses TLD files, always use a namespace aware parser to
1351        be consistent with how Jasper parses TLD files. The
1352        <code>tldNamespaceAware</code> attribute of the Context is now ignored.
1353        (markt)
1354      </td></tr>
1355      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1356        As per section SRV.14.4.3 of the Servlet 2.5 specification, a namespace
1357        aware, validating parser will be used when processing <code>*.tld</code>
1358        and <code>web.xml</code> files if the system property
1359        <code>org.apache.catalina.STRICT_SERVLET_COMPLIANCE</code> is set to
1360        <code>true</code>. (markt)
1361      </td></tr>
1362      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1363        Fix CVE-2014-0033:
1364        Ensure that sessions IDs are not parsed from URLs for Contexts where
1365        <code>disableURLRewriting</code> is <code>true</code>. (markt)
1366      </td></tr>
1366
1367      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
1368        Fix CVE-2013-4590:
1369        Add an option to the Context to control the blocking of XML external
1370        entities when parsing XML configuration files and enable this blocking
1371        by default when a security manager is used. The block is implemented via
1372        a custom resolver to enable the logging of any blocked entities. (markt)
1373      </td></tr>
1374      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1375        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=56016">56016</a>: When loading resources for XML schema validation, take
1376        account of the possibility that servlet-api.jar and jsp-api.jar may not
1377        be loaded by the same class loader. Patch by Juan Carlos Estibariz.
1378        (markt)
1379      </td></tr>
1380    </table>
1381  </blockquote></td></tr></table>
1382  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.38 (markt)/Coyote"><!--()--></a><a name="Tomcat_6.0.38_(markt)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>
1383    <table border="0" cellpadding="2" cellspacing="2">
1384      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1385        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52811">52811</a>: Fix parsing of Content-Type header in
1386        <code>HttpServletResponse.setContentType()</code>. Introduces a new HTTP
1387        header parser that follows RFC2616. (markt)
1388      </td></tr>
1389      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1390        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=54691">54691</a>: Add configuration attribute "sslEnabledProtocols"
1391        to HTTP connector and document it. (Internally this attribute has
1392        been already implemented but not documented, under names "protocols"
1393        and "sslProtocols". Those names of this attribute are now deprecated).
1394        (schultz)
1395      </td></tr>
1396      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1397        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=54947">54947</a>: Fix the HTTP NIO connector that incorrectly rejected a
1398        request if the CRLF terminating the request line was split across
1399        multiple packets. Patch by Konstantin Prei&szlig;er. (markt)
1400      </td></tr>
1401      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1402        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=55228">55228</a>: Allow web applications to set a HTTP Date header.
1403        (markt)
1404      </td></tr>
1405      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1406        Fix CVE-2013-4286:
1407        Better adherence to RFC2616 for content-length headers. (markt)
1408      </td></tr>
1409      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1410        Fix CVE-2013-4322: Add support for limiting the size of chunk extensions
1411        when using chunked encoding. (markt)
1412      </td></tr>
1413      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1414        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=55749">55749</a>: Improve the error message when SSLEngine is disabled
1415        in the AprLifecycleListener and SSL is configured for an APR/native
1416        connector. (markt)
1417      </td></tr>
1418      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1419        Avoid possible NPE if a content type is specified without a character set.
1420        (markt)
1421      </td></tr>
1422    </table>
1423  </blockquote></td></tr></table>
1424  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.38 (markt)/Jasper"><!--()--></a><a name="Tomcat_6.0.38_(markt)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>
1425    <table border="0" cellpadding="2" cellspacing="2">
1426      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1427        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=55198">55198</a>: Ensure attribute values in tagx files that include EL
1428        and quoted XML characters are correctly quoted in the output. (markt)
1429      </td></tr>
1430      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1431        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=55671">55671</a>: Consistently use the configuration option name
1432        <code>genStringAsCharArray</code> rather than a mixture of
1433        <code>genStrAsCharArray</code> and <code>genStringAsCharArray</code> but
1434        retain support for <code>genStrAsCharArray</code> as in initialisation
1435        parameter for the JSP servlet to retain backwards compatibility with
1436        existing configurations. (markt)
1437      </td></tr>
1438      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1439        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=55691">55691</a>: Fix <code>javax.el.ArrayELResolver</code> to correctly
1440        handle the case where the base object is an array of primitives. (markt)
1441      </td></tr>
1442      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1443        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=55973">55973</a>: Fix processing of XML schemas when validation is
1444        enabled in Jasper. (kkolinko)
1445      </td></tr>
1446    </table>
1447  </blockquote></td></tr></table>
1448  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.38 (markt)/Web applications"><!--()--></a><a name="Tomcat_6.0.38_(markt)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>
1449    <table border="0" cellpadding="2" cellspacing="2">
1450      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
1451        Add documentation for
1452        <code>o.a.c.tribes.group.interceptors.TcpFailureDetector</code>.
1453        (kfujino)
1454      </td></tr>
1455      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
1456        Complete the documentation for
1457        <code>
1457MessageDispatch15Interceptor</code>. (kfujino)
1458      </td></tr>
1459      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
1460        Add to cluster document a description of
1461        <code>notifyLifecycleListenerOnFailure</code> and
1462        <code>heartbeatBackgroundEnabled</code>. (kfujino)
1463      </td></tr>
1464      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1465        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=55746">55746</a>: Add documentation on the <code>allRolesMode</code> to
1466        the <code>CombinedRealm</code> and <code>LockOutRealm</code>. Patch by
1467        C&eacute;dric Couralet. (markt)
1468      </td></tr>
1469      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1470        Fix the sample configuration of <code>StaticMembershipInterceptor</code>
1471        in order to prevent warning log. uniqueId must be 16 bytes. (kfujino)
1472      </td></tr>
1473      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1474        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=55119">55119</a>: Avoid CVE-2013-1571 when generating Javadoc. (markt)
1475      </td></tr>
1476    </table>
1477  </blockquote></td></tr></table>
1478  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.38 (markt)/Other"><!--()--></a><a name="Tomcat_6.0.38_(markt)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>
1479    <table border="0" cellpadding="2" cellspacing="2">
1480      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
1481        Update Maven Central location used to download dependencies at build
1482        time to be <code>repo.maven.apache.org</code>. (kkolinko)
1483      </td></tr>
1484      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1485        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=55663">55663</a>: Minor correction to the wording of the NOTICE files to
1486        align them with the
1487        <a href="http://www.apache.org/legal/src-headers.html#notice">requirements
1488        for NOTICE files</a>. (violetagg)
1489      </td></tr>
1490      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1491        Add <code>@since</code> markers to the common annotations classes and
1492        fix a few specification compliance issues. (markt)
1493      </td></tr>
1494      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
1495        Update to Eclipse JDT Compiler 4.3.1. (markt)
1496      </td></tr>
1497      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
1498        Update the Apache Jakarta JSTL implementation used by the examples web
1499        application to 1.1.2. (markt)
1500      </td></tr>
1501    </table>
1502  </blockquote></td></tr></table>
1503</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.37 (jfclere)"><!--()--></a><a name="Tomcat_6.0.37_(jfclere)"><strong>Tomcat 6.0.37 (jfclere)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2013-05-03</strong></font></td></tr><tr><td colspan="2"><blockquote>
1504  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.37 (jfclere)/Catalina"><!--()--></a><a name="Tomcat_6.0.37_(jfclere)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
1505    <table border="0" cellpadding="2" cellspacing="2">
1506      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1507        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52055">52055</a>: Ensure that filters are recycled. (markt/kkolinko)
1508      </td></tr>
1509      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1510        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52184">52184</a>: Reduce log level for invalid cookies. (markt)
1511      </td></tr>
1512      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1513        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53481">53481</a>
1513: Added support for SSLHonorCipherOrder to allow
1514        the server to impose its cipher order on the client. Based on a patch
1515        provided by Marcel &#352;ebek. (schultz)
1516      </td></tr>
1517      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1518        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=54044">54044</a>: Correct bug in timestamp cache used by logging
1519        (including the access log valve) that meant entries could be made with
1520        an earlier timestamp than the true timestamp. (markt) 
1521      </td></tr>
1522      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1523        Fix CVE-2013-2067:
1524        In FormAuthenticator: If it is configured to change Session IDs,
1525        do the change before displaying the login form. (kkolinko)
1526      </td></tr>
1527      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1528        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=54054">54054</a>: Do not share shell environment variables between
1529        multiple instances of the CGI servlet. (markt)
1530      </td></tr>
1531      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1532        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=54087">54087</a>: Correctly handle (ignore) invalid If-Modified-Since
1533        header rather than throwing an exception. (markt/kkolinko)
1534      </td></tr>
1535      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1536        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=54220">54220</a>: Ensure the ErrorReportValve only generates an error
1537        report if the error flag on the response has been set. (markt)
1538      </td></tr>
1539      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1540        Fix memory leak of servlet instances when running with a
1541        SecurityManager and either init() or destroy() methods fail
1542        or the servlet is a SingleThreadModel one, and of filter instances
1543        if their destroy() method fails with an Error. (kkolinko)
1544      </td></tr>
1545      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1546        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=54382">54382</a>: Fix NPE when SSI processing is enabled and an empty
1547        SSI directive is present. (markt)
1548      </td></tr>
1549      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1550        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=54483">54483</a>: Correct one of the Spanish translations. Based on a
1551        suggestion from adinamita. (kkolinko)
1552      </td></tr>
1553      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
1554        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=54527">54527</a>: Synchronize conf/web.xml mime mapping with Tomcat 7.
1555        (markt)
1556      </td></tr>
1557    </table>
1558  </blockquote></td></tr></table>
1559  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.37 (jfclere)/Coyote"><!--()--></a><a name="Tomcat_6.0.37_(jfclere)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>
1560    <table border="0" cellpadding="2" cellspacing="2">
1561      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1562        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=54248">54248</a>: Ensure that byte order marks are swallowed when using
1563        a Reader to read a request body with a BOM for those encodings that
1564        require byte order marks. (markt)
1565      </td></tr>
1566      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1567        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=54324">54324</a>: Allow APR connector to disable TLS compression
1568        if OpenSSL supports it. (schultz)
1569      </td></tr>
1570      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1571        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=54456">54456</a>: Ensure that if a client aborts a request when sending
1572        a chunked request body that this is communicated correctly to the client
1573        reading the request body. (markt)
1574      </td></tr>
1575      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
1576        Update the native component of the APR/native connector to 1.1.27 and
1577        make that version the recommended minimum version. (kkolinko)
1578      </td></tr>
1579    </table>
1580  </blockquote></td></tr></table>
1581  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.37 (jfclere)/Jasper"><!--()--></a><a name="Tomcat_6.0.37_(jfclere)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>
1582    <table border="0" cellpadding="2" cellspacing="2">
1583      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1584        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=54615">54615</a>:  Tomcat 6 doesn't build against ecj 4.x (kkolinko)
1585      </td></tr>
1586    </table>
1587  </blockquote></td></tr></table>
1588  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.37 (jfclere)/Cluster"><!--()--></a><a name="Tomcat_6.0.37_(jfclere)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>
1589    <table border="0" cellpadding="2" cellspacing="2">
1590      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1591        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=54045">54045</a>: Make sure getMembers() returns available member when
1592        TcpFailureDetector works in static cluster. (kfujino)
1593      </td></tr>
1594    </table>
1595  </blockquote></td></tr></table>
1596  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.37 (jfclere)/Web applications"><!--()--></a><a name="Tomcat_6.0.37_(jfclere)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>
1597    <table border="0" cellpadding="2" cellspacing="2">
1598      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
1599        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=22278">22278</a>: Add a commented out sample configuration of
1600        <code>RemoteAddrValve</code> to <code>META-INF/context.xml</code>
1601        files of the Manager and Host Manager applications. (kkolinko)
1602      </td></tr>
1603      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1604        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=54080">54080</a>: Clarify documentation for initial value of
1605        <code>internalProxies</code> attribute of <code>RemoteIpValve</code>.
1606        (schultz/kkolinko)
1607      </td></tr>
1608      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1609        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=54198">54198</a>: Clarify that
1610        <code>HttpServletResponse.sendError(int)</code> results in an HTML
1611        response by default. (markt)
1612      </td></tr>
1613      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1614        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=54207">54207</a>: Correct JNDI factory package name in Javadoc for
1615        <code>org.apache.naming.java.javaURLContextFactory</code>. (markt)
1616      </td></tr>
1617    </table>
1618  </blockquote></td></tr></table>
1619  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.37 (jfclere)/Other"><!--()--></a><a name="Tomcat_6.0.37_(jfclere)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>
1620    <table border="0" cellpadding="2" cellspacing="2">
1621      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
1622       Add sample Apache Commons Daemon JSVC wrapper script bin/daemon.sh that
1623       can be used with /etc/init.d. (kkolinko)
1624      </td></tr>
1625      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
1626        In the build configuration: introduce property "tomcat.output" that is
1627        used to specify location of the build output directory. This simplifies
1628        configuration if someone wants to move the <code>output</code> directory
1629        elsewhere (e.g. out of the source tree). (kkolinko)
1630      </td></tr>
1631      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1632        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=54390">54390</a>: Use 'java_home' on Mac OS X to auto-detect JAVA_HOME.
1633        (schultz)
1634      </td></tr>
1635      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
1636        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=54601">54601</a>: Change catalina.sh to consistently use LOGGING_MANAGER
1637          variable to configure logging, instead of modifying JAVA_OPTS one.
1638          (kkolinko) 
1639      </td></tr>
1640      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
1641        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=54890">54890</a>: Update to Apache Commons Daemon 1.0.15. (mturk)
1642      </td></tr>
1643    </table>
1644  </blockquote></td></tr></table>
1645</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.36 (jfclere)"><!--()--></a><a name="Tomcat_6.0.36_(jfclere)"><strong>Tomcat 6.0.36 (jfclere)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2012-10-19</strong></font></td></tr><tr><td colspan="2"><blockquote>
1646  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.36 (jfclere)/Catalina"><!--()--></a><a name="Tomcat_6.0.36_(jfclere)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
1647    <table border="0" cellpadding="2" cellspacing="2">
1648      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
1649        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48692">48692</a>: Provide option to parse
1650        <code>application/x-www-form-urlencoded</code> PUT requests. (schultz)
1651      </td></tr>
1652      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
1653        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50306">50306</a>: New StuckThreadDetectionValve to detect requests that
1654        take a long time to process, which might indicate that their processing
1655        threads are stuck. Based on a patch provided by TomLu. (kkolinko)
1656      </td></tr>
1657      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1658        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50570">50570</a>: Enable FIPS mode to be set in AprLifecycleListener.
1659        Based upon a patch from Chris Beckey. Note that this mode requires
1660        tomcat-native 1.1.23 or later linked to a FIPS-capable OpenSSL library,
1661        which one has to build by themselves. (schultz/kkolinko)
1662      </td></tr>
1663      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1664        Improve synchronization and error handling in AprLifecycleListener.
1665        Do not allow to change SSL options if SSL has already been initialized.
1666        (schultz/kkolinko)
1667      </td></tr>
1668      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1669        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52225">52225</a>: Fix ClassCastException when adding an alias for an
1670        existing host via JMX. (kkolinko)
1671      </td></tr>
1672      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1673        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52293">52293</a>: Correctly handle the case when
1674        <code>antiResourceLocking</code> is enabled at the Context level when
1675        <code>unpackWARs</code> is disabled at the Host level. Correctly
1676        handle multi-level contexts when <code>antiResourceLocking</code>
1677        is enabled. Patch by Justin Miller. (kkolinko)
1678      </td></tr>
1679      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1680        Do not throw IllegalArgumentException from parseParameters() call
1681        when chunked POST request is too large, but treat it like an IO error.
1682        The <code>FailedRequestFilter</code> filter can be used to detect this
1683        condition. (kkolinko)
1684      </td></tr>
1685      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1686        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52384">52384</a>: Do not fail with parameter parsing when debug logging
1687        is enabled. (kkolinko)
1688      </td></tr>
1689      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1690        Do not flag extra '&amp;' characters in parameters as parse errors.
1691        (kkolinko)
1692      </td></tr>
1693      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1694        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52488">52488</a>: Correct typos: exipre -&gt; expire. Based on a patch by
1695        prockter. (markt)
1696      </td></tr>
1697      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1698        Reduce log level for the message about hitting
1699        <code>maxParameterCount</code> limit from WARN to INFO.
1700        Fix limit comparison to allow exactly <code>maxParameterCount</code>
1701        parameters, as documentation says, instead of
1702        <code>(maxParameterCount-1)</code>. (kkolinko)
1703      </td></tr>
1704      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1705        Slightly improve performance of UDecoder.convert(). Align
1706        <code>%2f</code> handling between implementations. (kkolinko)
1707      </td></tr>
1708      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
1709        Add <code>denyStatus</code> attribute to <code>RequestFilterValve</code>
1710        (<code>RemoteAddrValve</code>, <code>RemoteHostValve</code> valves).
1711        It allows to use different HTTP response code when rejecting denied
1712        request. E.g. 404 instead of 403. (kkolinko)
1713      </td></tr>
1714      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
1715        Add <code>SetCharacterEncodingFilter</code> (similar to the one
1716        contained in the examples web application) to the
1717        <code>org.apache.catalina.filters</code> package so that it is
1718        available for all web applications. (kkolinko)
1719      </td></tr>
1720      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
1721        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52500">52500</a>: Added configurable mechanism to retrieve user names
1722        from X509 client certificates. Based on a patch provided by
1723        Michael Furman. (schultz/kkolinko)
1724      </td></tr>
1725      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1726        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52719">52719</a>: Fix a theoretical resource leak in the JAR validation
1727        that checks for non-permitted classes in web application JARs. (markt)
1728      </td></tr>
1729      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1730        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52830">52830</a>: Correct JNDI lookups when using
1731        <code>javax.naming.Name</code> to identify the resource rather than a
1732        <code>java.lang.String</code>. (markt)
1733      </td></tr>
1734      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
1735        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52850">52850</a>: Extend memory leak prevention and detection code to
1736        work with IBM as well as Oracle JVMs. Based on a patch provided by
1737        Rohit Kelapure. (kkolinko)
1738      </td></tr>
1739      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
1740        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52996">52996</a>: In <code>StandardThreadExecutor</code>:
1741        Add the ability to configure a job queue size
1742        (<code>maxQueueSize</code> attribute).
1743        Add a variant of execute method that allows to specify a timeout for
1744        how long we want to try to add something to the queue.
1745        Based on a patch by R&uuml;diger Pl&uuml;m. (kkolinko)
1746      </td></tr>
1747      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1748        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53047">53047</a>: If a JDBCRealm or DataSourceRealm is configured for
1749        an all roles mode that only requires authorization (and no roles) and no
1750        role table or column is defined, don't populate the Principal's roles.
1751        (markt/kkolinko)
1752      </td></tr>
1753      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1754        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53050">53050</a>: Fix handling of entropy value when initializing
1755        session id generator in session manager. Based on proposal by
1756        Andras Rozsa. (kkolinko)
1757      </td></tr>
1758      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1759        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53056">53056</a>: Add APR version number to tcnative version INFO log
1760        message. (schultz)
1761      </td></tr>
1762      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1763        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53057">53057</a>: Add OpenSSL version number INFO log message when
1764        initializing. (schultz)
1765      </td></tr>
1766      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1767        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53071">53071</a>: Use the message from the Throwable for the error
1768        report generated by the <code>ErrorReportValve</code> if none was
1769        specified via <code>sendError()</code>. Use the standard text for HTTP
1770        error codes. (markt/rjung)
1771      </td></tr>
1772      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
1773        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53230">53230</a>: Change session managers to throw
1774        TooManyActiveSessionsException instead of IllegalStateException
1775        when the maximum number of sessions has been exceeded and a new
1776        session will not be created. (schultz/kkolinko)
1777      </td></tr>
1778      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1779        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53267">53267</a>: Ensure that using the GC Daemon Protection feature of
1780        the <code>JreMemoryLeakPreventionListener</code> does not trigger a
1781        full GC every hour. (markt/kkolinko)
1782      </td></tr>
1783      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1784        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53531">53531</a>: Fix ExpandWar.expand to check the return value of
1785        File.mkdir and File.mkdirs. (schultz)
1786      </td></tr>
1787      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1788        Make the CSRF nonce cache in <code>CsrfPreventionFilter</code>
1789        serializable so that it can be replicated across a cluster and/or
1790        persisted across Tomcat restarts. (markt)
1791      </td></tr>
1792      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1793        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53584">53584</a>: Ignore path parameters when comparing URIs for FORM
1794        authentication. This prevents users being prompted twice for passwords
1795        when logging in when session IDs are being encoded as path parameters.
1796        (markt)
1797      </td></tr>
1798      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1799        CVE-2012-3439:
1800        Various improvements to the DIGEST authenticator including
1801        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52954">52954</a>, the disabling caching of an authenticated user in the
1802        session by default, tracking server rather than client nonces and better
1803        handling of stale nonce values. (markt)
1804      </td></tr>
1805      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1806        CVE-2012-3546: Fix bypass of security constraint checks with FORM
1807        authentication. Remove unneeded processing in <code>RealmBase</code>.
1808        (kkolinko)
1809      </td></tr>
1810      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1811        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53800">53800</a>: <code>FileDirContext.list()</code> did not provide
1812        correct paths for subdirectories. Patch provided by Kevin Wooten.
1813        (kkolinko)
1814      </td></tr>
1815      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1816        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53830">53830</a>: Better handling of <code>Manager.randomFile</code>
1817        default value on Windows. (kkolinko)
1818      </td></tr>
1819      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1820        CVE-2012-4431: Fix bypass of <code>CsrfPreventionFilter</code> when
1821        there is no session. Improve session management in the filter.
1822        (kkolinko)
1823      </td></tr>
1824    </table>
1825  </blockquote></td></tr></table>
1826  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.36 (jfclere)/Coyote"><!--()--></a><a name="Tomcat_6.0.36_(jfclere)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>
1827    <table border="0" cellpadding="2" cellspacing="2">
1828      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1829        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42181">42181</a>: Better handling of edge conditions in chunk header
1830        processing. (kkolinko)
1831      </td></tr>
1832      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
1833        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51477">51477</a>: Support all SSL protocol combinations in the APR/native
1834        connector. This only works when using the native library version 1.1.21
1835        or later. (rjung)
1836      </td></tr>
1837      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1838        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52055">52055</a> (comment 14): Correctly reset
1839        <code>ChunkedInputFilter.needCRLFParse</code> flag when the filter
1840        is recycled. (kkolinko)
1841      </td></tr>
1842      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1843        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52606">52606</a>: Ensure replayed POST bodies are available when using
1844        AJP. (markt)
1845      </td></tr>
1846      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1847        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52858">52858</a>, CVE-2012-4534: Fix high CPU load with SSL, NIO and
1848        sendfile when client breaks the connection before reading all the
1849        requested data.
1850        (fhanik/kkolinko)
1851      </td></tr>
1852      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1853        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53119">53119</a>: Prevent buffer overflow errors being reported when a
1854        client disconnects before the response has been fully written from an
1855        AJP connection using the APR/native connector. (kkolinko)
1856      </td></tr>
1857      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1858        CVE-2012-2733:
1859        Improve <code>InternalNioInputBuffer.parseHeaders()</code>. (kkolinko)
1860      </td></tr>
1861      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
1862        Implement <code>maxHeaderCount</code> attribute on Connector.
1863        It is equivalent of LimitRequestFields directive of
1864        <a href="http://httpd.apache.org/">Apache HTTPD</a>.
1865        Default value is 100. (kkolinko)
1866      </td></tr>
1867      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1868        In JkCoyoteHandler connector for AJP/1.3 protocol
1869        (in <code>JkMain.setProperty()</code>):
1870        Fix setting of properties when connector has already started for
1871        properties that have aliases. E.g. it now allows to change
1872        <code>maxHeaderCount</code> attribute on Connector MBean via JMX.
1873        (kkolinko)
1874      </td></tr>
1875      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1876        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53725">53725</a>: Fix possible corruption of GZIP'd output. (kkolinko)
1877      </td></tr>
1878    </table>
1879  </blockquote></td></tr></table>
1880  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.36 (jfclere)/Jasper"><!--()--></a><a name="Tomcat_6.0.36_(jfclere)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>
1881    <table border="0" cellpadding="2" cellspacing="2">
1882      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1883        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48097">48097</a> (comment 7), <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53366">53366</a> (comment 1):
1884        If JSP page unexpectedly fails to initialize PageContext instance,
1885        write exception to the logs instead of silent swallowing. (kkolinko)
1886      </td></tr>
1887      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1888        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52335">52335</a>: Only handle <code>&lt;\%</code> and not
1889        <code>\%</code> as escaped in template text. (markt)
1890      </td></tr>
1891      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1892        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52666">52666</a>: Correct coercion order in EL when processing the
1893        equality and inequality operators. (markt)
1894      </td></tr>
1895      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1896        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53001">53001</a>: Revert the fix for <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46915">46915</a> since the use case
1897        described in the bug is invalid since it breaks the EL specification.
1898        (markt)
1899      </td></tr>
1900      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1901        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53032">53032</a>: Modify <code>JspC</code> so it extends
1902        <code>org.apache.tools.ant.Task</code> enabling it to work with features
1903        such as namespaces within build.xml files. (markt)
1904      </td></tr>
1905    </table>
1906  </blockquote></td></tr></table>
1907  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.36 (jfclere)/Cluster"><!--()--></a><a name="Tomcat_6.0.36_(jfclere)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>
1908    <table border="0" cellpadding="2" cellspacing="2">
1909      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1910        Replicate principal in ClusterSingleSignOn. (kfujino)
1911      </td></tr>
1912      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1913        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53513">53513</a>: Fix race condition between the processing of session
1914        sync message and transfer complete message. (kfujino)
1915      </td></tr>
1916      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1917        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53606">53606</a>: Fix potential NPE in <code>
1917TcpPingInterceptor</code>.
1918        Based on a patch by F. Arnoud. (markt)
1919      </td></tr>
1920      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1921        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53607">53607</a>: To avoid NPE, set TCP PING data to ChannelMessage.
1922        Patch provided by F.Arnoud (kfujino)
1923      </td></tr>
1924      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1925        Fix a behavior of TcpPingInterceptor#useThread.
1926        Do not start a ping thread when useThread is set to false. (kfujino)
1927      </td></tr>
1928    </table>
1929  </blockquote></td></tr></table>
1930  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.36 (jfclere)/Web applications"><!--()--></a><a name="Tomcat_6.0.36_(jfclere)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>
1931    <table border="0" cellpadding="2" cellspacing="2">
1932      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1933        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52243">52243</a>: Improve windows service documentation to clarify how
1934        to include <code>#</code> and/or <code>;</code> in the value of an
1935        environment variable that is passed to the service. (markt)
1936      </td></tr>
1937      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1938        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52515">52515</a>: Make it clear in the Realm how-to in the documentation
1939        web application that digested password storage when using DIGEST
1940        authentication requires that MD5 digests are used. (markt)
1941      </td></tr>
1942      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1943        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52641">52641</a>: Remove mentioning of ldap.jar from docs.
1944        Patch provided by Felix Schumacher. (rjung)
1945      </td></tr>
1946      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1947        Remove obsolete bug warning from windows service
1948        documentation page. (rjung)
1949      </td></tr>
1950      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1951        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52983">52983</a>: Remove unnecessary code that makes switching to
1952        other authentication methods difficult. (markt)
1953      </td></tr>
1954      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1955        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53158">53158</a>: Fix documented defaults for DBCP.
1956        Patch provided by ph.dezanneau at gmail.com. (rjung)
1957      </td></tr>
1958      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
1959        Update JavaSE documentation links to point to the current
1960        docs.oracle.com site, instead of obsolete ones (download.oracle.com,
1961        java.sun.com). (kkolinko)
1962      </td></tr>
1963      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
1964        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53289">53289</a>: Clarify <code>ResourceLink</code> example that
1965        uses DataSource.getConnection(username, password) method. Not all
1966        data source implementations support it. (kkolinko)
1967      </td></tr>
1968      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1969        Prevent the custom error pages for the Manager and Host Manager
1970        applications from being accessed directly. Configure custom
1971        pages for error codes 401 and 403 in Host Manager application.
1972        (markt/kkolinko)
1973      </td></tr>
1974      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1975        Correct documentation for <code>enableLookups</code> attribute
1976        of a Connector. By default DNS lookups are disabled. (kkolinko)
1977      </td></tr>
1978      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1979        Fix several HTML markup errors in servlets of examples web application.
1980        (kkolinko)
1981      </td></tr>
1982      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
1983        Change the index page of ROOT webapp to mention "manager-gui" role
1984        instead of "manager" one. (kkolinko)
1985      </td></tr>
1986      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1987        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53473">53473</a>: Correct the allowed values for the SSI option
1988        <code>isVirtualWebappRelative</code> which are <code>true</code> or
1989        <code>false</code>. (markt)
1990      </td></tr>
1991      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1992        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53664">53664</a>: Minor JNDI Howto document enhancement concerning mail
1993        properties. Patch provided by Mark Eggers. (schultz)
1994      </td></tr>
1995      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
1996        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53601">53601</a>: Clarify that to build Apache Tomcat 6 from sources
1997        a Java 5 JDK is recommended. (kkolinko)
1998      </td></tr>
1999      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2000        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53793">53793</a>: Change links on the list of applications in the
2001        Manager to point to <code>/appname/</code> instead of
2002        <code>
2002/appname</code>. (kkolinko)
2003      </td></tr>
2004    </table>
2005  </blockquote></td></tr></table>
2006  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.36 (jfclere)/Other"><!--()--></a><a name="Tomcat_6.0.36_(jfclere)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>
2007    <table border="0" cellpadding="2" cellspacing="2">
2008      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2009        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49402">49402</a>, <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52124">52124</a>: Fix Maven publishing script:
2010        make sure it finds tomcat-juli.jar and use later version of
2011        wagon-ssh. (jfclere)
2012      </td></tr>
2013      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2014        Update Apache Commons Daemon to 1.0.10. It resolves <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52548">52548</a>
2015        which meant that services created with service.bat did not set the
2016        <code>catalina.home</code> and <code>catalina.base</code> system
2017        properties. (markt, kkolinko)
2018      </td></tr>
2019      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
2020        Update Apache Commons Pool to 1.5.7. (kkolinko)
2021      </td></tr>
2022      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
2023        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52579">52579</a>: Add a note about Sun's Charset.decode() bug to the
2024        RELEASE-NOTES file. (kkolinko)
2025      </td></tr>
2026      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
2027        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52805">52805</a>: Update to Eclipse JDT Compiler 3.7.2. (kkolinko)
2028      </td></tr>
2029      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
2030        Update the native component of the APR/native connectors to 1.1.23
2031        and take advantage of the simplified distribution. (kkolinko) 
2032      </td></tr>
2033      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2034        When building a Windows installer do not copy whole "res" folder to
2035        output/dist, but only the files that we need. Apply fixcrlf filter
2036        only after the files are copied, so that <code>INSTALLLICENSE</code>
2037        file had correct line ends. (kkolinko)
2038      </td></tr>
2039      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
2040        Remove <code>res/License.rtf</code>. The file that is actually shown
2041        by the Windows installer is <code>res/INSTALLLICENSE</code>.
2042        (kkolinko)
2043      </td></tr>
2044      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
2045        Improve <code>RUNNING.txt</code>. (kkolinko)
2046      </td></tr>
2047      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
2048        Align the script that deploys Maven jars for Tomcat
2049        (<code>res/maven/mvn-pub.xml</code>) with the Tomcat 7 version,
2050        making full use of Nexus. (markt)
2051      </td></tr>
2052      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2053        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53034">53034</a>: Add <code>project.url</code> and
2054        <code>project.licenses</code> sections to the POMs for the Maven
2055        artifacts. (kkolinko)
2056      </td></tr>
2057      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2058        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53454">53454</a>: Return correct content-length header for HEAD requests
2059        when content length is greater than 2GB. (markt)
2060      </td></tr>
2061    </table>
2062  </blockquote></td></tr></table>
2063</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.35 (jfclere)"><!--()--></a><a name="Tomcat_6.0.35_(jfclere)"><strong>Tomcat 6.0.35 (jfclere)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2011-12-05</strong></font></td></tr><tr><td colspan="2"><blockquote>
2064  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.35 (jfclere)/Catalina"><!--()--></a><a name="Tomcat_6.0.35_(jfclere)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
2065    <table border="0" cellpadding="2" cellspacing="2">
2066      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2067        Fix regression in decoding of parameters that contain spaces.
2068        Patch by Willem Fibbe. (kkolinko)
2069      </td></tr>
2070    </table>
2071  </blockquote></td></tr></table>
2072</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.34 (jfclere)"><!--()--></a><a name="Tomcat_6.0.34_(jfclere)"><strong>Tomcat 6.0.34 (jfclere)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote>
2073  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.34 (jfclere)/Catalina"><!--()--></a><a name="Tomcat_6.0.34_(jfclere)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
2074    <table border="0" cellpadding="2" cellspacing="2">
2075      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2076        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51550">51550</a>: Display an error page rather than an empty response
2077        for an IllegalStateException caused by too many active sessions. (markt)
2078      </td></tr>
2079      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2080        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51640">51640</a>: Improve the memory leak prevention for leaks
2081        triggered by java.sql.DriverManager. (markt/kkolinko)
2082      </td></tr>
2083      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2084        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51688">51688</a>: JreMemoryLeakPreventionListener now protects against
2085        AWT thread creation. (schultz)
2086      </td></tr>
2087      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2088        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51758">51758</a>: The digester (used for processing XML files) used the
2089        logger name <code>org.apache.commons.digester.Digester</code> rather
2090        than the expected <code>org.apache.tomcat.util.digester.Digester</code>.
2091        The digester has been changed to use the expected logger name.
2092        (kkolinko)
2093      </td></tr>
2094      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2095        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51862">51862</a>: Added a <code>
2095classesToInitialize</code> attribute to 
2096        <code>JreMemoryLeakPreventionListener</code> to allow pre-loading of configurable
2097        classes to avoid some classloader leaks. (slaurent)
2098      </td></tr>
2099      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2100        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51872">51872</a>: Ensure that the access log always uses the correct
2101        value for the remote IP address associated with the request and that
2102        requests with multiple errors do not result in multiple entries in
2103        the access log. (markt)
2104      </td></tr>
2105      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2106        Allow to overwrite the check for distributability
2107        of session attributes by session implementations. (rjung)
2108      </td></tr>
2109      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2110        Provide the log format "OneLineFormatter" for JULI that provides the same
2111        information as the default plus thread name but on a single line.
2112        (markt/rjung)
2113      </td></tr>
2114      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2115        Ensure that the memory leak protection for the HttpClient keep-alive
2116        always operates even if the thread has already stopped. (markt)
2117      </td></tr>
2118      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2119        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51940">51940</a>: Do not limit saving of request bodies during FORM
2120        authentication to POST requests since any HTTP method may include a
2121        request body. Based on a patch by Nicholas Sushkin. (kkolinko)
2122      </td></tr>
2123      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2124        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52091">52091</a>: Address performance issues related to lock contention
2125        in StandardWrapper. Based on patch provided by Taiki Sugawara.
2126        (kkolinko)
2127      </td></tr>
2128      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
2129        In GenericPrincipal, SerializablePrincipal: Do not sort lists of roles
2130        that have only one element. (kkolinko)
2131      </td></tr>
2132      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2133        Make configuration issue for CsrfPreventionFilter result in the
2134        failure of the filter rather than just a warning message. (kkolinko)
2135      </td></tr>
2136      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2137        Ensure changes to the configuration of RemoteAddrValve and
2138        RemoteHostValve via JMX are thread-safe. (kkolinko)
2139      </td></tr>
2140      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2141        Make configuration issue for RemoteAddrValve and
2142        RemoteHostValve result in the failure of the valve rather than
2143        just a warning message. (kkolinko)
2144      </td></tr>
2145      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
2146        In <code>RequestFilterValve</code> (<code>RemoteAddrValve</code>,
2147        <code>RemoteHostValve</code>): refactor value matching logic into
2148        separate method and expose this new method <code>isAllowed</code>
2149        through JMX. (kkolinko)
2150      </td></tr>
2151      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2152        Improve performance of parameter processing for GET and POST requests.
2153        Also add an option to limit the maximum number of parameters processed
2154        per request. This defaults to 10000. Excessive parameters are ignored.
2155        Note that <code>FailedRequestFilter</code> can be used to reject the
2156        request if some parameters were ignored. (markt/kkolinko)
2157      </td></tr>
2158      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2159        New filter <code>FailedRequestFilter</code> that will reject a request
2160        if there were errors during HTTP parameter parsing. (kkolinko)
2161      </td></tr>
2162    </table>
2163  </blockquote></td></tr></table>
2164  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.34 (jfclere)/Coyote"><!--()--></a><a name="Tomcat_6.0.34_(jfclere)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>
2165    <table border="0" cellpadding="2" cellspacing="2">
2166      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2167        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50394">50394</a>: Return -1 from read operation instead of throwing an
2168        exception when encountering an EOF with the HTTP APR connector.
2169        (kkolinko)
2170      </td></tr>
2171      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2172        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51698">51698</a>: Fix CVE-2011-3190. Prevent AJP message injection.
2173        (markt)
2174      </td></tr>
2175      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2176        Detect incomplete AJP messages and reject the associated request if one
2177        is found. (markt)
2178      </td></tr>
2179      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2180        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51794">51794</a>: Fix race condition in NioEndpoint selector. Patch
2181        provided by dlord. (fhanik)
2182      </td></tr>
2183      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2184        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51905">51905</a>: Fix infinite loop in AprEndpoint shutdown if
2185        acceptor unlock fails. Reduce timeout before forcefully closing
2186        the socket from 30s to 10s. (kkolinko)
2187      </td></tr>
2188      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2189        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52121">52121</a>: Fix possible output corruption when compression is
2190        enabled for a connector and the response is flushed. Test
2191        case provided by David Marcks. (kkolinko)
2192      </td></tr>
2193      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2194        Replace unneeded call that iterated events queue in NioEndpoint.Poller.
2195        (kkolinko)
2196      </td></tr>
2197      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2198        Improve MimeHeaders.toString(). (kkolinko)
2199      </td></tr>
2200      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2201        Allow the BIO HTTP connector to be used with SSL when running under Java
2202        7. (markt) 
2203      </td></tr>
2204      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2205        Improve multi-byte character handling in all connectors. (rjung)
2206      </td></tr>
2207    </table>
2208  </blockquote></td></tr></table>
2209  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.34 (jfclere)/Jasper"><!--()--></a><a name="Tomcat_6.0.34_(jfclere)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>
2210    <table border="0" cellpadding="2" cellspacing="2">
2211      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2212        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51220">51220</a>: Correct copy/paste error in original commit for this
2213        issue. (markt)
2214      </td></tr>
2215      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2216        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52091">52091</a>: Address performance issues related to log creation
2217        in TagHandlerPool. Patch provided by Taiki Sugawara. (markt)
2218      </td></tr>
2219    </table>
2220  </blockquote></td></tr></table>
2221  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.34 (jfclere)/Cluster"><!--()--></a><a name="Tomcat_6.0.34_(jfclere)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>
2222    <table border="0" cellpadding="2" cellspacing="2">
2223      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2224        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51736">51736</a>: Make rpcTimeout configurable in BackupManager. 
2225        (kfujino)
2226      </td></tr>
2227      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2228        New cluster manager attribute <code>sessionAttributeFilter</code>
2229        allows to filter which session attributes are replicated using a
2230        regular expression applied to the attribute name. (rjung)
2231      </td></tr>
2232      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2233        Avoid an unnecessary session ID change notice. 
2234        Notice of changed session ID by JvmRouteBinderValve is unnecessary to 
2235        BackupManager. In BackupManager, change of session ID is replicated by 
2236        the call of a setId() method. (kfujino)
2237      </td></tr>
2238      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2239        Fix unneeded duplicate <code>resetDeltaRequest()</code> call in
2240        <code>DeltaSession.setId(String)</code>. (kkolinko)
2241      </td></tr>
2242      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2243        When Context manager does not exist, no context manager message is 
2244        replied in order to avoid timeout (default 60 sec) of 
2245        GET_ALL_SESSIONS sync phase. (kfujino)
2246      </td></tr>
2247    </table>
2248  </blockquote></td></tr></table>
2249  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.34 (jfclere)/Web applications"><!--()--></a><a name="Tomcat_6.0.34_(jfclere)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>
2250    <table border="0" cellpadding="2" cellspacing="2">
2251      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2252        Correct the documentation for the connectionLinger attribute of the HTTP
2253        connector. (markt)
2254      </td></tr>
2255      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2256        Show build date and version in the header on every documentation
2257        page. (kkolinko)
2258      </td></tr>
2259      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2260        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52049">52049</a>: Improve setup instructions for running as a Windows
2261        service: correct information on how a JRE is identified and selected.
2262        (markt)
2263      </td></tr>
2264      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
2265        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52172">52172</a>: Clarify Tomcat build instructions. Patch provided
2266        by bmargulies. (kkolinko)
2267      </td></tr>
2268    </table>
2269  </blockquote></td></tr></table>
2270  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.34 (jfclere)/Other"><!--()--></a><a name="Tomcat_6.0.34_(jfclere)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>
2271    <table border="0" cellpadding="2" cellspacing="2">
2272      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
2273        Update the native component of the APR/native connectors to 1.1.22.
2274        (markt)
2275      </td></tr>
2276      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
2277        Update the recommended version of the native component of the APR/native
2278        connectors to 1.1.22. (kkolinko)
2279      </td></tr>
2280      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
2281        Update the Eclipse compiler (used for JSPs) to 3.7. (markt)
2282      </td></tr>
2283      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2284        Correct two typos in the Windows installer. (kkolinko)
2285      </td></tr>
2286      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2287        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=52059">52059</a>: In Windows uninstaller: Do not forget to remove
2288        Tomcat keys from 32-bit registry on deinstallation. (kkolinko)
2289      </td></tr>
2290    </table>
2291  </blockquote></td></tr></table>
2292</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.33 (jfclere)"><!--()--></a><a name="Tomcat_6.0.33_(jfclere)"><strong>Tomcat 6.0.33 (jfclere)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2011-08-18</strong></font></td></tr><tr><td colspan="2"><blockquote>
2293  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.33 (jfclere)/Catalina"><!--()--></a><a name="Tomcat_6.0.33_(jfclere)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
2294    <table border="0" cellpadding="2" cellspacing="2">
2295      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2296        Allow to search the virtual paths before the webapp or after it. (rjung)
2297      </td></tr>
2298      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2299        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=27988">27988</a>: Improve reporting of missing files. (markt)
2300      </td></tr>
2301      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2302        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=28852">28852</a>: Add URL encoding where missing to parameters in URLs
2303        presented by Ant tasks to the Manager application. Based on a patch by
2304        Stephane Bailliez. (markt) 
2305      </td></tr>
2306      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2307        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46252">46252</a>: Allow to specify character set to be used to write
2308        the access log in AccessLogValve. (kkolinko)
2309      </td></tr>
2310      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2311        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48863">48863</a>: Provide an warning if there is a problem with a class
2312        path entry but use debug level logging if it is expected due to catalina
2313        home/base split. (kkolinko)
2314      </td></tr>
2315      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2316        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49180">49180</a>: Add an option to disable file rotation in JULI
2317        FileHandler. (kkolinko)
2318      </td></tr>
2319      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2320        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50189">50189</a>: Once the application has finished writing to the
2321        response, prevent further reads from the request since this causes
2322        various problems in the connectors which do not expect this. (markt)
2323      </td></tr>
2324      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2325        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50700">50700</a>: Ensure that the override attribute of context
2326        parameters is correctly followed. (markt)
2327      </td></tr>
2328      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2329        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50734">50734</a>: Return 404 rather than 400 for requests to the ROOT
2330        context when no ROOT context is deployed. Patch provided by Violeta
2331        Georgieva. (markt)
2332      </td></tr>
2333      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2334        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50751">50751</a>
2334: When authenticating with the JNDI Realm, only attempt
2335        to read user attributes from the directory if attributes are required.
2336        (markt)
2337      </td></tr>
2338      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2339        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50752">50752</a>: Fix typo in debug message in
2340        <code>org.apache.catalina.startup.Embedded</code>. (markt)
2341      </td></tr>
2342      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2343        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50855">50855</a>: Fix NPE on AuthenticatorBase.register() when debug
2344        logging is enabled. (markt)
2345      </td></tr>
2346      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2347        Correctly format the timestamp reported by version.[sh|bat]. (markt)
2348      </td></tr>
2349      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2350        Remove unnecessary whitespace from MIME mapping entries in global
2351        web.xml file. (markt)
2352      </td></tr>
2353      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2354        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51042">51042</a>: Don't trigger session creation listeners when a
2355        session ID is changed as part of the authentication process. (markt)
2356      </td></tr>
2357      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2358        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51119">51119</a>: Add JAAS authentication support to the
2359        JMXRemoteLifecycleListener. Patch provided by Neil Laurance. (markt) 
2360      </td></tr>
2361      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
2362        Implement display of multiple request headers in AccessLogValve:
2363        print not just the value of the first header, but of the all of them,
2364        separated by commas. (kkolinko)
2365      </td></tr>
2366      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2367        Correct the SSLValve so it returns the SSL key size as an Integer rather
2368        than as a String. (markt)
2369      </td></tr>
2370      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2371        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51162">51162</a>: Prevent possible NPE when removing a web application.
2372        (markt)
2373      </td></tr>
2374      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2375        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51249">51249</a>: Improve system property replacement code
2376        in ClassLoaderLogManager of Tomcat JULI to cover some corner cases.
2377        (kkolinko)
2378      </td></tr>
2379      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2380        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51315">51315</a>: Fix IAE when removing an authenticator valve from a
2381        container. Patch provided by Violeta Georgieva. (markt)
2382      </td></tr>
2383      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2384        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51324">51324</a>: Improve handling of exceptions when flushing the
2385        response buffer to ensure that the doFlush flag does not get stuck in
2386        the enabled state. Patch provided by Jeremy Norris. (kkolinko)
2387      </td></tr>
2388      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2389        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51348">51348</a>: Fix possible NPE when processing WebDAV locks. (markt)
2390      </td></tr>
2391      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2392        Add a container event that is fired when a session's ID is changed,
2393        e.g. on authentication. (markt)
2394      </td></tr>
2395      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2396        Fix CVE-2011-2204. Prevent user passwords appearing in log files if a
2397        runtime exception (e.g. OOME) occurs while creating a new user for a
2398        MemoryUserDatabase via JMX. (markt)
2399      </td></tr>
2400      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2401        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51400">51400</a>: Avoid jvm bottleneck on String/byte[] conversion
2402        triggered by a JVM bug. Based on patches by Dave Engberg and Konstantin
2403        Prei&szlig;er. (markt)
2404      </td></tr>
2405      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2406        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51403">51403</a>: Avoid NPE in JULI FileHandler if formatter is
2407        misconfigured. (kkolinko)
2408      </td></tr>
2409      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
2410        Create a directory for access log or error log (in AccessLogValve and
2411        in JULI FileHandler) automatically when it is specified as a part of
2412        the file name, e.g. in the <code>prefix</code> attribute. Earlier this
2413        happened only if it was specified with the <code>directory</code>
2414        attribute. (kkolinko)
2415      </td></tr>
2416      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2417        Log a failure if access log file cannot be opened. Improve i18n
2418        of messages. (kkolinko)
2419      </td></tr>
2420      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2421        Improve handling of URLs with path parameters and prevent incorrect 404
2422        responses that could occur when path parameters were present.
2423        The method <code>getRequestURI()</code> was fixed to comply with
2424        specification (chapter SRV.3.1 of Servlet Spec. 2.5, javadoc) and now
2425        returns original request URI line from a HTTP request including any
2426        path parameters (such as jsessionid). See issues <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51833">51833</a> and
2427        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=53584">53584</a>.
2428        (kkolinko/markt)
2429      </td></tr>
2430      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2431        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51473">51473</a>: Fix concatenation of values in
2432        <code>SecurityConfig.setSecurityProperty()</code>. (kkolinko)
2433      </td></tr>
2434      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2435        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51509">51509</a>: Fix potential concurrency issue in CSRF prevention
2436        filter that may lead to some requests failing that should not. (markt)
2437      </td></tr>
2438      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2439        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51588">51588</a>: Make it easier to extend the AccessLogValve to add
2440        support for custom elements. (markt)
2441      </td></tr>
2442      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2443        Unregister DataSource MBeans when web application stops. (kfujino)
2444      </td></tr>
2445      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2446        CVE-2011-1184: Add additional configuration options to the DIGEST
2447        authenticator. (markt)
2448      </td></tr>
2449    </table>
2450  </blockquote></td></tr></table>
2451  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.33 (jfclere)/Coyote"><!--()--></a><a name="Tomcat_6.0.33_(jfclere)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>
2452    <table border="0" cellpadding="2" cellspacing="2">
2453      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2454        Reduce level of log message for invalid URL parameters from WARNING to
2455        INFO. (kkolinko) 
2456      </td></tr>
2457      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2458        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48208">48208</a>: Provide an option to specify a custom trust manager
2459        for BIO and NIO HTTP connectors using SSL. Based on a patch by Luciana
2460        Moreira. (markt)
2461      </td></tr>
2462      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2463        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49595">49595</a>: Protect against crashes when using the APR/native
2464        connector. (jfclere)
2465      </td></tr>
2466      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2467        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49929">49929</a>: Make sure flush packet is not send after END_RESPONSE
2468        packet. (mturk/markt) 
2469      </td></tr>
2470      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2471        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50887">50887</a>: Enable the provider to be configured when generating
2472        SSL certs. Based on a patch by pknopp. (markt)
2473      </td></tr>
2474      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2475        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51073">51073</a>: Throw an exception and do not start the APR connector
2476        if it is configured for SSL and an invalid value is provided for
2477        SSLProtocol. (markt)
2478      </td></tr>
2479      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2480        Fix CVE 2011-2526. Protect against infinite loops (HTTP NIO) and crashes
2481        (HTTP APR) if sendfile is configured to send more data than is available
2482        in the file. (markt)
2483      </td></tr>
2484      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2485        Prevent NPEs when a socket is closed in non-error conditions after
2486        sendfile processing when using the HTTP NIO connector. (markt) 
2487      </td></tr>
2488      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2489        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51515">51515</a>: Prevent immediate socket close when comet is used over
2490        HTTPS. (markt)
2491      </td></tr>
2492    </table>
2493  </blockquote></td></tr></table>
2494  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.33 (jfclere)/Jasper"><!--()--></a><a name="Tomcat_6.0.33_(jfclere)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>
2495    <table border="0" cellpadding="2" cellspacing="2">
2496      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2497        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=36362">36362</a>: Handle the case where tag file attributes (which can
2498        use any valid XML name) have a name which is not a Java identifier.
2499        (markt)
2500      </td></tr>
2501      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2502        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47371">47371</a>: Correctly coerce the empty string to zero when used as
2503        an operand in EL arithmetic. Patch provided by gbt. (markt)
2504      </td></tr>
2505      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2506        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50726">50726</a>: Ensure that the use of the genStringAsCharArray does
2507        not result in String constants that are too long for valid Java code.
2508        (markt)
2509      </td></tr>
2510      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2511        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50895">50895</a>: Don't initialize classes created during the
2512        compilation stage. (markt)
2513      </td></tr>
2514      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2515        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51124">51124</a>: Make Tomcat more robust if an OOME occurs. Usually
2516        after an OOME all bets are off but this change appears to help some
2517        users and the description of a 'recoverable' OOME in the bug
2518        is a plausible one. Based on a patch by Ramiro. (markt)
2519      </td></tr>
2520      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2521        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51177">51177</a>: Ensure Tomcat's MapELResolver and ListELResolver
2522        always return <code>Object.class</code> for <code>getType()</code> as
2523        required by the EL specification. (markt)
2524      </td></tr>
2525      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2526        Correct possible threading issue in JSP compilation when development
2527        mode is used. (markt)
2528      </td></tr>
2529      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2530        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51220">51220</a>: Add a system property to enable tag pooling with JSPs
2531        that use a custom base class. Based on a patch by Dan Mikusa. (markt)
2532      </td></tr>
2533      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2534        Broaden the exception handling in the EL Parser so that more failures to
2535        parse an expression include the failed expression in the exception
2536        message. Hopefully, this will help track down the cause of
2537        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51088">51088</a>. (markt)
2538      </td></tr>
2539      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2540        Improve error reporting of Jasper compilation. (schultz)
2541      </td></tr>
2542    </table>
2543  </blockquote></td></tr></table>
2544  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.33 (jfclere)/Cluster"><!--()--></a><a name="Tomcat_6.0.33_(jfclere)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>
2545    <table border="0" cellpadding="2" cellspacing="2">
2546      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2547        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50646">50646</a>: Fix cluster message data corruption if message size
2548        exceeds the underlying buffer size. Patch provided by Olivier Costet.
2549        (markt)
2550      </td></tr>
2551      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2552        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50771">50771</a>: Ensure HttpServletRequest#getAuthType() returns the 
2553        name of the authentication scheme if request has already been 
2554        authenticated. (kfujino)
2555      </td></tr>
2556      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2557        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50950">50950</a>: Correct possible NotSerializableException for an
2558        authenticated session when running with a security manager. (markt)
2559      </td></tr>
2560      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2561        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51306">51306</a>: Avoid NPE when handleSESSION_EXPIRED is processed 
2562        while handleSESSION_CREATED is being processed. (kfujino)
2563      </td></tr>
2564      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2565        The change in session ID is notified to the container event listener on 
2566        the backup node in cluster. This notification is controlled by 
2567        notifyContainerListenersOnReplication. (kfujino)
2568      </td></tr>
2569    </table>
2570  </blockquote></td></tr></table>
2571  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.33 (jfclere)/Web applications"><!--()--></a><a name="Tomcat_6.0.33_(jfclere)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>
2572    <table border="0" cellpadding="2" cellspacing="2">
2573      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2574        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41498">41498</a>: Add the allRolesMode attribute to the Realm
2575        configuration page in the documentation web application. (markt)
2576      </td></tr>
2577      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2578        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48997">48997</a>: Fixed some typos and improve cross-referencing to the
2579        HTTP Connector and APR documentation with the SSL How-To page of the
2580        documentation web application. (markt)
2581      </td></tr>
2582      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2583        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50804">50804</a>: Update links for Servlet 2.5 and JSP 2.1 Javadoc.
2584        (markt)
2585      </td></tr>
2586      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
2587        Improve class loading documentation and logging documentation.
2588        (kkolinko)
2589      </td></tr>
2590      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
2591        Configure Security Manager How-To to include a copy of the actual
2592        conf/catalina.policy file when the documentation is built, rather
2593        than maintaining a copy of its content. (kkolinko)
2594      </td></tr>
2595      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2596        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51147">51147</a>: Fix deployment via HTML Manager that was broken by
2597        addition of CRSF protection. Patch provided by Alexis Hassler. (markt)
2598      </td></tr>
2599      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2600        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51156">51156</a>: Ensure session expiration option is available in
2601        Manager application was running web applications that were defined in
2602        server.xml. (markt)
2603      </td></tr>
2604      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2605        Correct the log4j configuration settings when defining conversion
2606        patterns in the documentation web application. (markt)
2607      </td></tr>
2608      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2609        Update Maven repository information in the documentation to reflect
2610        current usage. (markt)
2611      </td></tr>
2612      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2613        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51346">51346</a>: Update the documentation web application to make clear
2614        the circumstances in which the RequestDumperValve will consume the
2615        request's InputStream. Based on a patch by pid. (markt)
2616      </td></tr>
2617      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2618        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51443">51443</a>: Document the notifySessionListenersOnReplication
2619        attribute for the DeltaManager. (markt)
2620      </td></tr>
2621      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2622        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51516">51516</a>: Correct documentation web application to show correct
2623        system property name for changing the name of the SSO session cookie.
2624        (markt)
2625      </td></tr>
2626      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
2627        Update documentation to be even more explicit about the implications
2628        of setting the <code>path</code> attribute on a <code>Context</code>
2629        element in <code>server.xml</code>. (markt/kkolinko)
2630      </td></tr>
2631    </table>
2632  </blockquote></td></tr></table>
2633  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.33 (jfclere)/Other"><!--()--></a><a name="Tomcat_6.0.33_(jfclere)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>
2634    <table border="0" cellpadding="2" cellspacing="2">
2635      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
2636        Clarify error messages in *.sh files to mention that if a script is
2637        not found it might be because execute permission is needed. (kkolinko)
2638      </td></tr>
2639      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2640        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=33262">33262</a>, <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=40510">40510</a>, <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50949">50949</a>, <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51135">51135</a>:
2641        Various improvements to the Windows installer to be able to install
2642        several copies of Tomcat 6 side by side. Allow to configure service
2643        name, connector and shutdown ports. Allow to choose whether to install
2644        Start menu shortcuts and Apache Tomcat monitor application for all
2645        users or for the current one only. Improve auto-detection of JAVA_HOME
2646        for 64-bit Windows platforms: autoselect 32-bit JRE if it exists and
2647        64-bit one is not available. Improve server.xml file handling.
2648        Fix uninstallation icon. (markt/kkolinko)
2649      </td></tr>
2650      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2651        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50854">50854</a>: Add additional entries to the default catalina.policy
2652        file to support running the manager web application from CATALINA_HOME
2653        or CATALINA_BASE. (markt) 
2654      </td></tr>
2655      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2656        Update default download sources to use the central Apache Maven 2
2657        repository as some libraries have been removed from the central Apache
2658        Maven 1 repository. (kkolinko)
2659      </td></tr>
2660      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2661        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51155">51155</a>: Add comments to @deprecated tags that have none. Patch
2662        provided by sebb. (kkolinko)
2663      </td></tr>
2664      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2665        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=51309">51309</a>: Correct logic in catalina.sh stop when using a PID
2666        file to ensure the correct message is shown. Patch provided by Caio
2667        Cezar. (markt)
2668      </td></tr>
2669      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
2670        Update Apache Commons Pool to 1.5.6. (kkolinko)
2671      </td></tr>
2672      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
2673        Update Apache Commons Daemon to 1.0.7. (kkolinko)
2674      </td></tr>
2675      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
2676        At build time use two alternative download locations for components
2677        downloaded from apache.org. (kkolinko)
2678      </td></tr>
2679    </table>
2680  </blockquote></td></tr></table>
2681</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.32 (jfclere)"><!--()--></a><a name="Tomcat_6.0.32_(jfclere)"><strong>Tomcat 6.0.32 (jfclere)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2011-02-03</strong></font></td></tr><tr><td colspan="2"><blockquote>
2682  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.32 (jfclere)/Catalina"><!--()--></a><a name="Tomcat_6.0.32_(jfclere)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
2683    <table border="0" cellpadding="2" cellspacing="2">
2684      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
2685        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48822">48822</a>: Include context name in reload and stop log statements.
2686        Based on the patch provided by Marc Guillemot. (kkolinko)
2687      </td></tr>
2688      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2689        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50673">50673</a>: Improve Catalina shutdown when running as a service.
2690        Do not call System.exit(). (kkolinko)
2691      </td></tr>
2692      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2693        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50689">50689</a>: Provide 100 Continue responses at appropriate points
2694        during FORM authentication if client indicates that they are expected.
2695        (kkolinko)
2696      </td></tr>
2697      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2698        Improve HTTP specification compliance in support of
2699        <code>Accept-Language</code> header. This protects from known exploit
2700        of the Oracle JVM bug that triggers a DoS, CVE-2010-4476. (kkolinko)
2701      </td></tr>
2702    </table>
2703  </blockquote></td></tr></table>
2704  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.32 (jfclere)/Coyote"><!--()--></a><a name="Tomcat_6.0.32_(jfclere)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>
2705    <table border="0" cellpadding="2" cellspacing="2">
2706      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2707        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49795">49795</a>: Backport AprEndpoint shutdown improvements, to make
2708        it more robust. (mturk/kkolinko)
2709      </td></tr>
2710      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2711        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50325">50325</a>: When the JVM indicates support for RFC 5746, disable
2712        Tomcat's <code>allowUnsafeLegacyRenegotiation</code> configuration
2713        attribute and use the JVM configuration to control renegotiation.
2714        (markt)
2715      </td></tr>
2716      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2717        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50631">50631</a>: InternalNioInputBuffer should honor
2718        <code>maxHttpHeadSize</code>. (kkolinko)
2719      </td></tr>
2720      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2721        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50651">50651</a>: Fix NPE in InternalNioOutputBuffer.recycle().
2722        (kkolinko)
2723      </td></tr>
2724    </table>
2725  </blockquote></td></tr></table>
2726  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.32 (jfclere)/Cluster"><!--()--></a><a name="Tomcat_6.0.32_(jfclere)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>
2727    <table border="0" cellpadding="2" cellspacing="2">
2728      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2729        Be consistent with locks on sessionCreationTiming,
2730        sessionExpirationTiming in DeltaManager.resetStatistics(). (kkolinko)
2731      </td></tr>
2732    </table>
2733  </blockquote></td></tr></table>
2734</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.31 (jfclere)"><!--()--></a><a name="Tomcat_6.0.31_(jfclere)"><strong>Tomcat 6.0.31 (jfclere)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote>
2735  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.31 (jfclere)/Catalina"><!--()--></a><a name="Tomcat_6.0.31_(jfclere)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
2736    <table border="0" cellpadding="2" cellspacing="2">
2737      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2738        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49543">49543</a>: Allow Tomcat to use shared data sources with per
2739        application credentials. (fhanik)
2740      </td></tr>
2741      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2742        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50205">50205</a>: Add the deployIgnorePaths attribute to the Host
2743        element. Based on a patch by Jim Riggs. (markt/kkolinko)
2744      </td></tr>
2745      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2746        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50413">50413</a>: Additional fix that ensures the error page is served
2747        regardless of any Range headers in the original request. (kkolinko)
2748      </td></tr>
2749      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2750        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50550">50550</a>: When a new directory is created (e.g. via WebDAV)
2751        ensure that a subsequent request for that directory does not result in a
2752        404 response. (markt/kkolinko)
2753      </td></tr>
2754      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2755        Provide session creation and destruction rate metrics in the session
2756        managers. (markt) 
2757      </td></tr>
2758      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2759        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50606">50606</a>: Improve CGIServlet: Provide support for specifying
2760        empty value for the <code>executable</code> init-param. Provide support
2761        for explicit additional arguments for the executable. Those were
2762        broken when implementing fix for bug <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49657">49657</a>. (kkolinko)
2763      </td></tr>
2764      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2765        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50620">50620</a>: Stop exceptions that occur during
2766        <code>Session.endAccess()</code> from preventing the normal completion
2767        of <code>Request.recycle()</code>. (markt)
2768      </td></tr>
2769    </table>
2770  </blockquote></td></tr></table>
2771  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.31 (jfclere)/Coyote"><!--()--></a><a name="Tomcat_6.0.31_(jfclere)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>
2772    <table border="0" cellpadding="2" cellspacing="2">
2773      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2774        Remove a huge memory leak in the NIO connector introduced by the fix
2775        for <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49884">49884</a>. (markt)
2776      </td></tr>
2777    </table>
2778  </blockquote></td></tr></table>
2779  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.31 (jfclere)/Cluster"><!--()--></a><a name="Tomcat_6.0.31_(jfclere)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>
2780    <table border="0" cellpadding="2" cellspacing="2">
2781      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2782        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50600">50600</a>: Prevent a <code>ConcurrentModificationException</code>
2783        when removing a WAR file via the FarmWarDeployer. (markt)
2784      </td></tr>
2785    </table>
2786  </blockquote></td></tr></table>
2787</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.30 (jfclere)"><!--()--></a><a name="Tomcat_6.0.30_(jfclere)"><strong>Tomcat 6.0.30 (jfclere)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2011-01-13</strong></font></td></tr><tr><td colspan="2"><blockquote>
2788  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.30 (jfclere)/General"><!--()--></a><a name="Tomcat_6.0.30_(jfclere)/General"><strong>General</strong></a></font></td></tr><tr><td><blockquote>
2789    <table border="0" cellpadding="2" cellspacing="2">
2790      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2791        Filter input of manager app servlets. (kkolinko)
2792      </td></tr>
2793      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2794        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43960">43960</a>: Expose available property of StandardWrapper via JMX.
2795        (markt)
2796      </td></tr>
2797      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
2798        Update to Commons Daemon 1.0.5. (mturk)
2799      </td></tr>
2800      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
2801        Switch to using the Eclipse compiler JAR directly rather than creating
2802        it from the larger JDT download. (markt)
2803      </td></tr>
2804      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2805        Allow the off-line building of the extras package. (markt)
2806      </td></tr>
2807      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
2808        Update to Commons Pool 1.5.5. (markt)
2809      </td></tr>
2810      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2811        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49728">49728</a>, <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50084">50084</a>: Improve PID file handling when
2812        another process is managing the PID file and Tomcat does not have write
2813        access. (markt)
2814      </td></tr>
2815      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2816        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49909">49909</a>, <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50201">50201</a>: Provide a mechanism to log requests
2817        rejected before they reach the AccessLogValve to appear in the access
2818        log. (markt/kkolinko)
2819      </td></tr>
2820    </table>
2821  </blockquote></td></tr></table>
2822  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.30 (jfclere)/Catalina"><!--()--></a><a name="Tomcat_6.0.30_(jfclere)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
2823    <table border="0" cellpadding="2" cellspacing="2">
2824      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2825        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=38
2825113">38113</a>: Provide a system property that enables a strict
2826        interpretation of the specification for <code>getQueryString()</code>
2827        when an empty query string is provided by the user agent. (markt)
2828      </td></tr>
2829      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2830        Return a copy of the current URLs for the <code>WebappClassLoader</code>
2831        to prevent modification. This facilitated, although it wasn't the root
2832        cause, CVE-2010-1622. (markt)
2833      </td></tr>
2834      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2835        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48837">48837</a>: Extend thread local memory leak detection to include
2836        classes loaded by subordinate class loaders to the web
2837        application's class loader such as the Jasper class loader.
2838        Patch provided by Sylvain Laurent. (kkolinko)
2839      </td></tr>
2840      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2841        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48973">48973</a>: Avoid creating a SESSIONS.ser file when stopping an 
2842        application if there's no session. Patch provided by Marc Guillemot.
2843        (slaurent)
2844      </td></tr>
2845      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2846        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49030">49030</a>: Failure during start of one connector should not leave
2847        some connectors started and some ignored. (kkolinko)
2848      </td></tr>
2849      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2850        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49195">49195</a>: Don't report an error when shutting down a Windows
2851        service for a Tomcat instance that has a disabled shutdown port. (markt)
2852      </td></tr>
2853      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2854        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49209">49209</a>: Fix problem with JDBC driver memory leak prevention
2855        when running under a security manager. Patch provided by Sylvain
2856        Laurent. (markt)
2857      </td></tr>
2858      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2859        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49613">49613</a>: Improve performance when using SSL for applications
2860        that make multiple class to <code>Request.getAttributeNames()</code>.
2861        Patch provided by Sampo Savolainen. (markt)
2862      </td></tr>
2863      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2864        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49657">49657</a>: Handle CGI executables with spaces in the path.
2865        (markt)
2866      </td></tr>
2867      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2868        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49667">49667</a>: Ensure that using the JDBC driver memory leak
2869        prevention code does not cause a one of the memory leaks it is meant to
2870        avoid. (markt)
2871      </td></tr>
2872      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2873        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49749">49749</a>: Respect <code>httpOnly</code> setting of Context
2874        when creating SSO cookie. (markt)
2875      </td></tr>
2876      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2877        Provide better web application state information via JMX. (markt)
2878      </td></tr>
2879      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2880        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49811">49811</a>: Add an option to disable URL rewriting on a per
2881        Context basis. The option name is <code>disableURLRewriting</code>.
2882        (markt)
2883      </td></tr>
2884      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2885        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49856">49856</a>: Expose the executor name for the connector via JMX.
2886        (markt)
2887      </td></tr>
2888      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2889        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49915">49915</a>: Make error more obvious, particularly when accessed
2890        via JConsole, if StandardServer.storeConfig() is called when there is
2891        no StoreConfig implementation present. (markt)
2892      </td></tr>
2893      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2894        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49965">49965</a>: Use correct i18n resources for StringManager in
2895        JAASRealm. (kkolinko)
2896      </td></tr>
2897      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2898        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49987">49987</a>: Fix potential data race in the population of the
2899        Servlet Context initialisation parameters. (markt)
2900      </td></tr>
2901      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2902        Code clean-up. Avoid some casts in StandardContext. (markt)
2903      </td></tr>
2904      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2905        Add security policy and token poller protection to the JRE memory leak
2906        protection provided in Tomcat 6. (markt/kkolinko)
2907      </td></tr>
2908      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2909        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50026">50026</a>: Add support for mapping the default servlet to URLs
2910        other than /. (timw)
2911      </td></tr>
2912      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2913        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50128">50128</a>: Improve exception handling in PersistentManagerBase
2914        when running with a security manager. (kkolinko)
2915      </td></tr>
2916      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2917        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50131">50131</a>: Avoid possible NPE in debug output in PersistentValve.
2918        Patch provided by sebb. (kkolinko)
2919      </td></tr>
2920      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2921        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50138">50138</a>: Fix threading issues in
2922        <code>org.apache.catalina.security.SecurityUtil</code>. (markt)
2923      </td></tr>
2924      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2925        Add a new filter, <code>org.apache.catalina.filters.CsrfPreventionFilter</code>,
2926        to provide generic cross-site request forgery (CSRF)
2927        protection for web applications. (markt)
2928      </td></tr>
2929      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2930        Make sure Contexts defined in server.xml pick up any <code>configClass</code>
2931        setting from the parent Host. (markt)
2932      </td></tr>
2933      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2934        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50222">50222</a>: Modify memory leak prevention code so it pins the
2935        system class loader in memory rather than than the common class loader,
2936        which is better for embedded systems. (schultz) 
2937      </td></tr>
2938      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2939        Make memory leak prevention code that clears ThreadLocal instances more
2940        robust against objects with <code>toString()</code> methods that throw
2941        exceptions. (markt)
2942      </td></tr>
2943      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2944        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50282">50282</a>: Load <code>javax.security.auth.login.Configuration</code>
2945        with <code>JreMemoryLeakPreventionListener</code> to avoid memory leak
2946        when stopping a webapp that would use JAAS.
2947        (slaurent)
2948      </td></tr>
2949      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2950        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50413">50413</a>: Ensure 304s are not returned when using static files
2951        as error pages. (markt)
2952      </td></tr>
2953      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2954        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50453">50453</a>: Correctly handle multiple <code>X-Forwarded-For</code>
2955        headers in the RemoteIpValve. Patch provided by Jim Riggs. (markt)
2956      </td></tr>
2957      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2958        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50459">50459</a>: Fix thread/classloader binding issues in
2959        StandardContext. (slaurent) 
2960      </td></tr>
2961      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
2962        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50527">50527</a>: Improve an error message shown by HttpServlet. (markt)
2963      </td></tr>
2964      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2965        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50556">50556</a>: Improve JreMemoryLeakPreventionListener to prevent
2966        a potential class loader leak caused by a thread spawned when the class
2967        <code>com.sun.jndi.ldap.LdapPoolManager</code> is initialized and the 
2968        system property <code>com.sun.jndi.ldap.connect.pool.timeout</code> is 
2969        set to a value greater than 0. (slaurent)
2970      </td></tr>
2971      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2972        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50642">50642</a>: Move the <code>sun.net.www.http.HttpClient</code>
2973        keep-alive thread memory leak protection from the 
2974        JreMemoryLeakPreventionListener to the WebappClassLoader since the
2975        thread that triggers the memory leak is created on demand. (markt)
2976      </td></tr>
2977    </table>
2978  </blockquote></td></tr></table>
2979  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.30 (jfclere)/Coyote"><!--()--></a><a name="Tomcat_6.0.30_(jfclere)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>
2980    <table border="0" cellpadding="2" cellspacing="2">
2981      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2982        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47913">47913</a>: Return the IP address rather than null for
2983        <code>getRemoteHost()</code> with the APR connector if the IP address
2984        does not resolve. (markt)
2985      </td></tr>
2986      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2987        Avoid a NPE for APR connector unlockAccept with default soTimeout.
2988        (mturk)
2989      </td></tr>
2990      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2991        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48545">48545</a>: Allow JSSE trust stores to be used without providing
2992        a password. Based on a patch by smmwpf54. (kkolinko)
2993      </td></tr>
2994      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
2995        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48738">48738</a>: Add support for flushing gzipped output. Based on a
2996        patch by Jiong Wang. (markt)
2997      </td></tr>
2998      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
2999        Avoid a NPE in the DeltaManager when a parallel request invalidates the
3000        session before the current request has a chance to send the replication
3001        message. (markt)
3002      </td></tr>
3003      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3004        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48925">48925</a>: <code>request.getLocalAddr()</code> returns
3005        <code>null</code>
3005 when using the default Jk AJP/1.3 connector. (rjung)
3006      </td></tr>
3007      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3008        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49497">49497</a>: Stop accepting new requests (inc keep-alive) once the
3009        BIO connector is paused and the current request has finished processing.
3010        (markt)
3011      </td></tr>
3012      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3013        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49521">49521</a>: Disable scanning for a free port in Jk AJP/1.3
3014        connector by default. Do not change <code>maxPort</code> field value of ChannelSocket
3015        in its <code>setPort()</code> and <code>init()</code> methods. Add
3016        support for <code>maxPort</code> attribute on a <code>Connector</code>
3017        element as a synonym for <code>channelSocket.maxPort</code>. (kkolinko)
3018      </td></tr>
3019      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3020        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49625">49625</a>: Ensure Vary header is set if response may be
3021        compressed rather than only setting it if it is compressed. (markt)
3022      </td></tr>
3023      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3024        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49730">49730</a>: Fix race condition in StandardThreadExecutor that can
3025        lead to long delays in processing requests. Patch provided by Sylvain
3026        Laurent. (markt)
3027      </td></tr>
3028      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3029        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49860">49860</a>: Add support for trailing headers in chunked HTTP
3030        requests. The header length is limited to 8192 by default and the limit
3031        can be changed via a system property. (markt/kkolinko)
3032      </td></tr>
3033      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3034        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49972">49972</a>: Fix potential thread safe issue when formatting dates
3035        for use in HTTP headers. (markt)
3036      </td></tr>
3037      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3038        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50072">50072</a>: NIO connector can mis-read request line if not sent in
3039        a single packet. (markt/kkolinko)
3040      </td></tr>
3041      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3042        Improve recycling of processors in Http11NioProtocol. (kkolinko)
3043      </td></tr>
3044      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
3045        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50273">50273</a>: Provide a workaround for an HP-UX issue that can
3046        result in large numbers of SEVERE log messages appearing in the logs as
3047        a result of normal operation. (markt)
3048      </td></tr>
3049      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3050        Make SSL certificate encoding algorithm consistent between connectors by
3051        using the JVM default for all connectors. This also fixes an issue with
3052        the NIO connector on IBM JVMs. (markt)
3053      </td></tr>
3054      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3055        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50467">50467</a>: Protected against NPE triggered by a race condition
3056        that causes the NIO poller to fail, preventing the processing of further
3057        requests. (markt)
3058      </td></tr>
3059    </table>
3060  </blockquote></td></tr></table>
3061  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.30 (jfclere)/Jasper"><!--()--></a><a name="Tomcat_6.0.30_(jfclere)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>
3062    <table border="0" cellpadding="2" cellspacing="2">
3063      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
3064        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49217">49217</a>: Ensure that identifiers used in EL meet the
3065        requirements of the Java Language Specification. This check is off by
3066        default and can be enabled by setting a system property. (markt)
3067      </td></tr>
3068      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3069        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49555">49555</a>: Correctly handled Tag Libraries where functions are
3070        defined in static inner classes. (markt)
3071      </td></tr>
3072      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3073        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49665">49665</a>: Provide better information including JSP file name and
3074        location when a missing file is detected during TLD handling. Patch
3075        provided by Ted Leung. (markt)
3076      </td></tr>
3077      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3078        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49985">49985</a>: Fix thread safety issue in EL parser. (markt)
3079      </td></tr>
3080      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3081        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49986">49986</a>: Fix thread safety issue in JSP reloading. (timw))
3082      </td></tr>
3083      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3084        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49998">49998</a>: Make jsp:root detection work with single quoted
3085        attributes as well. (timw)
3086      </td></tr>
3087      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3088        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50066">50066</a>: Compile a recursive tag file if it depends on a JAR.
3089        Patch provided by Sylvain Laurent. (markt)
3090      </td></tr>
3091      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3092        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50078">50078</a>: Fix threading issues in EL caches and make cache sizes
3093        configurable. Threading patch provided by Takayoshi Kimura. (markt)
3094      </td></tr>
3095      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3096        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50105">50105</a>: When processing composite EL expressions use
3097        <code>Enum.name()</code> rather than <code>Enum.toString()</code> as
3098        required by the EL specification. (markt)
3099      </td></tr>
3100      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3101        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50228">50228</a>: Improve recycling of <code>BodyContentImpl</code>.
3102        This avoids keeping a cached reference to a webapp-provided Writer
3103        used in JspFragment.invoke() calls. (kkolinko)
3104      </td></tr>
3105      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3106        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50460">50460</a>: Fix memory leak in JspDocumentParser triggered by
3107        first access to a jspx page. (kkolinko)
3108      </td></tr>
3109      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3110        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50500">50500</a>: Use correct coercions (as per the EL spec) for
3111        arithmetic operations involving string values containing '.',
3112        'e' or 'E'. Based on a patch by Brian Weisleder.
3113        (markt)
3114      </td></tr>
3115    </table>
3116  </blockquote></td></tr></table>
3117  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.30 (jfclere)/Cluster"><!--()--></a><a name="Tomcat_6.0.30_(jfclere)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>
3118    <table border="0" cellpadding="2" cellspacing="2">
3119      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3120        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49343">49343</a>: When ChannelException is thrown, remove listener from
3121        channel. (kfujino)
3122      </td></tr>
3123      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3124        Add Null check when CHANGE_SESSION_ID message received. (kfujino)
3125      </td></tr>
3126      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3127        When a cluster node disappears when using the backup manager, handle the
3128        failed ping message rather than propagating the exception (which just
3129        logs the stack trace but doesn't do anything to deal with the failure).
3130        (markt)
3131      </td></tr>
3132      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3133        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49905">49905</a>: Fix potential memory leak when using asynchronous
3134        session replication. (markt)
3135      </td></tr>
3136      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3137        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49924">49924</a>: When non-primary node changes into a primary node,
3138        make sure isPrimarySession is changed to true. (kfujino)
3139      </td></tr>
3140      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3141        Add support for <code>maxActiveSessions</code> attribute to
3142        BackupManager. (kfujino)
3143      </td></tr>
3144      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3145        Improve sending an access message in DeltaManager.
3146        Use <code>maxInactiveInterval</code> not of the Manager, but of the session. 
3147        If <code>maxInactiveInterval</code> is negative, the access message is not
3148        being sent. (kfujino)
3149      </td></tr>
3150      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3151        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50547">50547</a>: Add time stamp for CHANGE_SESSION_ID message and 
3152        SESSION_EXPIRED message. (kfujino)
3153      </td></tr>
3154    </table>
3155  </blockquote></td></tr></table>
3156  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.30 (jfclere)/Web applications"><!--()--></a><a name="Tomcat_6.0.30_(jfclere)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>
3157    <table border="0" cellpadding="2" cellspacing="2">
3158      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3159        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49585">49585</a>: Update JSVC documentation to reflect new packaging
3160        of Commons Daemon. (markt)
3161      </td></tr>
3162      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
3163        Configure the Manager web application to use the new CSRF protection. To
3164        take advantage of this protection, the <code>manager</code> role must be
3165        removed from all users and the new <code>manager-gui</code> and
3166        <code>manager-script</code> roles used instead. (markt)
3167      </td></tr>
3168      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
3169        Configure the Host Manager web application to use the new CSRF
3170        protection. To take advantage of this protection, the <code>admin</code> role
3171        must be removed from all users and the new <code>admin-gui</code> and
3172        <code>admin-script</code> roles used instead. (markt)
3173      </td></tr>
3174      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3175        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50303">50303</a>: Update JNDI how-to to reflect new JavaMail and JAF
3176        download locations and that JAF is now included in Java SE 6. (markt) 
3177      </td></tr>
3178      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3179        CVE-2010-4172: Multiple XSS in Manager application. (markt/kkolinko)
3180      </td></tr>
3181      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
3182        Improve Tomcat Logging documentation. (kkolinko)
3183      </td></tr>
3184      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
3185        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50242">50242</a>: Provide a sample log4j  configuration that more
3186        closely matches the default JULI configuration. Patch provided by
3187        Christopher Schultz. (kkolinko)
3188      </td></tr>
3189      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
3190        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50294">50294</a>: Add more information to documentation regarding format
3191        of configuration files. Patch provided by Luke Meyer. (markt) 
3192      </td></tr>
3193      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
3194        Configure the Manager and Host-Manager web applications to use HttpOnly
3195        flag for their session cookies. (kkolinko)
3196      </td></tr>
3197      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3198        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50316">50316</a>: Fix display of negative values in the Manager web
3199        application. (kkolinko)
3200      </td></tr>
3201      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
3202        Improve documentation of database connection factory. (rjung)
3203      </td></tr>
3204    </table>
3205  </blockquote></td></tr></table>
3206  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.30 (jfclere)/Other"><!--()--></a><a name="Tomcat_6.0.30_(jfclere)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>
3207    <table border="0" cellpadding="2" cellspacing="2">
3208      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
3209        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48716">48716</a>: Do not call reset if the default LogManager is in use.
3210        (markt)
3211      </td></tr>
3212      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3213        Use native line endings for example Eclipse configuration files in
3214        source distribution. (markt)
3215      </td></tr>
3216      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3217        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49428">49428</a>: Add a work-around for the known namespace issues for
3218        some Microsoft WebDAV clients. Based on the patch provided by
3219        Panagiotis Astithas. (kkolinko)
3220      </td></tr>
3221      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3222        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49861">49861</a>: Fix formatting of log messages in JXM remote listener.
3223        Do not use commas when printing RMI port numbers. (markt)
3224      </td></tr>
3225      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3226        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50140">50140</a>: Don't ignore a user specified install directory
3227        on 64-bit platforms when using the Windows installer. (markt)
3228      </td></tr>
3229      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3230        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=50552">50552</a>: Avoid NPE that hides error message when using Ant
3231        tasks. (schultz)
3232      </td></tr>
3233      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
3234        Numerous improvements to the Windows installer: update install/uninstall
3235        icons, create an installation log, allow 32-bit JVMs to be selected when
3236        installing on a 64-bit platform, replace the .ini files with the script
3237        equivalents, use the new manager and host-manager roles, provide the
3238        ability to edit the roles for the added user, add support for the
3239        <code>/?</code> command line switch, clean up fully after installation,
3240        add DetailPrint statements for operations that may take time and
3241        improve the descriptions of the components. (kkolinko, mturk, markt)
3242      </td></tr>
3243    </table>
3244  </blockquote></td></tr></table>
3245</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgco
3245lor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.29 (jfclere)"><!--()--></a><a name="Tomcat_6.0.29_(jfclere)"><strong>Tomcat 6.0.29 (jfclere)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2010-07-22</strong></font></td></tr><tr><td colspan="2"><blockquote>
3246  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.29 (jfclere)/Catalina"><!--()--></a><a name="Tomcat_6.0.29_(jfclere)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
3247    <table border="0" cellpadding="2" cellspacing="2">
3248      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
3249        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48960">48960</a>: Add a new option to the SSI Servlet and SSI Filter to
3250        allow the disabling of the <code>exec</code> command. This is now
3251        disabled by default. Based on a patch by Yair Lenga. (markt)
3252      </td></tr>
3253      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3254        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49551">49551</a>: Allow default context.xml location to be specified
3255        using an absolute path. (markt)
3256      </td></tr>
3257      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3258        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49598">49598</a>: When session is changed and the session cookie is
3259        replaced, ensure that the new Set-Cookie header overwrites the old
3260        Set-Cookie header. (markt)
3261      </td></tr>
3262      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3263        Fix order when listing Webapp loader search URLs. (rjung)
3264      </td></tr>
3265      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
3266        Add support for <code>*.jar</code> pattern in VirtualWebappLoader.
3267        (kkolinko)
3268      </td></tr>
3269    </table>
3270  </blockquote></td></tr></table>
3271</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.28 (jfclere)"><!--()--></a><a name="Tomcat_6.0.28_(jfclere)"><strong>Tomcat 6.0.28 (jfclere)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2010-07-09</strong></font></td></tr><tr><td colspan="2"><blockquote>
3272  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.28 (jfclere)/Catalina"><!--()--></a><a name="Tomcat_6.0.28_(jfclere)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
3273    <table border="0" cellpadding="2" cellspacing="2">
3274      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>Arrange filter logic. (jfclere)
3275      </td></tr>
3276      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3277        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49230">49230</a>: Enhance JRE leak prevention listener with protection
3278        for the keep-alive thread started by
3279        <code>sun.net.www.http.HttpClient</code>. Patch provided by Rob Kooper.
3280        (markt)
3281      </td></tr>
3282      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3283        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49351">49351</a>: Fix possible NPE when embedding and no name is
3284        specified for the Service. (markt)
3285      </td></tr>
3286      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3287        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49424">49424</a>: Avoid NPE if client provides no data with a chunked
3288        POST request. (markt)
3289      </td></tr>
3290      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3291        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49414">49414</a>: Improve diagnostic of memory leaks.
3292        Differentiate between request threads and application
3293        created threads when warning about still running threads when an
3294        application stops. (markt)
3295      </td></tr>
3296      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3297        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49443">49443</a>: Fix RemoteIpValve documentation. Use remoteIpHeader
3298        rather than remoteIPHeader consistently. (markt)
3299      </td></tr>
3300      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
3301        Add property <code>searchExternalFirst</code> to WebappLoader.
3302        If set, the external repositories will be searched before
3303        the WEB-INF ones. (rjung)
3304      </td></tr>
3305    </table>
3306  </blockquote></td></tr></table>
3307  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.28 (jfclere)/Cluster"><!--()--></a><a name="Tomcat_6.0.28_(jfclere)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>
3308    <table border="0" cellpadding="2" cellspacing="2">
3309      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3310        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49445">49445</a>: When session ID is changed after authentication,
3311        ensure the DeltaManager replicates the change in ID to the other nodes
3312        in the cluster. (kfujino)
3313      </td></tr>
3314    </table>
3315  </blockquote></td></tr></table>
3316  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.28 (jfclere)/Web applications"><!--()--></a><a name="Tomcat_6.0.28_(jfclere)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>
3317    <table border="0" cellpadding="2" cellspacing="2">
3318      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3319        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49213">49213</a>: Grant permissions required by manager application when
3320        running under a security manager. (markt/kkolinko)
3321      </td></tr>
3322      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3323        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49436">49436</a>: Correct documented default for <code>readonly</code>
3324        attribute of the UserDatabase component. (markt)
3325      </td></tr>
3326    </table>
3327  </blockquote></td></tr></table>
3328</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.27 (jfclere)"><!--()--></a><a name="Tomcat_6.0.27_(jfclere)"><strong>Tomcat 6.0.27 (jfclere)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote>
3329  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.27 (jfclere)/General"><!--()--></a><a name="Tomcat_6.0.27_(jfclere)/General"><strong>General</strong></a></font></td></tr><tr><td><blockquote>
3330    <table border="0" cellpadding="2" cellspacing="2">
3331      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
3332        Update DBCP to 1.3. (markt)
3333      </td></tr>
3334    </table>
3335  </blockquote></td></tr></table>
3336  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.27 (jfclere)/Catalina"><!--()--></a><a name="Tomcat_6.0.27_(jfclere)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
3337    <table border="0" cellpadding="2" cellspacing="2">
3338      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3339        Fix CVE-2010-1157. Prevent possible disclosure of host name or IP
3340        address via the HTTP WWW-Authenticate header when using BASIC or DIGEST
3341        authentication. (markt)
3342      </td></tr>
3343      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
3344        Include context name when reporting memory leaks to aid root cause
3345        identification. (markt)
3346      </td></tr>
3347      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3348        Improve exception handling on session de-serialization to assist in
3349        identifying the root cause of <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48007">48007</a>. (kkolinko)
3350      </td></tr>
3351      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
3352        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48379">48379</a>: Make session cookie name, domain and path configurable
3353        per context. (markt)
3354      </td></tr>
3355      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3356        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48589">48589</a>: Make JNDIRealm easier to extend. Based on a patch by
3357        Candid Dauth. (markt/kkolinko)
3358      </td></tr>
3359      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3360        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48629">48629</a>: Allow user names as well as DNs to be used with the
3361        nested role search. Add roleNested to the documentation. Patch provided
3362        by Felix Schumacher. (markt)
3363      </td></tr>
3364      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3365        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48661">48661</a>: Make error page behavior consistent, regardless of how
3366        the error page is defined. If a response has been committed, always
3367        include the error page. (markt)
3368      </td></tr>
3369      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3370        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48729">48729</a>: Return roles defined by both userRoleName and roleName
3371        mechanisms. Patch provided by 'eric'. Also make user's role list
3372        immutable.(markt)
3373      </td></tr>
3374      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3375        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48760">48760</a>: Fix potential multi-threading issue in static resource
3376        serving where multiple threads could try to use the same
3377        InputStream. (markt)
3378      </td></tr>
3379      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3380        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48790">48790</a>: Fix thread safety issue in the count of the maximum
3381        number of active session. (markt/kkolinko)
3382      </td></tr>
3383      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3384        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48793">48793</a>: Make catalina.sh more robust to different return
3385        values on different platforms. Patch provided by Thomas GL. (markt)
3386      </td></tr>
3387       <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3388        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48840">48840</a>: Swallow output (if any) from use of cd when determining
3389        $CATALINA_HOME in catalina.sh and tool-wrapper.sh scripts. Based on patch
3390        provided by mdietze. (markt/kkolinko)
3391      </td></tr>
3392      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3393        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48895">48895</a>: Make clearing of ThreadLocals that are causing memory
3394        leaks on web application stop, reload or undeploy configurable since the
3395        process of clearing them is not thread-safe. (markt)
3396      </td></tr>
3397      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3398        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48903">48903</a>: Fix deadlock in webapp class loader. (rjung)
3399      </td></tr>
3400      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3401        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48971">48971</a>: Make stopping of leaking Timer threads optional and
3402        disabled by default. (markt)
3403      </td></tr>
3404      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3405        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48976">48976</a>: Document JAVA_ENDORSED_DIRS in start-up scripts. Patch
3406        provided by Laurent Vaills. (markt)
3407      </td></tr>
3408      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3409        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48983">48983</a>: Improve debug logging for situations when
3410        <code>RemoteIpValve</code> is bypassed. Patch provided by Cyrille Le
3411        Clerc. (markt)
3412      </td></tr>
3413      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3414        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49018">49018</a>: Fix processing of time argument in the Expire sessions
3415        action in the Manager web application. (kkolinko)
3416      </td></tr>
3417      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3418        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49116">49116</a>
3418: If session is already invalid, expire session to
3419        prevent memory leak. (kfujino)
3420      </td></tr>
3421      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3422        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49158">49158</a>: Ensure only one session cookie is returned for a
3423        single request. (markt/fhanik)
3424      </td></tr>
3425      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3426        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49245">49245</a>: Fix session expiration check in cross-context
3427        requests. (markt)
3428      </td></tr>
3429      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3430        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49398">49398</a>: ByteChunk.indexOf(String, int, int, int) could not
3431        find a string of length 1. (kkolinko)
3432      </td></tr>
3433      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3434        Fix possible overflows when calculating session statistics. (kkolinko)
3435      </td></tr>
3436      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
3437        Log unexpected exceptions when providing access to web application
3438        resources in ApplicationContext. (kkolinko)
3439      </td></tr>
3440      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3441        Improve exception handling in CatalinaShutdownHook. (kkolinko)
3442      </td></tr>
3443      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
3444        Expose properties of VirtualWebappLoader and WebappClassLoader via JMX.
3445        (rjung)
3446      </td></tr>
3447    </table>
3448  </blockquote></td></tr></table>
3449  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.27 (jfclere)/Coyote"><!--()--></a><a name="Tomcat_6.0.27_(jfclere)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>
3450    <table border="0" cellpadding="2" cellspacing="2">
3451      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3452        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48839">48839</a>: Correctly handle HTTP header folding in the NIO
3453        connector. Patch suggested by Richa Baronia. (markt)
3454      </td></tr>
3455      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3456        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48843">48843</a>: Prevent possible deadlock for worker allocation in
3457        connectors. (kkolinko)
3458      </td></tr>
3459      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3460        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48843">48843</a>: Fix handling of add queues in AprEndpoint.Poller and
3461        AprEndpoint.Sendfile. Do not miss wakeups. (kkolinko)
3462      </td></tr>
3463      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
3464        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48862">48862</a>: Add support for the backlog parameter to the AJP
3465        connector. (pero/markt)
3466      </td></tr>
3467      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3468        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48917">48917</a>: Correct name of mod_jk module in ApacheConfig. Patch
3469        provided by Todd Hicks. (markt)
3470      </td></tr>
3471      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3472        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49095">49095</a>: AprEndpoint did not wakeup acceptors during shutdown
3473        when deferAccept option was enabled. Based on a patch provided by
3474        Ruediger Pluem. (kkolinko)
3475      </td></tr>
3476      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
3477        Use chunked encoding for http 1.1 requests with no content-length
3478        (regardless of keep-alive) so client can differentiate between complete
3479        and partial responses. (markt)
3480      </td></tr>
3481      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3482        Correct the SSL session timeout attribute name so the code agrees with
3483        the documentation. (markt)
3484      </td></tr>
3485      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
3486        CoyotePrincipal now implements Serializable. (fhanik)
3487      </td></tr>
3488      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3489        Enable the BIO AJP connector to run under a security manager. (markt)
3490      </td></tr>
3491    </table>
3492  </blockquote></td></tr></table>
3493  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.27 (jfclere)/Jasper"><!--()--></a><a name="Tomcat_6.0.27_(jfclere)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>
3494    <table border="0" cellpadding="2" cellspacing="2">
3495      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3496        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45015">45015</a>: Correct a regression in quote handling caused by the
3497        re-factoring of attribute parsing. (markt)
3498      </td></tr>
3499      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3500        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48701">48701</a>: Add a system property to allow disabling enforcement
3501        of JSP.5.3. The specification recommends, but does not require, this
3502        enforcement. (kkolinko)
3503      </td></tr>
3504      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3505        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48737">48737</a>: Don't assume paths that start with /META-INF/... are
3506        always in JARs. This is not true for some IDEs. Patch provided by
3507        Fabrizio Giustina. (markt)
3508      </td></tr>
3509      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3510        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49081">49081</a>: Correctly handle EL expressions of the form #${...}.
3511        (markt)
3512      </td></tr>
3513      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3514        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49196">49196</a>: Avoid NullPointerException in PageContext.getErrorData()
3515        if an error-handling JSP page is called directly. (markt)
3516      </td></tr>
3517    </table>
3518  </blockquote></td></tr></table>
3519  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.27 (jfclere)/Cluster"><!--()--></a><a name="Tomcat_6.0.27_(jfclere)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>
3520    <table border="0" cellpadding="2" cellspacing="2">
3521      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3522        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48717">48717</a>: When a node joins a cluster and it receives all the
3523        current sessions, ensure the sessionCreated event is fired if the
3524        Manager is configured to replicate session events. (markt)
3525      </td></tr>
3526      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3527        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48934">48934</a>: Previous fix to handle dropped connections incorrectly
3528        permanently disabled session replication. (fhanik)
3529      </td></tr>
3530      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3531        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49051">49051</a>: memberAlive is not called if member has not already
3532        existed in membership. (kfujino)
3533      </td></tr>
3534      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3535        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49151">49151</a>: Avoid ClassCastException in BackupManager#stop.
3536        (kfujino)
3537      </td></tr>
3538      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3539        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49170">49170</a>: Do not send duplicated session. (kfujino)
3540      </td></tr>
3541      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3542        Add missing messages and ensure cluster listeners log messages to
3543        correct logger. (markt)
3544      </td></tr>
3545    </table>
3546  </blockquote></td></tr></table>
3547  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.27 (jfclere)/Web applications"><!--()--></a><a name="Tomcat_6.0.27_(jfclere)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>
3548    <table border="0" cellpadding="2" cellspacing="2">
3549      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
3550        Use underscores instead of spaces in anchor names in Tomcat
3551        documentation. (kkolinko)
3552      </td></tr>
3553      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
3554        Add support for displaying the Spring Security user name (if present) in
3555        the Manager application. (markt)
3556      </td></tr>
3557      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
3558        Improve the ChatServlet <a href="aio.html">Comet</a> example
3559        (/examples/jsp/chat/). (kkolinko)
3560      </td></tr>
3561    </table>
3562  </blockquote></td></tr></table>
3563  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.27 (jfclere)/Other"><!--()--></a><a name="Tomcat_6.0.27_(jfclere)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>
3564    <table border="0" cellpadding="2" cellspacing="2">
3565      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>Update to Commons Daemon 1.0.2. Use service launcher (procrun)
3566      from the Commons Daemon release. Do not keep a copy of it in our source
3567      tree. (mturk/kkolinko)</td></tr>
3568      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
3569        Update to NSIS 2.46. (kkolinko)
3570      </td></tr>
3571      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3572        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48990">48990</a>: Fix the <code>skip.installer</code> build property
3573        so if set, only the Windows installer is skipped. (markt)
3574      </td></tr>
3575      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3576        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49178">49178</a>: Provide in catalina.policy an example of additional
3577        permissions that might be needed for code located in
3578        <code>$CATALINA_BASE/lib</code>. (markt)
3579      </td></tr>
3580      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3581        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=49236">49236</a>: Do not use indexing when packing Tomcat JARs.
3582        (kkolinko)
3583      </td></tr>
3584      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3585        Remove unused code from org.apache.tomcat.util.buf classes. (kkolinko)
3586      </td></tr>
3587      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
3588        Rearrange tomcat-juli.jar permissions and wrap long lines in the
3589        <code>conf/catalina.policy</code> file, to make the text more readable
3590        when cited in documentation. (kkolinko)
3591      </td></tr>
3592      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3593        Do not evaluate the <code>execute.installer</code> property when building
3594        a release. The <code>skip.installer</code> property is used instead.
3595        (kkolinko)
3596      </td></tr>
3597    </table>
3598  </blockquote></td></tr></table>
3599</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.26 (jfclere)"><!--()--></a><a name="Tomcat_6.0.26_(jfclere)"><strong>Tomcat 6.0.26 (jfclere)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2010-03-11</strong></font></td></tr><tr><td colspan="2"><blockquote>
3600  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.26 (jfclere)/Catalina"><!--()--></a><a name="Tomcat_6.0.26_(jfclere)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
3601    <table border="0" cellpadding="2" cellspacing="2">
3602      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3603        Close security hole in unreleased 6.0.25 by ensuring new find leaks
3604        functionality is protected by a security constraint. (kkolinko)
3605      </td></tr>
3606      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3607        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48831">48831</a>: Improve logging shutdown behaviour. Use Catalina's
3608        shutdown hook to shutdown JULI. This enables them to be shutdown in the
3609        correct order. Do not shutdown global handlers several times.
3610        (markt/kkolinko)
3611      </td></tr>
3612    </table>
3613  </blockquote></td></tr></table>
3614  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.26 (jfclere)/Coyote"><!--()--></a><a name="Tomcat_6.0.26_(jfclere)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>
3615    <table border="0" cellpadding="2" cellspacing="2">
3616      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3617        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48584">48584</a>: Prevent the APR connector logging an error if the
3618        acceptor fails during shutdown since this is expected. (mturk)
3619      </td></tr>
3620      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3621        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48660">48660</a>: Using compression should not overwrite any Vary header
3622        set by a web application. (markt)
3623      </td></tr>
3624    </table>
3625  </blockquote></td></tr></table>
3626  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.26 (jfclere)/Jasper"><!--()--></a><a name="Tomcat_6.0.26_(jfclere)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>
3627    <table border="0" cellpadding="2" cellspacing="2">
3628      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3629        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48371">48371</a>: Ensure generated servlet mappings are inserted at the
3630        correct location when using JspC and allow the option that controls this
3631        to be configured on the command line. Also allow the encoding of web.xml
3632        to be configured when using JspC and deprecate some unused JspC methods.
3633        (markt/kkolinko)
3634      </td></tr>
3635      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3636        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48498">48498</a>: Avoid ArrayIndexOutOfBoundsException triggered by a
3637        Java 6/7 XML parser bug. (markt/kkolinko)
3638      </td></tr>
3639      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3640        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48668">48668</a>: Additional fixes to ensure deferred syntax is handled
3641        correctly. (kkolinko)
3642      </td></tr>
3643      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3644        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48827">48827</a>: Correct a regression in the fix for <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47977">47977</a>
3645        that caused an incorrect non-empty body error to be reported for valid
3646        JSP documents. (markt)
3647      </td></tr>
3648    </table>
3649  </blockquote></td></tr></table>
3650  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.26 (jfclere)/Web applications"><!--()--></a><a name="Tomcat_6.0.26_(jfclere)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>
3651    <table border="0" cellpadding="2" cellspacing="2">
3652      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
3653        Make changelog.xml be directly rendered as HTML by certain browsers.
3654        (kkolinko)
3655      </td></tr>
3656      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
3657        Add support for automated generation of TOC tables and for links to svn
3658        revisions to tomcat-docs.xsl in documentation. (kkolinko/fhanik)
3659      </td></tr>
3660      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
3661        Move Manager application JSPs that are not intended to be accessed
3662        directly under the WEB-INF directory. (kkolinko)
3663      </td></tr>
3664      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3665        Improve the messages displayed by the find leaks diagnostic in the
3666        Manager application. (kkolinko)
3667      </td></tr>
3668    </table>
3669  </blockquote></td></tr></table>
3670  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.26 (jfclere)/Other"><!--()--></a><a name="Tomcat_6.0.26_(jfclere)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>
3671    <table border="0" cellpadding="2" cellspacing="2">
3672      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3673        Encode all property files using ascii escaped UTF-8. Also fixes
3674        deployment problem when using French locale. (jfclere/rjung)
3675      </td></tr>
3676    </table>
3677  </blockquote></td></tr></table>
3678</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.25 (jfclere)"><!--()--></a><a name="Tomcat_6.0.25_(jfclere)"><strong>Tomcat 6.0.25 (jfclere)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote>
3679  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.25 (jfclere)/Catalina"><!--()--></a><a name="Tomcat_6.0.25_(jfclere)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
3680    <table border="0" cellpadding="2" cellspacing="2">
3681      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3682        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48039">48039</a>: Return immediately if start() is called on an already
3683        started StandardService. (markt)
3684      </td></tr>
3685      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3686        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48109">48109</a>: Ensure InputStream is closed on error condition in web
3687        application class loader. (markt)
3688      </td></tr>
3689      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3690        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48179">48179</a>: Clean up dead code that was used to read tldCache
3691        file. (kkolinko)
3692      </td></tr>
3693      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3694        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48318">48318</a>: Handle case where WebDAV resource is in directory
3695        listing but is not accessible. (markt)
3696      </td></tr>
3697      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
3698        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48384">48384</a>: Add a per context xslt option for directory listings.
3699        Make the fallback options work as described in the documentation.
3700        (markt)
3701      </td></tr>
3702      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3703        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48577">48577</a>: Filter URL when displaying missing included page.
3704        (markt)
3705      </td></tr>
3706      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3707        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48612">48612</a>: Prevent exception on shutdown if the address attribute
3708        is specified for a connector. (markt)
3709      </td></tr>
3710      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3711        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48613">48613</a>: Further fixes to ensure APRLifecycleListener is only
3712        used if defined in server.xml. (fhanik)
3713      </td></tr>
3714      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3715        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48614">48614</a>: Correct JULI log file buffering so default behaviour
3716        is no buffering. (fhanik)
3717      </td></tr>
3718      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3719        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48625">48625</a>: Provide an option to exit if an error occurs during
3720        the initialization phase. (fhanik)
3721      </td></tr>
3722      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3723        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48645">48645</a>: Use specified encoding rather than null in calls to
3724        <code>RequestUtil.URLDecode(byte[] bytes, String enc)</code> (markt)
3725      </td></tr>
3726      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3727        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48653">48653</a>: Force request.secure and request.scheme to
3728        <code>false</code> and <code>http</code> if the X-Forwarded-Proto header
3729        has the value http. Patch provided by Cyrille Le Clerc. (markt)
3730      </td></tr>
3731      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3732        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48678">48678</a>: Remove duplicate server field from
3733        <code>org.apache.catalina.startup.Catalina</code>. (markt)
3734      </td></tr>
3735      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3736        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48694">48694</a>: Remove potential deadlock in web application class
3737        loader. (markt)
3738      </td></tr>
3739      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
3740        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48716">48716</a>: Provide additional configuration options for JULI.
3741        (markt)
3742      </td></tr>
3743      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3744        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48726">48726</a>: Prevent OOME when uploading large WAR files with the
3745        deployer. Patch provided by adam. (markt)
3746      </td></tr>
3747      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
3748        Improve memory leak protection by safely stopping threads started via
3749        <code>java.util.Timer</code> that an application starts but fails to
3750        stop and by clearing references retained due to the use of
3751        <code>java.util.ResourceBundle</code>. (markt)
3752      </td></tr>
3753      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
3754        Modify ThreadLocal memory leak detection to not report false positives
3755        and to simplify implementation. (markt/kkolinko)
3756      </td></tr>
3757      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
3758        Basic memory leak detection was added to the standard Host
3759        implementation and exposed via JMX to detect memory leaks on web
3760        application reload. (markt/kkolinko)
3761      </td></tr>
3762    </table>
3763  </blockquote></td></tr></table>
3764  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.25 (jfclere)/Coyote"><!--()--></a><a name="Tomcat_6.0.25_(jfclere)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>
3765    <table border="0" cellpadding="2" cellspacing="2">
3766      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
3767        Update the native/APR library version bundled with Tomcat to 1.1.20.
3768        (kkolinko)
3769      </td></tr>
3770    </table>
3771  </blockquote></td></tr></table>
3772  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.25 (jfclere)/Jasper"><!--()--></a><a name="Tomcat_6.0.25_(jfclere)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>
3773    <table border="0" cellpadding="2" cellspacing="2">
3774      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
3775        Add some debug logging to the compiler where exceptions were previously
3776        swallowed. (markt)
3777      </td></tr>
3778      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3779        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48170">48170</a>: Remove unnecessary synchronization that is causing
3780        issues under load. (markt)
3781      </td></tr>
3782      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3783        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48580">48580</a>: Prevent AccessControlException if first access is to a
3784        JSP that uses a FunctionMapper. (markt)
3785      </td></tr>
3786      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3787        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48582">48582</a>: Avoid NPE on background compilation failure. (markt)
3788      </td></tr>
3789      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3790        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48616">48616</a>: Don't declare or synchronize scripting variables for
3791        JSP fragments since they are scriptless. This is an alternative fix for
3792        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42390">42390</a> that avoids both the original problem and the
3793        regression in the first fix. (kkolinko)
3794      </td></tr>
3795      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3796        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48627">48627</a>: Fix regression in re-factored EL parsing. Keep
3797        literals as literals and handle deferredSyntaxAllowedAsLiteral.
3798        (kkolinko)
3799      </td></tr>
3800      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3801        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48668">48668</a>: When parsing JSPs only parse EL as EL if EL is enabled
3802        else strings such as ${ will be silently dropped. (markt)
3803      </td></tr>
3804      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3805        Various EL TCK failures. (markt)
3806      </td></tr>
3807    </table>
3808  </blockquote></td></tr></table>
3809  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.25 (jfclere)/Cluster"><!--()--></a><a name="Tomcat_6.0.25_(jfclere)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>
3810    <table border="0" cellpadding="2" cellspacing="2">
3811      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3812        Force a disconnect if an error occurs during replication such as
3813        a firewall dropping the connection. (fhanik)
3814      </td></tr>
3815    </table>
3816  </blockquote></td></tr></table>
3817  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.25 (jfclere)/Web applications"><!--()--></a><a name="Tomcat_6.0.25_(jfclere)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>
3818    <table border="0" cellpadding="2" cellspacing="2">
3819      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
3820        Add new "Find leaks" command to the Manager application. It allows to
3821        detect web applications that have caused memory leaks on stop,
3822        reload or undeploy. (markt/kkolinko)
3823      </td></tr>
3824    </table>
3825  </blockquote></td></tr></table>
3826  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.25 (jfclere)/Other"><!--()--></a><a name="Tomcat_6.0.25_(jfclere)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>
3827    <table border="0" cellpadding="2" cellspacing="2">
3828      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3829        Ensure files in conf directory have CRLF line endings when using the
3830        Windows installer. (kkolinko)
3831      </td></tr>
3832      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3833        Allow special characters recognized by the Windows command-line shell to
3834        be present in the names of CATALINA_HOME/_BASE and the current directory
3835        used to call the Tomcat scripts. (kkolinko)
3836      </td></tr>
3837      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3838        Don't use @Deprecated annotations in
3839        <code>javax.servlet.jsp.JspContext</code> since the specification does
3840        not include them in the API definition. (markt)
3841      </td></tr>
3842      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
3843        Improve the information in the JAR manifest files. (markt)
3844      </td></tr>
3845    </table>
3846  </blockquote></td></tr></table>
3847</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.24 (jfclere)"><!--()--></a><a name="Tomcat_6.0.24_(jfclere)"><strong>Tomcat 6.0.24 (jfclere)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2010-01-21</strong></font></td></tr><tr><td colspan="2"><blockquote>
3848  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.24 (jfclere)/Catalina"><!--()--></a><a name="Tomcat_6.0.24_(jfclere)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
3849    <table border="0" cellpadding="2" cellspacing="2">
3850      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3851        Correct TCK failures with security manager caused by the original fix
3852        for <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47774">47774</a>. (markt)
3853      </td></tr>
3854    </table>
3855  </blockquote></td></tr></table>
3856  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.24 (jfclere)/Other"><!--()--></a><a name="Tomcat_6.0.24_(jfclere)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>
3857    <table border="0" cellpadding="2" cellspacing="2">
3858      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3859        Remove broken link in README.html. (jfclere)
3860      </td></tr>
3861      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3862        Add <code>.notice</code> files to the set of files that have their line
3863        endings changed. (markt)
3864      </td></tr>
3865      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3866        <code>.zip</code> distributions should have windows line endings.
3867        (markt)
3868      </td></tr>
3869    </table>
3870  </blockquote></td></tr></table>
3871</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.23 (jfclere)"><!--()--></a><a name="Tomcat_6.0.23_(jfclere)"><strong>Tomcat 6.0.23 (jfclere)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote>
3872  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.23 (jfclere)/Catalina"><!--()--></a><a name="Tomcat_6.0.23_(jfclere)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
3873    <table border="0" cellpadding="2" cellspacing="2">
3874      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3875        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47774">47774</a>: Ensure web application class loader is used when
3876        calling session listeners. (markt)
3877      </td></tr>
3878      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
3879        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48006">48006</a>: Add additional information to the optional
3880        X-Powered-By header to align with the content suggested in the Servlet
3881        specification. (markt)
3882      </td></tr>
3883      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3884        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48345">48345</a>: Sessions timed out too early when using
3885        PersistentManager. Patch provided by Keiichi Fujino. (markt)
3886      </td></tr>
3887      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3888        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48398">48398</a>: Make objects used as locks final to ensure correct
3889        operation. Patch provided by sebb. (markt)
3890      </td></tr>
3891      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3892        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48417">48417</a>: Update French translations. Patch provided by Andr&eacute;
3893        Warnier. (markt/kkolinko)
3894      </td></tr>
3895      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3896        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48421">48421</a>: Fix file descriptor and potential memory leak when a
3897        web application uses a local logging.properties file. Allow a web
3898        application's log files to be deleted once the web application has been
3899        stopped. (markt)
3900      </td></tr>
3901      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3902        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48454">48454</a>: Ensure stderr is completely read before terminating
3903        the CGI process. Patch provided by Markus Grieder. (markt)
3904      </td></tr>
3905      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3906        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48516">48516</a>: Prevent NPE in JNDIRealm if requested user does not
3907        exist. Patch provided by Kevin Conaway. (markt)
3908      </td></tr>
3909      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3910        Fix implementation of log buffer size and provide a cleaner interface.
3911        (fhanik/kkolinko)
3912      </td></tr>
3913    </table>
3914  </blockquote></td></tr></table>
3915  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.23 (jfclere)/Coyote"><!--()--></a><a name="Tomcat_6.0.23_(jfclere)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>
3916    <table border="0" cellpadding="2" cellspacing="2">
3917      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
3918        Update version of native bundled in Windows installer to 1.1.19. (mturk)
3919      </td></tr>
3920      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
3921        Update recommended version for native to 1.1.19. (rjung)
3922      </td></tr>
3923      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3924        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48004">
392448004</a>: All web applications to set the http
3925        <code>Server</code> header. (markt)
3926      </td></tr>
3927      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3928        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48470">48470</a>: Ensure Tomcat does not lock up if shut down under
3929        load. (markt)
3930      </td></tr>
3931    </table>
3932  </blockquote></td></tr></table>
3933  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.23 (jfclere)/Jasper"><!--()--></a><a name="Tomcat_6.0.23_(jfclere)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>
3934  <table border="0" cellpadding="2" cellspacing="2">
3935    <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3936      <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47977">47977</a>: Using a body with a tag that has an empty body should
3937      cause an error. (markt)
3938    </td></tr>
3939    <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3940      <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48112">48112</a>: Correct handling of } character in literals when parsing
3941      expressions. This also improves the fix for <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47413">47413</a>. (markt)
3942    </td></tr>
3943  </table>
3944  </blockquote></td></tr></table>
3945  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.23 (jfclere)/Web applications"><!--()--></a><a name="Tomcat_6.0.23_(jfclere)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>
3946    <table border="0" cellpadding="2" cellspacing="2">
3947      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
3948        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48530">48530</a>: Add information on the Manager Server Status page to
3949        the Manager How-To in the documentation webapp. Based on a patch by
3950        Arnaud Espy. (markt)
3951      </td></tr>
3952      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
3953        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48532">48532</a>: Add information to the BIO/NIO SSL configuration page
3954        in the documentation web application to specify how the defaults for the
3955        various trust store attributes are determined. (markt)
3956      </td></tr>
3957    </table>
3958  </blockquote></td></tr></table>
3959  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.23 (jfclere)/Other"><!--()--></a><a name="Tomcat_6.0.23_(jfclere)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>
3960    <table border="0" cellpadding="2" cellspacing="2">
3961      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3962        Remove hard coded version numbers and instead apply version filter
3963        already defined in ant scripts. (rjung)
3964      </td></tr>
3965      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3966        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47609">47609</a>: Correct regression in previous fix. (markt)
3967      </td></tr>
3968      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
3969        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48464">48464</a>: Provide an option to specify the command window title
3970        in catalina.bat on Windows. Patch provided by LiuYan. (markt)
3971      </td></tr>
3972      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
3973        Add some missing deprecation markers for
3974        <code>javax.servlet.jsp.JspContext</code>. (markt/kkolinko)
3975      </td></tr>
3976    </table>
3977  </blockquote></td></tr></table>
3978</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.22 (jfclere)"><!--()--></a><a name="Tomcat_6.0.22_(jfclere)"><strong>Tomcat 6.0.22 (jfclere)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote>
3979  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.22 (jfclere)/Catalina"><!--()--></a>
3979<a name="Tomcat_6.0.22_(jfclere)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
3980    <table border="0" cellpadding="2" cellspacing="2">
3981      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
3982        Log errors if a web application starts a thread but fails to stop the
3983        thread when the web application stops or is reloaded. Failure to stop a
3984        thread is very likely to result in a memory leak. (markt)
3985      </td></tr>
3986      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
3987        Provide an option to stop any threads a web application starts but fails
3988        to stop when the web application stops or is reloaded. Using this option
3989        is very likely to result in instability and should be viewed as a last
3990        resort in development and is not recommended at all in production.
3991        (markt)
3992      </td></tr>
3993      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
3994        Log errors if a web application creates a ThreadLocal but fails to clear
3995        it when the web application stops or is reloaded. Failure to clear a
3996        ThreadLocal is very likely to result in a memory leak. (markt)
3997      </td></tr>
3998      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
3999        Clear any unintentional references remaining in
4000        <code>sun.rmi.transport.Target</code> when the web application stops or
4001        is reloaded. Failure to clear these is very likely to result in a memory
4002        leak. (markt)
4003      </td></tr>
4004    </table>
4005  </blockquote></td></tr></table>
4006  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.22 (jfclere)/Coyote"><!--()--></a><a name="Tomcat_6.0.22_(jfclere)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>
4007    <table border="0" cellpadding="2" cellspacing="2">
4008      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4009        Remove unneeded line from the method that normalizes decodedURI.
4010        (kkolinko)
4011      </td></tr>
4012    </table>
4013  </blockquote></td></tr></table>
4014  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.22 (jfclere)/Other"><!--()--></a><a name="Tomcat_6.0.22_(jfclere)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>
4015    <table border="0" cellpadding="2" cellspacing="2">
4016      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4017        Correct MD5 generation in the build process. (jfclere/kkolinko)
4018      </td></tr>
4019      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4020        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47609">47609</a>: Provide fail-safe EOL conversion for build process.
4021        Based on patches by sebb/kkolinko. (markt)
4022      </td></tr>
4023    </table>
4024  </blockquote></td></tr></table>
4025</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.21 (jfclere)"><!--()--></a><a name="Tomcat_6.0.21_(jfclere)"><strong>Tomcat 6.0.21 (jfclere)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote>
4026  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.21 (jfclere)/Catalina"><!--()--></a><a name="Tomcat_6.0.21_(jfclere)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
4027    <table border="0" cellpadding="2" cellspacing="2">
4028      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4029        Fix issues with expression language when running under a
4030        SecurityManager. (markt)
4031      </td></tr>
4032      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4033        Remove duplicate mime-mapping entries in web.xml. Re-order entries
4034        alphabetically to make it easier to identify duplicates. (markt)
4035      </td></tr>
4036      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
4037        Use a more sensible default (webapps) for a Host's appBase.
4038        (markt/idarwin)
4039      </td></tr>
4040      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4041        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=37794">37794</a>: Support the parsing of parameters from chunked POSTs.
4042        (markt)
4043      </td></tr>
4044      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4045        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=37984">37984</a>: Strip {MD5} as well as {SHA} if present in digest
4046        passwords in LDAP directories. (markt)
4047      </td></tr>
4048      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4049        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=38352">38352</a>: Allow JSPs to write to the directory defined by
4050        <code>javax.servlet.context.tempdir</code> when running under a security
4051        manager. (markt)
4052      </td></tr>
4053      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4054        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=39231">39231</a>: Call LoginContext.logout() when using JAAS realm and
4055        session expires. (markt/kkolinko)
4056      </td></tr>
4057      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4058        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=40380">40380</a>: Fix potential synchronization issue in
4059        StandardSession.expire(). (markt)
4060      </td></tr>
4061      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4062        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41059">41059</a>: Reduce chances of errors when ENABLE_CLEAR_REFERENCES
4063        is used. Patch provided by Curt Arnold. (markt)
4064      </td></tr>
4065      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4066        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43343">43343</a>: Fix additional concurrency issues identified with the
4067        persistent session manager. (markt)
4068      </td></tr>
4069      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4070        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44041">44041</a>: Fix threading issue in WebappClassLoader that can lead
4071        to duplicate class definition under high load. (markt/fhanik)
4072      </td></tr>
4073      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4074        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44943">44943</a>: Use the same engine name in server.xml comments to
4075        reduce copy and pastes issues. (markt/kkolinko)
4076      </td></tr>
4077      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4078        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45255">45255</a>: Provide protection against session fixation by
4079        changing session ID automatically on authentication. (markt/kkolinko)
4080      </td></tr>
4081      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4082        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45403">45403</a>: Add additional checks on web application deployment
4083        and do not swallow IO errors. (kkolinko)
4084      </td></tr>
4085      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4086        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45785">45785</a>: Additional fix required for the extension validator.
4087        Based on a patch by Rolf Wojtech. (markt)
4088      </td></tr>
4089      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4090        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46908">46908</a>: Try and support java encoding names when using an xml
4091        parser provided via the endorsed mechanism. (markt)
4092      </td></tr>
4093      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4094        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46967">46967</a>: Better handling of errors when trying to use
4095        Manager.randomFile. Based on a patch by Kirk Wolf. (markt)
4096      </td></tr>
4097      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4098        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47046">47046</a>: Unregister all MBeans, including when non-default
4099        engine names are used. (markt)
4100      </td></tr>
4101      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4102        Use native2ascii to ensure non-ASCII characters in property files are
4103        handled correctly in all circumstances. (markt)
4104      </td></tr>
4105      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4106        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47050">
410647050</a>: Remove unnecessary filtering of error messages.
4107        (markt)
4108      </td></tr>
4109      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4110        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47080">47080</a>: Fix NPE in RealmBase when uri is null. (markt)
4111      </td></tr>
4112      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4113        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47158">47158</a>: Fix some thread safety issues in the AccessLogValve.
4114        (markt)
4115      </td></tr>
4116      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4117        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47228">47228</a>: Correct French translations. Patch provided by sebb.
4118        (markt)
4119      </td></tr>
4120      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4121        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47299">47299</a>: Simplify code and make embedding easier. (markt)
4122      </td></tr>
4123      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4124        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47316">47316</a>: Allow different values for Service name and Engine
4125        name. This corrects a regression introduced by the fix for
4126        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42707">42707</a>. (markt)
4127      </td></tr>
4128      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4129        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47343">47343</a>: Editing context.xml for a directory should not delete
4130        the directory. This was a regression caused by the fix for
4131        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42747">42747</a>. (markt)
4132      </td></tr>
4133      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4134        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47364">47364</a>: Improve Javadoc for
4135        org.apache.catalina.connector.Request.getAttributeNames() to include
4136        information on the handling of Tomcat's internal request attributes.
4137        (markt)
4138      </td></tr>
4139      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4140        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47451">47451</a>: Don't throw an NPE if the various response.setHeader()
4141        methods are called with null header name, zero length header name or
4142        null value. Silently ignore the calls in the same way they are ignored
4143        if the response has already been committed. (markt)
4144      </td></tr>
4145      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4146        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47462">47462</a>: Allow individual web applications to override metadata
4147        complete if set in the global web.xml. Patch provided by Keiichi Fujino.
4148        (markt)
4149      </td></tr>
4150      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4151        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47495">47495</a>: Provide a more meaningful error message is server.xml
4152        is not readable and exit immediately if a server cannot be created.
4153        (funkman/kkolinko)
4154      </td></tr>
4155      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4156        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47518">47518</a>: Correct reference in Valve Javadoc that referred to an
4157        old method. Patch provided by Christopher Schultz. (markt)
4158      </td></tr>
4159      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4160        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47537">47537</a>: Return an error page rather than a zero length 200
4161        response if the forward to the login or error page fails during FORM
4162        authentication. (markt)
4163      </td></tr>
4164      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4165        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47718">47718</a>: Fix file descriptor leak on context stop/reload. Patch
4166        provided by George Sexton. (markt)
4167      </td></tr>
4168      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4169        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47796">47796</a>: Fix OpenEJB integration. Reset annotation processor on
4170        context stop. (markt)
4171      </td></tr>
4172      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4173        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47826">47826</a>: Correct error in debug message in
4174        org.apache.catalina.Bootstrap (markt)
4175      </td></tr>
4176      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4177        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47836">47836</a>: Clear cached TLD information on context reload.
4178        (markt)
4179      </td></tr>
4180      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4181        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47841">47841</a>: When using the CombinedRealm, if one of the nested
4182        Realms fails to start, skip that Realm rather than preventing the
4183        CombinedRealm from starting. (markt)
4184      </td></tr>
4185      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4186        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47881">47881</a>: Fix processing of startd and stopd arguments. Patch
4187        provided by Qingyang Xu. (kkolinko)
4188      </td></tr>
4189      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4190        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47918">47918</a>: Correct mbean descriptors for the host deployer. Patch
4191        provided by Uwe G&uuml;nther. (markt)
4192      </td></tr>
4193      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4194        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47930">47930</a>: Fix thread safety issues on session swap-in in the
4195        persistent session manager. (markt/kkolinko)
4196      </td></tr>
4197      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4198        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47976">47976</a>: Correct usage message and Javadoc for
4199        <code>org.apache.catalina.startup.Catalina</code>. (markt)
4200      </td></tr>
4201      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4202        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47997">47997</a>: Ensure the NamingContextListener applies to all naming
4203        contexts, not just the global one. Patch provided by Michael Allman.
4204        (markt)
4205      </td></tr>
4206      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4207        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48049">48049</a>: Fix copy and paste error so
4208        <code>NamingContext.destroySubContext()</code> works correctly.
4209        Patch provided by gingyang.xu (markt)
4210      </td></tr>
4211      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
4212        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48097">48097</a>: Make WebappClassLoader to do not swallow
4213        AccessControlException. (kkolinko)
4214      </td></tr>
4215      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4216        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48097">48097</a>: Avoid throwing an AccessControlException which can
4217        lead to a NoClassDefFoundError on first access of first jsp.
4218        (kkolinko/markt)
4219      </td></tr>
4220      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4221        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48257">48257</a>: Correct error in Spanish translations. Patch provided
4222        by Guillermo Guti&eacute;rrez. (markt)
4223      </td></tr>
4224      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4225        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48306">48306</a>, <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48307">48307</a>: Correct French translations. Patches
4226        provided by Marc Paquette. (markt)
4227      </td></tr>
4228      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4229        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48322">48322</a>: Single quote characters are not HTTP separators and
4230        should not be treated as such in the cookie handling. (markt)
4231      </td></tr>
4232      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4233        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48413">48413</a>: Correct some French translations. Patch provided by
4234        Andr&eacute; Warnier. (markt)
4235      </td></tr>
4236      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
4237        Deprecate the <code>caseSensitive</code> option on the
4238        <code>StandardContext</code> which will be removed in Tomcat 7 onwards.
4239        (markt)
4240      </td></tr>
4241      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4242        Log deployments consistently for WAR, directory and descriptor
4243        deployments. (markt)
4244      </td></tr>
4245      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
4246        Better logging for parameter decoding issues to help identify broken
4247        requests. (markt)
4248      </td></tr>
4249      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
4250        Update Apache Commons Pool from 1.4 to 1.5.4. This update includes
4251        various fixes to prevent deadlocks, reduces synchronization and makes
4252        object allocation occur fairly - i.e. objects are allocated to threads
4253        in the order that the threads request them. This update fixes a number
4254        of issues in Tomcat's built-in copy of DBCP. (markt)
4255      </td></tr>
4256      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
4257        Allow log file encoding to be configured for JULI FileHandler. (kkolinko)
4258      </td></tr>
4259      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
4260        Provide debug logging for JNDI lookups. (markt)
4261      </td></tr>
4262      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4263        Correct JDBC driver de-registration on web application stop and fix NPE
4264        that is exposed by the fix. (markt)
4265      </td></tr>
4266      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4267        Ensure JDBC driver de-registration works with a security manager.
4268        (markt)
4269      </td></tr>
4270      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4271        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48214">48214</a>: Ensure JDBC driver de-registration is not too zealous.
4272        (markt)
4273      </td></tr>
4274      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
4275        Various JNDI realm improvements for Active Directory. These include the
4276        ability to specify a default role, optional handling for nested roles
4277        and an option to ignore PartialResultExceptions (markt).
4278      </td></tr>
4279      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
4280        Expose Servlet Filters via JMX. Based on a patch by Xie Xiaodong as part
4281        of GSOC2009. (markt)
4282      </td></tr>
4283      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
4284        Tomcat now uses the Platform MBean server by default so all MBeans
4285        registered by Tomcat will be exposed via JMX (eg via JConsole) without
4286        requiring any additional configuration. (markt)
4287      </td></tr>
4288      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
4289        The JMX Remote Lifecycle Listener allows the ports used by JMX to be
4290        fixed, making it easier to configure firewalls to all JMX traffic to
4291        pass through. Part of the extras package. (markt)
4292      </td></tr>
4293      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4294        Make context deployment error message for fixDocBase() more meaningful.
4295        (markt)
4296      </td></tr>
4297      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4298        Add an additional permission required by JULI when running under newer
4299        JDKs and a security manager. (markt)
4300      </td></tr>
4301      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4302        Remove unnecessary reference to tomcat-coyote.jar from the bootstrap JAR
4303        manifest. (kkolinko)
4304      </td></tr>
4305      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4306        Use correct method to create URLs in VirtualWebappLoader. (kkolinko)
4307      </td></tr>
4308      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4309        Provide a new listener to protect against a memory leak caused by a
4310        change in the Sun JRE from version 1.6.0_15 onwards. Also include
4311        protection against locked JAR files, memory leaks triggered by
4312        XML parsing and the GC Daemon. (markt)
4313      </td></tr>
4314      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4315        Don't swallow exceptions in ApplicationContextFacade.doPrivileged()
4316        (kkolinko)
4317      </td></tr>
4318      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4319        Close resource stream in WebappClassLoader after read error. (pero)
4320      </td></tr>
4321      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
4322        Include attribute name into the text of Non-serializable exception
4323        that might be thrown by Session.setAttribute() in distributable
4324        applications. (mturk)
4325      </td></tr>
4326      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
4327        Add RemoteIpValve, a port of mod_remoteip. Patch provided by Cyrille Le
4328        Clerc. (markt)
4329      </td></tr>
4330      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
4331        Allow per instance configuration of JULI or log4j for core Tomcat
4332        logging when using CATALINA_BASE. (markt/kkolinko)
4333      </td></tr>
4334      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4335        Prevent NPE in JULI during shutdown when resources try to log messages
4336        after JULI has been shutdown. (fhanik/kkolinko)
4337      </td></tr>
4338      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
4339        Make the JULI FileHandler easier to extend. (fhanik)
4340      </td></tr>
4341      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
4342        Make buffer size for FileHandler configurable. (fhanik)
4343      </td></tr>
4344      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4345        Make JULI FileHandler thread safe. (fhanik)
4346      </td></tr>
4347      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
4348        Provide an option to disable buffering in the JULI FileHandler.
4349        (kkolinko)
4350      </td></tr>
4351      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4352        Ensure log messages are not lost on shutdown. (markt)
4353      </td></tr>
4354      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
4355        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44679">44679</a>: Provide an option to allow the equals character in
4356        unquoted cookie values. (markt)
4357      </td></tr>
4358      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
4359        Add support for a connectionTimeout parameter to the JNDIRealm. (markt)
4360      </td></tr>
4361      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4362        Various (un)deployment related improvements including better handling of
4363        failed (un)deployment, additional checking for valid zip entries that
4364        don't make sense in a WAR and improved validation of WAR file names.
4365        (markt)
4366      </td></tr>
4367    </table>
4368  </blockquote></td></tr></table>
4369  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.21 (jfclere)/Coyote"><!--()--></a><a name="Tomcat_6.0.21_(jfclere)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>
4370    <table border="0" cellpadding="2" cellspacing="2">
4371      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>Implement <code>socket.unlockTimeout</code> attribute for NIO connector.</td></tr>
4372      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
4373        Update version of native bundled in Windows installer
4374        to 1.1.18. (kkolinko)
4375      </td></tr>
4376      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
4377        Update minimum required version for native to 1.1.17. (rjung)
4378      </td></tr>
4379      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4380        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46950">46950</a>: Fix doing SSL renegotiation when a resource with CLIENT-CERT
4381        auth is requested. (markt)
4382      </td></tr>
4383      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4384        Align tcnative native and Java method names. (rjung)
4385      </td></tr>
4386      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>Dont report thread count from connector if an external executor is used.</td></tr>
4387      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4388        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=39637">39637</a>: Enable the AJP connectors to correctly handle client
4389        certificate chains. Patch by Patrik Schnellmann. (markt)
4390      </td></tr>
4391      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4392        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46985">46985</a>: Clean up code and remove impossible condition.
4393        (markt/kkolinko)
4394      </td></tr>
4395      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4396        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47225">47225</a>: Fix error in calculation of a buffer length in the
4397        mapper. (markt)
4398      </td></tr>
4399      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4400        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47320">47320</a>: Don't rely on the platform default encoding being
4401        suitable to parse the session ID. (markt)
4402      </td></tr>
4403      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4404        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47499">47499</a>: Don't swallow bind exceptions. (markt)
4405      </td></tr>
4406      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4407        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47744">47744</a>: Prevent a medium term memory leak if using SSL with
4408        the JSSE provider and also using a security manager. Based on a patch by
4409        Greg Vanore. (markt)
4410      </td></tr>
4411      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4412        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47963">47963</a>: Ensure that any HTTP status messages are compliant
4413        with RFC2616. (markt/kkolinko)
4414      </td></tr>
4415      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4416        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47987">47987</a>: Limit size of not found resources cache. (markt)
4417      </td></tr>
4418      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4419        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48009">48009</a>: Protect against the situation where editing a
4420        context.xml file may result in the file disappearing for a very short
4421        time. (markt)
4422      </td></tr>
4423      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4424        Use correct connector attribute (SSLEnabled) rather than secure to
4425        determine if SSL should be used. (fhanik)
4426      </td></tr>
4427      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4428        Provide a workaround for CVE-2009-3555, the TLS renegotiation issue, for
4429        the default Blocking IO Java connector.
4430      </td></tr>
4431      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4432        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48252">48252</a>: Fix stack overflow exception when setting jkHome on
4433        NIO connector. (fhanik)
4434      </td></tr>
4435      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4436        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48311">48311</a>: Only the APR lifecycle listener should try and
4437        initialise APR. (markt)
4438      </td></tr>
4439    </table>
4440  </blockquote></td></tr></table>
4441  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.21 (jfclere)/Jasper"><!--()--></a><a name="Tomcat_6.0.21_(jfclere)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>
4442    <table border="0" cellpadding="2" cellspacing="2">
4443      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4444        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=38797">38797</a>: Fix a regression in the previous patch for
4445        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=37933">37933</a>. (markt)
4446      </td></tr>
4447      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4448        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=38897">38897</a>: Add uri of broken TLD to error message to aid
4449        debugging. (markt)
4450      </td></tr>
4451      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4452        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41661">41661</a>: Fix thread safety issue with JspConfig.init() (markt)
4453      </td></tr>
4454      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4455        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41824">41824</a>: Need to use canonical rather than binary form when
4456        writing code. (markt)
4457      </td></tr>
4458      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4459        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42390">42390</a>: Fix compilation issue with some nested tag files and
4460        simple tags. (kkolinko/markt)
4461      </td></tr>
4462      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4463        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43656">43656</a>: Correctly coerce <code>null</code> to zero when the
4464        target type is <code>Number</code>. (markt)
4465      </td></tr>
4466      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4467        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46907">46907</a>: Don't swallow input stream when debug logging is
4468        enabled. (markt)
4469      </td></tr>
4470      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4471        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47318">47318</a>: Process directives found in include preludes and
4472        codas. (markt)
4473      </td></tr>
4474      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4475        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47331">47331</a>: Treat uninterpreted tags as template text for JSP.2.2.
4476        (markt)
4477      </td></tr>
4478      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4479        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47413">47413</a>: Ensure expressions of the form "${a}${b}"
4480        are correctly coerced to String. (kkolinko)
4481      </td></tr>
4482      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4483        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47453">47453</a>: Handle void return types for deferred methods.
4484        (funkman)
4485      </td></tr>
4486      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
4487        Remove the code that auto-detects the value for compilerSourceVM,
4488        compilerTargetVM options of Jasper, because we know that this version
4489        of Tomcat cannot run on JDK 1.4 and thus the value is always "1.5".
4490        (kkolinko)
4491      </td></tr>
4492      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
4493        Change default values for JDK version compliance options of JspC
4494        (-source and -target when running from command line)
4495        to be "1.5", to be the same as the ones used by Jasper servlet.
4496        (kkolinko)
4497      </td></tr>
4498      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4499        Make constants in the TagHandlerPool really constant. (markt)
4500      </td></tr>
4501      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4502        When development mode is enabled and a JSP is deleted, ensure next
4503        request for that JSP is consistent with the JSP having been removed.
4504        (markt/kkolinko)
4505      </td></tr>
4506      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4507        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48019">48019</a>: Be more careful about skipping content that does not
4508        need to be parsed. (markt)
4509      </td></tr>
4510      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4511        Better handling of exception in JSP if parsed JSP source is not
4512        available. (markt)
4513      </td></tr>
4514    </table>
4515  </blockquote></td></tr></table>
4516  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.21 (jfclere)/Cluster"><!--()--></a><a name="Tomcat_6.0.21_(jfclere)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>
4517    <table border="0" cellpadding="2" cellspacing="2">
4518      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4519        DeltaSession needs endAccess so that CrossContext replication works. (pero)
4520      </td></tr>
4521      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4522        DeltaManager needs to replicate changed attributes even if session
4523        gets invalidated. Otherwise session listeners will not see the right
4524        data on the secondary nodes. (rjung)
4525      </td></tr>
4526      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4527        Spurious startup errors during session transfer.
4528        Sessions get transferred, but node still waits until timeout. (rjung)
4529      </td></tr>
4530      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
4531        Perform deserialization events with context class loader. (fhanik)
4532      </td></tr>
4533      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4534        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47515">47515</a>: Correctly replicate timestamp during startup. (fhanik)
4535      </td></tr>
4536      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4537        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47478">47478</a>: Call replication listeners when using BackupManager. (fhanik)
4538      </td></tr>
4539      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4540        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47369">47369</a>: Reset data diff after replication. (fhanik)
4541      </td></tr>
4542      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4543        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=40551">40551</a>: Enable the JvmRouteBinderValve to work with
4544        PersistentManagers as well as clustering. Based on a patch by Chris
4545        Chandler. (markt)
4546      </td></tr>
4547      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4548        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47342">47342</a>: Fix potential NPE on replicated context start. Patch
4549        provided by Keiichi Fujino. (markt)
4550      </td></tr>
4551      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4552        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47389">47389</a>: DeltaManager doesn't do session replication if
4553        notifySessionListenersOnReplication=false.
4554        Patch by Keiichi Fujino. (fhanik)
4555      </td></tr>
4556      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4557        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47502">47502</a>: Don't replicate session attributes known not to be
4558        serializable. (funkman)
4559      </td></tr>
4560      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4561        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47554">47554</a>: Include httpOnly attribute when re-writing session
4562        cookie after fail over. (markt)
4563      </td></tr>
4564      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4565        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47799">47799</a>: Enable the domain to be configured for Membership and
4566        DomainFilterInterceptor. Patch provided by Keiichi Fujino. (markt)
4567      </td></tr>
4568      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4569        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48113">48113</a>: Display IP addresses using 0 to 255 rather than -128
4570        to +127. Based on a patch by Quintin Beukes. (fhanik/kkolinko)
4571      </td></tr>
4572    </table>
4573  </blockquote></td></tr></table>
4574  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.21 (jfclere)/Web applications"><!--()--></a><a name="Tomcat_6.0.21_(jfclere)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>
4575    <table border="0" cellpadding="2" cellspacing="2">
4576      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4577        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41564">41564</a>: Add some documentation on installing Tomcat as a
4578        service on operating systems with User Account Control, e.g. Vista.
4579        (markt)
4580      </td></tr>
4581      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4582        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47161">47161</a>: Report thread count correctly in Manager when executors
4583        are used and return -1 when it can not easily be determined. (markt)
4584      </td></tr>
4585      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4586        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47235">47235</a>: Remove use of autoReconnect from MySQL examples.
4587        (markt)
4588      </td></tr>
4589      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4590        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47324">47324</a>: Fix submit URL for session list page so it works
4591        behind a reverse proxy. Patch provided by Maik Jablonski. (markt)
4592      </td></tr>
4593      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4594        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47425">47425</a>: Add crlFile attribute to the SSL configuration
4595        documentation. (markt)
4596      </td></tr>
4597      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4598        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47444">47444</a>: Remove Jakarta references from the documentation.
4599        (markt)
4600      </td></tr>
4601      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4602        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47656">47656</a>: Add information to documentation on system property
4603        replacement in configuration files. (markt)
4604      </td></tr>
4605      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4606        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47705">47705</a>: Fix division by zero error in the manager when trying
4607        to expire sessions when the session timeout is set to infinite.
4608        (funkman)
4609      </td></tr>
4610      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4611        Fix display of session information pages of Manager application
4612        in Internet Explorer. (kkolinko)
4613      </td></tr>
4614      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
4615        Do not reuse windows (tabs) for session detail pages in Manager
4616        application. (kkolinko)
4617      </td></tr>
4618      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4619        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47769">47769</a>: Clarify the JNDI docs with respect to use of
4620        &lt;resource-ref&gt; and related elements, specifically when they are
4621        required and when they may be omitted. (markt)
4622      </td></tr>
4623      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4624        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=48381">48381</a>: Add information on how Tomcat treats host names to the
4625        host configuration documentation. (markt)
4626      </td></tr>
4627    </table>
4628  </blockquote></td></tr></table>
4629  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.21 (jfclere)/Other"><!--()--></a><a name="Tomcat_6.0.21_(jfclere)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>
4630    <table border="0" cellpadding="2" cellspacing="2">
4631      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
4632        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=37847">37847</a>: Make location and filename of catalina.out configurable
4633        in catalina.sh. (fhanik)
4634      </td></tr>
4635      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4636        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=37848">37848</a>: Re-fix not outputting info messages when there is no
4637        terminal. (markt)
4638      </td></tr>
4639      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4640        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=39194">39194</a>: Make classpath configuration consistent in the startup
4641        scripts. (markt/kkolinko)
4642      </td></tr>
4643      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
4644        Update Tomcat Windows service application (procrun) to version 2.0.5.
4645        It contains a fix for issue <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41538">41538</a> (mturk)
4646      </td></tr>
4647      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4648        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=40786">40786</a>: Include 64-bit Windows service wrapper in
4649        distributions. Update the Windows installer to automatically use the
4650        correct binary on 64-bit machines. (markt)
4651      </td></tr>
4652      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
4653        Update Windows Installer to use NSIS 2.45. They say that this version
4654        provides support for the upcoming Microsoft Windows 7. (kkolinko)
4655      </td></tr>
4656      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4657        Don't add blank lines to end of files when fixing line-endings for
4658        tar.gz distribution. (markt)
4659      </td></tr>
4660      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4661        Use explicit encoding during filtering operations when building Tomcat
4662        for distribution. (kkolinko)
4663      </td></tr>
4664      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
4665        Remove references to unused commons-collections from the build scripts.
4666        (markt)
4667      </td></tr>
4668      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4669        Fix download task check for commons-pool and commons-dbcp in the
4670        build scripts. (kkolinko)
4671      </td></tr>
4672      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
4673        Include deployer-howto.html into the deployer distributive. (kkolinko)
4674      </td></tr>
4675      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4676        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47149">47149</a>: Build scripts: Explicitly specify encoding when
4677        compiling. (kkolinko)
4678      </td></tr>
4679      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4680        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47267">47267</a>: Ensure release notes displayed by Windows installer
4681        have CRLF line-endings regardless of which OS the install package is
4682        built on. (markt/kkolinko)
4683      </td></tr>
4684      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
4685        Include NOTICE, LICENSE and manifest files in all Tomcat JARs and add a
4686        mechanism to the build process to enable these files to be customised
4687        per JAR as required. (markt)
4688      </td></tr>
4689      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4690        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47699">47699</a>: Provide better handling of PID files. (markt)
4691      </td></tr>
4692      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4693        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47824">47824</a>: Make Servlet API an optional dependency for JULI when
4694        using Maven. (markt)
4695      </td></tr>
4696      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
4697        Add support for per instance (using $CATALINA_BASE) log4j.properties
4698        files, JDBC drivers etc by adding ${catalina.base}/lib and
4699        ${catalina.base}/lib/*.jar to the start of the common loader class
4700        path. (markt)
4701      </td></tr>
4702      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4703        Correct CVE-2009-3548. When installed via the Windows installer and
4704        using defaults, don't create an administrative user with a blank
4705        password. Additionally, the administrative user is only created if the
4706        manager or host-manager web applications are selected for installation.
4707        (markt)
4708      </td></tr>
4709      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
4710        Further improvements to the administrative user name and password
4711        handling in the Windows installer. (kkolinko)
4712      </td></tr>
4713    </table>
4714  </blockquote></td></tr></table>
4715</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.20 (remm)"><!--()--></a><a name="Tomcat_6.0.20_(remm)"><strong>Tomcat 6.0.20 (remm)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2009-06-03</strong></font></td></tr><tr><td colspan="2"><blockquote>
4716  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.20 (remm)/Catalina"><!--()--></a><a name="Tomcat_6.0.20_(remm)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
4717    <table border="0" cellpadding="2" cellspacing="2">
4718      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4719        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42579">42579</a>: Handle both relative and absolute search results in
4720        the JNDIRealm. Patch provided by Brandon DuRette. (markt)
4721      </td></tr>
4722      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4723        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46562">46562</a>: Close shtml files after processing to allow other
4724        processes to modify the files. (markt)
4725      </td></tr>
4726      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4727        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46815">46815</a>: Make the MemoryUserDatabase read-only by default.
4728        (markt)
4729      </td></tr>
4730      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4731        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46816">46816</a>: Align session manager mbean descriptor with
4732        implementation. (markt)
4733      </td></tr>
4734      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4735        Fix a typo in the OPTIONS response from the default servlet. (markt)
4736      </td></tr>
4737      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4738        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46822">46822</a>: Remove unnecessary object creation from
4739        StandardContext. Patch provided by Anthony Whitford. (markt)
4740      </td></tr>
4741      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4742        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46866">46866</a>: Better initialisation of Random objects. (markt)
4743      </td></tr>
4744      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4745        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46875">46875</a>: Catch and handle possible IllegalStateExceptions
4746        in CometConnectionManagerValve related to session expiration. (markt)
4747      </td></tr>
4748      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4749        Correct some errors reported when testing the WebDAV servlet with the
4750        Litmus test suite. (markt)
4751      </td></tr>
4752      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
4753        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46933">46933</a>: Update StringManager to use Java 5 features. Patch
4754        provided by Jens Kapitza. (markt)
4755      </td></tr>
4756      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4757        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46990">46990</a>: Fix synchronization issues reported by FindBugs. Patch
4758        provided by Sebb. (markt)
4759      </td></tr>
4760    </table>
4761  </blockquote></td></tr></table>
4762  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.20 (remm)/Coyote"><!--()--></a><a name="Tomcat_6.0.20_(remm)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>
4763    <table border="0" cellpadding="2" cellspacing="2">
4764      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
4765        Allow huge request body packets for AJP13. (rjung)
4766      </td></tr>
4767      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4768        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45026">45026</a>: Never return an empty HTTP status reason phrase.
4769        mod_jk and httpd 2.x do not like that. (rjung)
4770      </td></tr>
4771      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
4772        Set remote port for AJP connectors from the optional request
4773        attribute AJP_REMOTE_PORT. (rjung)
4774      </td></tr>
4775      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
4776        Update tc-native to 1.1.16 (markt)
4777      </td></tr>
4778      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4779        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46982">46982</a>: Correct reporting of DST offset in access logs.
4780        (markt)
4781      </td></tr>
4782      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4783        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46984">46984</a>: Invalid characters in HTTP request method now result
4784        in a 400 response. (markt)
4785      </td></tr>
4786      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4787        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46991">46991</a>: Fix AJP connector always reporting bytes received as
4788        zero. (markt)
4789      </td></tr>
4790    </table>
4791  </blockquote></td></tr></table>
4792  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.20 (remm)/Jasper"><!--()--></a><a name="Tomcat_6.0.20_(remm)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>
4793    <table border="0" cellpadding="2" cellspacing="2">
4794      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4795        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=37929">37929</a>: Fix invalidated session causing pageContext methods to
4796        fail. (markt)
4797      </td></tr>
4798      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4799        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41606">41606</a>: Prevent double initialisation of JSPs. Patch provided
4800        by Chris Halstead. (markt)
4801      </td></tr>
4802      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4803        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46354">46354</a>: ArrayIndexOutOfBoundsException when using
4804        org.apache.jasper.runtime.BodyContentImpl.LIMIT_BUFFER=true
4805        Patch provided by Konstantin Kolinko. (markt)
4806      </td></tr>
4807      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4808        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46909">46909</a>: Only include semi-colon in type attribute for
4809        &lt;jsp:plugin&gt; when it is required. (markt)
4810      </td></tr>
4811      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4812        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=47013">47013</a>: Use system property rather than hard-coded string for
4813        pre-compilation flag. (markt)
4814      </td></tr>
4815    </table>
4816  </blockquote></td></tr></table>
4817  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.20 (remm)/Cluster"><!--()--></a><a name="Tomcat_6.0.20_(remm)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>
4818    <table border="0" cellpadding="2" cellspacing="2">
4819      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4820        A node should ignore its own heartbeat messages. (rjung)
4821      </td></tr>
4822    </table>
4823  </blockquote></td></tr></table>
4824  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.20 (remm)/Web applications"><!--()--></a><a name="Tomcat_6.0.20_(remm)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>
4825    <table border="0" cellpadding="2" cellspacing="2">
4826      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4827        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46509">
482746509</a>: Use correct link on error page in JSP security
4828        example. Patch provided by Michael Moody. (markt)
4829      </td></tr>
4830      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4831        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46599">46599</a>: Document known DAEMON issue. (markt)
4832      </td></tr>
4833      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4834        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46807">46807</a>: Correct docs for configuration of tag pooling. (markt)
4835      </td></tr>
4836      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4837        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46924">46924</a>: Clarify behaviour when auto deployment is enabled and
4838        a WAR, directory or context file is deleted or updated. (markt)
4839      </td></tr>
4840      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4841        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46958">46958</a>: All xml manager status output to work regardless of
4842        context path. (markt)
4843      </td></tr>
4844    </table>
4845  </blockquote></td></tr></table>
4846  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.20 (remm)/Other"><!--()--></a><a name="Tomcat_6.0.20_(remm)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>
4847    <table border="0" cellpadding="2" cellspacing="2">
4848      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4849        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46351">46351</a>: Refactor the build script. Patch provided by Marc
4850        Guillemot. (markt)
4851      </td></tr>
4852      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4853        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46910">46910</a>: Properties files corrupted by build process. (remm)
4854      </td></tr>
4855      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4856        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46915">46915</a>: When resolving ResourceBundle properties, don't claim
4857        to have resolved the property unless we really have resolved it. (markt)
4858      </td></tr>
4859      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4860        Fix .pdf and .exe corruption in -src.tar.gz distribution. (markt)
4861      </td></tr>
4862      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
4863        Enable running Tomcat directly from the build directory on linux
4864        systems. (markt)
4865      </td></tr>
4866    </table>
4867  </blockquote></td></tr></table>
4868</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.19 (remm)"><!--()--></a><a name="Tomcat_6.0.19_(remm)"><strong>Tomcat 6.0.19 (remm)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote>
4869  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.19 (remm)/Catalina"><!--()--></a><a name="Tomcat_6.0.19_(remm)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
4870    <table border="0" cellpadding="2" cellspacing="2">
4871      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
4872        Manager application prints FAIL if application was deployed but failed to start (fhanik)
4873      </td></tr>
4874      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
4875        When shutdown port is disabled, print user friendly message and not a stack trace. (fhanik)
4876      </td></tr>
4877      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4878        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=37458">37458</a>: Correct sync issue that leads to NPE in rare
4879        circumstances. Patch provided by Konstantin Kolinko. (markt)
4880      </td></tr>
4881      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4882        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=38553">38553</a>: Return 401 rather than 400 if client does not present
4883        a certificate CLIENT-CERT authentication. (markt)
4884      </td></tr>
4885      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4886        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=38570">38570</a>: When checking docBase against appBase, make sure we
4887        check for an exact match against the appBase. (markt)
4888      </td></tr>
4889      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4890        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=39013">39013</a>: When testing for invalid docBase, test for an exact
4891        match with the appBase dir. (markt)
4892      </td></tr>
4893      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4894        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=39396">39396</a>: Don't include TRACE in OPTIONS response unless we
4895        know it hasn't been disabled in the connector. (markt)
4896      </td></tr>
4897      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4898        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42747">42747</a>: Ensure context.xml takes effect on first deployment
4899        for WAR and DIR deployments. context.xml is now copied to
4900        CATALINA_BASE/&lt;engine name&gt;/&lt;host name&gt; for DIR as well as
4901        WAR deployments. (markt)
4902      </td></tr>
4903      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td><a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43071">43071</a>: Start poller before acceptor (r719267)</td></tr>
4904      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
4905        Fix read/write timeout of async comet operations
4906        (r719264)
4907      </td></tr>
4908      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
4909        Implement async close behaviour for Comet/NIO.
4910        No-op for APR (same behavior as before)
4911        (r719262)
4912      </td></tr>
4913      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4914        Default thread count for HTTP connectors is 200. (r713186)
4915      </td></tr>
4916      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4917        Comet should always invoke END and properly invoke READ (r713174)
4918     </td></tr>
4919      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4920        Fix class cast exception when shutting down a replicated context but no cluster has been configured in server.xml (r713177)
4921     </td></tr>
4922      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4923        Dererence socket when its no longer used. Frees up socket buffers and memory. No functional change. (r713175)
4924      </td></tr>
4925      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4926        Correct wrong "No role found" debug message,
4927        logged in RealmBase even if a role was found. (rjung)
4928      </td></tr>
4929      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td><a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44809">44809</a>: Improve AprLifecycleListener Error Messages. (jfclere)</td></tr>
4930      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4931        Log AccessControlException for context specific logging.properties
4932        during startup with security manager. (rjung)
4933      </td></tr>
4934      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
4935        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41407">41407</a>: Add CLIENT-CERT support to the JAAS Realm. (markt)
4936      </td></tr>
4937      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4938        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42409">42409</a>: Make custom and standard error page handling
4939        consistent by using resetBuffer() which will not alter previously set
4940        headers. (markt)
4941      </td></tr>
4942      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4943        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42673">42673</a>: Fix SSI virtual includes for multi-level contexts.
4944        Patch provided by Peter Jodeleit. (markt)
4945      </td></tr>
4946      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4947        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42707">42707</a>: Make adding a host alias via JMX take effect
4948        immediately. (markt)
4949      </td></tr>
4950      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4951        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43656">43656</a>: Correct regression in previous fix for this bug. Patch
4952        provided by Nils Eckert. (markt)
4953      </td></tr>
4954      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4955        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45419">45419</a>: Set Accept-Ranges for static resources served by
4956        DefaultServlet. (markt)
4957      </td></tr>
4958      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4959        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45441">45441</a>: Correctly map filters for FORWARD and INCLUDE. (markt)
4960      </td></tr>
4961      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4962        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45447">45447</a>: Convert Spanish resource files to use UTF-8 and provide
4963        translations where previously missing. Patch provided by Jesus Marin.
4964        (markt)
4965      </td></tr>
4966      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4967        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45453">45453</a>: Remove potential race condition in JDBC Realm.
4968        Based on a patch by Santtu Hyrkk. (markt)
4969      </td></tr>
4970      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
4971        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45576">45576</a>: Add DIGEST support to the JAAS Realm. (markt)
4972      </td></tr>
4973      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4974        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45585">45585</a>: Allow Tomcat to start if using
4975        <code>$CATALINA_BASE</code> but not JULI. Patch based on a suggestion by
4976        Ian Ward Comfort. (markt)
4977      </td></tr>
4978      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4979        The JAAS Realm did not assign roles to authenticated users. (markt)
4980      </td></tr>
4981      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
4982        Provide full stacktrace and message when the ErrorReportValve
4982Class can't
4983        be instantiated. (funkman)
4984      </td></tr>
4985      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4986        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45608">45608</a>: Make allocated servlet count synchronized to ensure
4987        the correct allocated servlet count is available during shutdown.
4988        (markt)
4989      </td></tr>
4990      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4991        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45628">45628</a>: When checking MANIFEST dependencies, JARs without
4992        dependencies should allows be considered to be full-filled. (markt)
4993      </td></tr>
4994      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4995        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45735">45735</a>: Improve ETag handling. (remm)
4996      </td></tr>
4997      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
4998        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45785">45785</a>: Ignore directories named xxx.jar in WEB-INF/lib.
4999        (markt)
5000      </td></tr>
5001      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5002        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45823">45823</a>: Log missing request headers as '-' not 'null'. Based
5003        on a patch by Per Landberg. (markt)
5004      </td></tr>
5005      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5006        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45825">45825</a>: Correctly handle annotations in parent classes. Based
5007        on a patch by Florent Benoit. (markt)
5008      </td></tr>
5009      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5010        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45906">45906</a>: Further ETag handling improvements. Patch provided by
5011        Chris Hubick. (markt)
5012      </td></tr>
5013      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
5014        Add the CombinedRealm that enables authentication to be attempted
5015        against multiple realms. (markt)
5016      </td></tr>
5017      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
5018        Add the LockOutRealm that enables a standard Realm to be wrapped with
5019        the functionality to lock out a user after too many failed logins.
5020        (markt)
5021      </td></tr>
5022      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
5023        Make the upper size limit of the static resource cache configurable
5024        since the default of <code>cacheMaxSize/20</code> gave too high a value
5025        for large caches. (markt)
5026      </td></tr>
5027      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5028        Fix HTML decoding error in SSI processing. (markt)
5029      </td></tr>
5030      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5031        Fix cast error in JULI log factory. (markt)
5032      </td></tr>
5033      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5034        Fix some thread safety issues in date formatting. (markt)
5035      </td></tr>
5036      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5037        Fix a String comparison bug in the digester property replacement that
5038        resulted in non-optimal operation. (markt)
5039      </td></tr>
5040      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5041        Correct handle multi-level contexts defined using context.xml files.
5042        (markt)
5043      </td></tr>
5044      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5045        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45933">45933</a>: Don't use xml parser from web-app to process tld
5046        files. (markt)
5047      </td></tr>
5048      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
5049        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45951">45951</a>: Support changing of JSESSIONID cookie name and
5050        jsessionid path parameter name. Based on a patch by Jean-frederic Clere.
5051        (markt)
5052      </td></tr>
5053      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5054        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46011">46011</a>: Make Principal accessible (if set) via
5055        <code>Subject.getSubject(AccessController.getContext())</code> when
5056        processing filters. Based on a patch by tsveg1. (markt)
5057      </td></tr>
5058      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5059        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46075">46075</a>: When uploading files, don't create buffers at the
5060        maximum configured size. Use the default size and let the buffers grow
5061        to the maximum size if necessary. (markt)
5062      </td></tr>
5063      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5064        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46085">46085</a>: Fix a rare thread safety issue with session
5065        expiration. (markt)
5066      </td></tr>
5067      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5068        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46096">46096</a>:  Support annotation processing whilst running under a
5069        security manager. (markt)
5070      </td></tr>
5071      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5072        The invoker servlet has been deprecated and will be removed in Tomcat 7
5073        onwards. (markt)
5074      </td></tr>
5075      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5076        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46105">46105</a>:  Correctly set URI encoding when replaying a request
5077        after FORM authentication. (markt)
5078      </td></tr>
5079      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5080        Remove unnecessary reference to commons-logging from the bootstrap JAR
5081        manifest. (markt)
5082      </td></tr>
5083      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5084        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46232">46232</a>: Enabled the XMl parser to be over-ridden using the
5085        standard endorsed mechanism. (markt)
5086      </td></tr>
5087      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5088        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46261">46261</a>: Treat %2F in a context name literally rather than
5089        converting it (inconsistently) to '/' - that is what '#' is for. (markt)
5090      </td></tr>
5091      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5092        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46298">46298</a>: Throw an SQLException with a useful message rather
5093        than a NPE if the URL for the JDBCRealm is invalid. Based on a patch by
5094        Owen Jacobson. (markt)
5095      </td></tr>
5096      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5097        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46304">46304</a>: Further fixes to make Principal accessible (if set)
5098        via <code>Subject.getSubject(AccessController.getContext())</code> when
5099        processing filters. (markt)
5100      </td></tr>
5101      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5102        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46403">46403</a>: Provide a workaround for an IE and Safari bug that
5103        means the Max-Age attribute of a cookie is ignored. (markt)
5104      </td></tr>
5105      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5106        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46408">46408</a>: Fix invalid cast in security utility package. (markt)
5107      </td></tr>
5108      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5109        Remove duplicate normalisation implementations and make normalise
5110        behaviour consistent throughout code base. (markt)
5111      </td></tr>
5112      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5113        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46683">46683</a>: Fix typo in French localisation file name for the
5114        org.apache.catalina.loader package. (markt)
5115      </td></tr>
5116      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5117        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46606">46606</a>: Make the max DEPTH for a WebDAV request configurable.
5118        The default is still 3. (markt)
5119      </td></tr>
5120      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
5121        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44382">44382</a>: Add support for using httpOnly for session cookies.
5122        This is disabled by default. (markt/fhanik)
5123      </td></tr>
5124      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5125        Fix possible NCDFE when using FORM authentication. (jfclere)
5126      </td></tr>
5127      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5128        Fix possible synchronisation bottleneck in cookie creation. (markt)
5129      </td></tr>
5130      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5131        Fix various spelling errors reported on the mailing lists. (markt)
5132      </td></tr>
5133      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
5134        Make the logging manager and properties file configurable via
5135        environment variables. (fhanik)
5136      </td></tr>
5137    </table>
5138  </blockquote></td></tr></table>
5139  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.19 (remm)/Coyote"><!--()--></a><a name="Tomcat_6.0.19_(remm)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>
5140    <table border="0" cellpadding="2" cellspacing="2">
5141      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td><a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45154">45154</a>:
5142        Implement SEND_FILE behavior for SSL connections using NIO (fhanik)
5143      </td></tr>
5144      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
5145        Fix file descriptor leak during NIO send file behavior. (fhanik)
5146      </td></tr>
5147      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
5148        Implement usage of keyAlias attribute for NIO, previously attribute was ignored. (fhanik)
5149      </td></tr>
5150      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
5151        Prevent server from calling close on an already closed NIO socket. One that had timed out. (fhanik)
5152      </td></tr>
5153      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
5154        Fix bug with SEND_FILE behavior in NIO. Send file would delay until selector timed out, even though socket was ready to be written. (fhanik)
5155      </td></tr>
5156      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
5157        Fix possible NPE in NioEndpoint.java (fhanik)
5158      </td></tr>
5159      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
5160        Update tc-native to 1.1.15 in build.properties.default (jfclere)
5161      </td></tr>
5162      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5163        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43327">43327</a>
5163: Socket bind fails when using APR on a system with IPv6
5164        enabled but no explicit IPv6 address configured. (markt/jfclere)
5165      </td></tr>
5166      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
5167        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44285">44285</a>: Make the SSL session cache size and timeout
5168        configurable. (markt)
5169      </td></tr>
5170      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5171        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45074">45074</a>: Add configuration parameters to enable the tuning
5172        of sendfile and poller thread count in the APR HTTP connector. Patch
5173        provided by Alex Barclay. (jfclere/markt)
5174      </td></tr>
5175      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5176        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45528">45528</a>: Add detection for invalid SSL configuration to prevent
5177        infinite logging loop on start-up. (markt)
5178      </td></tr>
5179      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5180        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45591">45591</a>: NPE on start-up failure in some cases. Based on a
5181        patch by Matt Passell. (markt)
5182      </td></tr>
5183      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5184        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46077">46077</a>: Expose deferAccept for configuration. Patch provided
5185        by Michael Leinartas. (markt)
5186      </td></tr>
5187      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
5188         Don't swallow input if we know the connection is going to be closed. (billbarker)
5189      </td></tr>
5190      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5191        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46125">46125</a>: Return a status code of 400 if the request headers are
5192        too large. (markt)
5193      </td></tr>
5194      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5195       Make certain that classes are first loaded by trusted code when working in a sandbox. (billbarker)
5196      </td></tr>
5197      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
5198        Log a message if we reach maxThreads in a connector thread pool. (markt)
5199      </td></tr>
5200      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
5201        Enable the thread pool limits to be modified via JMX. (markt)
5202      </td></tr>
5203      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5204       Fix HTTP/1.0 redirects handling with APR AJP connector. (remm)
5205      </td></tr>
5206      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5207        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46666">46666</a>: keepAliveTimeout should be used regardless of setting
5208        of disableUploadTimeout. (markt)
5209      </td></tr>
5210    </table>
5211  </blockquote></td></tr></table>
5212  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.19 (remm)/Jasper"><!--()--></a><a name="Tomcat_6.0.19_(remm)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>
5213    <table border="0" cellpadding="2" cellspacing="2">
5214      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5215        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=36923">36923</a>: Treat EL expressions as template text if EL
5216        expressions are disabled. (markt)
5217      </td></tr>
5218      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5219        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=37515">37515</a>: Support 1.6 and 1.7 as source and target for
5220        compilation. (markt)
5221      </td></tr>
5222      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5223        ClassCastException in EL ExpressionBuilder. (rjung)
5224      </td></tr>
5225      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
5226        Use more generics in EL to improve type safety. (rjung)
5227      </td></tr>
5228      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5229        Use a lookahead to remove potential ambiguity in EL parsing. (markt)
5230      </td></tr>
5231      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5232        Correct typo in JSP EL examples. (markt)
5233      </td></tr>
5234      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5235        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=38
5235197">38197</a>: Take account of jsp:attribute elements when pooling
5236        tags. (markt)
5237      </td></tr>
5238      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5239        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42077">42077</a>: Ensure the iterator returned by
5240        javax.el.CompositeELResolver#getFeatureDescriptor() skips any null
5241        FeatureDescriptors. Patch provided by Mathias Broekelmann. (markt)
5242      </td></tr>
5243      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5244        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42693">42693</a>: Fix JSP generation error with recursive tag file
5245        structure. (markt)
5246      </td></tr>
5247      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5248        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45427">45427</a>: Correctly handle unmatched quotes in EL expressions.
5249        (markt)
5250      </td></tr>
5251      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5252        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45511">45511</a>: The failure of the <code>empty</code> keyword was a
5253        regression caused by the previous fix for <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42565">42565</a>. The original
5254        fix for <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42565">42565</a> has been reverted and a new fix applied.
5255        (markt)
5256      </td></tr>
5257      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5258        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45648">45648</a>: Don't trim the last character when parsing the EL
5259        namespace. (markt)
5260      </td></tr>
5261      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5262        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45666">45666</a>: Prevent infinite loop on include. (markt)
5263      </td></tr>
5264      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5265        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45691">45691</a>: Prevent generation of duplicate variable names when
5266        generating code for JSPs. (markt)
5267      </td></tr>
5268      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5269        Correct signed/unsigned conversion error in ASCII parsing. (markt)
5270      </td></tr>
5271      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5272        Fix various edge-cases when parsing EL, particularly inside attribute
5273        values. Note that the Expert Group has confirmed that JSP.1.6 takes
5274        precedence over JSP.1.3.10. Therefore EL in attributes must be escaped
5275        twice. (markt)
5276      </td></tr>
5277      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5278        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46047">46047</a>: Include the path to the JAR when recording
5279        dependencies that are located inside a JAR file. Patch provided by
5280        C&eacute;dric Mailleux. (markt)
5281      </td></tr>
5282      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5283        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46381">46381</a>: Composite expressions used for attribute values must
5284        be coerced to Strings. (markt)
5285      </td></tr>
5286      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5287        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46397">46397</a>: Don't pool tag instances that implement JspIdConsumer.
5288        (markt)
5289      </td></tr>
5290      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5291        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46462">46462</a>: Limit package test to just the o.a.jsp package to
5292        allow use of packages such as o.a.jspwiki. (markt)
5293      </td></tr>
5294      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5295        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46471">46471</a>: Fix naming clash when tags in different libraries have
5296        the same name. (markt)
5297      </td></tr>
5298      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5299        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46564">46564</a>: Make page encoding check for tagx compilation
5300        case-insensitive. (markt)
5301      </td></tr>
5302    </table>
5303  </blockquote></td></tr></table>
5304  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.19 (remm)/Cluster"><!--()--></a><a name="Tomcat_6.0.19_(remm)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>
5305    <table border="0" cellpadding="2" cellspacing="2">
5306      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
5307        Prevent NPE for ReplicationValve (pero)
5308      </td></tr>
5309      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
5310        Provide TCP only start-up option when using static membership. (fhanik)
5311      </td></tr>
5312      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
5313        Document the multicast recovery options. (fhanik)
5314      </td></tr>
5315      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
5316        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45261">45261</a>: Add a new SimpleCoordinator for tribes provided by
5317        Robert Newson. (markt)
5318      </td></tr>
5319      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5320        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45618">45618</a>: Make sure NIO selector is closed when no longer used.
5321        Unlikely to be an issue in normal usage. (markt)
5322      </td></tr>
5323      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5324        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45851">45851</a>: Fix out of order message processing issues with the
5325        FarmWarDeployer. (markt)
5326      </td></tr>
5327      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5328        Fix small memory leak in FarmWarDeployer. (markt)
5329      </td></tr>
5330      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5331        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46357">46357</a>: Corrected test for host's parent must be an engine.
5332        (markt)
5333      </td></tr>
5334      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5335        Fix so that JvmrouteBinderValve can rewrite session suffix with parallel
5336        requests from same client. (pero)
5337      </td></tr>
5338    </table>
5339  </blockquote></td></tr></table>
5340  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.19 (remm)/Web applications"><!--()--></a><a name="Tomcat_6.0.19_(remm)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>
5341    <table border="0" cellpadding="2" cellspacing="2">
5342      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5343        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45940">45940</a>: Correct name of username attribute for JDBC resources
5344        in JNDI how to. (markt)
5345      </td></tr>
5346      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5347        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46035">46035</a>: Fix multiple typos in monitoring how to. (markt)
5348      </td></tr>
5349      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5350        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46067">46067</a>: Fix typos in Advanced IO how to. (markt)
5351      </td></tr>
5352      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5353        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46115">46115</a>: Correct Manager UI to show that path is required when
5354        using the deploy command. (markt)
5355      </td></tr>
5356      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5357        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46121">46121</a>: Add note to manager documentation regarding possible
5358        naming clash with new Ant 1.7 resources datatype and how to avoid it.
5359        (markt)
5360      </td></tr>
5361      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5362        Remove unsed parameters from Native/APR example connector configuration
5363        in docs. (markt)
5364      </td></tr>
5365      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5366        Use CSS based solution for printer-friendly docs. Patch provided by
5367        vitezslav.smid as part of GSoc with additional work by Tim Funk. (markt)
5368      </td></tr>
5369      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5370        Update the FAQ linsk in the docs to refer to the wiki. Use xlst task
5371        rather than style task to generate docs. (funkman/markt)
5372      </td></tr>
5373      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5374        Document the LifecycleListeners. (markt)
5375      </td></tr>
5376      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5377        Fix broken URL mapping in the examples. (markt)
5378      </td></tr>
5379      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5380        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46563">46563</a>
5380: Update doc for correct default for pollerThreadCount.
5381        (markt)
5382      </td></tr>
5383      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5384        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46600">46600</a>: Document maxKeepAliveRequests for the NIO connector.
5385        (markt)
5386      </td></tr>
5387      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5388        Fix CVE-2009-0781. XSS in calendar example. (markt)
5389      </td></tr>
5390    </table>
5391  </blockquote></td></tr></table>
5392  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.19 (remm)/Other"><!--()--></a><a name="Tomcat_6.0.19_(remm)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>
5393    <table border="0" cellpadding="2" cellspacing="2">
5394      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5395        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41861">41861</a>: Update service name to Apache Tomcat 6 to prevent
5396        conflicts with previous major Tomcat versions. (markt/rjung)
5397      </td></tr>
5398      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5399        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45852">45852</a>: Add special handling for cp932 (aka ms932) when
5400        creating tomcat-users.xml with Windows installer. (markt)
5401      </td></tr>
5402      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5403        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45878">45878</a>: Restore manifest, licence and notice files to the jsp
5404        and servlet jars. (markt)
5405      </td></tr>
5406      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5407        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45879">45879</a>: Move NOTICE file from documentation webapp to the
5408        installation directory. (markt)
5409      </td></tr>
5410      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5411        Add a workaround for DBCP-191. Tomcat will now build without error on a
5412        1.6 JDK but because it does this by skipping DBCP, release builds must
5413        be generated with a 1.5 JDK. (costin/markt)
5414      </td></tr>
5415      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5416        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=46366">46366</a>: Correct information in RUNNING.txt regarding use of
5417        CATALINA_HOME and CATALINA_BASE. (markt)
5418      </td></tr>
5419      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5420        Use more useful JPDA defaults in catalina.bat. (markt)
5421      </td></tr>
5422      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5423        Correct error in 2.5 web-app XSD.
5424      </td></tr>
5425    </table>
5426  </blockquote></td></tr></table>
5427</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.18 (remm)"><!--()--></a><a name="Tomcat_6.0.18_(remm)"><strong>Tomcat 6.0.18 (remm)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2008-07-31</strong></font></td></tr><tr><td colspan="2"><blockquote>
5428  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.18 (remm)/Catalina"><!--()--></a><a name="Tomcat_6.0.18_(remm)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
5429    <table border="0" cellpadding="2" cellspacing="2">
5430      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5431        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42727">42727</a>: Correctly handle request lines that are exact
5432        multiples of 4096 in length. Patch provided by Will Pugh. (markt)
5433      </td></tr>
5434      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5435        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42678">
543542678</a>: Only ignore docBase if it really is a subdir of
5436        appBase. Patch provided by juergen. (markt)
5437      </td></tr>
5438      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5439        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42722">42722</a>: Possible NPE in CGI Servlet. (markt)
5440      </td></tr>
5441      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
5442        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45285">45285</a>: Look for annotations in class hierarchy. (markt)
5443      </td></tr>
5444      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5445        Add additional checks for URI normalization. (remm)
5446      </td></tr>
5447    </table>
5448  </blockquote></td></tr></table>
5449  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.18 (remm)/Jasper"><!--()--></a><a name="Tomcat_6.0.18_(remm)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>
5450    <table border="0" cellpadding="2" cellspacing="2">
5451      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5452        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42565">42565</a>: Make EL ternary expression without space before colon
5453        work. Patch provided by Lucas Galfaso. (markt)
5454      </td></tr>
5455    </table>
5456  </blockquote></td></tr></table>
5457  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.18 (remm)/Web applications"><!--()--></a><a name="Tomcat_6.0.18_(remm)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>
5458    <table border="0" cellpadding="2" cellspacing="2">
5459      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
5460        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45323">45323</a>: Add note that context.xml files can only contain a
5461        single Context element. (markt)
5462      </td></tr>
5463    </table>
5464  </blockquote></td></tr></table>
5465  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.18 (remm)/Cluster"><!--()--></a><a name="Tomcat_6.0.18_(remm)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>
5466    <table border="0" cellpadding="2" cellspacing="2">
5467      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
5468        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45317">45317</a>: Properly document and log the value of the state transfer timeout flag (fhanik)
5469      </td></tr>
5470    </table>
5471  </blockquote></td></tr></table>
5472  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.18 (remm)/Other"><!--()--></a><a name="Tomcat_6.0.18_(remm)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>
5473    <table border="0" cellpadding="2" cellspacing="2">
5474      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
5475        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45332">45332</a>: Specify the correct encoding (the current Windows code
5476        page) rather than assuming UTF-8 when creating tomcat-users.xml with the
5477        Windows installer. (markt)
5478      </td></tr>
5479    </table>
5480  </blockquote></td></tr></table>
5481</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.17 (remm)"><!--()--></a><a name="Tomcat_6.0.17_(remm)"><strong>Tomcat 6.0.17 (remm)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote>
5482  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.17 (remm)/General"><!--()--></a><a name="Tomcat_6.0.17_(remm)/General"><strong>General</strong></a></font></td></tr><tr><td><blockquote>
5483    <table border="0" cellpadding="2" cellspacing="2">
5484      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
5485        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45315">45315</a>: Add Unix support for NSIS. (remm)
5486      </td></tr>
5487    </table>
5488  </blockquote></td></tr></table>
5489  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.17 (remm)/Catalina"><!--()--></a><a name="Tomcat_6.0.17_(remm)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
5490    <table border="0" cellpadding="2" cellspacing="2">
5491      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td><a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45272">45272</a>: Put in work around for Internet Explorer not accepting a quoted Path: value using the Set-Cookie header (fhanik)</td></tr>
5492      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5493        APR connector now adds connection to poller after using send file.
5494        (remm)
5495      </td></tr>
5496      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
5497        Add ManagerBase session getLastAccessedTimestamp and
5498        getCreationTimestamp for better remote JMX access. (pero)
5499      </td></tr>
5500      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
5501        Expose alwaysSend flag for message dispatch interceptor. (fhanik)
5502      </td></tr>
5503      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5504        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=29936">29936</a>: Create digesters and parsers earlier so we aren't
5505        using the webapp class loader when we create them. (markt)
5506      </td></tr>
5507      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5508        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42662">42662</a>: Properly resolve reflection proxies during session
5509        replication. (fhanik)
5510      </td></tr>
5511      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5512        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=427
551250">42750</a>: Request line should be tolerant of multiple
5513        whitespaces. (markt/fhanik)
5514      </td></tr>
5515      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5516        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42934">42934</a>: Change the order of events on context start so
5517        <code>contextInitialized()</code> event is fired before
5518        <code>sessionDidActivate()</code>. The spec isn't 100% clear on the
5519        required order but this seems more logical than the current behaviour.
5520        (markt)
5521      </td></tr>
5522      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5523        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43079">43079</a>: Fix identification of suspicious URL patterns. Patch
5524        provided by John Kew. (markt)
5525      </td></tr>
5526      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5527        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43080">43080</a>: Log suspicious URL patterns to the correct web app.
5528        (markt)
5529      </td></tr>
5530      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5531        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43117">43117</a>: Setting an empty workDir could result in all of
5532        CATALINA_HOME being deleted. Patch provided by Takayuki Kaneko. (markt)
5533      </td></tr>
5534      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5535        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43142">43142</a>: Don't assume a directory named xxx.war is a war file.
5536        (markt)
5537      </td></tr>
5538      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5539        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43150">43150</a>: Allow Tomcat to start correctly when installed on a
5540        path that contains a # character. (markt)
5541      </td></tr>
5542      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
5543        The fix for <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43285">43285</a> had the side-effect of coercing
5544        <code>null</code> values to zero. This side-effect has been made
5545        configurable with a system property,
5546        <code>org.apache.el.parser.COERCE_TO_ZERO</code> which defaults to
5547        <code>true</code>. Patch provided by Nils Eckert. (markt)
5548      </td></tr>
5549      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5550        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43343">43343</a>: Correctly handle requesting a session we are in the
5551        middle of persisting. Based on a suggestion by Wade Chandler. (markt)
5552      </td></tr>
5553      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5554        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43425">43425</a>: Make annotations spec compliant. Patch provided by
5555        Dain Sundstrom. (markt)
5556      </td></tr>
5557      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5558        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43470">43470</a>: Fix various class cast exceptions. Based on a patch
5559        by Lucas Galfaso. (markt)
5560      </td></tr>
5561      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5562        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43578">43578</a>: Fix startup when installation path contains a space.
5563        Patch provided by Ray Sauers. (markt)
5564      </td></tr>
5565      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5566        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43683">43683</a>: Fix 404 that could occur if a Servlet is accessed
5567        while the context is reloading. (markt)
5568      </td></tr>
5569      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>ExtendedAccessLogValve cs-uri not print empty querystring. (pero)
5570      </td></tr>
5571      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
5572        ServletContext.getResource("noslash/resource") only requires forward
5573        slash if STRICT_SERVLET_COMPLIANCE flag is set to true. This mimics the
5574        behavior of 6.0.15 and earlier. (fhanik)
5575      </td></tr>
5576      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5577        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44021">44021</a>: Add support for using the # character to define
5578        multi-level contexts in WARs and directories in the appBase. (markt)
5579      </td></tr>
5580      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5581        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44282">44282</a>: Fix TRACE level class loader logging message when a
5582        security manager is used. (markt)
5583      </td></tr>
5584      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5585        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44337">44337</a>: Dir listing crashes if no readme-file present.
5586        (funkman)
5587      </td></tr>
5588      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5589        If listener declared in web.xml, only add it once. (funkman)
5590      </td></tr>
5591      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5592        Fix NPE when iterating through sessions for expiration. (fhanik/jim)
5593      </td></tr>
5594      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5595        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44380">44380</a>: Don't scan non-file URLs for TLDs. Patch provided by
5596        Florent Benoit. (markt)
5597      </td></tr>
5598      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5599        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44389">44389</a>: Fix memory leak that occurred if using a
5600        RequestDispatcher. Patch provided by Arto Huusko. (markt)
5601      </td></tr>
5602      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5603        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44529">44529</a>: Correct handling of resource constraints so no roles
5604        (deny all) overrides no aoth-constraint (allow all). (markt)
5605      </td></tr>
5606      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5607        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44562">44562</a>: HEAD requests cannot use includes. Patch provided by
5608        David Jencks. (markt)
5609      </td></tr>
5610      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5611        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44595">44595</a>: Add possibility to request the QueueSize of an
5612        executor via JMX. (jfclere)
5613      </td></tr>
5614      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5615        Fix CGI Servlet so it correctly reads the environment variables on
5616        Vista. (markt)
5617      </td></tr>
5618      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5619        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44611">44611</a>: DirContextURLConnection didn't implement
5620        getHeaderFields(), getHeaderField(String name) was case sensitive and
5621        returned "" rather than null for header values that did not exist. Patch
5622        provided by Chris Hubick. (markt)
5623      </td></tr>
5624      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5625        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44633">44633</a>: Provide a more helpful error message if a class can't
5626        be loaded due to a version error. (rjung/markt)
5627      </td></tr>
5628      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5629        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44646">44646</a>: Correct various issues, including an ISE, in
5630        CometConnectionManagerValve. (markt)
5631      </td></tr>
5632      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5633        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44673">44673</a>: ServletInputStream is no longer readable once closed.
5634        (markt)
5635      </td></tr>
5636      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5637        Better handling of lack of permission for context specific logging.
5638        (markt)
5639      </td></tr>
5640      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5641        Add permission required to read JDK logging config. (markt)
5642      </td></tr>
5643      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5644        Update web.xml to reflect packaging of SSI and CGI. (markt)
5645      </td></tr>
5646      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5647        Add missing access check for ThreadWithAttributes. (markt)
5648      </td></tr>
5649      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5650        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44833">44833</a>: Correctly override StandardSession methods from
5651        DeltaSession. (fhanik)
5652      </td></tr>
5653      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5654        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44943">44943</a>
5654: Use the same engine name in server.xml comments to
5655        reduce copy and pastes issues. (markt)
5656      </td></tr>
5657      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5658        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44988">44988</a>: Use Java5 syntax for debug options. Patch provided
5659        by C&eacute;drik Lime. (markt)
5660      </td></tr>
5661      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5662        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45101">45101</a>: Format header dates obtained from
5663        <code>DirContextURLConnection</code> as per the HTTP spec. Patch
5664        provided by Chris Hubick. (markt)
5665      </td></tr>
5666      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
5667        A new valve, <code>org.apache.catalina.valves.WebdavFixValve</code>,
5668        that forces MS clients connecting to the WebDAV Servlet on port 80 to
5669        use a client that works rather than the default broken one. (markt)
5670      </td></tr>
5671      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5672        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45195">45195</a>: Passing in null into setAttribute or removeAttribute
5673        cause NPE. (markt)
5674      </td></tr>
5675    </table>
5676  </blockquote></td></tr></table>
5677  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.17 (remm)/Coyote"><!--()--></a><a name="Tomcat_6.0.17_(remm)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>
5678    <table border="0" cellpadding="2" cellspacing="2">
5679      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
5680        NIO: Fix bug in NIO sendfile, symptoms during heavy traffic is that
5681        connection don't get closed. For previous versions, one can disable
5682        sendfile to work around the problem. (fhanik)
5683      </td></tr>
5684      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
5685        APR: Allow to specify the "random device" to use to collect the entropy.
5686        (jfclere)
5687      </td></tr>
5688      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
5689        Fix NIO/SSL live lock during client disconnect. (fhanik)
5690      </td></tr>
5691      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5692        Fix possible ArrayIndexOutOfBoundsException. Patch provided by Charles R
5693        Caldarale. (markt/jim)
5694      </td></tr>
5695      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
5696        Add support for keystore types that do not need a file. Based on a patch
5697        by Bruno Harbulot. (markt)
5698      </td></tr>
5699      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
5700        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43094">43094</a>: Allow specification of keystore providers. Based on a
5701        patch by Bruno Harbulot. (markt)
5702      </td></tr>
5703      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5704        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43191">43191</a>: Make it possible to override the defaults with the
5705        compressableMimeType attribute. Based on a patch by Len Popp. (markt)
5706      </td></tr>
5707      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5708        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44391">44391</a>: Correct handling of escaped values in SSI processing.
5709        (markt)
5710      </td></tr>
5711      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5712        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44392">44392</a>: HTML entities now handled correctly in SSI processing.
5713        (markt)
5714      </td></tr>
5715      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5716        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44558">44558</a>: Improve error message so address is included if
5717        binding fails. (markt)
5718      </td></tr>
5719      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5720        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44494">44494</a>: Character input limited to 8KB. (remm)
5721      </td></tr>
5722      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5723        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44620">44620</a>
5723: Infinite loop in NIO connector. (markt)
5724      </td></tr>
5725      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5726        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44785">44785</a>: Correctly document default maxThreads for AJP
5727        connector. (markt)
5728      </td></tr>
5729      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
5730        Log errors for AJP signoffs at DEBUG level,
5731        since it is harmless if mod_jk has hung up the phone. (billbarker)
5732      </td></tr>
5733      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5734        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44968">44968</a>: Provide more information when the load of a keystore
5735        fails. (markt)
5736      </td></tr>
5737    </table>
5738  </blockquote></td></tr></table>
5739  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.17 (remm)/Jasper"><!--()--></a><a name="Tomcat_6.0.17_(remm)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>
5740    <table border="0" cellpadding="2" cellspacing="2">
5741      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5742        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=31257">31257</a>: Quote endorsed dirs if they contain a space. (markt)
5743      </td></tr>
5744      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5745        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42943">42943</a>: Make sure nested element is inside &lt;jsp:text&gt;
5746        element before throwing exception. (markt)
5747      </td></tr>
5748      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5749        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43617">43617</a>: Correctly escape attribute values in tag files.
5750        Based on a patch by Lucas Galfaso. (markt)
5751      </td></tr>
5752      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5753        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43656">43656</a>: Fix various numeric coercion bugs. Includes a patch by
5754        Nils Eckert and fixes related issues identified in a test case provided
5755        by Konstantin Kolinko. (markt)
5756      </td></tr>
5757      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5758        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43741">43741</a>: Correctly handle dependencies for tag files in JARs.
5759        (markt)
5760      </td></tr>
5761      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5762        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44408">44408</a>: Reduce synchronisation when evaluating EL expressions.
5763        Patch provided by Robert Andersson. (markt)
5764      </td></tr>
5765      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5766        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44428">44428</a>: Fix possible NPE during serialization. (markt)
5767      </td></tr>
5768      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5769        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44766">44766</a>: EL doesn't coerce custom Number subclasses. (markt)
5770      </td></tr>
5771      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5772        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44877">44877</a>: Prevent collisions on tag pool names. (markt)
5773      </td></tr>
5774      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5775        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44986">44986</a>: Make page encoding consistency checks
5776        case-insensitive. (markt)
5777      </td></tr>
5778      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5779        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44994">44994</a>: Enable nested conditional expressions in JSP EL. Patch
5780        provided by James Manger. (markt)
5781      </td></tr>
5782      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5783        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45015">45015</a>: You can't use an unescaped quote if you quote the
5784        value with that character. (markt/fhanik)
5785      </td></tr>
5786      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
5787        Add HTML filtering of error messages for included resources in case the
5788        app has tried to include an unsafe URL that does not exist. This is
5789        really an app responsibility but the filtering has been added for XSS
5790        safety. (markt)
5791      </td></tr>
5792    </table>
5793  </blockquote></td></tr></table>
5794  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.17 (remm)/Web applications"><!--()--></a><a name="Tomcat_6.0.17_(remm)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>
5795    <table border="0" cellpadding="2" cellspacing="2">
5796      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
5797        Update documentation to use correct version number, correct file paths
5798        and to use $CATALINA_BASE rather than $CATALINA_HOME where applicable.
5799        (markt/jim)
5800      </td></tr>
5801      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
5802        Add a section on available system property configuration options.
5803        (markt)
5804      </td></tr>
5805      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5806        Amend the JNDI datasource doc to reflect new value for no limit used by
5807        updated commons-pool and commons-DBCP. (markt)
5808      </td></tr>
5809      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5810        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43333">43333</a>: Fix errors in sendfile documentation. (markt)
5811      </td></tr>
5812      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5813        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43366">43366</a>: Provide backwards compatibility for manager sessions
5814        command. (markt)
5815      </td></tr>
5816      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5817        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44541">44541</a>: Document packetSize attribute for AJP connector.
5818        (markt)
5819      </td></tr>
5820      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5821        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44715">44715</a>: Document secret attribute for AJP connector. (markt)
5822      </td></tr>
5823      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5824        Fix some links in the ROOT application that are broken if ROOT is
5825        renamed. (markt)
5826      </td></tr>
5827      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5828        Align the Realm documentation so that both the configuration and the
5829        how-to are consistent. (markt)
5830      </td></tr>
5831      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5832        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45277">45277</a>: Fix typo in logging docs. (markt)
5833      </td></tr>
5834    </table>
5835  </blockquote></td></tr></table>
5836  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.17 (remm)/Cluster"><!--()--></a><a name="Tomcat_6.0.17_(remm)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>
5837    <table border="0" cellpadding="2" cellspacing="2">
5838      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5839        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45212">45212</a>: AbstractReplicatedMap.entrySet() now returns entries
5840        rather than vaules. (markt)
5841      </td></tr>
5842      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td><a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=45279">45279</a>: Properly close multicast socket.</td></tr>
5843      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
5844        Fix session replication dead lock during non sticky load balancing.
5845        (fhanik)
5846      </td></tr>
5847    </table>
5848  </blockquote></td></tr></table>
5849  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.17 (remm)/Other"><!--()--></a><a name="Tomcat_6.0.17_(remm)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>
5850    <table border="0" cellpadding="2" cellspacing="2">
5851      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
5852        Improve the Tests for unit tests for the cookie issues. (jfclere)
5853      </td></tr>
5854      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5855        Fix build for JavaDoc. Patch provided by Stephen Bannasch. (markt)
5856      </td></tr>
5857      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5858        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44955">44955</a>: Use correct location for endorsed directory in Windows
5859        installer. (markt)
5860      </td></tr>
5861    </table>
5862  </blockquote></td></tr></table>
5863</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.16 (remm)"><!--()--></a><a name="Tomcat_6.0.16_(remm)"><strong>Tomcat 6.0.16 (remm)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2008-02-08</strong></font></td></tr><tr><td colspan="2"><blockquote>
5864  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.16 (remm)/General"><!--()--></a><a name="Tomcat_6.0.16_(remm)/General"><strong>General</strong></a></font></td></tr><tr><td><blockquote>
5865    <table border="0" cellpadding="2" cellspacing="2">
5866      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
5867        Update commons-logging to version 1.1.1 and the NSIS installer to 2.34.
5868        (markt)
5869      </td></tr>
5870      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
5871        Update to commons-pool version 1.4, native version 1.1.12 and update
5872        the download location for the commons libraries. (markt)
5873      </td></tr>
5874      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
5875        Change chunked input parsing, always parse CRLF directly after a chunk has been
5876        received, except if data is not available. If data is not available for CRLF
5877        parsing, we run into BZ 11117, and must defer the parsing of CRLF to the next read event.
5878        This fixes the incorrect blocking when using CometProcessor and the draining data during the READ event
5879        where it before would block incorrectly waiting for the next chunk (fhanik)
5880      </td></tr>
5881      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
5882        The CometProcessor interface now extends the javax.servlet.Servlet interface(fhanik)
5883      </td></tr>
5884      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5885        Fix CVE-2007-5342 by limiting permissions granted to JULI. (markt)
5886      </td></tr>
5887      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
5888        Fix handling of CometEvent.close when called during BEGIN event (fhanik)
5889      </td></tr>
5890      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5891        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43594">43594</a>: Use setenv from CATALINA_BASE (if set) in preference
5892        to the one in CATALINA_HOME. Patch provided by Shaddy Baddah.
5893        (markt/jim)
5894      </td></tr>
5895      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5896        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43692">43692</a>: Clean up unused entries from build scripts. Patch
5897        provided by Paul Shemansky. (markt)
5898      </td></tr>
5899      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5900        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43775">43775</a>: Don't try to change line endings of binary files in
5901        the source distribution. (markt)
5902      </td></tr>
5903      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td><a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43846">43846</a>:
5904        Fix block simulated read and writes causing timeouts.
5905        Add non blocking parsing of HTTP request headers.
5906        Perf improvements(fhanik)
5907      </td></tr>
5908      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5909        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43957">43957</a>: Service.bat doesn't configure logging correctly. Patch
5910        provided by  Richard Fearn. (markt/jim)
5911      </td></tr>
5912      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
5913        Cookie handling/parsing changes!
5914        The following behavior has been changed with regards to Tomcat's cookie handling
5915        a) Cookies containing control characters, except 0x09(HT), are rejected using an InvalidArgumentException <br>
5916        b) If cookies are not quoted, they will be quoted if they contain tspecials(ver0), tspecials2(ver1) characters<br>
5917        c) Escape character '\\' is allowed and respected as a escape character, will be unescaped during parsing
5918      </td></tr>
5919      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5920        Cookie parsing of $Version regression from 6.0.15 has been fixed
5921      </td></tr>
5922      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5923        The script that builds the windows installer was including additional
5924        files due to the way it processes recurrsive file selectors. The
5925        selectors have been modified to only include the intended files. (markt)
5926      </td></tr>
5927    </table>
5928  </blockquote></td></tr></table>
5929  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.16 (remm)/Catalina"><!--()--></a><a name="Tomcat_6.0.16_(remm)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
5930    <table border="0" cellpadding="2" cellspacing="2">
5931      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5932        Fix ManagerServlet.expireSessions throws Exceptions as iterate longer
5933        session lists at production servers. (pero)
5934      </td></tr>
5935      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5935<a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=38131">38131</a>: WatchedResource doesn't work if app is outside host appbase webapps.
5936        Patch provided by Peter Lynch (pero)
5937      </td></tr>
5938      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>Add -Dorg.apache.catalina.tribes.dns_lookups=false as default. The ability to turn off reverse DNS lookups for membership.(fhanik)</td></tr>
5939      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5940         Set correct StandardManager.sessionCounter after reload/restart. (pero)
5941      </td></tr>
5942      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5943        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42503">42503</a>: ServletContext.getResourceAsStream() could return
5944        stale data. Patch provided by Arvind Srinivasan. (funkman/jim)
5945      </td></tr>
5946      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5947        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43236">43236</a>: When resetting the response, also reset the flags
5948        associated with using a writer or an output stream to allow the user to
5949        change character set after the reset. (markt)
5950      </td></tr>
5951      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5952        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43241">43241</a>: Make ServletContext.getResourceAsStream() conform to
5953        the specification. Patch provided by John Kew. (markt)
5954      </td></tr>
5955      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5956        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43530">43530</a>: doc link fixes provided by  Paul Shemansky (funkman)
5957      </td></tr>
5958      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5959        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43675">43675</a>: Fix a possible logging related classloader leak.
5960        (markt)
5961      </td></tr>
5962      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td><a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43687">43687</a>: Remove conditional headers on Form Auth replay,
5963           since the UA (esp. FireFox) isn't expecting it.
5964      </td></tr>
5965      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5966        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43706">43706</a>: WebDAV copy/move now returns 201 on success. Based on
5967        a patch by Panagiotis Astithas. (markt)
5968      </td></tr>
5969      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5970        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43840">43840</a>: Include user principal if possible when serializing /
5971        de-serializing sessions. (markt)
5972      </td></tr>
5973      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5974        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43868">43868</a>: MBean methods getInvoke and getSetter were broken.
5975        (markt)
5976      </td></tr>
5977      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5978        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43887">43887</a>: Make error messages much more helpful when illegal
5979        Servlet names are used. Based on a patch provided by Mike Baranczak.
5980        (markt)
5981      </td></tr>
5982      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5983        Fix a bug that causes CGI Servlet to fail when it is included. (markt)
5984      </td></tr>
5985      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
5986        Improve the webDAV Servlet Javadocs to make clear that the WebDAV
5987        Servlet can not be used as the default servlet. (markt)
5988      </td></tr>
5989      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5990        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43993">43993</a>: mime mapping for WS-Policy. Patch by Fabian Ritzmann  (funkman)
5991      </td></tr>
5992      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5993        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44041">44041</a>: Fix duplicate class definition under load. (markt)
5994      </td></tr>
5995      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
5996        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44084">
599644084</a>: JASSRealm was broken for application provided
5997        Principals. Patch provided by Noah Levitt. (markt)
5998      </td></tr>
5999      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6000        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44223">44223</a>: Use the javax.net.ssl.trustStoreType setting if no
6001        explicit connector configuration is provided and the property is set.
6002        (markt/jim)
6003      </td></tr>
6004      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
6005        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44268">44268</a>: Log a warning if a duplicate listener configuration is
6006        ignored. (markt/jim)
6007      </td></tr>
6008    </table>
6009  </blockquote></td></tr></table>
6010  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.16 (remm)/Coyote"><!--()--></a><a name="Tomcat_6.0.16_(remm)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>
6011    <table border="0" cellpadding="2" cellspacing="2">
6012      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6013        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43622">43622</a>: Don't overwrite the min compression size set by the
6014        compression attribute with the default. (markt/jim)
6015      </td></tr>
6016      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6017        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43839">43839</a>: URL based session tracking failed when a session
6018        cookie from a parent context was present. Based on a patch by Yuan
6019        Qingyun. (markt)
6020      </td></tr>
6021      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6022        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43914">43914</a>: URLs in location headers should be encoded. Patch
6023        provided by Ivan Todoroski. (markt)
6024      </td></tr>
6025    </table>
6026  </blockquote></td></tr></table>
6027  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.16 (remm)/Jasper"><!--()--></a><a name="Tomcat_6.0.16_(remm)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>
6028    <table border="0" cellpadding="2" cellspacing="2">
6029      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6030        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43285">43285</a>: Missing EL Coercion causes argument type mismatch.
6031        Patch provided by Bernhard Huemer. (funkman/jim)
6032      </td></tr>
6033      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6034        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43675">43675</a>: Fix a possible logging related classloader leak.
6035        (markt)
6036      </td></tr>
6037      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6038        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43702">43702</a>: Inner class files have unnecessarily long names.
6039        (markt)
6040      </td></tr>
6041      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6042        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43743">43743</a>: Fix NPE when compiling nest tag files packaged in a
6043        JAR. (markt)
6044      </td></tr>
6045      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6046        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43757">43757</a>: Rather than use string matching to work out the line
6047        in the JSP with the error, use the SMAP info and the knowledge that for
6048        a scriptlet there is a one to one line mapping. (markt/jim)
6049      </td></tr>
6050      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6051        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43758">43758</a>: Fix NPE when scripting elements are empty. (markt)
6052      </td></tr>
6053      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6054        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43909">43909</a>: Make sure locale maps to wrapped ELContext. Patch
6055        provided by Tuomas Kiviaho. (markt)
6056      </td></tr>
6057      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6058        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43944">43944</a>: Fix a missing resource exception. (markt)
6059      </td></tr>
6060      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6061        Improve docs for Jasper configuration. Put options in alphabetical
6062        order, add some missing options, deprecate an unused one and address
6063        feedback about the page provided on the users list.
6064      </td></tr>
6065    </table>
6066  </blockquote></td></tr></table>
6067  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.16 (remm)/Web applications"><!--()--></a><a name="Tomcat_6.0.16_(remm)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>
6068    <table border="0" cellpadding="2" cellspacing="2">
6069      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6070        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43173">43173</a>: Fix typo in logging documentation regarding location
6071        of logging.properties. (markt)
6072      </td></tr>
6073      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6074        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43344">43344</a>
6074: Fix typo in if.jsp example. Patch provided by Tim
6075        Nowaczyk. (markt)
6076      </td></tr>
6077      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6078        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43468">43468</a>: Fix possible NPE when listing contexts in the Manager
6079        application. (markt)
6080      </td></tr>
6081      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6082        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43515">43515</a>: Fix bug in Manager application that may have caused
6083        problems when listing contexts. Patch provided by Lucas Galfaso. (markt)
6084      </td></tr>
6085      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6086        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43611">43611</a>: Provide an error message if user tries to upload a war
6087        for a context defined in server.xml rather than failing silently.
6088        (markt/jim)
6089      </td></tr>
6090      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6091        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43800">43800</a>: Make relationship between APR and the native connector
6092        clearer. (markt)
6093      </td></tr>
6094      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6095        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44088">44088</a>: Fix expire session button in manager. (markt)
6096      </td></tr>
6097      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6098        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=44094">44094</a>: Add a note about the side effects of configuring a
6099        context as privileged. (markt)
6100      </td></tr>
6101      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
6102        Update JNDI documentation to refer to configuring contexts via
6103        context.xml rather than server.xml. (markt/jim)
6104      </td></tr>
6105    </table>
6106  </blockquote></td></tr></table>
6107   <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.16 (remm)/Cluster"><!--()--></a><a name="Tomcat_6.0.16_(remm)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>
6108    <table border="0" cellpadding="2" cellspacing="2">
6109      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6110        Fix FarmWarDeployer can be only configured as host subelement (pero)
6111      </td></tr>
6112      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6113        Fix wrong &amp;&amp; at ReplicationValve (pero)
6114      </td></tr>
6115      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
6116        Add get/set methods for properties in the Tcp Failure detector.
6117        (fhanik/jim)
6118      </td></tr>
6119    </table>
6120  </blockquote></td></tr></table>
6121</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.15 (remm)"><!--()--></a><a name="Tomcat_6.0.15_(remm)"><strong>Tomcat 6.0.15 (remm)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote>
6122  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.15 (remm)/General"><!--()--></a><a name="Tomcat_6.0.15_(remm)/General"><strong>General</strong></a></font></td></tr><tr><td><blockquote>
6123    <table border="0" cellpadding="2" cellspacing="2">
6124      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>Fix the MD5 file contents in distribution</td></tr>
6125      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
6126        Add ANT script to be able to publish signed Tomcat JAR's to ASF Maven repo (fhanik)
6127      </td></tr>
6128      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
6129        Use Eclipse JDT 3.3.1. (pero)
6130      </td></tr>
6131    </table>
6132  </blockquote></td></tr></table>
6133  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.15 (remm)/Catalina"><!--()--></a><a name="Tomcat_6.0.15_(remm)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
6134    <table border="0" cellpadding="2" cellspacing="2">
6135      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>Guess java location from the PATH environment and improve fix for 37284</td></tr>
6136      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>Add NIO connector to server.xml parsing warning, remove Connector as exception case</td></tr>
6137      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td><a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43653">43653</a>: Fix SSL buffer mixup when response is unable to write more than socket buffer can handle</td></tr>
6138      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td><a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43643">43643</a>: If connector doesn't support external executor, display warning</td></tr>
6139      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td><a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43641">43641</a>: Property bind multicast address for cluster membership</td></tr>
6140      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td><a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42693">42693</a>: Fix JSP compiler bug</td></tr>
6141      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>Add mbean descriptor for virtual webapp loader</td></tr>
6142      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td><a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43487">43487</a>:
6143        Fix request processing stats
6144      </td></tr>
6145      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6146        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43435">43435</a>: Don't iterate and relocate sessions if they are not part of the map.
6147      </td></tr>
6148      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6149        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43356">43356</a>: Keystore parameter is relative to CATALINA_BASE,
6150        Truststore is either defined as parameter, javax.net.ssl.trustStore or if empty
6151        defaults to the keystore.
6152        SSL Client cert authentication changed from boolean to "true|false|want" (fhanik)
6153      </td></tr>
6154      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6155        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=30949">30949</a>: Improve previous fix. Ensure requests are re-cycled
6156        on cross-context includes and forwards when an exception occurs in the
6157        target page. (markt)
6158      </td></tr>
6159      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6160        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42944">42944</a>: Correctly handle servlet mappings that use a '+'
6161        character as part of the url pattern. (markt)
6162      </td></tr>
6163      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6164         <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42951">42951</a>: Don't use CATALINA_OPTS when stopping Tomcat. This
6165         allows options for starting and stopping to be set on JAVA_OPTS and
6166         options for starting only to be set on CATALINA_OPTS. Without this
6167         fix, some startup options (eg the port for remote JMX) would cause
6168         stop to fail. Based on a fix suggested by Michael Vorburger.
6169         Port of r454193 (<a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=36976">36976</a>) from Tomcat 5.5.x. (markt,rjung)
6170      </td></tr>
6171      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
6172         Validation of attributes and elements used in server.xml. (remm)
6173      </td></tr>
6174      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6175        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43175">43175</a>: Fix typos in servlet XSD files. Patch provided by
6176        Takayuki Kaneko. (markt)
6177      </td></tr>
6178      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6179        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43216">43216</a>: Set correct StandardSession#accessCount as StandardSession.ACTIVITY_CHECK is true.
6180        Patch provided by Takayuki Kaneko (pero)
6181      </td></tr>
6182      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
6183        Made session createTime accessible for all SessionManager via JMX (pero)
6184      </td></tr>
6185      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
6186        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43129">43129</a>: Support logging of all response header values at AccessLogValve (ex. add %{Set-Cookie}o to your pattern). (pero)
6187      </td></tr>
6188      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
6189        Support logging of all response header values at ExtendedAccessLogValve (ex. add x-O(Set-Cookie) to your pattern). (pero)
6190      </td></tr>
6191      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
6192        Support logging of current thread name at AccessLogValve (ex. add %I to your pattern).
6193        Usefull to compare access logging entry later with a stacktraces. (pero)
6194      </td></tr>
6195      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6196        Improve large-file support (more then 4 Gb) at all AccessLogValves, backp
6196ort from 5.5.25. (pero)
6197      </td></tr>
6198      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
6199        Optimized JDBCAccessLogValve combined pattern request attribute access. (pero)
6200      </td></tr>
6201      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6202        o.a.juli.ClassLoaderLogManager handle more then one system property replacement at file logging.properties. (pero)
6203      </td></tr>
6204      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6205        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43338">43338</a>: Support '*' servlet-name mapping at filter-mapping.
6206        Patch provided by Keiichi Fujino. (pero)
6207      </td></tr>
6208      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6209        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41797">41797</a>: CNFE/NPE thrown from function mapper when externalizing
6210        Patch by Tuomas Kiviaho- tuomas.kiviahos at ikis fi (funkman)
6211      </td></tr>
6212      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6213        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43453">43453</a>: ClassCastException at
6214        org.apache.catalina.core.StandardContext.findStatusPage(int)
6215         (funkman)
6216      </td></tr>
6217      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6218        Fix important vulnerability when webdav is enabled for write. (markt)
6219      </td></tr>
6220      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6221        Call stopAwait in StandardServer.stop if port == -1. (pero)
6222      </td></tr>
6223      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6224        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43668">43668</a>: Fix NPE when the outer most wrapper is a ServletRequest/ResponseWrapper, but not a HttpServletRequest/ResponseWrapper on a Forward. (billbarker)
6225      </td></tr>
6226    </table>
6227  </blockquote></td></tr></table>
6228  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.15 (remm)/Coyote"><!--()--></a><a name="Tomcat_6.0.15_(remm)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>
6229    <table border="0" cellpadding="2" cellspacing="2">
6230      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6231        Harmonize with HTTP java.io code. Otherwise the socket is not closed.
6232      </td></tr>
6233      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6234        In the APR connector, start accepting connections after fully starting
6235        the connector, to prevent possible exceptions due to non initialized fields. (remm)
6236      </td></tr>
6237      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
6238        Cookie parser refactoring, submitted by John Kew. (remm)
6239      </td></tr>
6240      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6241        Make cookie escaping / unescaping consistent. (markt)
6242      </td></tr>
6243      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6244        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43479">43479</a>: Memory leak cleaning up sendfile connections, submitted by Chris Elving. (remm)
6245      </td></tr>
6246      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6247        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42925">42925</a>: Add maintain for sendfile. (remm)
6248      </td></tr>
6249      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6250        Fix explicit flush before response commit in the org.apache.jk AJP connector. (pero)
6251      </td></tr>
6252      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6253        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=43621">43621</a>: Fix possible Dos condition when using the experimental NIO/AJP Connector (billbarker)
6254      </td></tr>
6255    </table>
6256  </blockquote></td></tr></table>
6257  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.15 (remm)/Jasper"><!--()--></a><a name="Tomcat_6.0.15_(remm)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>
6258    <table border="0" cellpadding="2" cellspacing="2">
6259      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6260        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=37326">37326</a>: No error reported when an included page does not
6261        exist. (markt)
6262      </td></tr>
6263    </table>
6264  </blockquote></td></tr></table>
6265  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.15 (remm)/Web applications"><!--()--></a><a name="Tomcat_6.0.15_(remm)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>
6266    <table border="0" cellpadding="2" cellspacing="2">
6267      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6268        Fix WebDAV Servlet so it works correctly with MS clients. (markt)
6269      </td></tr>
6270      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6271        Fix CVE-2007-5461, an important information disclosure vulnerability in
6272        the WebDAV Servlet. Based on a patch by Marc Schoenefeld. (markt)
6273      </td></tr>
6274      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6275        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42979">42979</a>: Update sample.war to include recent security fixes
6276        in the source code. (markt)
6277      </td></tr>
6278      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6279        Minor connector doc fix. (jfclere)
6280      </td></tr>
6281    </table>
6282  </blockquote></td></tr></table>
6283   <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.15 (remm)/Cluster"><!--()--></a><a name="Tomcat_6.0.15_(remm)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>
6284    <table border="0" cellpadding="2" cellspacing="2">
6285      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6286         Set correct BioReceiver transfer buffer size. (pero)
6287      </td></tr>
6288    </table>
6289  </blockquote></td></tr></table>
6290  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.15 (remm)/Other"><!--()--></a><a name="Tomcat_6.0.15_(remm)/Other"><strong>Other</strong></a></font></td></tr><tr><td><blockquote>
6291    <table border="0" cellpadding="2" cellspacing="2">
6292      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
6293         Tests for unit tests for the cookie issues. (jfclere)
6294      </td></tr>
6295    </table>
6296  </blockquote></td></tr></table>
6297
6298</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.14 (remm)"><!--()--></a><a name="Tomcat_6.0.14_(remm)"><strong>Tomcat 6.0.14 (remm)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2007-08-13</strong></font></td></tr><tr><td colspan="2"><blockquote>
6299  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.14 (remm)/General"><!--()--></a><a name="Tomcat_6.0.14_(remm)/General"><strong>General</strong></a></font></td></tr><tr><td><blockquote>
6300    <table border="0" cellpadding="2" cellspacing="2">
6301      <tr><td><img alt="docs" class="icon" src="./images/docs.gif"></td><td>
6302        Correct j.u.l log levels in JULI docs. (rjung)
6303      </td></tr>
6304    </table>
6305  </blockquote></td></tr></table>
6306  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.14 (remm)/Catalina"><!--()--></a><a name="Tomcat_6.0.14_(remm)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
6307    <table border="0" cellpadding="2" cellspacing="2">
6308      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6309        Handle special case of ROOT when re-loading webapp after ROOT.xml has
6310        been modified. In some circumstances the reloaded ROOT webapp had no
6311        associated resources. (markt)
6312      </td></tr>
6313      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6314        Remove invalid attribute "encoding" of MBean MemoryUserDatabase,
6315        which lead to errors in the manager webapp JMXProxy output. (rjung)
6316      </td></tr>
6317      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6318        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=33774">33774</a>: Retry JNDI authentication on ServiceUnavailableException
6319        as at least one provider throws this after an idle connection has been
6320        closed. (markt)
6321      </td></tr>
6322      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6323         <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=39875">39875</a>: Fix BPE in RealmBase.init(). Port of yoavs's fix from
6324         Tomcat 5. (markt)
6325      </td></tr>
6326      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6327        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41722">41722</a>: Make the role-link element optional (as required by
6328        the spec) when using a security-role-ref element. (markt)
6329      </td></tr>
6330      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6331         <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42361">42361</a>: Handle multi-part forms when saving requests during
6332         FORM authentication process. Patch provided by Peter Runge. (markt)
6333      </td></tr>
6334      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6335         <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42401">42401</a>: Update RUNNING.txt with better JRE/JDK information.
6336         (markt)
6337      </td></tr>
6338      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6339         <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42444">42444</a>: prevent NPE for AccessLogValve
6340         Patch provided by Nils Hammar (funkman)
6341      </td></tr>
6342      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6343         <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42449">42449</a>:
6344         JNDIRealm does not catch NullPointerException for Sun's
6345         LDAP provider (See bug for details) (funkman)
6346      </td></tr>
6347      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6348         <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42497">42497</a>: Ensure ETag header is present in a 304 response.
6349         Patch provided by Len Popp. (markt)
6350      </td></tr>
6351      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6352        Fix XSS security vulnerability (CVE-2007-2450) in the Manager and Host
6353        Manager. Reported by Daiki Fukumori. (markt)
6354      </td></tr>
6355      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6356        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42547">42547</a>: Fix NPE when a ResourceLink in context.xml tries to
6357        override an env-entry in web.xml. (markt)
6358      </td></tr>
6359      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6360        Avoid some casting in ErrorReportValve (remm)
6361      </td></tr>
6362      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6363        Fix persistence API annotation, submitted by Bill Burke (remm)
6364      </td></tr>
6365      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6366        In Comet mode, if bytes are not read, send an error event (otherwise,
6367        fields referring to the connection could remain) (remm)
6368      </td></tr>
6369      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6370        Fix Comet when running Tomcat with the security manager (remm)
6371      </td></tr>
6372    </table>
6373  </blockquote></td></tr></table>
6374  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.14 (remm)/Jasper"><!--()--></a><a name="Tomcat_6.0.14_(remm)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>
6375    <table border="0" cellpadding="2" cellspacing="2">
6376      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6377        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=39425">39425</a>: Add additional system property permission to
6378        catalina.policy for pre-compiled JSPs. (markt)
6379      </td></tr>
6380      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6381        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42438">42438</a>: Duplicate temporary variables were created when
6382        jsp:attribute was used in conjunction with custom tags. Patch provided
6383        by Brian Lenz. (markt)
6384      </td></tr>
6385      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6386        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42643">42643</a>: Prevent creation of duplicate JSP function mapper
6387        variables. (markt)
6388      </td></tr>
6389    </table>
6390  </blockquote></td></tr></table>
6391  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.14 (remm)/Coyote"><!--()--></a><a name="Tomcat_6.0.14_(remm)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>
6392    <table border="0" cellpadding="2" cellspacing="2">
6393      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6394        Separate sequence increment from getter in ThreadPool to avoid
6395        misleading increments during monitoring via JMX. (rjung)
6396      </td></tr>
6397      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6398        Add back missing socketBuffer attribute in the java.io HTTP connector (remm)
6399      </td></tr>
6400    </table>
6401  </blockquote></td></tr></table>
6402  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.14 (remm)/Web applications"><!--()--></a><a name="Tomcat_6.0.14_(remm)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>
6403    <table border="0" cellpadding="2" cellspacing="2">
6404      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6405        Don't write error on System.out, use log() instead. (rjung)
6406      </td></tr>
6407      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6408        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=39813">39813</a>: Correct handling of new line characters in JMX
6409        attributes. Patch provided by R Bramley. Ported from tc5.5.x r415029. (markt,rjung)
6410      </td></tr>
6411      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6412         <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42459">42459</a>: Fix Tomcat Web Application Manager table error. (rjung)
6413      </td></tr>
6414      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6415        Fix XSS security vulnerabilities (CVE-2007-2449) in the examples.
6416        Reported by Toshiharu Sugiyama. (markt)
6417      </td></tr>
6418    </table>
6419  </blockquote></td></tr></table>
6420</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.13 (remm)"><!--()--></a><a name="Tomcat_6.0.13_(remm)"><strong>Tomcat 6.0.13 (remm)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2007-05-15</strong></font></td></tr><tr><td colspan="2"><blockquote>
6421  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.13 (remm)/Catalina"><!--()--></a><a name="Tomcat_6.0.13_(remm)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
6422    <table border="0" cellpadding="2" cellspacing="2">
6423      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6424         More accurate available() method. (remm)
6425      </td></tr>
6426      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6427         Add recycle check in the event object, since it is a facade like the others. (remm)
6428      </td></tr>
6429      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6430         When processing a read event, enforce that the servlet consumes all available bytes. (remm)
6431      </td></tr>
6432      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
6433         Add a flag in ContainerBase which could be used in embedded scenarios to avoid a double start
6434         of contexts (this problem generally occurs when adding contexts to a started host). (remm)
6435      </td></tr>
6436      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6437         <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42309">42309</a>: Ability to create a connector using a custom protocol specification for embedded.
6438         (fhanik)
6439      </td></tr>
6440      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6441         Add SSL engine flag to AprLifecycleListener. (fhanik)
6442      </td></tr>
6443      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6444         Improve event processing, so that an END event is generated 
6444when encountering EOF, and an
6445         ERROR is always generated on client disconnects. (remm)
6446      </td></tr>
6447      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6448         Add declarations for the new XSD files. (remm)
6449      </td></tr>
6450    </table>
6451  </blockquote></td></tr></table>
6452  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.13 (remm)/Coyote"><!--()--></a><a name="Tomcat_6.0.13_(remm)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>
6453    <table border="0" cellpadding="2" cellspacing="2">
6454      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6455         Add heartbeatBackgroundEnabled flag to SimpleTcpCluster.
6456         Enable this flag don't forget to disable the channel heartbeat thread (pero)
6457      </td></tr>
6458      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6459         Possible memory leak when using comet, caused by adding the socket to the poller before
6460         cleaning up the connection tracking structure. (remm)
6461      </td></tr>
6462      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6463         <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42308">42308</a>: nextRequest recycles the request, which caused issues with statistics. (remm)
6464      </td></tr>
6465      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6466         Fix non recycled comet flag in the APR connector. (remm)
6467      </td></tr>
6468    </table>
6469  </blockquote></td></tr></table>
6470  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.13 (remm)/Cluster"><!--()--></a><a name="Tomcat_6.0.13_(remm)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>
6471    <table border="0" cellpadding="2" cellspacing="2">
6472      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6473         Add heartbeatBackgroundEnabled flag to SimpleTcpCluster.
6474         Enable this flag don't forget to disable the channel heartbeat thread (pero)
6475      </td></tr>
6476      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6477         Method name cleanup. (fhanik)
6478      </td></tr>
6479    </table>
6480  </blockquote></td></tr></table>
6481  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.13 (remm)/Web applications"><!--()--></a><a name="Tomcat_6.0.13_(remm)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>
6482    <table border="0" cellpadding="2" cellspacing="2">
6483      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6484         Some examples webapp fixes. Submitted by Frank McCown. (remm)
6485      </td></tr>
6486    </table>
6487  </blockquote></td></tr></table>
6488</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.12 (remm)"><!--()--></a><a name="Tomcat_6.0.12_(remm)"><strong>Tomcat 6.0.12 (remm)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote>
6489  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.12 (remm)/General"><!--()--></a><a name="Tomcat_6.0.12_(remm)/General"><strong>General</strong></a></font></td></tr><tr><td><blockquote>
6490    <table border="0" cellpadding="2" cellspacing="2">
6491      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6492        License source headers. Submitted by Niall Pemberton. (remm)
6493      </td></tr>
6494    </table>
6495  </blockquote></td></tr></table>
6496  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.12 (remm)/Catalina"><!--()--></a><a name="Tomcat_6.0.12_(remm)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
6497    <table border="0" cellpadding="2" cellspacing="2">
6498      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6499        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42039">42039</a>: Log a stack trace if a servlet throws an
6500         UnavailableException. Patch provided by Kawasima Kazuh. (markt)
6501      </td></tr>
6502      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6503        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41990">41990</a>: Add some additional mime-type mappings. (markt)
6504      </td></tr>
6505      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6506        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41655">41655</a>: Fix message translations. Japanese translations
6507        provided by Suzuki Yuichiro. (markt)
6508      </td></tr>
6509      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
6510        Add enabled attribute to AccessLogValve (pero)
6511      </td></tr>
6512      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6513        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42085">42085</a>: Avoid adding handlers for the root logger twice when they are explicitly
6514        specified. (remm)
6515      </td></tr>
6516      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6517        Reduce thread local manipulation in the request dispatcher. Submitted by
6518        Arvind Srinivasan. (remm)
6519      </td></tr>
6520      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6521        Avoid keeping references to loggers tied to the webapp classloaders after a reload in
6522        a couple more places. (remm)
6523      </td></tr>
6524      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6525        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42202">42202</a>: Fix container parsing of TLDs in webapps when Tomcat is installed in
6526        a URL encodable path. (remm)
6527      </td></tr>
6528    </table>
6529  </blockquote></td></tr></table>
6530  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.12 (remm)/Coyote"><!--()--></a><a name="Tomcat_6.0.12_(remm)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>
6531    <table border="0" cellpadding="2" cellspacing="2">
6532      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6533        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42119">42119</a>: Fix return value for request.getCharacterEncoding() when
6534        Content-Type headers contain parameters other than charset. Patch by
6535        Leigh L Klotz Jr. (markt)
6536      </td></tr>
6537      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
6538        Move away from using a thread local processor for the APR and java.io
6539        connectors, as this does not work well when using an executor. (remm)
6540      </td></tr>
6541      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6542        Remove Comet timeout hack in the APR connector. Comet connections will now
6543        use the regular timeout or the keepalive timeout if specified. (remm)
6544      </td></tr>
6545    </table>
6546  </blockquote></td></tr></table>
6547  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.12 (remm)/Web applications"><!--()--></a><a name="Tomcat_6.0.12_(remm)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>
6548    <table border="0" cellpadding="2" cellspacing="2">
6549      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6550        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42025">42025</a>: Update valve documentation to refer to correct regular
6551        expression implementation. (markt)
6552      </td></tr>
6553      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6554        Fix various paths in the manager webapps (remm)
6555      </td></tr>
6556      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
6557        Session viewer and editor for the HTML manager. Submitted by C&eacute;drik Lime. (remm)
6558      </td></tr>
6559      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
6560        Session handling tools for the manager. Submitted by Rainer Jung. 
6560(remm)
6561      </td></tr>
6562    </table>
6563  </blockquote></td></tr></table>
6564  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.12 (remm)/Jasper"><!--()--></a><a name="Tomcat_6.0.12_(remm)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>
6565    <table border="0" cellpadding="2" cellspacing="2">
6566      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6567        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41869">41869</a>: TagData.getAttribute() should return
6568        TagData.REQUEST_TIME_VALUE when the attribute value is an EL expression.
6569        (markt)
6570      </td></tr>
6571      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6572        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42071">42071</a>: Fix IllegalStateException on multiple requests to
6573        an unavailable JSP. Patch provided by Kawasima Kazuh. (markt)
6574      </td></tr>
6575      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6576        After a JSP throws an UnavailableException allow it to be accessed once
6577        the unavailable period has expired. (markt)
6578      </td></tr>
6579    </table>
6580  </blockquote></td></tr></table>
6581  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.12 (remm)/Cluster"><!--()--></a><a name="Tomcat_6.0.12_(remm)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>
6582    <table border="0" cellpadding="2" cellspacing="2">
6583      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6584         Add toString method to better logging session replication message at tribes MESSAGES (pero)
6585      </td></tr>
6586    </table>
6587  </blockquote></td></tr></table>
6588</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.11 (remm)"><!--()--></a><a name="Tomcat_6.0.11_(remm)"><strong>Tomcat 6.0.11 (remm)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote>
6589  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.11 (remm)/General"><!--()--></a><a name="Tomcat_6.0.11_(remm)/General"><strong>General</strong></a></font></td></tr><tr><td><blockquote>
6590    <table border="0" cellpadding="2" cellspacing="2">
6591      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
6592        Update DBCP to 1.2.2, pool to 1.3, JDT to 3.2.2 and remove collections
6593        build dependency (pero, remm)
6594      </td></tr>
6595    </table>
6596  </blockquote></td></tr></table>
6597  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.11 (remm)/Catalina"><!--()--></a><a name="Tomcat_6.0.11_(remm)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
6598    <table border="0" cellpadding="2" cellspacing="2">
6599      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6600        Don't log pattern subtoken at ExtendedAccesLogValve (pero)
6601      </td></tr>
6602      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6603        Add some missing JMX attributes for new AccessLogValve (pero)
6604      </td></tr>
6605      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6606        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41786">41786</a>: Incorrect reference to catalina_home in catalina.sh/bat Patch provided by Mike Hanafey (fhanik)
6607      </td></tr>
6608      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6609        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41703">41703</a>: SingleSignOnMessage invalid setter, patch provided by Nils Hammar (fhanik)
6610      </td></tr>
6611      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6612        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41682">41682</a>: ClassCastException when logging is turned on (fhanik)
6613      </td></tr>
6614      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6615        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41530">41530</a>: Don't log error messages when connector is stopped (fhanik)
6616      </td></tr>
6617      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6618        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41166">41166</a>: Invalid handling when using replicated context (fhanik)
6619      </td></tr>
6620      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
6621        Added SENDFILE support for the NIO connector. (fhanik) <br>
6622      </td></tr>
6623      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
6624        Added support for shared thread pools by adding in the &lt;Executor&gt;
6625        element as a nested element to the &lt;Service&gt; element. (fhanik)
6626      </td></tr>
6627      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6628        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41666">41666</a>: Correct handling of boundary conditions for
6629        If-Unmodified-Since and If-Modified-Since headers. Patch provided by
6630        Suzuki Yuichiro. (markt)
6631      </td></tr>
6632      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6633        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41739">41739</a>: Correct handling of servlets with a load-on-startup
6634        value of zero. These are now the first servlets to be started. (markt)
6635      </td></tr>
6636      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6637        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41747">41747</a>: Correct example ant script for deploy task. (markt)
6638      </td></tr>
6639      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6640        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41752">41752</a>: Correct error message on exception in MemoryRealm.
6641        (markt)
6642      </td></tr>
6643      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
6644        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=39883">39883</a>: Add documentation warning about using antiResourceLocking
6645        on a webapp outside the Host's appBase. (yoavs)
6646      </td></tr>
6647      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6648        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=40150">40150</a>: Ensure user and roll classnames are validated on startup.  Patch by
6649          Tom. (yoavs)
6650      </td></tr>
6651      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
6652        Refactor extend access log valve using the optimized access log valve. Submitted by
6653        Takayuki Kaneko. (remm)
6654      </td></tr>
6655      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6656        Possible deadlock in classloading when defining packages. (remm)
6657      </td></tr>
6658      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6659        Remove excessive syncing from listener support. (remm)
6660      </td></tr>
6661      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
6662        Web services support. The actual factory implementations are implemented in the
6663        extras. Submitted by Fabien Carrion. (remm)
6664      </td></tr>
6665      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
6666        Add logging to display APR capabilities on the platform. (remm)
6667      </td></tr>
6668      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6669        Expose executors in JMX. (remm)
6670      </td></tr>
6671      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6672        CRLF inside a URL pattern is always invalid. (remm)
6673      </td></tr>
6674      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6675        Tweak startup time display. (remm)
6676      </td></tr>
6677      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6678        Adjustments to handling exceptions with Comet. (remm)
6679      </td></tr>
6680      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6681        If the event is closed asynchronously, generate an end event for cleanup on the
6682        next event. (remm)
6683      </td></tr>
6684      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6685        Cleanup hello webapp from the docs and fix a XSS issue in the JSP.  (remm)
6686      </td></tr>
6687      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6688        Examples webapp cleanup. Submitted by Takayuki Kaneko and Markus Sch&ouml;nhaber. (remm)
6689      </td></tr>
6690      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6691        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41289">41289</a>: Create configBase, since it is no longer created elsewhere.
6692        Submitted by Shiva Kumar H R. (remm)
6693      </td></tr>
6694     </table>
6695  </blockquote></td></tr></table>
6696  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.11 (remm)/Coyote"><!--()--></a><a name="Tomcat_6.0.11_(remm)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>
6697    <table border="0" cellpadding="2" cellspacing="2">
6698      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
6699        Fixed NIO memory leak caused by the NioChannel cache not working properly.
6700      </td></tr>
6701      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
6702        Added flag to enable/disable the usage of the pollers selector instead of a Selector pool
6703        when the serviet is reading/writing from the input/output streams
6704        The flag is <code>-Dorg.apache.tomcat.util.net.NioSelectorShared=true</code>
6705      </td></tr>
6706      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6707        Requests with multiple content-length headers are now rejected. (markt)
6708      </td></tr>
6709      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
6710        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41675">41675</a>: Add a couple of DEBUG-level logging statements to Http11Processors
6711          when sending error responses.  Patch by Ralf Hauser. (yoavs)
6712      </td></tr>
6713      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6714        Reuse digester used by the modeler. (remm)
6715      </td></tr>
6716      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
6717        When the platform does not support deferred accept, put accepted sockets in the
6718        poller. (remm)
6719      </td></tr>
6720      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6721        Fix problem with blocking reads for keepalive when using an executor (the number
6722        of busy threads is always 0). (remm)
6723      </td></tr>
6724      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
6725        The poller now has good performance, so remove firstReadTimeout. (remm)
6726      </td></tr>
6727      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6728        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=42119">42119</a>: Fix return value for request.getCharacterEncoding() when
6729        Content-Type headers contain parameters other than charset. Patch by
6730        Leigh L Klotz Jr. (markt)
6731      </td></tr>
6732    </table>
6733  </blockquote></td></tr></table>
6734  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.11 (remm)/Web applications"><!--()--></a><a name="Tomcat_6.0.11_(remm)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>
6735    <table border="0" cellpadding="2" cellspacing="2">
6736      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6737        Fix previous update to servlet 2.5 xsd to use correct declaration.
6738        (markt)
6739      </td></tr>
6740      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
6741        Update host configuration document for new behaviour for directories
6742        in appBase. (markt)
6743      </td></tr>
6744      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
6745        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=39540">39540</a>: Add link to httpd 2.2 mod_proxy_ajp docs in AJP connector doc. (yoavs)
6746      </td></tr>
6747    </table>
6748  </blockquote></td></tr></table>
6749  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.11 (remm)/Jasper"><!--()--></a><a name="Tomcat_6.0.11_(remm)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>
6750    <table border="0" cellpadding="2" cellspacing="2">
6751      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6752        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41227">41227</a>
6752: Add a bit of DEBUG-level logging to JspC so users know
6753          which file is being compiled. (yoavs)
6754      </td></tr>
6755      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
6756        Remove some dead utility code, and refactor stream capture as part of the Ant compiler. (remm)
6757      </td></tr>
6758      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6759        Support the trim directive of JSP 2.1 as an equivalent of Jasper's own parameter. (remm)
6760      </td></tr>
6761      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6762        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41790">41790</a>: Close file stream used to read the Java source. (remm)
6763      </td></tr>
6764      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6765        Fix reporting of errors which do not correspond to a portion of the JSP source. (remm)
6766      </td></tr>
6767      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6768        Remove try/catch usage for annotation processing in classic tags. The usage
6769        of the log method might have been questionable as well. (remm)
6770      </td></tr>
6771      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6772        Cleanup of the message that is displayed for compilation errors. (remm)
6773      </td></tr>
6774      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6775        Skip BOM when reading a JSP file. (remm)
6776      </td></tr>
6777    </table>
6778  </blockquote></td></tr></table>
6779 </blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.10 (remm)"><!--()--></a><a name="Tomcat_6.0.10_(remm)"><strong>Tomcat 6.0.10 (remm)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>released 2007-02-28</strong></font></td></tr><tr><td colspan="2"><blockquote>
6780  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.10 (remm)/Catalina"><!--()--></a><a name="Tomcat_6.0.10_(remm)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
6781    <table border="0" cellpadding="2" cellspacing="2">
6782      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
6783        Unify usage of security manager flag, submitted by Arvind Srinivasan. (remm)
6784      </td></tr>
6785      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6786        Fix formatting of CGI variable SCRIPT_NAME. (markt)
6787      </td></tr>
6788      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6789        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41521">41521</a>: Support * for servlet-name, submitted by Paul McMahan. (remm)
6790      </td></tr>
6791      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
6792        Cache getServletContext value, submitted by Arvind Srinivasan. (remm)
6793      </td></tr>
6794      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6795        Add options for handling special URL characters in paths, and disallow '\' and encoded '/'
6796        due to possible differences in behavior between Tomcat and a front end webserver. (remm)
6797      </td></tr>
6798      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6799        Fix bad comparison for FORM processing, submitted by Anil Saldhana. (remm)
6800      </td></tr>
6801      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6802        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41608">41608</a>: Make log levels consistent when Servlet.service()
6803        throws an exception. (markt)
6804      </td></tr>
6805    </table>
6806  </blockquote></td></tr></table>
6807  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.10 (remm)/Coyote"><!--()--></a><a name="Tomcat_6.0.10_(remm)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>
6808    <table border="0" cellpadding="2" cellspacing="2">
6809      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6810        Reduce usage of MessageBytes.getLength(), submitted by Arvind Srinivasan. (remm)
6811      </td></tr>
6812    </table>
6813  </blockquote></td></tr></table>
6814  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.10 (remm)/Jasper"><!--()--></a><a name="Tomcat_6.0.10_(remm)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>
6815    <table border="0" cellpadding="2" cellspacing="2">
6816      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6817        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41558">41558</a>: Don't call synced method on every request, submitted by Arvind Srinivasan. (remm)
6818      </td></tr>
6819      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6820        Switch to a thread local page context pool. (remm)
6821      </td></tr>
6822    </table>
6823  </blockquote></td></tr></table>
6824</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.9 (remm)"><!--()--></a><a name="Tomcat_6.0.9_(remm)"><strong>Tomcat 6.0.9 (remm)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>beta, 2007-02-08</strong></font></td></tr><tr><td colspan="2"><blockquote>
6825  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.9 (remm)/General"><!--()--></a><a name="Tomcat_6.0.9_(remm)/General"><strong>General</strong></a></font></td></tr><tr><td><blockquote>
6826    <table border="0" cellpadding="2" cellspacing="2">
6827      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6828        Use 2.5 xsd in Tomcat webapps. (markt)
6829      </td></tr>
6830      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6831        Compression filter improvements, submitted by Eric Hedstr&ouml;m. (markt)
6832      </td></tr>
6833    </table>
6834  </blockquote></td></tr></table>
6835  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.9 (remm)/Catalina"><!--()--></a><a name="Tomcat_6.0.9_(remm)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
6836    <table border="0" cellpadding="2" cellspacing="2">
6837      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6838        Properly return connector names. (remm)
6839      </td></tr>
6840      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6841        Remove logging of the XML validation flag. (remm)
6842      </td></tr>
6843      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6844        Correct error messages for context.xml. (markt)
6845      </td></tr>
6846      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6847        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41217">41217</a>: Set secure flag correctly on SSO cookie, submitted by
6848        Chris Halstead. (markt)
6849      </td></tr>
6850      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6851        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=40524">40524</a>: request.getAuthType() now returns CLIENT_CERT rather
6852        than CLIENT-CERT. (markt)
6853      </td></tr>
6854      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6855        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=40526">40526</a>: Return support for JPDA_OPTS to catalina.bat and add
6856        a new option JPDA_SUSPEND, submitted by by Kurt Roy. (markt)
6857      </td></tr>
6858      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6859        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41265">41265</a>: In embedded, remove the code that resets checkInterval
6860        values of zero to 300. (markt)
6861      </td></tr>
6862    </table>
6863  </blockquote></td></tr></table>
6864  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.9 (remm)/Coyote"><!--()--></a><a name="Tomcat_6.0.9_(remm)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>
6865    <table border="0" cellpadding="2" cellspacing="2">
6866      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6867        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=37869">37869</a>: Fix getting client certificate, submitted by Christophe Pierret. (remm)
6868      </td></tr>
6869      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6870        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=40960">40960</a>: Throw a timeout exception when getting a timeout rather than a
6871        generic IOE, submitted by Christophe Pierret. (remm)
6872      </td></tr>
6873    </table>
6874  </blockquote></td></tr></table>
6875  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.9 (remm)/Jasper"><!--()--></a><a name="Tomcat_6.0.9_(remm)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>
6876    <table border="0" cellpadding="2" cellspacing="2">
6877      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6878        EL validation fixes for attributes. (remm)
6879      </td></tr>
6880      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6881        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41327">41327</a>: Show full URI for a 404. (markt)
6882      </td></tr>
6883      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6884        JspException now uses getCause() as the result for getRootCause(). (markt)
6885      </td></tr>
6886    </table>
6887  </blockquote></td></tr></table>
6888  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.9 (remm)/Cluster"><!--()--></a><a name="Tomcat_6.0.9_(remm)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>
6889    <table border="0" cellpadding="2" cellspacing="2">
6890      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6891        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41466">41466</a>: When using the NioChannel and SecureNioChannel its
6892        important to use the channels buffers. (fhanik)
6893      </td></tr>
6894    </table>
6895  </blockquote></td></tr></table>
6896</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.8 (remm)"><!--()--></a><a name="Tomcat_6.0.8_(remm)"><strong>Tomcat 6.0.8 (remm)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>alpha</strong></font></td></tr><tr><td colspan="2"><blockquote>
6897  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.8 (remm)/Catalina"><!--()--></a><a name="Tomcat_6.0.8_(remm)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
6898    <table border="0" cellpadding="2" cellspacing="2">
6899      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6900        Make provided instances of RequestDispatcher thread safe. (markt)
6901      </td></tr>
6902      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
6903        Optional development oriented loader implementation. (funkman)
6904      </td></tr>
6905      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
6906        Optimized access log valve, submitted by Takayuki Kaneko. (remm)
6907      </td></tr>
6908      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6909        Fix error messages when parsing context.xml that incorrectly referred to
6910        web.xml. (markt)
6911      </td></tr>
6912      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6913        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41217">41217</a>
6913: Set secure attribute on SSO cookie when cookie is
6914        created during a secure request. Patch provided by Chris Halstead.
6915        (markt)
6916      </td></tr>
6917      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6918        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=40524">40524</a>: HttpServletRequest.getAuthType() now returns
6919        CLIENT_CERT rather than CLIENT-CERT for certificate authentication
6920        as per the spec. Note that web.xml continues to use CLIENT-CERT to
6921        specify the certificate authentication should be used. (markt)
6922      </td></tr>
6923      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6924        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41401">41401</a>: Add support for JPDA_OPTS to catalina.bat and add a
6925        JPDA_SUSPEND environment variable to both startup scripts. Patch
6926        provided by Kurt Roy. (markt)
6927      </td></tr>
6928    </table>
6929  </blockquote></td></tr></table>
6930  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.8 (remm)/Coyote"><!--()--></a><a name="Tomcat_6.0.8_(remm)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>
6931    <table border="0" cellpadding="2" cellspacing="2">
6932      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6933        Use the tomcat-native-1.1.10 as recommended version.
6934        OpenSSL detection on some platforms was broken 1.1.8 will continue to work,
6935        although on some platforms there can be JVM crash if IPV6 is enabled and
6936        platform doesn't support IPV4 mapped addresses on IPV6 sockets.
6937      </td></tr>
6938  </table>
6939  </blockquote></td></tr></table>
6940  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.8 (remm)/Jasper"><!--()--></a><a name="Tomcat_6.0.8_(remm)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>
6941    <table border="0" cellpadding="2" cellspacing="2">
6942      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6943        When displaying JSP source after an exception, handle included files.
6944        (markt)
6945      </td></tr>
6946      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6947        Display the JSP source when a compilation error occurs and display
6948        the correct line number rather than start of a scriptlet block. (markt)
6949      </td></tr>
6950      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6951        Fix NPE when processing dynamic attributes. (remm)
6952      </td></tr>
6953      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6954        More accurate EL usage validation. (remm)
6955      </td></tr>
6956      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6957        Fix regression for implicit taglib and page data version numbers. (remm)
6958      </td></tr>
6959      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6960        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41265">41265</a>: Allow JspServlet checkInterval init parameter to be
6961        explicitly set to the stated default value of zero by removing the
6962        code that resets it to 300 if explicitly specified as zero. (markt)
6963      </td></tr>
6964      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6965        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41327">41327</a>: Show full URI for a 404. Patch provided by Vijay.
6966        (markt)
6967      </td></tr>
6968    </table>
6969  </blockquote></td></tr></table>
6970  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.8 (remm)/Web applications"><!--()--></a><a name="Tomcat_6.0.8_(remm)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>
6971    <table border="0" cellpadding="2" cellspacing="2">
6972      <tr><td><img alt="docs" class="icon" src="./images/docs.gif"></td><td>
6973        Add a virtual hosting how-to contributed by Hassan Schroeder. (markt)
6974      </td></tr>
6975      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
6976        Update all webapps to use the servlet 2.5 xsd. (markt)
6977      </td></tr>
6978      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6979        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=39572">39572</a>: Improvements to CompressionFilter example provided by
6980        Eric Hedstr&ouml;m. (markt)
6981      </td></tr>
6982    </table>
6983  </blockquote></td></tr></table>
6984</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.7 (remm)"><!--()--></a><a name="Tomcat_6.0.7_(remm)"><strong>Tomcat 6.0.7 (remm)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>beta, 2007-01-10</strong></font></td></tr><tr><td colspan="2"><blockquote>
6985  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.7 (remm)/General"><!--()--></a><a name="Tomcat_6.0.7_(remm)/General"><strong>General</strong></a></font></td></tr><tr><td><blockquote>
6986    <table border="0" cellpadding="2" cellspacing="2">
6987      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6988        Fix installer's bitmap (mturk)
6989      </td></tr>
6990    </table>
6991  </blockquote></td></tr></table>
6992  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.7 (remm)/Catalina"><!--()--></a><a name="Tomcat_6.0.7_(remm)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
6993    <table border="0" cellpadding="2" cellspacing="2">
6994      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
6995        Refactor logging of errors which may occur when reading a post body (remm)
6996      </td></tr>
6997    </table>
6998  </blockquote></td></tr></table>
6999  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.7 (remm)/Coyote"><!--()--></a><a name="Tomcat_6.0.7_(remm)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>
7000    <table border="0" cellpadding="2" cellspacing="2">
7001      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
7002        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=37869">37869</a>: Also use the SSL_INFO_CLIENT_CERT field if the chain is empty,
7003        submitted by Grzegorz Grzybek (remm)
7004      </td></tr>
7005    </table>
7006  </blockquote></td></tr></table>
7007</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.6 (remm)"><!--()--></a><a name="Tomcat_6.0.6_(remm)"><strong>Tomcat 6.0.6 (remm)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>alpha</strong></font></td></tr><tr><td colspan="2"><blockquote>
7008  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.6 (remm)/General"><!--()--></a><a name="Tomcat_6.0.6_(remm)/General"><strong>General</strong></a></font></td></tr><tr><td><blockquote>
7009    <table border="0" cellpadding="2" cellspacing="2">
7010      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
7011        Fix tagging which did not include 6.0.5's changelog (remm)
7012      </td></tr>
7013    </table>
7014  </blockquote></td></tr></table>
7015</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.5 (remm)"><!--()--></a><a name="Tomcat_6.0.5_(remm)"><strong>Tomcat 6.0.5 (remm)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote>
7016  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.5 (remm)/Catalina"><!--()--></a><a name="Tomcat_6.0.5_(remm)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
7017    <table border="0" cellpadding="2" cellspacing="2">
7018      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
7019        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=40585">40585</a>: Fix parameterised constructor for o.a.juli.FileHandler
7020        so parameters have an effect. (markt)
7021      </td></tr>
7022      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
7023        Escape invalid characters from request.getLocale. (markt, remm)
7024      </td></tr>
7025      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
7026        Update required version for native to 1.1.8. (remm)
7027      </td></tr>
7028      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
7029        Do not log broken pipe errors which can occur when flushing the content of an error page. (remm)
7030      </td></tr>
7031    </table>
7032  </blockquote></td></tr></table>
7033  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.5 (remm)/Coyote"><!--()--></a><a name="Tomcat_6.0.5_(remm)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>
7034    <table border="0" cellpadding="2" cellspacing="2">
7035      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
7036        Fix firstReadTimeout behavior for the AJP connector. (remm)
7037      </td></tr>
7038    </table>
7039  </blockquote></td></tr></table>
7040  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.5 (remm)/Jasper"><!--()--></a><a name="Tomcat_6.0.5_(remm)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>
7041    <table border="0" cellpadding="2" cellspacing="2">
7042      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
7043        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41057">41057</a>: Make jsp:plugin output XHTML compliant. (markt)
7044      </td></tr>
7045    </table>
7046  </blockquote></td></tr></table>
7047  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.5 (remm)/Cluster"><!--()--></a><a name="Tomcat_6.0.5_(remm)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>
7048    <table border="0" cellpadding="2" cellspacing="2">
7049      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
7050        Cluster interface cleanup. (fhanik)
7051      </td></tr>
7052      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
7053        Refactoring to allow usage of executors. (fhanik)
7054      </td></tr>
7055    </table>
7056  </blockquote></td></tr></table>
7057</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.4 (remm)"><!--()--></a><a name="Tomcat_6.0.4_(remm)"><strong>Tomcat 6.0.4 (remm)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>alpha</strong></font></td></tr><tr><td colspan="2"><blockquote>
7058  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.4 (remm)/General"><!--()--></a><a name="Tomcat_6.0.4_(remm)/General"><strong>General</strong></a></font></td></tr><tr><td><blockquote>
7059    <table border="0" cellpadding="2" cellspacing="2">
7060      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
7061        Update to NSIS 2.22 (remm)
7062      </td></tr>
7063      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
7064        Fix regression in 6.0.3 with Windows wrapper (mturk)
7065      </td></tr>
7066    </table>
7067  </blockquote></td></tr></table>
7068</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.3 (remm)"><!--()--></a><a name="Tomcat_6.0.3_(remm)"><strong>Tomcat 6.0.3 (remm)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>not released</strong></font></td></tr><tr><td colspan="2"><blockquote>
7069  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.3 (remm)/General"><!--()--></a><a name="Tomcat_6.0.3_(remm)/General"><strong>General</strong></a></font></td></tr><tr><td><blockquote>
7070    <table border="0" cellpadding="2" cellspacing="2">
7071    </table>
7072  </blockquote></td></tr></table>
7073  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.3 (remm)/Catalina"><!--()--></a><a name="Tomcat_6.0.3_(remm)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
7074    <table border="0" cellpadding="2" cellspacing="2">
7075      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
7076        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=37509">37509</a>: Do not remove whitespace from the end of values
7077        defined in logging.properties files. (markt)
7078      </td></tr>
7079      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
7080        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=38
7080198">38198</a>: Add reference to Context documentation from Host
7081        documentation that explains how Context name is obtained from the
7082        Context filename. (markt)
7083      </td></tr>
7084      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
7085        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=40844">40844</a>: Missing syncs in JDBCRealm. (markt)
7086      </td></tr>
7087       <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
7088        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=40901">40901</a>: Encode directory listing output. Based on a patch
7089        provided by Chris Halstead. (markt)
7090      </td></tr>
7091      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
7092        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=40929">40929</a>: Correct JavaDoc for StandardClassLoader. (markt)
7093      </td></tr>
7094      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
7095        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41008">41008</a>: Allow POST to be used for indexed queries with CGI
7096        Servlet. Patch provided by Chris Halstead. (markt)
7097      </td></tr>
7098      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
7099        Fix usage of print on the servlet output stream if the processor never used
7100        a writer (fhanik)
7101      </td></tr>
7102      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
7103        Fix logic of sameSameObjects used to determine correct wrapping of request and
7104        response objects (fhanik)
7105      </td></tr>
7106      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
7107        Update TLD scan lists, and disable caching for now (remm)
7108      </td></tr>
7109      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
7110        Add system property to WebappClassLoader to allow disabling setting references
7111        to null when stopping it (remm)
7112      </td></tr>
7113      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
7114        Add clustered SSO code, submitted by Fabien Carrion (remm)
7115      </td></tr>
7116    </table>
7117  </blockquote></td></tr></table>
7118  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.3 (remm)/Coyote"><!--()--></a><a name="Tomcat_6.0.3_(remm)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>
7119    <table border="0" cellpadding="2" cellspacing="2">
7120      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
7121        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=40860">40860</a>: Log exceptions and other problems during parameter
7122        processing. (markt)
7123      </td></tr>
7124      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
7125        Enable JMX for trust store attributes for SSL connector. (markt)
7126      </td></tr>
7127      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
7128        Port memory usage reduction changes to the java.io HTTP connector. (remm)
7129      </td></tr>
7130      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
7131        MessageBytes.setString(null) will remove the String value. (remm)
7132      </td></tr>
7133      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
7134        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41057">41057</a>: Caching large strings is not useful and takes too much
7135        memory, so don't cache these (remm)
7136      </td></tr>
7137      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
7138        Add keepAliveTimeout attribute to most connectors (mturk, remm)
7139      </td></tr>
7140    </table>
7141  </blockquote></td></tr></table>
7142  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.3 (remm)/Jasper"><!--()--></a><a name="Tomcat_6.0.3_(remm)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>
7143    <table border="0" cellpadding="2" cellspacing="2">
7144      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
7145        Relax EL type validation for litterals. (remm)
7146      </td></tr>
7147      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
7148        Update some version numbers to 2.1. (funkman, remm)
7149      </td></tr>
7150      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
7151        Add xsds for JSP 2.1 (remm)
7152      </td></tr>
7153      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
7154        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=41106">41106</a>
7154: Update validation checks for EL to also include
7155        legacy 1.2 tags (remm)
7156      </td></tr>
7157    </table>
7158  </blockquote></td></tr></table>
7159  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.3 (remm)/Web applications"><!--()--></a><a name="Tomcat_6.0.3_(remm)/Web_applications"><strong>Web applications</strong></a></font></td></tr><tr><td><blockquote>
7160    <table border="0" cellpadding="2" cellspacing="2">
7161      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
7162        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=40677">40677</a>: Update SSL documentation to indicate that PKCS11
7163        keystores may be used. (markt)
7164      </td></tr>
7165    </table>
7166  </blockquote></td></tr></table>
7167</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.2 (remm)"><!--()--></a><a name="Tomcat_6.0.2_(remm)"><strong>Tomcat 6.0.2 (remm)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>beta, 2006-11-23</strong></font></td></tr><tr><td colspan="2"><blockquote>
7168  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.2 (remm)/General"><!--()--></a><a name="Tomcat_6.0.2_(remm)/General"><strong>General</strong></a></font></td></tr><tr><td><blockquote>
7169    <table border="0" cellpadding="2" cellspacing="2">
7170      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
7171        Various tweaks to distribution (remm, funkman)
7172      </td></tr>
7173      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
7174        Update Tomcat native to 1.1.7 (mturk)
7175      </td></tr>
7176      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
7177        Update to JDT 3.2.1 (remm)
7178      </td></tr>
7179    </table>
7180  </blockquote></td></tr></table>
7181  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.2 (remm)/Catalina"><!--()--></a><a name="Tomcat_6.0.2_(remm)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
7182    <table border="0" cellpadding="2" cellspacing="2">
7183      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
7184        Fix EJB annotation interface (remm)
7185      </td></tr>
7186    </table>
7187  </blockquote></td></tr></table>
7188  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.2 (remm)/Coyote"><!--()--></a><a name="Tomcat_6.0.2_(remm)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>
7189    <table border="0" cellpadding="2" cellspacing="2">
7190      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
7191        Fix passing of the keystore password for the NIO connector (fhanik)
7192      </td></tr>
7193    </table>
7194  </blockquote></td></tr></table>
7195</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.1 (remm)"><!--()--></a><a name="Tomcat_6.0.1_(remm)"><strong>Tomcat 6.0.1 (remm)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>alpha</strong></font></td></tr><tr><td colspan="2"><blockquote>
7196  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.1 (remm)/General"><!--()--></a><a name="Tomcat_6.0.1_(remm)/General"><strong>General</strong></a></font></td></tr><tr><td><blockquote>
7197    <table border="0" cellpadding="2" cellspacing="2">
7198      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
7199        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=37439">37439</a>, <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=40823">40823</a>: Documentation cleanup (markt)
7200      </td></tr>
7201    </table>
7202  </blockquote></td></tr></table>
7203  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.1 (remm)/Catalina"><!--()--></a><a name="Tomcat_6.0.1_(remm)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
7204    <table border="0" cellpadding="2" cellspacing="2">
7205      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
7206        Refactor exception processing using Throwable.getCause to improve exception chaining (remm)
7207      </td></tr>
7208      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
7209        Remove dead code involving the Logger (funkman)
7210      </td></tr>
7211      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
7212        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=37458">37458</a>: Fix some exceptions which could happen during classloading (markt)
7213      </td></tr>
7214      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
7215        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=40817">40817</a>: Fix CGI path (markt)
7216      </td></tr>
7217      <tr><td><img alt="fix" class="icon" src="./images/fix.gif"></td><td>
7218        <a href="http://bz.apache.org/bugzilla/show_bug.cgi?id=34956">34956</a>: Add the possibility to enforce usage of request and response
7219        wrapper objects (markt)
7220      </td></tr>
7221    </table>
7222  </blockquote></td></tr></table>
7223  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.1 (remm)/Jasper"><!--()--></a><a name="Tomcat_6.0.1_(remm)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>
7224    <table border="0" cellpadding="2" cellspacing="2">
7225      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
7226        Many fixes for JSP 2.1 compliance, involving tag files handling, deferred expressions
7227        validation, bom encoding support (remm)
7228      </td></tr>
7229    </table>
7230  </blockquote></td></tr></table>
7231  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.1 (remm)/Coyote"><!--()--></a><a name="Tomcat_6.0.1_(remm)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>
7232    <table border="0" cellpadding="2" cellspacing="2">
7233      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
7234        Many HTTP NIO connector fixes and refactorings (fhanik)
7235      </td></tr>
7236      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
7237        HTTP NIO connector performance improvements (fhanik)
7238      </td></tr>
7239      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
7240        Add packetSize option for the classic AJP connector (jfclere)
7241      </td></tr>
7242      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
7243        Implement explicit flushing in AJP (mturk)
7244      </td></tr>
7245    </table>
7246  </blockquote></td></tr></table>
7247</blockquote></td></tr></table><table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.0 (remm)"><!--()--></a><a name="Tomcat_6.0.0_(remm)"><strong>Tomcat 6.0.0 (remm)</strong></a></font></td><td align="right" bgcolor="#525D76"><font color="#ffffff" face="arial,helvetica.sanserif"><strong>alpha</strong></font></td></tr><tr><td colspan="2"><blockquote>
7248  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.0 (remm)/Catalina"><!--()--></a><a name="Tomcat_6.0.0_(remm)/Catalina"><strong>Catalina</strong></a></font></td></tr><tr><td><blockquote>
7249    <table border="0" cellpadding="2" cellspacing="2">
7250      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
7251        SSLEngine attribute added to the AprLifecycleListener(fhanik)
7252      </td></tr>
7253      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
7254        Add API for Comet IO handling (remm, fhanik)
7255      </td></tr>
7256      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
7257        Servlet 2.5 support (remm)
7258      </td></tr>
7259    </table>
7260  </blockquote></td></tr></table>
7261  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.0 (remm)/Jasper"><!--()--></a><a name="Tomcat_6.0.0_(remm)/Jasper"><strong>Jasper</strong></a></font></td></tr><tr><td><blockquote>
7262    <table border="0" cellpadding="2" cellspacing="2">
7263      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
7264        JSP 2.1 support (jhook, remm)
7265      </td></tr>
7266      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
7267        Unifed EL 2.1 support (jhook)
7268      </td></tr>
7269    </table>
7270  </blockquote></td></tr></table>
7271  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.0 (remm)/Coyote"><!--()--></a><a name="Tomcat_6.0.0_(remm)/Coyote"><strong>Coyote</strong></a></font></td></tr><tr><td><blockquote>
7272    <table border="0" cellpadding="2" cellspacing="2">
7273      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
7274        SSLEnabled attribute required for SSL to be turned on, on all HTTP connectors (fhanik)
7275      </td></tr>
7276      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
7277        Memory usage reduction for the HTTP connectors, except java.io (remm)
7278      </td></tr>
7279      <tr><td><img alt="update" class="icon" src="./images/update.gif"></td><td>
7280        Modeler update to use dynamic mbeans rather than model mbeans, which consume more
7281        resources (costin)
7282      </td></tr>
7283    </table>
7284  </blockquote></td></tr></table>
7285  <table border="0" cellspacing="0" cellpadding="2"><tr><td bgcolor="#828DA6"><font color="#ffffff" face="arial,helvetica.sanserif"><a name="Tomcat 6.0.0 (remm)/Cluster"><!--()--></a><a name="Tomcat_6.0.0_(remm)/Cluster"><strong>Cluster</strong></a></font></td></tr><tr><td><blockquote>
7286    <table border="0" cellpadding="2" cellspacing="2">
7287      <tr><td><img alt="add" class="icon" src="./images/add.gif"></td><td>
7288        New cluster configuration and new documentation (fhanik)
7289      </td></tr>
7290    </table>
7291  </blockquote></td></tr></table>
7292</blockquote></td></tr></table></td></tr><!--FOOTER SEPARATOR--><tr><td colspan="2"><hr noshade="noshade" size="1"></td></tr><!--PAGE FOOTER--><tr><td colspan="2"><div align="center"><font color="#525D76" size="-1"><em>
7293        Copyright &copy; 1999-2017, Apache Software Foundation
7294        </em></font></div></td></tr></table></body></html>

Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.