You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by Mark Thomas <ma...@apache.org> on 2020/04/03 14:30:54 UTC
[VOTE] Release Apache Tomcat 8.5.54
The proposed Apache Tomcat 8.5.54 release is now available for voting.
The major changes compared to the 8.5.53 release are:
- Add support for default values when using ${...} property replacement
in configuration files. Based on a pull request provided by Bernd
Bohmann.
- When configuring an HTTP Connector, warn if the encoding specified for
URIEncoding is not a superset of US-ASCII as required by RFC7230.
- Replace the system property
org.apache.tomcat.util.buf.UDecoder.ALLOW_ENCODED_SLASH with the
Connector attribute encodedSolidusHandling that adds an additional
option to pass the %2f sequence through to the application without
decoding it in addition to rejecting such sequences and decoding such
sequences.
Along with lots of other bug fixes and improvements.
For full details, see the changelog:
https://ci.apache.org/projects/tomcat/tomcat85/docs/changelog.html
It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-8/v8.5.54/
The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1264/
The tag is:
https://github.com/apache/tomcat/tree/8.5.54
0b365bb7032a5e30b35fedc56e7def82a3e55f94
The proposed 8.5.54 release is:
[ ] Broken - do not release
[ ] Stable - go ahead and release as 8.5.54
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
Re: [VOTE] Release Apache Tomcat 8.5.54
Posted by Martin Grigorov <mg...@apache.org>.
On Fri, Apr 3, 2020 at 5:30 PM Mark Thomas <ma...@apache.org> wrote:
> The proposed Apache Tomcat 8.5.54 release is now available for voting.
>
> The major changes compared to the 8.5.53 release are:
>
> - Add support for default values when using ${...} property replacement
> in configuration files. Based on a pull request provided by Bernd
> Bohmann.
>
> - When configuring an HTTP Connector, warn if the encoding specified for
> URIEncoding is not a superset of US-ASCII as required by RFC7230.
>
> - Replace the system property
> org.apache.tomcat.util.buf.UDecoder.ALLOW_ENCODED_SLASH with the
> Connector attribute encodedSolidusHandling that adds an additional
> option to pass the %2f sequence through to the application without
> decoding it in addition to rejecting such sequences and decoding such
> sequences.
>
> Along with lots of other bug fixes and improvements.
>
> For full details, see the changelog:
> https://ci.apache.org/projects/tomcat/tomcat85/docs/changelog.html
>
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-8/v8.5.54/
>
> The Maven staging repo is:
> https://repository.apache.org/content/repositories/orgapachetomcat-1264/
>
> The tag is:
> https://github.com/apache/tomcat/tree/8.5.54
> 0b365bb7032a5e30b35fedc56e7def82a3e55f94
>
> The proposed 8.5.54 release is:
> [ ] Broken - do not release
> [ X ] Stable - go ahead and release as 8.5.54
>
Tested with Apache Wicket examples application.
Regards,
Martin
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: dev-help@tomcat.apache.org
>
>
Re: [VOTE] Release Apache Tomcat 8.5.54
Posted by Christopher Schultz <ch...@christopherschultz.net>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Mark,
On 4/3/20 10:30, Mark Thomas wrote:
> The proposed Apache Tomcat 8.5.54 release is now available for
> voting.
>
> The major changes compared to the 8.5.53 release are:
>
> - Add support for default values when using ${...} property
> replacement in configuration files. Based on a pull request
> provided by Bernd Bohmann.
>
> - When configuring an HTTP Connector, warn if the encoding
> specified for URIEncoding is not a superset of US-ASCII as required
> by RFC7230.
>
> - Replace the system property
> org.apache.tomcat.util.buf.UDecoder.ALLOW_ENCODED_SLASH with the
> Connector attribute encodedSolidusHandling that adds an additional
> option to pass the %2f sequence through to the application without
> decoding it in addition to rejecting such sequences and decoding
> such sequences.
>
> Along with lots of other bug fixes and improvements.
>
> For full details, see the changelog:
> https://ci.apache.org/projects/tomcat/tomcat85/docs/changelog.html
>
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-8/v8.5.54/
>
> The Maven staging repo is:
> https://repository.apache.org/content/repositories/orgapachetomcat-126
4/
>
> The tag is: https://github.com/apache/tomcat/tree/8.5.54
> 0b365bb7032a5e30b35fedc56e7def82a3e55f94
>
> The proposed 8.5.54 release is: [ ] Broken - do not release [X]
> Stable - go ahead and release as 8.5.54
Thanks for RM'ing.
Works on an application in a development environment (vanilla
servlets, AjpNioProtocol, Http11NioProtocol, no TLS). Details below.
Failed tests are expected in this environment. (I still need to take
some time to adjust the environment to avoid complaints about my
OpenSSL version versus the Java version).
Thanks,
- -chris
* Environment
* Java (build): openjdk version "1.8.0_242" OpenJDK Runtime
Environment (build 1.8.0_242-8u242-b08-1~deb9u1-b08) OpenJDK 64-Bit
Server VM (build 25.242-b08, mixed mode)
* Java (test): openjdk version "1.8.0_242" OpenJDK Runtime
Environment (build 1.8.0_242-8u242-b08-1~deb9u1-b08) OpenJDK 64-Bit
Server VM (build 25.242-b08, mixed mode)
* OS: Linux 4.9.0-9-amd64 x86_64
* cc: cc (Debian 6.3.0-18+deb9u1) 6.3.0 20170516
* make: GNU Make 4.1
* OpenSSL: OpenSSL 1.1.1 11 Sep 2018
* APR: 1.5.2
*
* Valid SHA-512 signature for apache-tomcat-8.5.54.zip
* Valid GPG signature for apache-tomcat-8.5.54.zip
* Valid SHA-512 signature for apache-tomcat-8.5.54.tar.gz
* Valid GPG signature for apache-tomcat-8.5.54.tar.gz
* Valid SHA-512 signature for apache-tomcat-8.5.54.exe
* Valid GPG signature for apache-tomcat-8.5.54.exe
* Valid SHA512 signature for apache-tomcat-8.5.54-src.zip
* Valid GPG signature for apache-tomcat-8.5.54-src.zip
* Valid SHA512 signature for apache-tomcat-8.5.54-src.tar.gz
* Valid GPG signature for apache-tomcat-8.5.54-src.tar.gz
*
* Binary Zip and tarball: Same
* Source Zip and tarball: Same
*
* Building dependencies returned: 0
* tcnative builds cleanly
* Tomcat builds cleanly
* Junit Tests: FAILED
*
* Tests that failed:
* org.apache.tomcat.util.net.openssl.ciphers.TestCipher.APR.txt
* org.apache.tomcat.util.net.openssl.ciphers.TestCipher.NIO.txt
* org.apache.tomcat.util.net.openssl.ciphers.TestCipher.NIO2.txt
*
org.apache.tomcat.util.net.openssl.ciphers.TestOpenSSLCipherConfiguratio
nParser.APR.txt
*
org.apache.tomcat.util.net.openssl.ciphers.TestOpenSSLCipherConfiguratio
nParser.NIO.txt
*
org.apache.tomcat.util.net.openssl.ciphers.TestOpenSSLCipherConfiguratio
nParser.NIO2.txt
-----BEGIN PGP SIGNATURE-----
Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/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=NRry
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
Re: [VOTE] Release Apache Tomcat 8.5.54
Posted by Rémy Maucherat <re...@apache.org>.
On Fri, Apr 3, 2020 at 4:30 PM Mark Thomas <ma...@apache.org> wrote:
> The proposed Apache Tomcat 8.5.54 release is now available for voting.
>
> The major changes compared to the 8.5.53 release are:
>
> - Add support for default values when using ${...} property replacement
> in configuration files. Based on a pull request provided by Bernd
> Bohmann.
>
> - When configuring an HTTP Connector, warn if the encoding specified for
> URIEncoding is not a superset of US-ASCII as required by RFC7230.
>
> - Replace the system property
> org.apache.tomcat.util.buf.UDecoder.ALLOW_ENCODED_SLASH with the
> Connector attribute encodedSolidusHandling that adds an additional
> option to pass the %2f sequence through to the application without
> decoding it in addition to rejecting such sequences and decoding such
> sequences.
>
> Along with lots of other bug fixes and improvements.
>
> For full details, see the changelog:
> https://ci.apache.org/projects/tomcat/tomcat85/docs/changelog.html
>
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-8/v8.5.54/
>
> The Maven staging repo is:
> https://repository.apache.org/content/repositories/orgapachetomcat-1264/
>
> The tag is:
> https://github.com/apache/tomcat/tree/8.5.54
> 0b365bb7032a5e30b35fedc56e7def82a3e55f94
>
> The proposed 8.5.54 release is:
> [ ] Broken - do not release
> [X] Stable - go ahead and release as 8.5.54
>
Rémy
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: dev-help@tomcat.apache.org
>
>
[VOTE][RESULT] Release Apache Tomcat 8.5.54
Posted by Mark Thomas <ma...@apache.org>.
The following votes were cast:
Binding:
+1: mgrigorov, remm, schultz
No other votes were cast.
The vote therefore passes.
Thanks to everyone who contributed to this release.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org