You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by Filip Hanik - Dev Lists <de...@hanik.com> on 2007/03/09 17:32:47 UTC
[ANN] Apache Tomcat 5.5.23 released
The Apache Tomcat team announces the immediate availability of Apache
Tomcat 5.5.23 stable. This release has numerous bug fixes and
maintenance updates.
It also includes the corrected source code for the JK CVE-2007-0774 issue.
Please refer to the change log for the list of changes:
http://tomcat.apache.org/tomcat-5.5-doc/changelog.html
Downloads:
http://tomcat.apache.org/download-55.cgi
Thank you,
-- The Apache Tomcat Team
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
Re: [ANN] Apache Tomcat 5.5.23 released
Posted by Mark Thomas <ma...@apache.org>.
Christopher Schultz wrote:
> Assuming that this is the preferred 5.5 release, then the Tomcat hope
> page should be updated: it still says "5.5.20" as the servlet 2.4 container.
This is now fixed. It will take an hour or so for the changes to sync
to the live site.
Thanks for spotting this.
Mark
---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: [ANN] Apache Tomcat 5.5.23 released
Posted by Christopher Schultz <ch...@christopherschultz.net>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Filip,
Filip Hanik - Dev Lists wrote:
> The Apache Tomcat team announces the immediate availability of Apache
> Tomcat 5.5.23 stable.
Assuming that this is the preferred 5.5 release, then the Tomcat hope
page should be updated: it still says "5.5.20" as the servlet 2.4 container.
- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFF9BYz9CaO5/Lv0PARArtTAKCSXECDgPOV30TLDx3M5dNLGosOMACdHrcm
oPywyNU1OXhAQOVn32WxNlw=
=GLC8
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: [ANN] Apache Tomcat 5.5.23 released
Posted by "William L. Thomson Jr." <wl...@gentoo.org>.
Packaged and available in a few hours for sync and emerge on Gentoo.
Does this release effective make 5.0.28 obsolete? Or more so than
before, since it seemed there were some outstanding issues keeping
people from migrating beyond 5.0.28?
Curious because I want to remove 5.0.28 from Gentoo entirely. It's been
masked for the past couple of months. Which makes it pretty hard for
anyone to install it, much less see recommendations to use >=5.5.x.
Thanks
--
William L. Thomson Jr.
Gentoo/Java
Re: [ANN] Apache Tomcat 5.5.23 released
Posted by "William L. Thomson Jr." <wl...@gentoo.org>.
On Mon, 2007-03-12 at 13:57 -0400, Yoav Shapira wrote:
>
> It's a build environment thing. Ya gots to have the JavaMail and
> JavaActivationFramework jas on your build classpath (in whatever libs
> directory you chose to use in build.properties), or the JNDI mail
> session factory won't get built, and thus it won't get bundled in the
> distro.
>
> We should probably add a runtime class check (Ant <available
> classname=.../>) to the "release" Ant target that fails the build if
> that class isn't present. That way we'll be sure to never have this
> issue come up again.
Those core optional dependencies or etc were/are a pita. Thus we have
tons of dependencies I was never sure if they were needed or did
anything on Gentoo. Due to lack of time, we have just always included
all. Now it's good to find out they do activate/limit functionality
within Tomcat. Further justifies their presence, or us including all
optional packages during Tomcat build process.
In fact we have dropped some like jmx/mx4j if a >=1.5 jdk is used since
it's present in the jdk. However it seems to have caused some very odd
bug in catalina.jar. That only shows up when working with the manager
app. I believe it was deploy app via manager app, restart tomcat, and
then try to undeploy, to replicate problem. But only when Tomcat is
built with >=1.5 as bytecode 1.5, and some dropped dependencies. Jars
not present at compile time.
So seeing how another bug is caused when javamail and etc are not
present. Then it might also explain the other bug in catalina.jar.
--
William L. Thomson Jr.
Gentoo/Java
Re: [ANN] Apache Tomcat 5.5.23 released
Posted by Yoav Shapira <yo...@apache.org>.
Hola,
On 3/12/07, Filip Hanik - Dev Lists <de...@hanik.com> wrote:
> Wendy Smoak wrote:
> > Filip, did you see that the missing MailSessionFactory bug popped back
> > up in this one?
> >
> > I ran into it this morning, but by that time 40668 had already been
> > reopened.
> >
> > http://issues.apache.org/bugzilla/show_bug.cgi?id=40668
> oh, uh, duh, I'm not very familiar with this one, besides it's very
> intriguing dialog :)
It's a build environment thing. Ya gots to have the JavaMail and
JavaActivationFramework jas on your build classpath (in whatever libs
directory you chose to use in build.properties), or the JNDI mail
session factory won't get built, and thus it won't get bundled in the
distro.
We should probably add a runtime class check (Ant <available
classname=.../>) to the "release" Ant target that fails the build if
that class isn't present. That way we'll be sure to never have this
issue come up again.
Yoav
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
Re: [ANN] Apache Tomcat 5.5.23 released
Posted by Haroon Rafique <ha...@utoronto.ca>.
On Today at 11:27am, FHDL=>Filip Hanik - Dev Lists <de...@hanik.com> wrote:
FHDL> oh, uh, duh, I'm not very familiar with this one, besides it's very
FHDL> intriguing dialog :)
FHDL> I'll take a look at it, I guess it just wasn't fixed.
FHDL>
FHDL> Filip
Synopsis seems to be that the "optional" jar for javamail not being
present causes this bug to resurface once again.
Perhaps the release manager can:
a) modify the tomcat build instructions to make this jar "not so
optional" any more
b) fix the build file to croak if the jar is missing
Later,
--
Haroon Rafique
<ha...@utoronto.ca>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
Re: [ANN] Apache Tomcat 5.5.23 released
Posted by Filip Hanik - Dev Lists <de...@hanik.com>.
Wendy Smoak wrote:
> On 3/9/07, Filip Hanik - Dev Lists <de...@hanik.com> wrote:
>> The Apache Tomcat team announces the immediate availability of Apache
>> Tomcat 5.5.23 stable. This release has numerous bug fixes and
>> maintenance updates.
>> It also includes the corrected source code for the JK CVE-2007-0774
>> issue.
>
> Filip, did you see that the missing MailSessionFactory bug popped back
> up in this one?
>
> I ran into it this morning, but by that time 40668 had already been
> reopened.
>
> http://issues.apache.org/bugzilla/show_bug.cgi?id=40668
oh, uh, duh, I'm not very familiar with this one, besides it's very
intriguing dialog :)
I'll take a look at it, I guess it just wasn't fixed.
Filip
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
Re: [ANN] Apache Tomcat 5.5.23 released
Posted by Wendy Smoak <ws...@gmail.com>.
On 3/9/07, Filip Hanik - Dev Lists <de...@hanik.com> wrote:
> The Apache Tomcat team announces the immediate availability of Apache
> Tomcat 5.5.23 stable. This release has numerous bug fixes and
> maintenance updates.
> It also includes the corrected source code for the JK CVE-2007-0774 issue.
Filip, did you see that the missing MailSessionFactory bug popped back
up in this one?
I ran into it this morning, but by that time 40668 had already been reopened.
http://issues.apache.org/bugzilla/show_bug.cgi?id=40668
--
Wendy
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org