You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by Mark Thomas <ma...@apache.org> on 2014/02/06 21:23:59 UTC

[VOTE] Release Apache Tomcat 8.0.2

The proposed Apache Tomcat 8.0.2 release is now available for voting.

The main changes since 8.0.1 are:
- Fix CVE-2014-0050, a DoS related to multi-part processing
- Enable non-blocking reads to take place on non-container threads
- Update to the latest DBCP 2 snapshot
- Fix WebDAV support broken by resources refactoring

It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-8/v8.0.2/
The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1004/
The svn tag is:
http://svn.apache.org/repos/asf/tomcat/tc8.0.x/tags/TOMCAT_8_0_2/

The proposed 8.0.2 release is:
[ ] Broken - do not release
[ ] Alpha  - go ahead and release as 8.0.2 (alpha)
[ ] Beta   - go ahead and release as 8.0.2 (beta)
[ ] Stable - go ahead and release as 8.0.2 (stable)

Cheers,

Mark

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


[VOTE][CANCELLED] Release Apache Tomcat 8.0.2

Posted by Mark Thomas <ma...@apache.org>.
On 07/02/2014 00:56, Ognjen Blagojevic wrote:
> On 6.2.2014 21:23, Mark Thomas wrote:
>> - Update to the latest DBCP 2 snapshot
> (...)
>> The proposed 8.0.2 release is:
>> [X] Broken - do not release
>> [ ] Alpha  - go ahead and release as 8.0.2 (alpha)
>> [ ] Beta   - go ahead and release as 8.0.2 (beta)
>> [ ] Stable - go ahead and release as 8.0.2 (stable)
> 
> (non-binding)
> 
> All my webapps that are using DBCP2 are failing when I upgrade from
> 8.0.1 to 8.0.2.
> 
> root cause
> java.lang.ClassNotFoundException:
> org.apache.tomcat.dbcp.dbcp2.BasicDataSourceFactory
> 
> It seems that the whole package org.apache.tomcat.dbcp.dbcp2 is missing
> from lib/tomcat-dbcp.jar shipped with 8.0.2.

That isn't good. I'll re-roll the release.

Mark


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Re: [VOTE] Release Apache Tomcat 8.0.2

Posted by Konstantin Kolinko <kn...@gmail.com>.
2014-02-07 Mark Thomas <ma...@apache.org>:
> On 07/02/2014 01:43, Konstantin Kolinko wrote:
>> 2014-02-07 Ognjen Blagojevic <og...@gmail.com>:
>>> On 6.2.2014 21:23, Mark Thomas wrote:
>>
>> There is no digital signature on the Windows installer exe file
>> (neither there was any in 8.0.1).
>
> Do you mean the OpenPGP *.asc file (which should be present) or BZ56079?
>
> The former would be a problem, the latter is expected.
>

The latter.
OK.

Best regards,
Konstantin Kolinko

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Re: [VOTE] Release Apache Tomcat 8.0.2

Posted by Mark Thomas <ma...@apache.org>.
On 07/02/2014 01:43, Konstantin Kolinko wrote:
> 2014-02-07 Ognjen Blagojevic <og...@gmail.com>:
>> On 6.2.2014 21:23, Mark Thomas wrote:
>>>
>>> - Update to the latest DBCP 2 snapshot
>>
>> (...)
>>>
>>> The proposed 8.0.2 release is:
>>> [X] Broken - do not release
>>>
>>> [ ] Alpha  - go ahead and release as 8.0.2 (alpha)
>>> [ ] Beta   - go ahead and release as 8.0.2 (beta)
>>> [ ] Stable - go ahead and release as 8.0.2 (stable)
>>
>>
>> (non-binding)
>>
>> All my webapps that are using DBCP2 are failing when I upgrade from 8.0.1 to
>> 8.0.2.
>>
>> root cause
>> java.lang.ClassNotFoundException:
>> org.apache.tomcat.dbcp.dbcp2.BasicDataSourceFactory
>>
>> It seems that the whole package org.apache.tomcat.dbcp.dbcp2 is missing from
>> lib/tomcat-dbcp.jar shipped with 8.0.2.
>>
> 
> Thanks for the report!
> 
> [X] Broken - do not release
> 
> Should be fixed by
> http://svn.apache.org/r1565512
> (The classes are now there. I have not tested whether the pool itself works).

Hmm. The build should have failed in that case. I'll look into why it
didn't.

> For the record, for 8.0.2:
> Smoke testing OK.
> Testsuite passed successfully BIO, NIO, APR,
> on Win7 using 32-bit Java 7u51.
> 
> There is no digital signature on the Windows installer exe file
> (neither there was any in 8.0.1).

Do you mean the OpenPGP *.asc file (which should be present) or BZ56079?

The former would be a problem, the latter is expected.

Mark


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Re: [VOTE] Release Apache Tomcat 8.0.2

Posted by Konstantin Kolinko <kn...@gmail.com>.
2014-02-07 Ognjen Blagojevic <og...@gmail.com>:
> On 6.2.2014 21:23, Mark Thomas wrote:
>>
>> - Update to the latest DBCP 2 snapshot
>
> (...)
>>
>> The proposed 8.0.2 release is:
>> [X] Broken - do not release
>>
>> [ ] Alpha  - go ahead and release as 8.0.2 (alpha)
>> [ ] Beta   - go ahead and release as 8.0.2 (beta)
>> [ ] Stable - go ahead and release as 8.0.2 (stable)
>
>
> (non-binding)
>
> All my webapps that are using DBCP2 are failing when I upgrade from 8.0.1 to
> 8.0.2.
>
> root cause
> java.lang.ClassNotFoundException:
> org.apache.tomcat.dbcp.dbcp2.BasicDataSourceFactory
>
> It seems that the whole package org.apache.tomcat.dbcp.dbcp2 is missing from
> lib/tomcat-dbcp.jar shipped with 8.0.2.
>

Thanks for the report!

[X] Broken - do not release

Should be fixed by
http://svn.apache.org/r1565512
(The classes are now there. I have not tested whether the pool itself works).


For the record, for 8.0.2:
Smoke testing OK.
Testsuite passed successfully BIO, NIO, APR,
on Win7 using 32-bit Java 7u51.

There is no digital signature on the Windows installer exe file
(neither there was any in 8.0.1).

Best regards,
Konstantin Kolinko

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Re: [VOTE] Release Apache Tomcat 8.0.2

Posted by Ognjen Blagojevic <og...@gmail.com>.
On 6.2.2014 21:23, Mark Thomas wrote:
> - Update to the latest DBCP 2 snapshot
(...)
> The proposed 8.0.2 release is:
> [X] Broken - do not release
> [ ] Alpha  - go ahead and release as 8.0.2 (alpha)
> [ ] Beta   - go ahead and release as 8.0.2 (beta)
> [ ] Stable - go ahead and release as 8.0.2 (stable)

(non-binding)

All my webapps that are using DBCP2 are failing when I upgrade from 
8.0.1 to 8.0.2.

root cause
java.lang.ClassNotFoundException: 
org.apache.tomcat.dbcp.dbcp2.BasicDataSourceFactory

It seems that the whole package org.apache.tomcat.dbcp.dbcp2 is missing 
from lib/tomcat-dbcp.jar shipped with 8.0.2.

-Ognjen

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org