You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by Mark Thomas <ma...@apache.org> on 2014/01/17 21:17:22 UTC

[VOTE] Release Apache Tomcat 6.0.38

The proposed Apache Tomcat 6.0.38 release candidate is now available
for voting.

The main changes since 6.0.37 are:
- Updated to use the Eclipse compiler 4.3.1
- Back-ported various improvements to the validation of XML
  configuration files from Tomcat 7
- Avoid CVE-2013-1571 when generating Javadoc

along with a number of bug fixes. Full details are in the change log.

It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-6/v6.0.38/
The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1000/
The svn tag is:
http://svn.apache.org/repos/asf/tomcat/tc6.0.x/tags/TOMCAT_6_0_38

The proposed 6.0.38 release is:
[ ] Broken - do not release
[ ] Stable - go ahead and release as 6.0.38 Stable

Cheers,

Mark

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Re: [VOTE] Release Apache Tomcat 6.0.38

Posted by Mark Thomas <ma...@apache.org>.
On 18/01/2014 01:15, Ognjen Blagojevic wrote:

Thanks for the review.

<snip/>

> - Tested SSL/TLS connectivity for BIO, NIO and APR connectors. All good,
> with one peculiarity: NIO connector is sensitive to whitespace in
> "ciphers" attribute. BIO is not.

Patch proposed.

> - Crawled all links (except /manager, /host-manager and
> /examples/async*). One broken link found in webapps/docs/jasper-howto.html
> 
>   <a href="ant.apache.org">
> 
>   should be
> 
>   <a href="http://ant.apache.org">

Fixed.

Thanks again,

Mark


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Re: [VOTE] Release Apache Tomcat 6.0.38

Posted by Ognjen Blagojevic <og...@gmail.com>.
On 17.1.2014 21:17, Mark Thomas wrote:
> The proposed Apache Tomcat 6.0.38 release candidate is now available
> for voting.
...
> The proposed 6.0.38 release is:
> [ ] Broken - do not release
> [X] Stable - go ahead and release as 6.0.38 Stable

Tested .zip distribution on Windows 7 64-bit with Oracle JDK 1.7.0_45:

- Tested SSL/TLS connectivity for BIO, NIO and APR connectors. All good, 
with one peculiarity: NIO connector is sensitive to whitespace in 
"ciphers" attribute. BIO is not.

- Crawled all links (except /manager, /host-manager and 
/examples/async*). One broken link found in webapps/docs/jasper-howto.html

   <a href="ant.apache.org">

   should be

   <a href="http://ant.apache.org">


- Smoke tests of BIO, NIO and APR, with and without TLS, all passed.


-Ognjen


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Re: [VOTE] Release Apache Tomcat 6.0.38

Posted by Rainer Jung <ra...@kippdata.de>.
On 18.01.2014 18:26, Mark Thomas wrote:
> On 18/01/2014 15:47, Konstantin Kolinko wrote:
>> 2014/1/18 Mark Thomas <ma...@apache.org>:
>>> The proposed Apache Tomcat 6.0.38 release candidate is now available
>>> for voting.
>>>
>>> The main changes since 6.0.37 are:
>>> - Updated to use the Eclipse compiler 4.3.1
>>> - Back-ported various improvements to the validation of XML
>>>   configuration files from Tomcat 7
>>> - Avoid CVE-2013-1571 when generating Javadoc
>>>
>>> along with a number of bug fixes. Full details are in the change log.
>>>
>>> It can be obtained from:
>>> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-6/v6.0.38/
>>> The Maven staging repo is:
>>> https://repository.apache.org/content/repositories/orgapachetomcat-1000/
>>> The svn tag is:
>>> http://svn.apache.org/repos/asf/tomcat/tc6.0.x/tags/TOMCAT_6_0_38
>>>
>>> The proposed 6.0.38 release is:
>>> [x] Broken - do not release
>>> [ ] Stable - go ahead and release as 6.0.38 Stable
>>
>> A regression in EL parsing.
>> https://issues.apache.org/bugzilla/show_bug.cgi?id=56029#c3
>>
>> bug 56029 does not happen in 6.0.37.
> 
> While I agree that this is enough to stop this release and trigger a
> 6.0.39 tag, please keep testing 6.0.38 until 6.0.39 is available for
> testing as there is always the possibility of further regressions.

Some (minor) findings:

- key 2F6059E7 not in TC 6 KEYS file
- .gitignore only in svn, not in src tgz or zip
- build.properties.default differs in revision header between svn tag
  and src distro (but not in any functional content)
- changed JMX attributes:
  - new: tldValidation: false in MBeans with j2eeType=WebModule
  - moved: xmlNamespaceAware: false and xmlValidation: false
    moved from Host MBean to j2eeType=WebModule
- bin tgz seems to contain DOS line ends in many files inside
  bundled webapps, bin/catalina-tasks.xml and RELEASE-NOTES.
- new javadoc packages org.apache.tomcat.util.descriptor and
  org.apache.tomcat.util.http.parser.

Regards,

Rainer

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Re: [VOTE] Release Apache Tomcat 6.0.38

Posted by Mark Thomas <ma...@apache.org>.
On 18/01/2014 15:47, Konstantin Kolinko wrote:
> 2014/1/18 Mark Thomas <ma...@apache.org>:
>> The proposed Apache Tomcat 6.0.38 release candidate is now available
>> for voting.
>>
>> The main changes since 6.0.37 are:
>> - Updated to use the Eclipse compiler 4.3.1
>> - Back-ported various improvements to the validation of XML
>>   configuration files from Tomcat 7
>> - Avoid CVE-2013-1571 when generating Javadoc
>>
>> along with a number of bug fixes. Full details are in the change log.
>>
>> It can be obtained from:
>> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-6/v6.0.38/
>> The Maven staging repo is:
>> https://repository.apache.org/content/repositories/orgapachetomcat-1000/
>> The svn tag is:
>> http://svn.apache.org/repos/asf/tomcat/tc6.0.x/tags/TOMCAT_6_0_38
>>
>> The proposed 6.0.38 release is:
>> [x] Broken - do not release
>> [ ] Stable - go ahead and release as 6.0.38 Stable
> 
> A regression in EL parsing.
> https://issues.apache.org/bugzilla/show_bug.cgi?id=56029#c3
> 
> bug 56029 does not happen in 6.0.37.

While I agree that this is enough to stop this release and trigger a
6.0.39 tag, please keep testing 6.0.38 until 6.0.39 is available for
testing as there is always the possibility of further regressions.

Mark

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Re: [VOTE] Release Apache Tomcat 6.0.38

Posted by Konstantin Kolinko <kn...@gmail.com>.
2014/1/18 Mark Thomas <ma...@apache.org>:
> The proposed Apache Tomcat 6.0.38 release candidate is now available
> for voting.
>
> The main changes since 6.0.37 are:
> - Updated to use the Eclipse compiler 4.3.1
> - Back-ported various improvements to the validation of XML
>   configuration files from Tomcat 7
> - Avoid CVE-2013-1571 when generating Javadoc
>
> along with a number of bug fixes. Full details are in the change log.
>
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-6/v6.0.38/
> The Maven staging repo is:
> https://repository.apache.org/content/repositories/orgapachetomcat-1000/
> The svn tag is:
> http://svn.apache.org/repos/asf/tomcat/tc6.0.x/tags/TOMCAT_6_0_38
>
> The proposed 6.0.38 release is:
> [x] Broken - do not release
> [ ] Stable - go ahead and release as 6.0.38 Stable

A regression in EL parsing.
https://issues.apache.org/bugzilla/show_bug.cgi?id=56029#c3

bug 56029 does not happen in 6.0.37.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Re: [VOTE] Release Apache Tomcat 6.0.38

Posted by Jeanfrancois Arcand <jf...@gmail.com>.
On 1/17/2014, 3:17 PM, Mark Thomas wrote:
> The proposed 6.0.38 release is:
> [ ] Broken - do not release
> [X] Stable - go ahead and release as 6.0.38 Stable
Quick sanity check using Atmosphere, tested NIO/CometProcessor and BIO, 
no regression found.

-- Jeanfrancois


>


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


[Cancelled][VOTE] Release Apache Tomcat 6.0.38

Posted by Mark Thomas <ma...@apache.org>.
This vote has been cancelled due to the regression described in
https://issues.apache.org/bugzilla/show_bug.cgi?id=56029#c3

I will tag 6.0.39 just as soon as the fix for BZ 56029 has the necessary
votes in the status file.

Mark

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org