Attachment #30824 for bug #55383

View | Details | Raw Unified | Return to bug 55383
Collapse All | Expand All

Lines 62-68 Link Here

(-)xdocs/bugreport.xml (-2 / +2 lines)
62	problem you are having before reporting a bug.</p>	62	problem you are having before reporting a bug.</p>
63		63
64	<subsection name="Problem troubleshooting">	64	<subsection name="Problem troubleshooting">
65	<p>	65	<ul>
66	<li><b>Documentation</b> – Review the documentation for the version	66	<li><b>Documentation</b> – Review the documentation for the version
67	of Apache Tomcat that you are using. The problem that you are	67	of Apache Tomcat that you are using. The problem that you are
68	facing may already be addressed in the docs. Note, that documentation	68	facing may already be addressed in the docs. Note, that documentation
Lines 80-86 Link Here
80	</li>	80	</li>
81	<li><b>FAQ's</b> – Search the <a href="http://wiki.apache.org/tomcat/FAQ">	81	<li><b>FAQ's</b> – Search the <a href="http://wiki.apache.org/tomcat/FAQ">
82	Tomcat Frequently Asked Questions</a> that is part of the Wiki.</li>	82	Tomcat Frequently Asked Questions</a> that is part of the Wiki.</li>
83	</p>	83	</ul>
84	</subsection>	84	</subsection>
85		85
86	<subsection name="Apache Tomcat discussion lists">	86	<subsection name="Apache Tomcat discussion lists">




<a href="http://gump.apache.org/index.html#When+does+Gump+run?">listed</a>
on the Gump project page. Links to them are provided below.</p>


  <p><strong>Apache - FreeBSD</strong></p>
  <div style="float: left; padding: 10px;">
  <th colspan="3" style="text-align:left">Apache - FreeBSD</th>
</tr>
<tr style="vertical-align:top">
  <td>
    <ul style="padding-left: 1em;">
      <li><a style="font-weight:bold" href="http://gump.zones.apache.org/gump/public/tomcat-trunk/index.html">tomcat-trunk</a> module<br />
        <ul style="padding-left: 1em;">

      </li>
      <li><a href="http://gump.zones.apache.org/gump/public/tomcat-trunk/tomcat-trunk-test/gump_file/TEST-org.apache.catalina.util.TestServerInfo.BIO.txt.html" rel="nofollow">TestServerInfo</a> result</li>
    </ul>
  </div>
  <div style="float: left; padding: 10px;">
    <ul style="padding-left: 1em;">
      <li><a style="font-weight:bold" href="http://gump.zones.apache.org/gump/public/tomcat-7.0.x/index.html">tomcat-7.0.x</a> module
        <ul style="padding-left: 1em;">

      </li>
      <li><a href="http://gump.zones.apache.org/gump/public/tomcat-7.0.x/tomcat-tc7.0.x-test/gump_file/TEST-org.apache.catalina.util.TestServerInfo.BIO.txt.html" rel="nofollow">TestServerInfo</a> result</li>
    </ul>
  </div>
  <div style="float: left; padding: 10px;">
    <ul style="padding-left: 1em;">
      <li><a style="font-weight:bold" href="http://gump.zones.apache.org/gump/public/tomcat-tc6/index.html">tomcat-tc6</a> module
        <ul style="padding-left: 1em;">

        </ul>
      </li>
    </ul>
  </div>
  <div style="float: left; padding: 10px;">
<tr style="vertical-align:top">
  <td>
    <ul style="padding-left: 1em;">
      <li><a style="font-weight:bold" href="http://gump.zones.apache.org/gump/public/tomcat-taglibs/index.html">tomcat-taglibs</a> module<br />
        <ul style="padding-left: 1em;">

        </ul>
      </li>
    </ul>
  </div>
  <div style="clear: left;"/>
  <p><strong>Apache - Adam (Mac OS X Server)</strong></p>
  <div style="float: left; padding: 10px;">
</tr>
<tr style="vertical-align:top">
  <td>
    <ul style="padding-left: 1em;">
      <li><a style="font-weight:bold" href="http://adam.apache.org/gump/tomcat-trunk/index.html">tomcat-trunk</a> module
        <ul style="padding-left: 1em;">

      </li>
      <li><a href="http://adam.apache.org/gump/tomcat-trunk/tomcat-trunk-test/gump_file/TEST-org.apache.catalina.util.TestServerInfo.BIO.txt.html" rel="nofollow">TestServerInfo</a> result</li>
    </ul>
  </div>
  <div style="float: left; padding: 10px;">
    <ul style="padding-left: 1em;">
      <li><a style="font-weight:bold" href="http://adam.apache.org/gump/tomcat-7.0.x/index.html">tomcat-7.0.x</a> module
        <ul style="padding-left: 1em;">

      </li>
      <li><a href="http://adam.apache.org/gump/tomcat-7.0.x/tomcat-tc7.0.x-test/gump_file/TEST-org.apache.catalina.util.TestServerInfo.BIO.txt.html" rel="nofollow">TestServerInfo</a> result</li>
    </ul>
  </div>
  <div style="float: left; padding: 10px;">
    <ul style="padding-left: 1em;">
      <li><a style="font-weight:bold" href="http://adam.apache.org/gump/tomcat-tc6/index.html">tomcat-tc6</a> module
        <ul style="padding-left: 1em;">

        </ul>
      </li>
    </ul>
  </div>
  <div style="float: left; padding: 10px;">
<tr style="vertical-align:top">
  <td>
    <ul style="padding-left: 1em;">
      <li><a style="font-weight:bold" href="http://adam.apache.org/gump/tomcat-taglibs/index.html">tomcat-taglibs</a> module<br />
        <ul style="padding-left: 1em;">

        </ul>
      </li>
    </ul>
  </div>
  <div style="clear: left;"/>
</tbody>
</table>

</subsection>





       encounter a problem with this mirror, please select another
       mirror.  If all mirrors are failing, there are <i>backup</i>
       mirrors (at the end of the mirrors list) that should be
       available.<br/>[if-any logo]<a href="[link]" rel="nofollow"><img alt="Logo" src="[logo]"/></a>[end]</p><form action="[location]" method="get" id="SelectMirror"><p>
       Other mirrors: <select name="Preferred">
         [if-any http]
           [for http]<option value="[http]">[http]</option>[end]

         [if-any backup]
           [for backup]<option value="[backup]">[backup] (backup)</option>[end]
           [end]
         </select><input type="submit" value="Change"/></p></form>
      <!-- End mirror list -->
   
  </section>

      <!-- Begin 6.0.37 section -->
      <section name="6.0.37">
      <p>
      Please see the 
      <a href="[preferred]tomcat/tomcat-6/v6.0.37/README.html" rel="nofollow">README</a>
      file for packaging information.  It explains what every distribution contains.
      </p>




       encounter a problem with this mirror, please select another
       mirror.  If all mirrors are failing, there are <i>backup</i>
       mirrors (at the end of the mirrors list) that should be
       available.<br/>[if-any logo]<a href="[link]" rel="nofollow"><img alt="Logo" src="[logo]"/></a>[end]</p><form action="[location]" method="get" id="SelectMirror"><p>
       Other mirrors: <select name="Preferred">
         [if-any http]
           [for http]<option value="[http]">[http]</option>[end]

         [if-any backup]
           [for backup]<option value="[backup]">[backup] (backup)</option>[end]
           [end]
         </select><input type="submit" value="Change"/></p></form>
      <!-- End mirror list -->
   
  </section>

      <!-- Begin 7.0.42 section -->
      <section name="7.0.42">
      <p>
      Please see the 
      <a href="[preferred]tomcat/tomcat-7/v7.0.42/README.html" rel="nofollow">README</a>
      file for packaging information.  It explains what every distribution contains.
      </p>




       encounter a problem with this mirror, please select another
       mirror.  If all mirrors are failing, there are <i>backup</i>
       mirrors (at the end of the mirrors list) that should be
       available.<br/>[if-any logo]<a href="[link]" rel="nofollow"><img alt="Logo" src="[logo]"/></a>[end]</p><form action="[location]" method="get" id="SelectMirror"><p>
       Other mirrors: <select name="Preferred">
         [if-any http]
           [for http]<option value="[http]">[http]</option>[end]

         [if-any backup]
           [for backup]<option value="[backup]">[backup] (backup)</option>[end]
           [end]
         </select><input type="submit" value="Change"/></p></form>
      <!-- End mirror list -->
   
  </section>

      <!-- Begin 8.0.0-RC1 section -->
      <section name="8.0.0-RC1">
      <p>
      Please see the 
      <a href="[preferred]tomcat/tomcat-8/v8.0.0-RC1/README.html" rel="nofollow">README</a>
      file for packaging information.  It explains what every distribution contains.
      </p>




    <section name="Tomcat Connectors (mod_jk) Downloads">

      <p>Use the links below to download Tomcat Connectors from one of
      our mirrors.  You <strong>must</strong> <a href="#Verify_the_Integrity_of_the_Files">verify the
      integrity</a> of the downloaded files using signatures downloaded from
      our main distribution directory.</p>


        mirrors (at the end of the mirrors list) that should be
        available.<br/>
        [if-any logo]
          <a href="[link]" rel="nofollow"><img alt="Logo" src="[logo]"/></a>
        [end]
        </p><form action="[location]" method="get" id="SelectMirror"><p>
        Other mirrors: <select name="Preferred">
        [if-any http]
          [for http]<option value="[http]">[http]</option>[end]

        [if-any backup]
          [for backup]<option value="[backup]">[backup] (backup)</option>[end]
        [end]
        </select><input type="submit" value="Change"/></p></form>
        <p>You may also consult the <a href="http://www.apache.org/mirrors/">complete
        list of mirrors</a>.</p>
      </subsection>




    <section name="Tomcat Native Downloads">

      <p>Use the links below to download Tomcat Native from one of
      our mirrors.  You <strong>must</strong> <a href="#Verify_the_Integrity_of_the_Files">verify the
      integrity</a> of the downloaded files using signatures downloaded from
      our main distribution directory.</p>


        mirrors (at the end of the mirrors list) that should be
        available.<br/>
        [if-any logo]
          <a href="[link]" rel="nofollow"><img alt="Logo" src="[logo]"/></a>
        [end]
        </p><form action="[location]" method="get" id="SelectMirror"><p>
        Other mirrors: <select name="Preferred">
        [if-any http]
          [for http]<option value="[http]">[http]</option>[end]

        [if-any backup]
          [for backup]<option value="[backup]">[backup] (backup)</option>[end]
        [end]
        </select><input type="submit" value="Change"/></p></form>
        <p>You may also consult the <a href="http://www.apache.org/mirrors/">complete
        list of mirrors</a>.</p>
      </subsection>




Apache Tomcat 8  - 8.0.0-RC1 (alpha). Tomcat 8 is aligned with Java EE 7. In
addition to supporting updated versions of the Java EE specifications, Tomcat 8
includes a number of improvements compared to Tomcat 7. The notable changes
include:</p>
<ul>
  <li>Support for Java Servlet 3.1, JavaServer Pages 2.3, Java Unified
      Expression Language 3.0 and Java WebSocket 1.0.</li>

      (using a master WAR as the basis for multiple web applications that each
      have their own customizations).</li>
</ul>
<p>
Full details of these changes, and all the other changes, are available in the
<a href="tomcat-8.0-doc/changelog.html">Tomcat 8 changelog</a>.
</p>

but there is some internal refactoring to be completed before the alpha label
is removed.</p>

<p style="text-align: center;">
<a href="download-80.cgi">Download</a>
</p>
</section>

The Apache Tomcat Project is proud to announce the release of version 7.0.42 of
Apache Tomcat. This release contains a number of bug fixes
and improvements compared to version 7.0.41. The notable changes include:
</p>
<ul>
  <li>Add support for time to first byte in the AccessLogValve. Patch provided
      by Jeremy Boynes.</li>

  <li>Ensure that the build process produces Javadoc that is not vulnerable to
      CVE-2013-1571. Based on a patch by Uwe Schindler.</li>
</ul>
<p>
Full details of these changes, and all the other changes, are available in the
<a href="tomcat-7.0-doc/changelog.html">Tomcat 7 changelog</a>.
</p>

<p style="text-align: center;">
<a href="download-70.cgi">Download</a> |
<a href="tomcat-7.0-doc/changelog.html">ChangeLog for 7.0.42</a>
</p>

6.0.36.

</p>
<p style="text-align: center;">
<a href="download-60.cgi">Download</a> |
<a href="tomcat-6.0-doc/changelog.html">ChangeLog for 6.0.37</a>
</p>

The binaries are available from Maven repositories. You should specify the
version in your project's plugin configuration:
</p>
<source><![CDATA[<plugin>
  <groupId>org.apache.tomcat.maven</groupId>
  <artifactId>tomcat7-maven-plugin</artifactId>
  <version>2.1</version>
</plugin>]]></source>
<p>or</p>
<source><![CDATA[<plugin>
  <groupId>org.apache.tomcat.maven</groupId>
  <artifactId>tomcat6-maven-plugin</artifactId>
  <version>2.1</version>
</plugin>]]></source>
    <artifactId>tomcat6-maven-plugin</artifactId>
    <version>2.1</version>
  </plugin>
]]></source>
</section>

<section name="Tomcat Native 1.1.27 Released" rtext="2013-02-12">

The Apache Tomcat Project is proud to announce the release of version 1.1.27 of
Tomcat Native.
</p>
<p style="text-align: center;">
<a href="download-native.cgi">Download</a> |
<a href="native-doc/miscellaneous/changelog.html">ChangeLog for 1.1.27</a>
</p>

Apache Tomcat Connectors.
This version fixes few bugs and regressions found in 1.2.36 release.
</p>
<p style="text-align: center;">
<a href="download-connectors.cgi">Download</a> |
<a href="connectors-doc/miscellaneous/changelog.html">ChangeLog for 1.2.37</a>
</p>




    <p>"Apache Tomcat" and "Tomcat" are trademarks of the Apache Software
    Foundation. Use of these trademarks is subject to the terms of section
    6 of <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License,
    Version 2.0 (current)</a>.</p>

    <p>If you create a product that uses Apache Tomcat software or provides
    additional functionality to that software then:</p>
      <ul>
        <li>When referring to Apache Tomcat software, please use the full name
            of "Apache Tomcat" for at least the first reference on any web page,

            form of product name that includes "Tomcat" or "Apache" is
            permitted.</li>
      </ul>
  </section>
</body>
</document>





is not subscribed to the list, it will be rejected.</p>

<p>All messages to the Tomcat lists are filtered for spam. To avoid your valid
message being marked as spam:</p>
<ul>
  <li>send your message in plain text, not HTML;</li>
  <li>include a subject.</li>
</ul>
</p>

<p>The following lists are available:</p>


  server.</li>
</ol>

<table class="defaultTable">
 <tr>
  <td>Volume:</td>
  <td>High</td>

<p>The list is used to announce Tomcat releases, security vulnerabilities and
other project announcements.</p>

<table class="defaultTable">
 <tr>
  <td>Volume:</td>
  <td>Low</td>

<section name="tomcat-dev">

<p>
The <code>dev@tomcat.apache.org</code> mailing list
is used for discussions about the actual development of the server. It is not
the place to ask about problems writing JSPs, servlets or web applications.
</p>

for discussion of changes to the Apache Tomcat source code and related
issues. Other questions will be ignored.</p>

<table class="defaultTable">
 <tr>
  <td>Volume:</td>
  <td>High</td>

<section name="taglibs-user">

<p>
The <code>taglibs-user@tomcat.apache.org</code>
mailing list is for users of the custom tag libraries found in
<a href="http://tomcat.apache.org/taglibs/">Apache Taglibs</a>. It is also
a good forum for asking questions about how custom tag libraries operate,

and how they can be used.
</p>

<table class="defaultTable">
 <tr>
  <td>Volume:</td>
  <td>Low</td>




    below and then click &quot;View differences&quot; to see the differences.
    The differences will be shown in a new tab/window.</p>

    <script type="text/javascript"><![CDATA[
    "use strict"; // Enable strict mode

    document.addEventListener("DOMContentLoaded", function() {
    var formSubmit = document.getElementById("tc6Submit");
      formSubmit.addEventListener("submit", function() {
        var revisions = {
          "HEAD":"HEAD",
          "6.0.0":"466306",

          "6.0.36":"1398690",
          "6.0.37":"1476938"
        };

        var elementsSelect= document.getElementById('tc6Select').elements;
        formSubmit.action = "http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/" +
          document.getElementById('select-filename').value;
        formSubmit.elements['r1'].value = revisions[document.getElementById('select-r1').value]; 
        formSubmit.elements['r2'].value = revisions[document.getElementById('select-r2').value]; 
        return true;
      }, false);
    }, false);
    ]]></script>

    
    <p><label>Configuration file:
    <select id="select-filename">
    <option value="conf/catalina.policy">catalina.policy</option>
    <option value="conf/catalina.properties">catalina.properties</option>
    <option value="conf/context.xml">context.xml</option>

    <option value="conf/server.xml">server.xml</option>
    <option value="conf/tomcat-users.xml">tomcat-users.xml</option>
    <option value="conf/web.xml">web.xml</option>
    </select></label>
    </p>
    <p><label>Old version:
    <select id="select-r1">
    <option value="6.0.0">6.0.0</option>
    <option value="6.0.1">6.0.1</option>
    <option value="6.0.2">6.0.2</option>

    <option value="6.0.35">6.0.35</option>
    <option value="6.0.36" selected="selected">6.0.36</option>
    <option value="6.0.37">6.0.37</option>
    </select>,</label> <label>new version:
    <select id="select-r2">
    <option value="6.0.0">6.0.0</option>
    <option value="6.0.1">6.0.1</option>
    <option value="6.0.2">6.0.2</option>

    <option value="6.0.36">6.0.36</option>
    <option value="6.0.37" selected="selected">6.0.37</option>
    <option value="HEAD">trunk (unreleased)</option>
    </select></label>
    </p>

    <form id="tc6Submit" action="to-be-replaced" method="get"
          target="_blank">
    <p>
    <input type="hidden" name="diff_format" value="h"/>
    <input type="hidden" name="r1"/><input type="hidden" name="r2"/>
    <button>View Differences</button>
           onClick="return updateTc6ActionUrl();"/>
    </p>
    </form>
    <p>You can also use Subversion command similar to the following (all on one line):</p>
    <source>svn diff
  --old=http://svn.apache.org/repos/asf/tomcat/tc6.0.x/tags/TOMCAT_6_0_36/conf/
  --new=http://svn.apache.org/repos/asf/tomcat/tc6.0.x/tags/TOMCAT_6_0_37/conf/</source>
    </pre>
  </subsection>
  
</section>




    For example, if package <code>"a"</code> contains class <code>Part</code>,
    the following JSP page will cease to compile in Tomcat 7:</p>

    <source><![CDATA[<%@page import="a.*"%>
<% Part page = new Part(); %>]]></source>
&lt;% Part page = new Part(); %&gt;</source>

    <p>That happens because implicit import of <code>javax.servlet.http.*</code>
    and explicit import of <code>a.*</code> will provide conflicting

    interfaces are not. To maintain the CSRF protection:</p>
    
    <ul>
      <li>users with the <code>manager-gui</code> role should not be granted
          either the <code>manager-script</code> or <code>manager-jmx</code> roles.</li>
      <li>if the Manager application is accessed through a browser by a user
          who has <code>manager-script</code> or <code>manager-jmx</code> roles
          (e.g. for testing the text or jmx interfaces since these interfaces
          are intended for tools not humans) then all browser windows
          must be closed afterwards to terminate the session.</li>

    not. To maintain the CSRF protection:</p>
    
    <ul>
      <li>users with the <code>admin-gui</code> role should not be granted the
          <code>admin-script</code> role.</li>
      <li>if the Host Manager application is accessed through a browser
          by a user who has <code>admin-script</code> role (e.g. for testing
          the text interface since this inteface is intended for tools
          not humans) then all browser windows
          must be closed afterwards to terminate the session.</li>

    below and then click &quot;View differences&quot; to see the differences.
    The differences will be shown in a new tab/window.</p>

    <script type="text/javascript"><![CDATA[
    "use strict"; // Enable strict mode

    document.addEventListener("DOMContentLoaded", function() {
    var formSubmit = document.getElementById("tc7Submit");
      formSubmit.addEventListener("submit", function() {
        var revisions = {
          "HEAD":"HEAD",
          "7.0.0":"954232",

          "7.0.41":"1490220",
          "7.0.42":"1498817"
        };

        var elementsSelect= document.getElementById('tc7Select').elements;
        formSubmit.action = "http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/" +
          document.getElementById('select-filename').value;
        formSubmit.elements['r1'].value = revisions[document.getElementById('select-r1').value]; 
        formSubmit.elements['r2'].value = revisions[document.getElementById('select-r2').value]; 
        return true;
      }, false);
    }, false);
    ]]></script>


    <p><label>Configuration file:
    <select id="select-filename">
    <option value="conf/catalina.policy">catalina.policy</option>
    <option value="conf/catalina.properties">catalina.properties</option>
    <option value="conf/context.xml">context.xml</option>

    <option value="conf/server.xml">server.xml</option>
    <option value="conf/tomcat-users.xml">tomcat-users.xml</option>
    <option value="conf/web.xml">web.xml</option>
    </select></label>
    </p>
    <p><label>Old version:
    <select id="select-r1">
    <option value="7.0.0">7.0.0</option>
    <option value="7.0.2">7.0.2</option>
    <option value="7.0.4">7.0.4</option>

    <option value="7.0.29">7.0.29</option>
    <option value="7.0.30">7.0.30</option>
    <option value="7.0.32">7.0.32</option>
    <option value="7.0.33">7.0.33</option>
    <option value="7.0.34">7.0.34</option>
    <option value="7.0.35">7.0.35</option>
    <option value="7.0.37">7.0.37</option>

    <option value="7.0.40">7.0.40</option>
    <option value="7.0.41" selected="selected">7.0.41</option>
    <option value="7.0.42">7.0.42</option>
    </select>,</label> <label>new version:
    <select id="select-r2">
    <option value="7.0.0">7.0.0</option>
    <option value="7.0.2">7.0.2</option>
    <option value="7.0.4">7.0.4</option>

    <option value="7.0.41">7.0.41</option>
    <option value="7.0.42" selected="selected">7.0.42</option>
    <option value="HEAD">trunk (unreleased)</option>
    </select></label>
    </p>

    <form id="tc7Submit" action="to-be-replaced" method="get"
          target="_blank">
    <p>
    <input type="hidden" name="diff_format" value="h"/>
    <input type="hidden" name="r1"/><input type="hidden" name="r2"/>
    <button>View Differences</button>
           onClick="return updateTc7ActionUrl();"/>
    </p>
    </form>
    <p>You can also use Subversion command similar to the following (all on one line):</p>
    <source>svn diff
  --old=http://svn.apache.org/repos/asf/tomcat/tc7.0.x/tags/TOMCAT_7_0_27/conf/
  --new=http://svn.apache.org/repos/asf/tomcat/tc7.0.x/tags/TOMCAT_7_0_28/conf/</source>
    </pre>
  </subsection>
  
</section>




    <code>ReadListener</code>, the following JSP page will cease to compile in
    Tomcat 8:</p>

    <source><![CDATA[<%@page import="a.*"%>
<% ReadListener listener = new ReadListener(); %>]]></source>
&lt;% ReadListener listener = new ReadListener(); %&gt;</source>

    <p>This happens because implicit import of <code>javax.servlet.*</code>
    and explicit import of <code>a.*</code> will provide conflicting

    below and then click &quot;View differences&quot; to see the differences.
    The differences will be shown in a new tab/window.</p>

    <script type="text/javascript"><![CDATA[
    "use strict"; // Enable strict mode

    document.addEventListener("DOMContentLoaded", function() {
    var formSubmit = document.getElementById("tc8Submit");
      formSubmit.addEventListener("submit", function() {
        var revisions = {
          "HEAD":"HEAD",
          "8.0.0-RC1":"1509411",
        };

        var elementsSelect= document.getElementById('tc8Select').elements;
        formSubmit.action = "http://svn.apache.org/viewvc/tomcat/trunk/" +
          document.getElementById('select-filename').value;
        formSubmit.elements['r1'].value = revisions[document.getElementById('select-r1').value]; 
        formSubmit.elements['r2'].value = revisions[document.getElementById('select-r2').value]; 
        return true;
      }, false);
    }, false);
    ]]></script>


    <p><label>Configuration file:
    <select id="select-filename">
    <option value="conf/catalina.policy">catalina.policy</option>
    <option value="conf/catalina.properties">catalina.properties</option>
    <option value="conf/context.xml">context.xml</option>

    <option value="conf/server.xml">server.xml</option>
    <option value="conf/tomcat-users.xml">tomcat-users.xml</option>
    <option value="conf/web.xml">web.xml</option>
    </select></label>
    </p>
    <p><label>Old version:
    <select id="select-r1">
    <option value="8.0.0-RC1" selected="selected">8.0.0-RC1</option>
    </select>,</label> <label>new version:
    <select id="select-r2">
    <option value="HEAD" selected="selected">trunk (unreleased)</option>
    </select></label>
    </p>

    <form id="tc8Submit" action="to-be-replaced" method="get"
          target="_blank">
    <p>
    <input type="hidden" name="diff_format" value="h"/>
    <input type="hidden" name="r1"/><input type="hidden" name="r2"/>
    <button>View Differences</button>
           onClick="return updateTc8ActionUrl();"/>
    </p>
    </form>
    <p>You can also use Subversion command similar to the following (all on one line):</p>
    <source>svn diff
  --old=http://svn.apache.org/repos/asf/tomcat/tags/TOMCAT_8_0_0/conf/
  --new=http://svn.apache.org/repos/asf/tomcat/tags/TOMCAT_8_0_1/conf/</source>
    </pre>
  </subsection>
  
</section>

Lines 87-96 Link Here

(-)xdocs/oldnews-2010.xml (-6 / +9 lines)
87	</section>	87	</section>
88		88
89	<section name="Apache Tomcat Track at ApacheCon North America 2010" rtext="2010-05-27">	89	<section name="Apache Tomcat Track at ApacheCon North America 2010" rtext="2010-05-27">
90	<p><a href="http://archive.apachecon.com/c/acna2010/"><img	90	<p/><div style="float: right;"><a href="http://archive.apachecon.com/c/acna2010/"><img
91	src="images/ACNA2010_120x240_basic.gif" width="120" height="240"	91	src="images/ACNA2010_120x240_basic.gif" style="width: 120px; height: 240px;"
92	align="right" hspace="10" vspace="10" alt="[ApacheCon North America 2010	92	alt="[ApacheCon North America 2010
93	Banner]" /></a> <a href="http://archive.apachecon.com/c/acna2010/">ApacheCon	93	Banner]" /></a></div>
		94	<p>
		95	<a href="http://archive.apachecon.com/c/acna2010/">ApacheCon
94	North America 2010</a> will be held 1-5 November 2010, at the Westin	96	North America 2010</a> will be held 1-5 November 2010, at the Westin
95	Peachtree in Atlanta, Georgia, USA.</p>	97	Peachtree in Atlanta, Georgia, USA.</p>
96	<p>	98	<p>
Lines 107-112 Link Here
107	</p>	109	</p>
108	<p>See also:	110	<p>See also:
109	<a href="http://archive.apachecon.com/c/">Apache Conferences Archive</a></p>	111	<a href="http://archive.apachecon.com/c/">Apache Conferences Archive</a></p>
		112	<div style="clear: right;"/>
110	</section>	113	</section>
111		114
112	<section name="Tomcat 5.5.29 Released" rtext="2010-04-20">	115	<section name="Tomcat 5.5.29 Released" rtext="2010-04-20">
Lines 130-137 Link Here
130	Apache Tomcat Connectors.	133	Apache Tomcat Connectors.
131	This release includes mainly bug fixes and some small improvements over Apache Tomcat Connectors 1.2.28.	134	This release includes mainly bug fixes and some small improvements over Apache Tomcat Connectors 1.2.28.
132	</p>	135	</p>
133	<p><br/>	136	<p>
134	<b>Notice</b> Apache Tomcat Connectors version 1.2.29 was withdrawn from the release due to	137	<b>Notice:</b> Apache Tomcat Connectors version 1.2.29 was withdrawn from the release due to
135	regression with Microsoft IIS connector.	138	regression with Microsoft IIS connector.
136	</p>	139	</p>
137	</section>	140	</section>




Apache Tomcat. This release includes security and bug fixes over Apache Tomcat 6.0.33.

</p>
<p style="text-align: center;">
<a href="download-60.cgi">Download</a> |
<a href="tomcat-6.0-doc/changelog.html#Tomcat_6.0.35_(jfclere)">ChangeLog for 6.0.35</a>
</p>

The Apache Tomcat Project is proud to announce the release of version 7.0.23 of
Apache Tomcat. This release includes numerous bug fixes and several new features
compared to version 7.0.22. The notable new features include:
</p>
<ul>
<li>The ability to start and stop child containers (primarily Contexts - i.e.
    web applications) in parallel which can significantly improve start times.

    can be fixed (e.g. via JMX) and another attempt made to start it rather than
    it having to be removed.</li>
</ul>
<p>
Full details of these changes, and all the other changes, are available in the
<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.23_(markt)">Tomcat 7 changelog</a>.
</p>

<p style="text-align: center;">
<a href="download-70.cgi">Download</a> |
<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.23_(markt)">ChangeLog for 7.0.23</a>
</p>

The Apache Tomcat Project is proud to announce the release of version 7.0.22 of
Apache Tomcat. This release includes bug fixes and new features compared to
version 7.0.21 including:
</p>
<ul>
<li>Further improvements to the memory leak detection and prevention
    features.</li>

<li>Add support for controlling which session attributes are replicated when
    using session replication (a.k.a clustering).</li>
</ul>
<p>
Full details of these changes, and all the other changes, are available in the
<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.22_(markt)">Tomcat 7 changelog</a>.
</p>

<p style="text-align: center;">
<a href="download-70.cgi">Download</a> |
<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.22_(markt)">ChangeLog for 7.0.22</a>
</p>

<p><strong>Note:</strong> End of life date for Apache Tomcat 5.5.x is announced.
<a href="tomcat-55-eol.html">Read more...</a>
</p>
<p style="text-align: center;">
<a href="download-55.cgi">Download</a> |
<a href="tomcat-5.5-doc/changelog.html#Tomcat_5.5.34_(jim)">ChangeLog for 5.5.34</a>
</p>

The Apache Tomcat Project is proud to announce the release of version 7.0.21 of
Apache Tomcat. This release includes security fixes, bug fixes and new features
compared to version 7.0.20 including:
</p>
<ul>
<li>A fix for CVE-2011-3190 that allowed an attacker to inject requests when
    Tomcat was configured behind a reverse proxy using the AJP protocol.</li>

    detection/prevention features.</li>
<li>Improved validation of received AJP messages.</li>
</ul>
<p>
Full details of these changes, and all the other changes, are available in the
<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.21_(markt)">Tomcat 7
changelog</a>.
</p>

<p style="text-align: center;">
<a href="download-70.cgi">Download</a> |
<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.21_(markt)">ChangeLog for
7.0.21</a>

The Apache Tomcat Project is proud to announce the release of version 6.0.33 of
Apache Tomcat. This release includes security and bug fixes over Apache Tomcat 6.0.32.
</p>
<p style="text-align: center;">
<a href="download-60.cgi">Download</a> |
<a href="tomcat-6.0-doc/changelog.html#Tomcat_6.0.33_(jfclere)">ChangeLog for 6.0.33</a>
</p>

The Apache Tomcat Project is proud to announce the release of version 7.0.20 of
Apache Tomcat. This release includes bug fixes and the following new features
compared to version 7.0.19 including:
</p>
<ul>
<li>JSP files with dependencies in JARs are no longer recompiled on every access
    thereby improving performance.</li>

<li>Update to Commons Daemon 1.0.7.</li>
<li>Converted unit tests to JUnit 4.</li>
</ul>
<p>
Full details of these changes, and all the other changes, are available in the
<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.20_(markt)">Tomcat 7
changelog</a>.
</p>

<p style="text-align: center;">
<a href="download-70.cgi">Download</a> |
<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.20_(markt)">ChangeLog for
7.0.20</a>

The Apache Tomcat Project is proud to announce the release of version 7.0.19 of
Apache Tomcat. This release includes security fixes, bug fixes and the following
new features compared to version 7.0.16:
</p>
<ul>
<li>JSP recompilation is now triggered by any change (backwards as well as
    forwards) in the last modified time of the JSP or any of its

<li>Support for installing multiple instances with the Windows Installer</li>
<li>Include jdbc-pool (an alternative database connection pool)</li>
</ul>
<p>
Full details of these changes, and all the other changes, are available in the
<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.19_(markt)">Tomcat 7
changelog</a>.
</p>

<p style="text-align: center;">
<a href="download-70.cgi">Download</a> |
<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.19_(markt)">ChangeLog for
7.0.19</a>

The Apache Tomcat Project is proud to announce the release of version 7.0.16 of
Apache Tomcat. This release includes bug fixes and the following new features
compared to version 7.0.14:
</p>
<ul>
<li>NIO implementation of the AJP connector.</li>
<li>Enable Servlet 3 asynchronous processing support when using clustering.</li>
<li>Add parallel deployment support to the Manager&apos;s Ant tasks.</li>
</ul>
<p>
Full details of these changes, and all the other changes, are available in the
<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.16_(markt)">Tomcat 7
changelog</a>.
</p>

<p style="text-align: center;">
<a href="download-70.cgi">Download</a> |
<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.16_(markt)">ChangeLog for
7.0.16</a>

The Apache Tomcat Project is proud to announce the release of version 7.0.14 of
Apache Tomcat. This release includes bug fixes and the following new features
compared to version 7.0.12:
</p>
<ul>
<li>The StuckThreadDetectionValve to identify long running requests.</li>
<li>JAAS authentication support to the JMXRemoteLifecycleListener.</li>
<li>Updated MIME type mappings to align with those of Apache httpd.</li>
</ul>
<p>
Full details of these changes, and all the other changes, are available in the
<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.14_(markt)">Tomcat 7
changelog</a>.

<p>
The Apache Tomcat Project is proud to announce the release of version 7.0.12 of
Apache Tomcat. This release includes bug fixes, security fixes and the following
new features compared to version 7.0.11:</p>
<ul>
<li>initial support for SPNEGO/Kerberos authentication (also referred to as
    Windows authentication);</li>

    JNDI resource when it is no longer required;</li>
<li>optional support for pre-emptive authentication.</li>
</ul>
<p>
Full details of these changes, and all the other changes, are available in the
<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.12_(markt)">Tomcat 7
changelog</a>.




The Apache Tomcat Project is proud to announce the release of version 7.0.34 of
Apache Tomcat. This release contains a small number of bug fixes and
improvements compared to version 7.0.33. The notable changes include:
</p>
<ul>
<li>Improvements to the AccessLogValve to better handle non-standard DST changes
    and to provide option for the current access log to have a standard name.

<li>Fix various JMX registration and deregistration issues.</li>
<li>Update the Eclipse JDT compiler to 4.2.1</li>
</ul>
<p>
Full details of these changes, and all the other changes, are available in the
<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.34_(markt)">Tomcat 7 changelog</a>.
</p>

<p style="text-align: center;">
<a href="download-70.cgi">Download</a> |
<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.34_(markt)">ChangeLog for 7.0.34</a>
</p>

The Apache Tomcat Project is proud to announce the release of version 7.0.33 of
Apache Tomcat. This release contains a small number of bug fixes and
improvements compared to version 7.0.32. The notable changes include:
</p>
<ul>
<li>A fix to the AccessLogValve to address a bug that caused some entries to be
    made with incorrect time stamps.</li>

<li>A re-written, smaller, faster HTTP header parser.</li>
<li>Further performance improvements for Jasper, Tomcat&apos;s JSP engine.</li>
</ul>
<p>
Full details of these changes, and all the other changes, are available in the
<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.33_(markt)">Tomcat 7 changelog</a>.
</p>

<p style="text-align: center;">
<a href="download-70.cgi">Download</a> |
<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.33_(markt)">ChangeLog for 7.0.33</a>
</p>

6.0.35.

</p>
<p style="text-align: center;">
<a href="download-60.cgi">Download</a> |
<a href="tomcat-6.0-doc/changelog.html#Tomcat_6.0.36_(jfclere)">ChangeLog for 6.0.36</a>
</p>

The Apache Tomcat Project is proud to announce the release of version 5.5.36 of
Apache Tomcat. This release is primarily a bug fix release.
</p>
<p><strong>Note:</strong> As per the previous <a href="tomcat-55-eol.html">
end of life announcement</a> this will almost certainly be the final Apache
Tomcat 5.5.x release. Users of the 5.5.x series are strongly encouraged to
upgrade to at least 6.0.x and ideally 7.0.x.
</p>
<p style="text-align: center;">
<a href="download-55.cgi">Download</a> |
<a href="tomcat-5.5-doc/changelog.html">ChangeLog for 5.5.36</a>
</p>

The Apache Tomcat Project is proud to announce the release of version 7.0.32 of
Apache Tomcat. This release contains a small number of bug fixes and
improvements compared to version 7.0.30. The notable changes include:
</p>
<ul>
<li>A new option to automatically remove old, unused versions (ones where there
    are no longer any active sessions) of applications deployed using parallel

<li>Make the members and deployer associated with a cluster visible via JMX.
    </li>
</ul>
<p>
Full details of these changes, and all the other changes, are available in the
<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.32_(markt)">Tomcat 7 changelog</a>.
</p>

<p style="text-align: center;">
<a href="download-70.cgi">Download</a> |
<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.32_(markt)">ChangeLog for 7.0.32</a>
</p>

The binaries are available from Maven repositories. You should specify the
version in your project's plugin configuration:
</p>
<source><![CDATA[<plugin>
  <groupId>org.apache.tomcat.maven</groupId>
  <artifactId>tomcat6-maven-plugin</artifactId>
  <version>2.0</version>
</plugin>]]></source>
<p>or</p>
<source><![CDATA[<plugin>
  <groupId>org.apache.tomcat.maven</groupId>
  <artifactId>tomcat7-maven-plugin</artifactId>
  <version>2.0</version>
</plugin>]]></source>
    <artifactId>tomcat7-maven-plugin</artifactId>
    <version>2.0</version>
  </plugin>
]]></source>
</section>

<section name="Tomcat 7.0.30 Released" rtext="2012-09-06">

The Apache Tomcat Project is proud to announce the release of version 7.0.30 of
Apache Tomcat. This release contains numerous bug fixes and improvements
compared to version 7.0.29. The notable changes include:
</p>
<ul>
<li>Significantly reduced memory footprint during web application start while
    Servlet 3.0 annotation and SCI scanning is in progress.</li>

    Servlet 3.0 annotation and SCI scanning.</li>
<li>Improvements to DIGEST and FORM authentication.</li>
</ul>
<p>
Full details of these changes, and all the other changes, are available in the
<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.30_(markt)">Tomcat 7 changelog</a>.
</p>

<p style="text-align: center;">
<a href="download-70.cgi">Download</a> |
<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.30_(markt)">ChangeLog for 7.0.30</a>
</p>

the 7.0.28 release and takes account of several recent clarifications from the
Servlet Expert Group as well as containing a handful of bug fixes and small
improvements compared to version 7.0.28. The notable changes include:
</p>
<ul>
<li>Add support for a default error page</li>
<li>The servlet version defined in web.xml no longer determines if Tomcat scans

    ServletContainerInitializers regardless of the setting of
    metadata-complete</li>
</ul>
<p>
Full details of these changes, and all the other changes, are available in the
<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.29_(markt)">Tomcat 7 changelog</a>.
</p>

<p style="text-align: center;">
<a href="download-70.cgi">Download</a> |
<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.29_(markt)">ChangeLog for 7.0.29</a>
</p>

The Apache Tomcat Project is proud to announce the release of version 7.0.28 of
Apache Tomcat. This release is includes may improvements as well as a number of
bug fixes compared to version 7.0.27. The notable changes include:
</p>
<ul>
<li>The minimum required APR/native library version required if the APR/native
    connector is used is now 1.1.24.</li>

    infinite timeouts by default for WebSocket connections.</li>
<li>Various fixes and improvements to annotation scanning.</li>
</ul>
<p>
Full details of these changes, and all the other changes, are available in the
<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.28_(markt)">Tomcat 7 changelog</a>.
</p>

<p style="text-align: center;">
<a href="download-70.cgi">Download</a> |
<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.28_(markt)">ChangeLog for 7.0.28</a>
</p>

The Apache Tomcat Project is proud to announce the release of version 1.1.24 of
Tomcat Native.
</p>
<p style="text-align: center;">
<a href="download-native.cgi">Download</a> |
<a href="native-doc/miscellaneous/changelog.html">ChangeLog for 1.1.24</a>
</p>

Apache Tomcat Connectors.
This version fixes few bugs found in 1.2.35 release.
</p>
<p style="text-align: center;">
<a href="download-connectors.cgi">Download</a> |
<a href="connectors-doc/miscellaneous/changelog.html">ChangeLog for 1.2.36</a>
</p>

The Apache Tomcat Project is proud to announce the release of version 7.0.27 of
Apache Tomcat. This release is includes significant new features as well as a
number of bug fixes compared to version 7.0.26. The notable changes include:
</p>
<ul>
<li>Support for the WebSocket protocol (RFC6455). Both streaming and message
    based APIs are provided and the implementation currently fully passes the

<li>Improve the memory leak prevention and detection code so that is works well
    with JVMs from IBM.</li>
</ul>
<p>
Full details of these changes, and all the other changes, are available in the
<a href="tomcat-7.0-doc/changelog.html">Tomcat 7 changelog</a>.
</p>

<p style="text-align: center;">
<a href="download-70.cgi">Download</a> |
<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.27_(markt)">ChangeLog for 7.0.27</a>
</p>

<p><strong>Notice:</strong> Users of discontinued Apache HTTPD 1.3.x version will need to apply the
<a href="http://svn.apache.org/viewvc/tomcat/jk/trunk/native/apache-1.3/mod_jk.c?r1=1302445&amp;r2=1305020">r1305020 patch</a>
to be able to compile this version of mod_jk.</p>
<p style="text-align: center;">
<a href="download-connectors.cgi">Download</a> |
<a href="connectors-doc/miscellaneous/changelog.html">ChangeLog for 1.2.35</a>
</p>

The Apache Tomcat Project is proud to announce the release of version 1.1.23 of Tomcat Native.
This version is principally a bugfix release.
</p>
<p style="text-align: center;">
<a href="download-native.cgi">Download</a> |
<a href="native-doc/miscellaneous/changelog.html">ChangeLog for 1.1.23</a>
</p>

The Apache Tomcat Project is proud to announce the release of version 7.0.26 of
Apache Tomcat. This release is primarily a bug fix release and includes numerous
bug fixes compared to version 7.0.25. The notable bug fixes include:
</p>
<ul>
<li>Improved <code>@HandlesTypes</code> processing which no longer loads all
    classes on web application start.</li>

    including web applications packaged as WARs and many embedded scenarios.
    </li>
</ul>
<p>
Full details of these changes, and all the other changes, are available in the
<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.25_(markt)">Tomcat 7 changelog</a>.
</p>

<p style="text-align: center;">
<a href="download-70.cgi">Download</a> |
<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.26_(markt)">ChangeLog for 7.0.26</a>
</p>

The binaries are available from Maven repositories. You should specify the
version in your project's plugin configuration:
</p>
<source><![CDATA[<plugin>
  <groupId>org.apache.tomcat.maven</groupId>
  <artifactId>tomcat6-maven-plugin</artifactId>
  <version>2.0-beta-1</version>
</plugin>]]></source>
<p>or</p>
<source><![CDATA[<plugin>
  <groupId>org.apache.tomcat.maven</groupId>
  <artifactId>tomcat7-maven-plugin</artifactId>
  <version>2.0-beta-1</version>
</plugin>]]></source>
    <artifactId>tomcat7-maven-plugin</artifactId>
    <version>2.0-beta-1</version>
  </plugin>
]]></source>
</section>

<section name="Tomcat 7.0.25 Released" rtext="2012-01-21">

The Apache Tomcat Project is proud to announce the release of version 7.0.25 of
Apache Tomcat. This release includes numerous bug fixes and several new features
compared to version 7.0.23. The notable new features include:
</p>
<ul>
<li>Align the Servlet 3.0 implementation with the changes defined in the first
    maintenance release (also known as Rev. A.). See the

<li>Update to Commons Pool 1.5.7, Commons Daemon 1.0.8 and Eclipse JDT compiler
    3.7.1.</li>
</ul>
<p>
Full details of these changes, and all the other changes, are available in the
<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.25_(markt)">Tomcat 7 changelog</a>.
</p>

<p style="text-align: center;">
<a href="download-70.cgi">Download</a> |
<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.25_(markt)">ChangeLog for 7.0.25</a>
</p>

<p><strong>Note:</strong> End of life date for Apache Tomcat 5.5.x is announced.
<a href="tomcat-55-eol.html">Read more...</a>
</p>
<p style="text-align: center;">
<a href="download-55.cgi">Download</a> |
<a href="tomcat-5.5-doc/changelog.html">ChangeLog for 5.5.35</a>
</p>




The Apache Tomcat Project is proud to announce the release of version 7.0.41 of
Apache Tomcat. This release contains a number of bug fixes
and improvements compared to version 7.0.40. The notable changes include:
</p>
<ul>
  <li>Add a Servlet Filter that implements
      <a href="http://www.w3.org/TR/cors/" rel="nofollow">CORS</a>. Patch

      tasks for interfacing with the text based Manager application. Patch
      provided by Sergey Tcherednichenko.</li>
</ul>
<p>
Full details of these changes, and all the other changes, are available in the
<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.41_(markt)">Tomcat 7 changelog</a>.
</p>

<p style="text-align: center;">
<a href="download-70.cgi">Download</a> |
<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.41_(markt)">ChangeLog for 7.0.41</a>
</p>

The Apache Tomcat Project is proud to announce the release of version 7.0.40 of
Apache Tomcat. This release contains a security fix and a number of bug fixes
and improvements compared to version 7.0.39. The notable changes include:
</p>
<ul>
<li>A fix for CVE-2013-2071 (bug <bug>54178</bug>) an information disclosure
    issue.</li>

    while checking for memory leaks when a web application is being stopped.
    </li>
</ul>
<p>
Full details of these changes, and all the other changes, are available in the
<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.40_(markt)">Tomcat 7 changelog</a>.
</p>

<p style="text-align: center;">
<a href="download-70.cgi">Download</a> |
<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.40_(markt)">ChangeLog for 7.0.40</a>
</p>

The Apache Tomcat Project is proud to announce the release of version 7.0.39 of
Apache Tomcat. This release contains a number of bug fixes and improvements
compared to version 7.0.37. The notable changes include:
</p>
<ul>
<li>There have been multiple improvements in the bytes to/from characters
    conversion process. The core conversion process has been refactored to use

    dependency on Commons Codec was added to replace Tomcat's internal Base64
    encoder/decoder.</li>
</ul>
<p>
Full details of these changes, and all the other changes, are available in the
<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.39_(markt)">Tomcat 7 changelog</a>.
</p>

<p style="text-align: center;">
<a href="download-70.cgi">Download</a> |
<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.39_(markt)">ChangeLog for 7.0.39</a>
</p>

The Apache Tomcat Project is proud to announce the release of version 7.0.37 of
Apache Tomcat. This release contains a small number of bug fixes and
improvements compared to version 7.0.35. The notable changes include:
</p>
<ul>
<li>Fix the regression in the JspC tool that is used to pre-compile JSP pages
    introduced in 7.0.35. See

    an empty set of options (which essentially disables HTTPS support).</li>
<li>Update to Commons Daemon 1.0.13.</li>
</ul>
<p>
Full details of these changes, and all the other changes, are available in the
<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.37_(markt)">Tomcat 7 changelog</a>.
</p>

<p style="text-align: center;">
<a href="download-70.cgi">Download</a> |
<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.37_(markt)">ChangeLog for 7.0.37</a>
</p>

The Apache Tomcat Project is proud to announce the release of version 7.0.35 of
Apache Tomcat. This release contains a small number of bug fixes and
improvements compared to version 7.0.34. The notable changes include:
</p>
<ul>
<li>Integrate documentation of Tomcat 7 with Apache Comments System. People can
    leave their comments when reading the <a

    that provide tag plug-in implementations. Based on a patch by Sheldon
    Shao.</li>
</ul>
<p>
Full details of these changes, and all the other changes, are available in the
<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.35_(markt)">Tomcat 7 changelog</a>.
</p>

for details.
</p>

<p style="text-align: center;">
<a href="download-70.cgi">Download</a> |
<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.35_(markt)">ChangeLog for 7.0.35</a>
</p>

Lines 297-303 Link Here

(-)xdocs/security-4.xml (-2 / +1 lines)
297		297
298	<p>The following Java system properties have been added to Tomcat to provide	298	<p>The following Java system properties have been added to Tomcat to provide
299	additional control of the handling of path delimiters in URLs (both	299	additional control of the handling of path delimiters in URLs (both
300	options default to false):	300	options default to false):</p>
301	<ul>	301	<ul>
302	<li>	302	<li>
303	<code>org.apache.tomcat.util.buf.UDecoder.ALLOW_ENCODED_SLASH</code>:	303	<code>org.apache.tomcat.util.buf.UDecoder.ALLOW_ENCODED_SLASH</code>:
Lines 308-314 Link Here
308	<code>true\|false</code>	308	<code>true\|false</code>
309	</li>	309	</li>
310	</ul>	310	</ul>
311	</p>
312		311
313	<p>Due to the impossibility to guarantee that all URLs are handled by Tomcat	312	<p>Due to the impossibility to guarantee that all URLs are handled by Tomcat
314	as they are in proxy servers, Tomcat should always be secured as if no	313	as they are in proxy servers, Tomcat should always be secured as if no




       rel="nofollow">CVE-2011-1184</a>.</p>

    <p>The implementation of HTTP DIGEST authentication was discovered to have
       several weaknesses:</p>
       <ul>
         <li>replay attacks were permitted</li>
         <li>server nonces were not checked</li>

         <li>realm values were not checked</li>
         <li>the server secret was hard-coded to a known string</li>
       </ul>
    <p>
       The result of these weaknesses is that DIGEST authentication was only as
       secure as BASIC authentication.
    </p>

       When running under a security manager, this lack of validation allowed a
       malicious web application to do one or more of the following that would
       normally be prevented by a security manager:
    </p>
       <ul>
         <li>return files to users that the security manager should make
             inaccessible</li>
         <li>terminate (via a crash) the JVM</li>
       </ul>
       <p>Additionally, these vulnerabilities only occur when all of the following
       are true:</p>
       <ul>
         <li>untrusted web applications are being used</li>
         <li>the SecurityManager is used to limit the untrusted web applications

         <li>the HTTP APR connector is used</li>
         <li>sendfile is enabled for the connector (this is the default)</li>
       </ul>
    </p>

    <p>This was fixed in <revlink rev="1158244">revision 1158244</revlink>.</p>


       capabilities allowing the application to access files and directories
       owned by superuser. This vulnerability only occurs when all of the
       following are true:
    </p>
       <ul>
         <li>Tomcat is running on a Linux operating system</li>
         <li>jsvc was compiled with libcap</li>
         <li>-user parameter is used</li>
       </ul>
    <p>
       Affected Tomcat versions shipped with source files for jsvc that included
       this vulnerability.
    </p>

       full control over the AJP message permitting authentication bypass and
       information disclosure. This vulnerability only occurs when all of the
       following are true:
    </p>
       <ul>
         <li>The org.apache.jk.server.JkCoyoteHandler AJP connector is not used
         </li>

         <li>POST requests are accepted</li>
         <li>The request body is not processed</li>
       </ul>
    </p>

    <p>This was fixed in <revlink rev="1162960">revision 1162960</revlink>.</p>


    <p>The following Java system properties have been added to Tomcat to provide 
       additional control of the handling of path delimiters in URLs (both options 
       default to false):
    </p>
       <ul>
         <li>
           <code>org.apache.tomcat.util.buf.UDecoder.ALLOW_ENCODED_SLASH</code>: <code>true|false</code>

           <code>org.apache.catalina.connector.CoyoteAdapter.ALLOW_BACKSLASH</code>: <code>true|false</code>
         </li>
       </ul>
    </p>

    <p>Due to the impossibility to guarantee that all URLs are handled by Tomcat as 
       they are in proxy servers, Tomcat should always be secured as if no proxy 




       full control over the AJP message permitting authentication bypass and
       information disclosure. This vulnerability only occurs when all of the
       following are true:
    </p>
       <ul>
         <li>The org.apache.jk.server.JkCoyoteHandler AJP connector is not used
         </li>

         <li>POST requests are accepted</li>
         <li>The request body is not processed</li>
       </ul>
    </p>

    <p>This was fixed in <revlink rev="1162959">revision 1162959</revlink>.</p>



    <p>The implementation of HTTP DIGEST authentication was discovered to have
       several weaknesses:
    </p>
       <ul>
         <li>replay attacks were permitted</li>
         <li>server nonces were not checked</li>

         <li>realm values were not checked</li>
         <li>the server secret was hard-coded to a known string</li>
       </ul>
    <p>
       The result of these weaknesses is that DIGEST authentication was only as
       secure as BASIC authentication.
    </p>

       When running under a security manager, this lack of validation allowed a
       malicious web application to do one or more of the following that would
       normally be prevented by a security manager:
    </p>
       <ul>
         <li>return files to users that the security manager should make
             inaccessible</li>
         <li>terminate (via a crash) the JVM</li>
       </ul>
       <p>Additionally, these vulnerabilities only occur when all of the following
       are true:</p>
       <ul>
         <li>untrusted web applications are being used</li>
         <li>the SecurityManager is used to limit the untrusted web applications

         <li>the HTTP NIO or HTTP APR connector is used</li>
         <li>sendfile is enabled for the connector (this is the default)</li>
       </ul>
    </p>

    <p>This was fixed in <revlink rev="1146703">revision 1146703</revlink>.</p>


       capabilities allowing the application to access files and directories
       owned by superuser. This vulnerability only occurs when all of the
       following are true:
    </p>
       <ul>
         <li>Tomcat is running on a Linux operating system</li>
         <li>jsvc was compiled with libcap</li>
         <li>-user parameter is used</li>
       </ul>
    <p>
       Affected Tomcat versions shipped with source files for jsvc that included
       this vulnerability.
    </p>

    <p>The following Java system properties have been added to Tomcat to provide 
       additional control of the handling of path delimiters in URLs (both options 
       default to false):
    </p>
       <ul>
         <li>
           <code>org.apache.tomcat.util.buf.UDecoder.ALLOW_ENCODED_SLASH</code>: <code>true|false</code>

           <code>org.apache.catalina.connector.CoyoteAdapter.ALLOW_BACKSLASH</code>: <code>true|false</code>
         </li>
       </ul>
    </p>

    <p>Due to the impossibility to guarantee that all URLs are handled by Tomcat as 
       they are in proxy servers, Tomcat should always be secured as if no proxy 




       full control over the AJP message permitting authentication bypass and
       information disclosure. This vulnerability only occurs when all of the
       following are true:
    </p>
       <ul>
         <li>The org.apache.jk.server.JkCoyoteHandler AJP connector is not used
         </li>

         <li>POST requests are accepted</li>
         <li>The request body is not processed</li>
       </ul>
    </p>

    <p>This was fixed in <revlink rev="1162958">revision 1162958</revlink>.</p>


       capabilities allowing the application to access files and directories
       owned by superuser. This vulnerability only occurs when all of the
       following are true:
    </p>
       <ul>
         <li>Tomcat is running on a Linux operating system</li>
         <li>jsvc was compiled with libcap</li>
         <li>-user parameter is used</li>
       </ul>
    <p>
       Affected Tomcat versions shipped with source files for jsvc that included
       this vulnerability.
    </p>

       When running under a security manager, this lack of validation allowed a
       malicious web application to do one or more of the following that would
       normally be prevented by a security manager:
    </p>
       <ul>
         <li>return files to users that the security manager should make
             inaccessible</li>
         <li>terminate (via a crash) the JVM</li>
       </ul>
       <p>Additionally, these vulnerabilities only occur when all of the following
       are true:</p>
       <ul>
         <li>untrusted web applications are being used</li>
         <li>the SecurityManager is used to limit the untrusted web applications

         <li>the HTTP NIO or HTTP APR connector is used</li>
         <li>sendfile is enabled for the connector (this is the default)</li>
       </ul>
    </p>

    <p>This was fixed in revisions
       <revlink rev="1145383">1145383</revlink>,


    <p>The implementation of HTTP DIGEST authentication was discovered to have
       several weaknesses:
    </p>
       <ul>
         <li>replay attacks were permitted</li>
         <li>server nonces were not checked</li>

         <li>realm values were not checked</li>
         <li>the server secret was hard-coded to a known string</li>
       </ul>
     <p>
       The result of these weaknesses is that DIGEST authentication was only as
       secure as BASIC authentication.
    </p>

Lines 34-40 Link Here

(-)xdocs/svn.xml (-3 / +3 lines)
34	<a href="http://svn.apache.org/viewvc/tomcat/">web view of the repository</a>.</p>	34	<a href="http://svn.apache.org/viewvc/tomcat/">web view of the repository</a>.</p>
35		35
36	<p>The directories below this level are:</p>	36	<p>The directories below this level are:</p>
37	<table>	37	<table class="defaultTable">
38	<tr>	38	<tr>
39	<th>Directory</th><th>Contents</th>	39	<th>Directory</th><th>Contents</th>
40	</tr>	40	</tr>
Lines 52-59 Link Here
52	<code>/jk/trunk/</code></a>.</td>	52	<code>/jk/trunk/</code></a>.</td>
53	</tr>	53	</tr>
54	<tr>	54	<tr>
55	<td><a href="http://svn.apache.org/repos/asf/tomcat/maven-plugin">	55	<td style="white-space: nowrap;"><a href="http://svn.apache.org/repos/asf/tomcat/maven-plugin">
56	<nobr><code>/maven-plugin/</code></nobr></a></td>	56	<code>/maven-plugin/</code></a></td>
57	<td>The Apache Tomcat Maven Plugin source code and website.</td>	57	<td>The Apache Tomcat Maven Plugin source code and website.</td>
58	</tr>	58	</tr>
59	<tr>	59	<tr>




</section>

<section name="Apache Tools">
<table class="defaultTable">
<tr>
  <td><a href="http://ant.apache.org/">
      <img src="http://ant.apache.org/images/ant_logo_medium.gif" alt="Apache Ant"/></a></td>
  <td><p>Apache Tomcat is built using Apache Ant.</p>
  </td>
</tr>

</section>

<section name="Open Source Tools">
<table class="defaultTable">
<tr>
  <td><a href="http://www.eclipse.org/" rel="nofollow">
      <img src="images/eclipse.gif" alt="Eclipse"/></a></td>
  <td><p>A variety of IDEs are used by the Tomcat developers. One of them is
      the Eclipse IDE.</p>
  </td>

</tr>
<tr>
  <td><a href="http://www.ucdetector.org/" rel="nofollow">
      <img src="http://www.ucdetector.org/ucdetector32.png" alt="UCDetector"/></a></td>
  <td><p>The Unnecessary Code Detector is used by the Tomcat developers to
      identify code to be removed from future versions of Tomcat.</p>
  </td>

</tr>
<tr>
  <td><a href="http://findbugs.sourceforge.net/" rel="nofollow">
      <img src="http://findbugs.sourceforge.net/buggy-sm.png" alt="FindBugs"/></a></td>
  <td><p>FindBugs is used by the Tomcat developers to identify potential coding
      errors.</p>
  </td>

</tr>
<tr>
  <td><a href="http://checkstyle.sourceforge.net/" rel="nofollow">
      <img src="http://checkstyle.sourceforge.net/images/logo.png" alt="Checkstyle"/></a></td>
  <td><p>Checkstyle is used by the Tomcat developers to maintain the Tomcat
      coding standard.</p>
  </td>

</tr>
<tr>
  <td><a href="http://www.farmanager.com/index.php?l=en" rel="nofollow">
      <img src="images/far-icon.png" alt="Far Manager"/></a></td>
  <td><p>Far Manager is a two-panel file manager application for
      Microsoft Windows. It works in console mode and is very useful
      to run command-line tools and make small edits that do not require

</section>

<section name="Commercial Tools">
<table class="defaultTable">
<tr>
  <td><a href="http://www.yourkit.com/" rel="nofollow">
      <img src="images/yjp.gif" alt="YourKit"/></a></td>
  <td><p>YourKit, LLC kindly provide free licenses for the YourKit Java Profiler
      to open source projects. YourKit Java Profiler is primarily used to
      investigate performance and memory leak issues reported in Apache Tomcat.

</tr>
<tr>
  <td><a href="http://msdn.microsoft.com/" rel="nofollow">
      <img src="images/msdn.png" alt="MSDN"/></a></td>
  <td><p>Microsoft kindly provide free MSDN licenses to Apache committers that
      have a requirement for them. MSDN is primarily used to provide build and
      test environments for the ISAPI redirector and the Windows APR/native

</tr>
<tr>
  <td><a href="http://www.structure101.com/" rel="nofollow">
      <img src="images/s101.png" alt="Structure 101"/></a></td>
  <td><p>Headway software kindly provide free licenses for Structure 101 to open
      source projects. Structure 101 is primarily being used in Tomcat trunk to
      analyze the current package dependencies and identify areas where they may




<strong>Servlet 3.1</strong>, <strong>JSP 2.3</strong>, <strong>EL 3.0</strong>
and <strong>Web Socket 1.0</strong> specifications. In addition
to that, it includes the following improvements:
</p>
<ul>
<li>A single, common resources implementation to replace the multiple resource
    extension features provided in earlier versions.</li>
</ul>
</p>

<p>Tomcat 8 is currently in an alpha state. Regular (at least monthly) release
candidates are being made available for testing. All the specifications are

Tomcat 6.0.x and implements the <strong>Servlet 3.0</strong>,
<strong>JSP 2.2</strong> and <strong>EL 2.2</strong> specifications. In addition
to that, it includes the following improvements:
</p>
<ul>
<li>Web application memory leak detection and prevention</li>
<li>Improved security for the Manager and Host Manager applications</li>

<li>Support for including external content directly in a web application</li>
<li>Refactoring (connectors, lifecycle) and lots of internal code clean-up</li>
</ul>
</p>

</section>


Tomcat 5.5.x and implements the <strong>Servlet 2.5</strong> and
<strong>JSP 2.1</strong> specifications. In addition to that, it includes the
following improvements:
</p>
<ul>
<li>Memory usage optimizations</li>
<li>Advanced IO capabilities</li>
<li>Refactored clustering</li>
</ul>
</p>

</section>


</p>

<p><strong>Apache Tomcat 5.0.x</strong> improves on Apache Tomcat 4.1 in many
ways, including:</p>
<ul>
<li>Performance optimizations and reduced garbage collection</li>
<li>Refactored application deployer, with an optional standalone deployer

<li>Integrated session clustering</li>
<li>Expanded documentation</li>
</ul>
</p>

</section>


specifications.</p>

<p><strong>Apache Tomcat 4.1.x</strong> is a refactoring
of Apache Tomcat 4.0.x, and contains significant enhancements, including:</p>
<ul>
<li>JMX based administration features</li>
<li>JSP and Struts based administration web application</li>

<li>Custom Ant tasks to interact with the manager application directly
from build.xml scripts</li>
</ul>
</p>

<p><strong>Apache Tomcat 4.0.x</strong>.  Apache Tomcat 4.0.6 is the old production
quality release.  The 4.0 servlet

Return to bug 55383

Lines 46-54 Link Here

(-)xdocs/migration-7.xml (-36 / +37 lines)
46	For example, if package <code>"a"</code> contains class <code>Part</code>,	46	For example, if package <code>"a"</code> contains class <code>Part</code>,
47	the following JSP page will cease to compile in Tomcat 7:</p>	47	the following JSP page will cease to compile in Tomcat 7:</p>
48		48
49	<source>	49	<source><![CDATA[<%@page import="a.*"%>
50	<%@page import="a.*"%>	50	<% Part page = new Part(); %>]]></source>
51	<% Part page = new Part(); %></source>
52		51
53	<p>That happens because implicit import of <code>javax.servlet.http.*</code>	52	<p>That happens because implicit import of <code>javax.servlet.http.*</code>
54	and explicit import of <code>a.*</code> will provide conflicting	53	and explicit import of <code>a.*</code> will provide conflicting
Lines 139-148 Link Here
139	interfaces are not. To maintain the CSRF protection:</p>	138	interfaces are not. To maintain the CSRF protection:</p>
140		139
141	<ul>	140	<ul>
142	<li>users with the <tt>manager-gui</tt> role should not be granted	141	<li>users with the <code>manager-gui</code> role should not be granted
143	either the <tt>manager-script</tt> or <tt>manager-jmx</tt> roles.</li>	142	either the <code>manager-script</code> or <code>manager-jmx</code> roles.</li>
144	<li>if the Manager application is accessed through a browser by a user	143	<li>if the Manager application is accessed through a browser by a user
145	who has <tt>manager-script</tt> or <tt>manager-jmx</tt> roles	144	who has <code>manager-script</code> or <code>manager-jmx</code> roles
146	(e.g. for testing the text or jmx interfaces since these interfaces	145	(e.g. for testing the text or jmx interfaces since these interfaces
147	are intended for tools not humans) then all browser windows	146	are intended for tools not humans) then all browser windows
148	must be closed afterwards to terminate the session.</li>	147	must be closed afterwards to terminate the session.</li>
Lines 183-192 Link Here
183	not. To maintain the CSRF protection:</p>	182	not. To maintain the CSRF protection:</p>
184		183
185	<ul>	184	<ul>
186	<li>users with the <tt>admin-gui</tt> role should not be granted the	185	<li>users with the <code>admin-gui</code> role should not be granted the
187	<tt>admin-script</tt> role.</li>	186	<code>admin-script</code> role.</li>
188	<li>if the Host Manager application is accessed through a browser	187	<li>if the Host Manager application is accessed through a browser
189	by a user who has <tt>admin-script</tt> role (e.g. for testing	188	by a user who has <code>admin-script</code> role (e.g. for testing
190	the text interface since this inteface is intended for tools	189	the text interface since this inteface is intended for tools
191	not humans) then all browser windows	190	not humans) then all browser windows
192	must be closed afterwards to terminate the session.</li>	191	must be closed afterwards to terminate the session.</li>
Lines 466-473 Link Here
466	below and then click "View differences" to see the differences.	465	below and then click "View differences" to see the differences.
467	The differences will be shown in a new tab/window.</p>	466	The differences will be shown in a new tab/window.</p>
468		467
469	<script type="text/javascript" language="JavaScript">	468	<script type="text/javascript"><![CDATA[
470	function updateTc7ActionUrl() {	469	"use strict"; // Enable strict mode
		470
		471	document.addEventListener("DOMContentLoaded", function() {
		472	var formSubmit = document.getElementById("tc7Submit");
		473	formSubmit.addEventListener("submit", function() {
471	var revisions = {	474	var revisions = {
472	"HEAD":"HEAD",	475	"HEAD":"HEAD",
473	"7.0.0":"954232",	476	"7.0.0":"954232",
Lines 502-520 Link Here
502	"7.0.41":"1490220",	505	"7.0.41":"1490220",
503	"7.0.42":"1498817"	506	"7.0.42":"1498817"
504	};	507	};
505	var formSubmit= document.getElementById('tc7Submit');	508
506	var elementsSelect= document.getElementById('tc7Select').elements;
507	formSubmit.action = "http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/" +	509	formSubmit.action = "http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/" +
508	elementsSelect['filename'].value;	510	document.getElementById('select-filename').value;
509	formSubmit.elements['r1'].value = revisions[elementsSelect['r1'].value];	511	formSubmit.elements['r1'].value = revisions[document.getElementById('select-r1').value];
510	formSubmit.elements['r2'].value = revisions[elementsSelect['r2'].value];	512	formSubmit.elements['r2'].value = revisions[document.getElementById('select-r2').value];
511	return true;	513	return true;
512	}	514	}, false);
513	</script>	515	}, false);
		516	]]></script>
514		517
515	<form id="tc7Select" action="not-used">	518
516	<p>Configuration file:	519	<p><label>Configuration file:
517	<select name="filename">	520	<select id="select-filename">
518	<option value="conf/catalina.policy">catalina.policy</option>	521	<option value="conf/catalina.policy">catalina.policy</option>
519	<option value="conf/catalina.properties">catalina.properties</option>	522	<option value="conf/catalina.properties">catalina.properties</option>
520	<option value="conf/context.xml">context.xml</option>	523	<option value="conf/context.xml">context.xml</option>
Lines 522-531 Link Here
522	<option value="conf/server.xml">server.xml</option>	525	<option value="conf/server.xml">server.xml</option>
523	<option value="conf/tomcat-users.xml">tomcat-users.xml</option>	526	<option value="conf/tomcat-users.xml">tomcat-users.xml</option>
524	<option value="conf/web.xml">web.xml</option>	527	<option value="conf/web.xml">web.xml</option>
525	</select>	528	</select></label>
526	</p>	529	</p>
527	<p>Old version:	530	<p><label>Old version:
528	<select name="r1">	531	<select id="select-r1">
529	<option value="7.0.0">7.0.0</option>	532	<option value="7.0.0">7.0.0</option>
530	<option value="7.0.2">7.0.2</option>	533	<option value="7.0.2">7.0.2</option>
531	<option value="7.0.4">7.0.4</option>	534	<option value="7.0.4">7.0.4</option>
Lines 549-555 Link Here
549	<option value="7.0.29">7.0.29</option>	552	<option value="7.0.29">7.0.29</option>
550	<option value="7.0.30">7.0.30</option>	553	<option value="7.0.30">7.0.30</option>
551	<option value="7.0.32">7.0.32</option>	554	<option value="7.0.32">7.0.32</option>
552	<option value="7.0.33"></option>	555	<option value="7.0.33">7.0.33</option>
553	<option value="7.0.34">7.0.34</option>	556	<option value="7.0.34">7.0.34</option>
554	<option value="7.0.35">7.0.35</option>	557	<option value="7.0.35">7.0.35</option>
555	<option value="7.0.37">7.0.37</option>	558	<option value="7.0.37">7.0.37</option>
Lines 557-564 Link Here
557	<option value="7.0.40">7.0.40</option>	560	<option value="7.0.40">7.0.40</option>
558	<option value="7.0.41" selected="selected">7.0.41</option>	561	<option value="7.0.41" selected="selected">7.0.41</option>
559	<option value="7.0.42">7.0.42</option>	562	<option value="7.0.42">7.0.42</option>
560	</select>, new version:	563	</select>,</label> <label>new version:
561	<select name="r2">	564	<select id="select-r2">
562	<option value="7.0.0">7.0.0</option>	565	<option value="7.0.0">7.0.0</option>
563	<option value="7.0.2">7.0.2</option>	566	<option value="7.0.2">7.0.2</option>
564	<option value="7.0.4">7.0.4</option>	567	<option value="7.0.4">7.0.4</option>
Lines 591-613 Link Here
591	<option value="7.0.41">7.0.41</option>	594	<option value="7.0.41">7.0.41</option>
592	<option value="7.0.42" selected="selected">7.0.42</option>	595	<option value="7.0.42" selected="selected">7.0.42</option>
593	<option value="HEAD">trunk (unreleased)</option>	596	<option value="HEAD">trunk (unreleased)</option>
594	</select>	597	</select></label>
595	</p>	598	</p>
596	</form>	599
597	<form id="tc7Submit" action="to-be-replaced" method="get"	600	<form id="tc7Submit" action="to-be-replaced" method="get"
598	target="_blank">	601	target="_blank">
599	<p>	602	<p>
600	<input type="hidden" name="diff_format" value="h"/>	603	<input type="hidden" name="diff_format" value="h"/>
601	<input type="hidden" name="r1" /><input type="hidden" name="r2" />	604	<input type="hidden" name="r1"/><input type="hidden" name="r2"/>
602	<input type="submit" value="View Differences"	605	<button>View Differences</button>
603	onClick="return updateTc7ActionUrl();"/>
604	</p>	606	</p>
605	</form>	607	</form>
606	<p>You can also use Subversion command similar to the following (all on one line):</p>	608	<p>You can also use Subversion command similar to the following (all on one line):</p>
607	<pre> svn diff	609	<source>svn diff
608	--old=http://svn.apache.org/repos/asf/tomcat/tc7.0.x/tags/TOMCAT_7_0_27/conf/	610	--old=http://svn.apache.org/repos/asf/tomcat/tc7.0.x/tags/TOMCAT_7_0_27/conf/
609	--new=http://svn.apache.org/repos/asf/tomcat/tc7.0.x/tags/TOMCAT_7_0_28/conf/	611	--new=http://svn.apache.org/repos/asf/tomcat/tc7.0.x/tags/TOMCAT_7_0_28/conf/</source>
610	</pre>
611	</subsection>	612	</subsection>
612		613
613	</section>	614	</section>

Lines 197-209 Link Here

(-)xdocs/ci.xml (-34 / +21 lines)
197	<a href="http://gump.apache.org/index.html#When+does+Gump+run?">listed</a>	197	<a href="http://gump.apache.org/index.html#When+does+Gump+run?">listed</a>
198	on the Gump project page. Links to them are provided below.</p>	198	on the Gump project page. Links to them are provided below.</p>
199		199
200	<table>	200
201	<tbody>	201	<p><strong>Apache - FreeBSD</strong></p>
202	<tr>	202	<div style="float: left; padding: 10px;">
203	<th colspan="3" style="text-align:left">Apache - FreeBSD</th>
204	</tr>
205	<tr style="vertical-align:top">
206	<td>
207	<ul style="padding-left: 1em;">	203	<ul style="padding-left: 1em;">
208	<li><a style="font-weight:bold" href="http://gump.zones.apache.org/gump/public/tomcat-trunk/index.html">tomcat-trunk</a> module<br />	204	<li><a style="font-weight:bold" href="http://gump.zones.apache.org/gump/public/tomcat-trunk/index.html">tomcat-trunk</a> module<br />
209	<ul style="padding-left: 1em;">	205	<ul style="padding-left: 1em;">
Lines 216-223 Link Here
216	</li>	212	</li>
217	<li><a href="http://gump.zones.apache.org/gump/public/tomcat-trunk/tomcat-trunk-test/gump_file/TEST-org.apache.catalina.util.TestServerInfo.BIO.txt.html" rel="nofollow">TestServerInfo</a> result</li>	213	<li><a href="http://gump.zones.apache.org/gump/public/tomcat-trunk/tomcat-trunk-test/gump_file/TEST-org.apache.catalina.util.TestServerInfo.BIO.txt.html" rel="nofollow">TestServerInfo</a> result</li>
218	</ul>	214	</ul>
219	</td>	215	</div>
220	<td>	216	<div style="float: left; padding: 10px;">
221	<ul style="padding-left: 1em;">	217	<ul style="padding-left: 1em;">
222	<li><a style="font-weight:bold" href="http://gump.zones.apache.org/gump/public/tomcat-7.0.x/index.html">tomcat-7.0.x</a> module	218	<li><a style="font-weight:bold" href="http://gump.zones.apache.org/gump/public/tomcat-7.0.x/index.html">tomcat-7.0.x</a> module
223	<ul style="padding-left: 1em;">	219	<ul style="padding-left: 1em;">
Lines 230-237 Link Here
230	</li>	226	</li>
231	<li><a href="http://gump.zones.apache.org/gump/public/tomcat-7.0.x/tomcat-tc7.0.x-test/gump_file/TEST-org.apache.catalina.util.TestServerInfo.BIO.txt.html" rel="nofollow">TestServerInfo</a> result</li>	227	<li><a href="http://gump.zones.apache.org/gump/public/tomcat-7.0.x/tomcat-tc7.0.x-test/gump_file/TEST-org.apache.catalina.util.TestServerInfo.BIO.txt.html" rel="nofollow">TestServerInfo</a> result</li>
232	</ul>	228	</ul>
233	</td>	229	</div>
234	<td>	230	<div style="float: left; padding: 10px;">
235	<ul style="padding-left: 1em;">	231	<ul style="padding-left: 1em;">
236	<li><a style="font-weight:bold" href="http://gump.zones.apache.org/gump/public/tomcat-tc6/index.html">tomcat-tc6</a> module	232	<li><a style="font-weight:bold" href="http://gump.zones.apache.org/gump/public/tomcat-tc6/index.html">tomcat-tc6</a> module
237	<ul style="padding-left: 1em;">	233	<ul style="padding-left: 1em;">
Lines 242-251 Link Here
242	</ul>	238	</ul>
243	</li>	239	</li>
244	</ul>	240	</ul>
245	</td>	241	</div>
246	</tr>	242	<div style="float: left; padding: 10px;">
247	<tr style="vertical-align:top">
248	<td>
249	<ul style="padding-left: 1em;">	243	<ul style="padding-left: 1em;">
250	<li><a style="font-weight:bold" href="http://gump.zones.apache.org/gump/public/tomcat-taglibs/index.html">tomcat-taglibs</a> module<br />	244	<li><a style="font-weight:bold" href="http://gump.zones.apache.org/gump/public/tomcat-taglibs/index.html">tomcat-taglibs</a> module<br />
251	<ul style="padding-left: 1em;">	245	<ul style="padding-left: 1em;">
Lines 256-268 Link Here
256	</ul>	250	</ul>
257	</li>	251	</li>
258	</ul>	252	</ul>
259	</td>	253	</div>
260	</tr>	254	<div style="clear: left;"/>
261	<tr>	255	<p><strong>Apache - Adam (Mac OS X Server)</strong></p>
262	<th colspan="3" style="text-align:left">Apache - Adam (Mac OS X Server)</th>	256	<div style="float: left; padding: 10px;">
263	</tr>
264	<tr style="vertical-align:top">
265	<td>
266	<ul style="padding-left: 1em;">	257	<ul style="padding-left: 1em;">
267	<li><a style="font-weight:bold" href="http://adam.apache.org/gump/tomcat-trunk/index.html">tomcat-trunk</a> module	258	<li><a style="font-weight:bold" href="http://adam.apache.org/gump/tomcat-trunk/index.html">tomcat-trunk</a> module
268	<ul style="padding-left: 1em;">	259	<ul style="padding-left: 1em;">
Lines 275-282 Link Here
275	</li>	266	</li>
276	<li><a href="http://adam.apache.org/gump/tomcat-trunk/tomcat-trunk-test/gump_file/TEST-org.apache.catalina.util.TestServerInfo.BIO.txt.html" rel="nofollow">TestServerInfo</a> result</li>	267	<li><a href="http://adam.apache.org/gump/tomcat-trunk/tomcat-trunk-test/gump_file/TEST-org.apache.catalina.util.TestServerInfo.BIO.txt.html" rel="nofollow">TestServerInfo</a> result</li>
277	</ul>	268	</ul>
278	</td>	269	</div>
279	<td>	270	<div style="float: left; padding: 10px;">
280	<ul style="padding-left: 1em;">	271	<ul style="padding-left: 1em;">
281	<li><a style="font-weight:bold" href="http://adam.apache.org/gump/tomcat-7.0.x/index.html">tomcat-7.0.x</a> module	272	<li><a style="font-weight:bold" href="http://adam.apache.org/gump/tomcat-7.0.x/index.html">tomcat-7.0.x</a> module
282	<ul style="padding-left: 1em;">	273	<ul style="padding-left: 1em;">
Lines 289-296 Link Here
289	</li>	280	</li>
290	<li><a href="http://adam.apache.org/gump/tomcat-7.0.x/tomcat-tc7.0.x-test/gump_file/TEST-org.apache.catalina.util.TestServerInfo.BIO.txt.html" rel="nofollow">TestServerInfo</a> result</li>	281	<li><a href="http://adam.apache.org/gump/tomcat-7.0.x/tomcat-tc7.0.x-test/gump_file/TEST-org.apache.catalina.util.TestServerInfo.BIO.txt.html" rel="nofollow">TestServerInfo</a> result</li>
291	</ul>	282	</ul>
292	</td>	283	</div>
293	<td>	284	<div style="float: left; padding: 10px;">
294	<ul style="padding-left: 1em;">	285	<ul style="padding-left: 1em;">
295	<li><a style="font-weight:bold" href="http://adam.apache.org/gump/tomcat-tc6/index.html">tomcat-tc6</a> module	286	<li><a style="font-weight:bold" href="http://adam.apache.org/gump/tomcat-tc6/index.html">tomcat-tc6</a> module
296	<ul style="padding-left: 1em;">	287	<ul style="padding-left: 1em;">
Lines 301-310 Link Here
301	</ul>	292	</ul>
302	</li>	293	</li>
303	</ul>	294	</ul>
304	</td>	295	</div>
305	</tr>	296	<div style="float: left; padding: 10px;">
306	<tr style="vertical-align:top">
307	<td>
308	<ul style="padding-left: 1em;">	297	<ul style="padding-left: 1em;">
309	<li><a style="font-weight:bold" href="http://adam.apache.org/gump/tomcat-taglibs/index.html">tomcat-taglibs</a> module<br />	298	<li><a style="font-weight:bold" href="http://adam.apache.org/gump/tomcat-taglibs/index.html">tomcat-taglibs</a> module<br />
310	<ul style="padding-left: 1em;">	299	<ul style="padding-left: 1em;">
Lines 315-324 Link Here
315	</ul>	304	</ul>
316	</li>	305	</li>
317	</ul>	306	</ul>
318	</td>	307	</div>
319	</tr>	308	<div style="clear: left;"/>
320	</tbody>
321	</table>
322		309
323	</subsection>	310	</subsection>
324		311

Lines 41-47 Link Here

(-)xdocs/download-60.xml (-3 / +3 lines)
41	encounter a problem with this mirror, please select another	41	encounter a problem with this mirror, please select another
42	mirror. If all mirrors are failing, there are <i>backup</i>	42	mirror. If all mirrors are failing, there are <i>backup</i>
43	mirrors (at the end of the mirrors list) that should be	43	mirrors (at the end of the mirrors list) that should be
44	available.<br/>[if-any logo]<a href="[link]" rel="nofollow"><img align="right" src="[logo]" border="0"/></a>[end]</p><p><form action="[location]" method="get" id="SelectMirror">	44	available.<br/>[if-any logo]<a href="[link]" rel="nofollow"><img alt="Logo" src="[logo]"/></a>[end]</p><form action="[location]" method="get" id="SelectMirror"><p>
45	Other mirrors: <select name="Preferred">	45	Other mirrors: <select name="Preferred">
46	[if-any http]	46	[if-any http]
47	[for http]<option value="[http]">[http]</option>[end]	47	[for http]<option value="[http]">[http]</option>[end]
Lines 52-58 Link Here
52	[if-any backup]	52	[if-any backup]
53	[for backup]<option value="[backup]">[backup] (backup)</option>[end]	53	[for backup]<option value="[backup]">[backup] (backup)</option>[end]
54	[end]	54	[end]
55	</select><input type="submit" value="Change"/></form></p>	55	</select><input type="submit" value="Change"/></p></form>
56	<!-- End mirror list -->	56	<!-- End mirror list -->
57		57
58	</section>	58	</section>
Lines 61-67 Link Here
61	<!-- Begin 6.0.37 section -->	61	<!-- Begin 6.0.37 section -->
62	<section name="6.0.37">	62	<section name="6.0.37">
63	<p>	63	<p>
64	<a name="6.0.37">Please</a> see the	64	Please see the
65	<a href="[preferred]tomcat/tomcat-6/v6.0.37/README.html" rel="nofollow">README</a>	65	<a href="[preferred]tomcat/tomcat-6/v6.0.37/README.html" rel="nofollow">README</a>
66	file for packaging information. It explains what every distribution contains.	66	file for packaging information. It explains what every distribution contains.
67	</p>	67	</p>

Lines 41-47 Link Here

(-)xdocs/download-70.xml (-3 / +3 lines)
41	encounter a problem with this mirror, please select another	41	encounter a problem with this mirror, please select another
42	mirror. If all mirrors are failing, there are <i>backup</i>	42	mirror. If all mirrors are failing, there are <i>backup</i>
43	mirrors (at the end of the mirrors list) that should be	43	mirrors (at the end of the mirrors list) that should be
44	available.<br/>[if-any logo]<a href="[link]" rel="nofollow"><img align="right" src="[logo]" border="0"/></a>[end]</p><p><form action="[location]" method="get" id="SelectMirror">	44	available.<br/>[if-any logo]<a href="[link]" rel="nofollow"><img alt="Logo" src="[logo]"/></a>[end]</p><form action="[location]" method="get" id="SelectMirror"><p>
45	Other mirrors: <select name="Preferred">	45	Other mirrors: <select name="Preferred">
46	[if-any http]	46	[if-any http]
47	[for http]<option value="[http]">[http]</option>[end]	47	[for http]<option value="[http]">[http]</option>[end]
Lines 52-58 Link Here
52	[if-any backup]	52	[if-any backup]
53	[for backup]<option value="[backup]">[backup] (backup)</option>[end]	53	[for backup]<option value="[backup]">[backup] (backup)</option>[end]
54	[end]	54	[end]
55	</select><input type="submit" value="Change"/></form></p>	55	</select><input type="submit" value="Change"/></p></form>
56	<!-- End mirror list -->	56	<!-- End mirror list -->
57		57
58	</section>	58	</section>
Lines 61-67 Link Here
61	<!-- Begin 7.0.42 section -->	61	<!-- Begin 7.0.42 section -->
62	<section name="7.0.42">	62	<section name="7.0.42">
63	<p>	63	<p>
64	<a name="7.0.42">Please</a> see the	64	Please see the
65	<a href="[preferred]tomcat/tomcat-7/v7.0.42/README.html" rel="nofollow">README</a>	65	<a href="[preferred]tomcat/tomcat-7/v7.0.42/README.html" rel="nofollow">README</a>
66	file for packaging information. It explains what every distribution contains.	66	file for packaging information. It explains what every distribution contains.
67	</p>	67	</p>

Lines 41-47 Link Here

(-)xdocs/download-80.xml (-3 / +3 lines)
41	encounter a problem with this mirror, please select another	41	encounter a problem with this mirror, please select another
42	mirror. If all mirrors are failing, there are <i>backup</i>	42	mirror. If all mirrors are failing, there are <i>backup</i>
43	mirrors (at the end of the mirrors list) that should be	43	mirrors (at the end of the mirrors list) that should be
44	available.<br/>[if-any logo]<a href="[link]" rel="nofollow"><img align="right" src="[logo]" border="0"/></a>[end]</p><p><form action="[location]" method="get" id="SelectMirror">	44	available.<br/>[if-any logo]<a href="[link]" rel="nofollow"><img alt="Logo" src="[logo]"/></a>[end]</p><form action="[location]" method="get" id="SelectMirror"><p>
45	Other mirrors: <select name="Preferred">	45	Other mirrors: <select name="Preferred">
46	[if-any http]	46	[if-any http]
47	[for http]<option value="[http]">[http]</option>[end]	47	[for http]<option value="[http]">[http]</option>[end]
Lines 52-58 Link Here
52	[if-any backup]	52	[if-any backup]
53	[for backup]<option value="[backup]">[backup] (backup)</option>[end]	53	[for backup]<option value="[backup]">[backup] (backup)</option>[end]
54	[end]	54	[end]
55	</select><input type="submit" value="Change"/></form></p>	55	</select><input type="submit" value="Change"/></p></form>
56	<!-- End mirror list -->	56	<!-- End mirror list -->
57		57
58	</section>	58	</section>
Lines 61-67 Link Here
61	<!-- Begin 8.0.0-RC1 section -->	61	<!-- Begin 8.0.0-RC1 section -->
62	<section name="8.0.0-RC1">	62	<section name="8.0.0-RC1">
63	<p>	63	<p>
64	<a name="8.0.0-RC1">Please</a> see the	64	Please see the
65	<a href="[preferred]tomcat/tomcat-8/v8.0.0-RC1/README.html" rel="nofollow">README</a>	65	<a href="[preferred]tomcat/tomcat-8/v8.0.0-RC1/README.html" rel="nofollow">README</a>
66	file for packaging information. It explains what every distribution contains.	66	file for packaging information. It explains what every distribution contains.
67	</p>	67	</p>

Lines 5-11 Link Here

(-)xdocs/download-connectors.xml (-4 / +4 lines)
5	<section name="Tomcat Connectors (mod_jk) Downloads">	5	<section name="Tomcat Connectors (mod_jk) Downloads">
6		6
7	<p>Use the links below to download Tomcat Connectors from one of	7	<p>Use the links below to download Tomcat Connectors from one of
8	our mirrors. You <strong>must</strong> <a href="#Verify%20the%20Integrity%20of%20the%20Files">verify the	8	our mirrors. You <strong>must</strong> <a href="#Verify_the_Integrity_of_the_Files">verify the
9	integrity</a> of the downloaded files using signatures downloaded from	9	integrity</a> of the downloaded files using signatures downloaded from
10	our main distribution directory.</p>	10	our main distribution directory.</p>
11		11
Lines 24-32 Link Here
24	mirrors (at the end of the mirrors list) that should be	24	mirrors (at the end of the mirrors list) that should be
25	available.<br/>	25	available.<br/>
26	[if-any logo]	26	[if-any logo]
27	<a href="[link]" rel="nofollow"><img align="right" src="[logo]" border="0"/></a>	27	<a href="[link]" rel="nofollow"><img alt="Logo" src="[logo]"/></a>
28	[end]	28	[end]
29	</p><p><form action="[location]" method="get" id="SelectMirror">	29	</p><form action="[location]" method="get" id="SelectMirror"><p>
30	Other mirrors: <select name="Preferred">	30	Other mirrors: <select name="Preferred">
31	[if-any http]	31	[if-any http]
32	[for http]<option value="[http]">[http]</option>[end]	32	[for http]<option value="[http]">[http]</option>[end]
Lines 37-43 Link Here
37	[if-any backup]	37	[if-any backup]
38	[for backup]<option value="[backup]">[backup] (backup)</option>[end]	38	[for backup]<option value="[backup]">[backup] (backup)</option>[end]
39	[end]	39	[end]
40	</select><input type="submit" value="Change"/></form></p>	40	</select><input type="submit" value="Change"/></p></form>
41	<p>You may also consult the <a href="http://www.apache.org/mirrors/">complete	41	<p>You may also consult the <a href="http://www.apache.org/mirrors/">complete
42	list of mirrors</a>.</p>	42	list of mirrors</a>.</p>
43	</subsection>	43	</subsection>

Lines 5-11 Link Here

(-)xdocs/download-native.xml (-4 / +4 lines)
5	<section name="Tomcat Native Downloads">	5	<section name="Tomcat Native Downloads">
6		6
7	<p>Use the links below to download Tomcat Native from one of	7	<p>Use the links below to download Tomcat Native from one of
8	our mirrors. You <strong>must</strong> <a href="#Verify%20the%20Integrity%20of%20the%20Files">verify the	8	our mirrors. You <strong>must</strong> <a href="#Verify_the_Integrity_of_the_Files">verify the
9	integrity</a> of the downloaded files using signatures downloaded from	9	integrity</a> of the downloaded files using signatures downloaded from
10	our main distribution directory.</p>	10	our main distribution directory.</p>
11		11
Lines 23-31 Link Here
23	mirrors (at the end of the mirrors list) that should be	23	mirrors (at the end of the mirrors list) that should be
24	available.<br/>	24	available.<br/>
25	[if-any logo]	25	[if-any logo]
26	<a href="[link]" rel="nofollow"><img align="right" src="[logo]" border="0"/></a>	26	<a href="[link]" rel="nofollow"><img alt="Logo" src="[logo]"/></a>
27	[end]	27	[end]
28	</p><p><form action="[location]" method="get" id="SelectMirror">	28	</p><form action="[location]" method="get" id="SelectMirror"><p>
29	Other mirrors: <select name="Preferred">	29	Other mirrors: <select name="Preferred">
30	[if-any http]	30	[if-any http]
31	[for http]<option value="[http]">[http]</option>[end]	31	[for http]<option value="[http]">[http]</option>[end]
Lines 36-42 Link Here
36	[if-any backup]	36	[if-any backup]
37	[for backup]<option value="[backup]">[backup] (backup)</option>[end]	37	[for backup]<option value="[backup]">[backup] (backup)</option>[end]
38	[end]	38	[end]
39	</select><input type="submit" value="Change"/></form></p>	39	</select><input type="submit" value="Change"/></p></form>
40	<p>You may also consult the <a href="http://www.apache.org/mirrors/">complete	40	<p>You may also consult the <a href="http://www.apache.org/mirrors/">complete
41	list of mirrors</a>.</p>	41	list of mirrors</a>.</p>
42	</subsection>	42	</subsection>

Lines 43-49 Link Here

(-)xdocs/index.xml (-21 / +20 lines)
43	Apache Tomcat 8 - 8.0.0-RC1 (alpha). Tomcat 8 is aligned with Java EE 7. In	43	Apache Tomcat 8 - 8.0.0-RC1 (alpha). Tomcat 8 is aligned with Java EE 7. In
44	addition to supporting updated versions of the Java EE specifications, Tomcat 8	44	addition to supporting updated versions of the Java EE specifications, Tomcat 8
45	includes a number of improvements compared to Tomcat 7. The notable changes	45	includes a number of improvements compared to Tomcat 7. The notable changes
46	include:	46	include:</p>
47	<ul>	47	<ul>
48	<li>Support for Java Servlet 3.1, JavaServer Pages 2.3, Java Unified	48	<li>Support for Java Servlet 3.1, JavaServer Pages 2.3, Java Unified
49	Expression Language 3.0 and Java WebSocket 1.0.</li>	49	Expression Language 3.0 and Java WebSocket 1.0.</li>
Lines 56-61 Link Here
56	(using a master WAR as the basis for multiple web applications that each	56	(using a master WAR as the basis for multiple web applications that each
57	have their own customizations).</li>	57	have their own customizations).</li>
58	</ul>	58	</ul>
		59	<p>
59	Full details of these changes, and all the other changes, are available in the	60	Full details of these changes, and all the other changes, are available in the
60	<a href="tomcat-8.0-doc/changelog.html">Tomcat 8 changelog</a>.	61	<a href="tomcat-8.0-doc/changelog.html">Tomcat 8 changelog</a>.
61	</p>	62	</p>
Lines 67-73 Link Here
67	but there is some internal refactoring to be completed before the alpha label	68	but there is some internal refactoring to be completed before the alpha label
68	is removed.</p>	69	is removed.</p>
69		70
70	<p align="center">	71	<p style="text-align: center;">
71	<a href="download-80.cgi">Download</a>	72	<a href="download-80.cgi">Download</a>
72	</p>	73	</p>
73	</section>	74	</section>
Lines 77-82 Link Here
77	The Apache Tomcat Project is proud to announce the release of version 7.0.42 of	78	The Apache Tomcat Project is proud to announce the release of version 7.0.42 of
78	Apache Tomcat. This release contains a number of bug fixes	79	Apache Tomcat. This release contains a number of bug fixes
79	and improvements compared to version 7.0.41. The notable changes include:	80	and improvements compared to version 7.0.41. The notable changes include:
		81	</p>
80	<ul>	82	<ul>
81	<li>Add support for time to first byte in the AccessLogValve. Patch provided	83	<li>Add support for time to first byte in the AccessLogValve. Patch provided
82	by Jeremy Boynes.</li>	84	by Jeremy Boynes.</li>
Lines 86-96 Link Here
86	<li>Ensure that the build process produces Javadoc that is not vulnerable to	88	<li>Ensure that the build process produces Javadoc that is not vulnerable to
87	CVE-2013-1571. Based on a patch by Uwe Schindler.</li>	89	CVE-2013-1571. Based on a patch by Uwe Schindler.</li>
88	</ul>	90	</ul>
		91	<p>
89	Full details of these changes, and all the other changes, are available in the	92	Full details of these changes, and all the other changes, are available in the
90	<a href="tomcat-7.0-doc/changelog.html">Tomcat 7 changelog</a>.	93	<a href="tomcat-7.0-doc/changelog.html">Tomcat 7 changelog</a>.
91	</p>	94	</p>
92		95
93	<p align="center">	96	<p style="text-align: center;">
94	<a href="download-70.cgi">Download</a> \|	97	<a href="download-70.cgi">Download</a> \|
95	<a href="tomcat-7.0-doc/changelog.html">ChangeLog for 7.0.42</a>	98	<a href="tomcat-7.0-doc/changelog.html">ChangeLog for 7.0.42</a>
96	</p>	99	</p>
Lines 103-109 Link Here
103	6.0.36.	106	6.0.36.
104		107
105	</p>	108	</p>
106	<p align="center">	109	<p style="text-align: center;">
107	<a href="download-60.cgi">Download</a> \|	110	<a href="download-60.cgi">Download</a> \|
108	<a href="tomcat-6.0-doc/changelog.html">ChangeLog for 6.0.37</a>	111	<a href="tomcat-6.0-doc/changelog.html">ChangeLog for 6.0.37</a>
109	</p>	112	</p>
Lines 123-143 Link Here
123	The binaries are available from Maven repositories. You should specify the	126	The binaries are available from Maven repositories. You should specify the
124	version in your project's plugin configuration:	127	version in your project's plugin configuration:
125	</p>	128	</p>
126	<source><![CDATA[	129	<source><![CDATA[<plugin>
127	<plugin>	130	<groupId>org.apache.tomcat.maven</groupId>
128	<groupId>org.apache.tomcat.maven</groupId>	131	<artifactId>tomcat7-maven-plugin</artifactId>
129	<artifactId>tomcat7-maven-plugin</artifactId>	132	<version>2.1</version>
130	<version>2.1</version>	133	</plugin>]]></source>
131	</plugin>	134	<p>or</p>
132	]]></source>	135	<source><![CDATA[<plugin>
133	or	136	<groupId>org.apache.tomcat.maven</groupId>
134	<source><![CDATA[	137	<artifactId>tomcat6-maven-plugin</artifactId>
135	<plugin>	138	<version>2.1</version>
136	<groupId>org.apache.tomcat.maven</groupId>	139	</plugin>]]></source>
137	<artifactId>tomcat6-maven-plugin</artifactId>
138	<version>2.1</version>
139	</plugin>
140	]]></source>
141	</section>	140	</section>
142		141
143	<section name="Tomcat Native 1.1.27 Released" rtext="2013-02-12">	142	<section name="Tomcat Native 1.1.27 Released" rtext="2013-02-12">
Lines 145-151 Link Here
145	The Apache Tomcat Project is proud to announce the release of version 1.1.27 of	144	The Apache Tomcat Project is proud to announce the release of version 1.1.27 of
146	Tomcat Native.	145	Tomcat Native.
147	</p>	146	</p>
148	<p align="center">	147	<p style="text-align: center;">
149	<a href="download-native.cgi">Download</a> \|	148	<a href="download-native.cgi">Download</a> \|
150	<a href="native-doc/miscellaneous/changelog.html">ChangeLog for 1.1.27</a>	149	<a href="native-doc/miscellaneous/changelog.html">ChangeLog for 1.1.27</a>
151	</p>	150	</p>
Lines 157-163 Link Here
157	Apache Tomcat Connectors.	156	Apache Tomcat Connectors.
158	This version fixes few bugs and regressions found in 1.2.36 release.	157	This version fixes few bugs and regressions found in 1.2.36 release.
159	</p>	158	</p>
160	<p align="center">	159	<p style="text-align: center;">
161	<a href="download-connectors.cgi">Download</a> \|	160	<a href="download-connectors.cgi">Download</a> \|
162	<a href="connectors-doc/miscellaneous/changelog.html">ChangeLog for 1.2.37</a>	161	<a href="connectors-doc/miscellaneous/changelog.html">ChangeLog for 1.2.37</a>
163	</p>	162	</p>

Lines 41-50 Link Here

(-)xdocs/legal.xml (-4 / +4 lines)
41	<p>"Apache Tomcat" and "Tomcat" are trademarks of the Apache Software	41	<p>"Apache Tomcat" and "Tomcat" are trademarks of the Apache Software
42	Foundation. Use of these trademarks is subject to the terms of section	42	Foundation. Use of these trademarks is subject to the terms of section
43	6 of <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License,	43	6 of <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License,
44	Version 2.0 (current)</a>.	44	Version 2.0 (current)</a>.</p>
45	</p>	45
46	<p>If you create a product that uses Apache Tomcat software or provides	46	<p>If you create a product that uses Apache Tomcat software or provides
47	additional functionality to that software then:	47	additional functionality to that software then:</p>
48	<ul>	48	<ul>
49	<li>When referring to Apache Tomcat software, please use the full name	49	<li>When referring to Apache Tomcat software, please use the full name
50	of "Apache Tomcat" for at least the first reference on any web page,	50	of "Apache Tomcat" for at least the first reference on any web page,
Lines 59-65 Link Here
59	form of product name that includes "Tomcat" or "Apache" is	59	form of product name that includes "Tomcat" or "Apache" is
60	permitted.</li>	60	permitted.</li>
61	</ul>	61	</ul>
62	</p> </section>	62	</section>
63	</body>	63	</body>
64	</document>	64	</document>
65		65

Lines 16-27 Link Here

(-)xdocs/lists.xml (-12 / +11 lines)
16	is not subscribed to the list, it will be rejected.</p>	16	is not subscribed to the list, it will be rejected.</p>
17		17
18	<p>All messages to the Tomcat lists are filtered for spam. To avoid your valid	18	<p>All messages to the Tomcat lists are filtered for spam. To avoid your valid
19	message being marked as spam:	19	message being marked as spam:</p>
20	<ul>	20	<ul>
21	<li>send your message in plain text, not HTML;</li>	21	<li>send your message in plain text, not HTML;</li>
22	<li>include a subject.</li>	22	<li>include a subject.</li>
23	</ul>	23	</ul>
24	</p>
25		24
26	<p>The following lists are available:</p>	25	<p>The following lists are available:</p>
27		26
Lines 106-112 Link Here
106	server.</li>	105	server.</li>
107	</ol>	106	</ol>
108		107
109	<table>	108	<table class="defaultTable">
110	<tr>	109	<tr>
111	<td>Volume:</td>	110	<td>Volume:</td>
112	<td>High</td>	111	<td>High</td>
Lines 179-185 Link Here
179	<p>The list is used to announce Tomcat releases, security vulnerabilities and	178	<p>The list is used to announce Tomcat releases, security vulnerabilities and
180	other project announcements.</p>	179	other project announcements.</p>
181		180
182	<table>	181	<table class="defaultTable">
183	<tr>	182	<tr>
184	<td>Volume:</td>	183	<td>Volume:</td>
185	<td>Low</td>	184	<td>Low</td>
Lines 234-240 Link Here
234	<section name="tomcat-dev">	233	<section name="tomcat-dev">
235		234
236	<p>	235	<p>
237	<a name="tomcat-dev">The</a> <code>dev@tomcat.apache.org</code> mailing list	236	The <code>dev@tomcat.apache.org</code> mailing list
238	is used for discussions about the actual development of the server. It is not	237	is used for discussions about the actual development of the server. It is not
239	the place to ask about problems writing JSPs, servlets or web applications.	238	the place to ask about problems writing JSPs, servlets or web applications.
240	</p>	239	</p>
Lines 244-250 Link Here
244	for discussion of changes to the Apache Tomcat source code and related	243	for discussion of changes to the Apache Tomcat source code and related
245	issues. Other questions will be ignored.</p>	244	issues. Other questions will be ignored.</p>
246		245
247	<table>	246	<table class="defaultTable">
248	<tr>	247	<tr>
249	<td>Volume:</td>	248	<td>Volume:</td>
250	<td>High</td>	249	<td>High</td>
Lines 318-324 Link Here
318	<section name="taglibs-user">	317	<section name="taglibs-user">
319		318
320	<p>	319	<p>
321	<a name="taglibs-user">The</a> <code>taglibs-user@tomcat.apache.org</code>	320	The <code>taglibs-user@tomcat.apache.org</code>
322	mailing list is for users of the custom tag libraries found in	321	mailing list is for users of the custom tag libraries found in
323	<a href="http://tomcat.apache.org/taglibs/">Apache Taglibs</a>. It is also	322	<a href="http://tomcat.apache.org/taglibs/">Apache Taglibs</a>. It is also
324	a good forum for asking questions about how custom tag libraries operate,	323	a good forum for asking questions about how custom tag libraries operate,
Lines 325-331 Link Here
325	and how they can be used.	324	and how they can be used.
326	</p>	325	</p>
327		326
328	<table>	327	<table class="defaultTable">
329	<tr>	328	<tr>
330	<td>Volume:</td>	329	<td>Volume:</td>
331	<td>Low</td>	330	<td>Low</td>

Lines 180-187 Link Here

(-)xdocs/migration-6.xml (-25 / +27 lines)
180	below and then click "View differences" to see the differences.	180	below and then click "View differences" to see the differences.
181	The differences will be shown in a new tab/window.</p>	181	The differences will be shown in a new tab/window.</p>
182		182
183	<script type="text/javascript" language="JavaScript">	183	<script type="text/javascript"><![CDATA[
184	function updateTc6ActionUrl() {	184	"use strict"; // Enable strict mode
		185
		186	document.addEventListener("DOMContentLoaded", function() {
		187	var formSubmit = document.getElementById("tc6Submit");
		188	formSubmit.addEventListener("submit", function() {
185	var revisions = {	189	var revisions = {
186	"HEAD":"HEAD",	190	"HEAD":"HEAD",
187	"6.0.0":"466306",	191	"6.0.0":"466306",
Lines 209-227 Link Here
209	"6.0.36":"1398690",	213	"6.0.36":"1398690",
210	"6.0.37":"1476938"	214	"6.0.37":"1476938"
211	};	215	};
212	var formSubmit= document.getElementById('tc6Submit');	216
213	var elementsSelect= document.getElementById('tc6Select').elements;
214	formSubmit.action = "http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/" +	217	formSubmit.action = "http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/" +
215	elementsSelect['filename'].value;	218	document.getElementById('select-filename').value;
216	formSubmit.elements['r1'].value = revisions[elementsSelect['r1'].value];	219	formSubmit.elements['r1'].value = revisions[document.getElementById('select-r1').value];
217	formSubmit.elements['r2'].value = revisions[elementsSelect['r2'].value];	220	formSubmit.elements['r2'].value = revisions[document.getElementById('select-r2').value];
218	return true;	221	return true;
219	}	222	}, false);
220	</script>	223	}, false);
		224	]]></script>
221		225
222	<form id="tc6Select" action="not-used">	226
223	<p>Configuration file:	227	<p><label>Configuration file:
224	<select name="filename">	228	<select id="select-filename">
225	<option value="conf/catalina.policy">catalina.policy</option>	229	<option value="conf/catalina.policy">catalina.policy</option>
226	<option value="conf/catalina.properties">catalina.properties</option>	230	<option value="conf/catalina.properties">catalina.properties</option>
227	<option value="conf/context.xml">context.xml</option>	231	<option value="conf/context.xml">context.xml</option>
Lines 229-238 Link Here
229	<option value="conf/server.xml">server.xml</option>	233	<option value="conf/server.xml">server.xml</option>
230	<option value="conf/tomcat-users.xml">tomcat-users.xml</option>	234	<option value="conf/tomcat-users.xml">tomcat-users.xml</option>
231	<option value="conf/web.xml">web.xml</option>	235	<option value="conf/web.xml">web.xml</option>
232	</select>	236	</select></label>
233	</p>	237	</p>
234	<p>Old version:	238	<p><label>Old version:
235	<select name="r1">	239	<select id="select-r1">
236	<option value="6.0.0">6.0.0</option>	240	<option value="6.0.0">6.0.0</option>
237	<option value="6.0.1">6.0.1</option>	241	<option value="6.0.1">6.0.1</option>
238	<option value="6.0.2">6.0.2</option>	242	<option value="6.0.2">6.0.2</option>
Lines 257-264 Link Here
257	<option value="6.0.35">6.0.35</option>	261	<option value="6.0.35">6.0.35</option>
258	<option value="6.0.36" selected="selected">6.0.36</option>	262	<option value="6.0.36" selected="selected">6.0.36</option>
259	<option value="6.0.37">6.0.37</option>	263	<option value="6.0.37">6.0.37</option>
260	</select>, new version:	264	</select>,</label> <label>new version:
261	<select name="r2">	265	<select id="select-r2">
262	<option value="6.0.0">6.0.0</option>	266	<option value="6.0.0">6.0.0</option>
263	<option value="6.0.1">6.0.1</option>	267	<option value="6.0.1">6.0.1</option>
264	<option value="6.0.2">6.0.2</option>	268	<option value="6.0.2">6.0.2</option>
Lines 284-306 Link Here
284	<option value="6.0.36">6.0.36</option>	288	<option value="6.0.36">6.0.36</option>
285	<option value="6.0.37" selected="selected">6.0.37</option>	289	<option value="6.0.37" selected="selected">6.0.37</option>
286	<option value="HEAD">trunk (unreleased)</option>	290	<option value="HEAD">trunk (unreleased)</option>
287	</select>	291	</select></label>
288	</p>	292	</p>
289	</form>	293
290	<form id="tc6Submit" action="to-be-replaced" method="get"	294	<form id="tc6Submit" action="to-be-replaced" method="get"
291	target="_blank">	295	target="_blank">
292	<p>	296	<p>
293	<input type="hidden" name="diff_format" value="h"/>	297	<input type="hidden" name="diff_format" value="h"/>
294	<input type="hidden" name="r1"/><input type="hidden" name="r2"/>	298	<input type="hidden" name="r1"/><input type="hidden" name="r2"/>
295	<input type="submit" value="View Differences"	299	<button>View Differences</button>
296	onClick="return updateTc6ActionUrl();"/>
297	</p>	300	</p>
298	</form>	301	</form>
299	<p>You can also use Subversion command similar to the following (all on one line):</p>	302	<p>You can also use Subversion command similar to the following (all on one line):</p>
300	<pre> svn diff	303	<source>svn diff
301	--old=http://svn.apache.org/repos/asf/tomcat/tc6.0.x/tags/TOMCAT_6_0_36/conf/	304	--old=http://svn.apache.org/repos/asf/tomcat/tc6.0.x/tags/TOMCAT_6_0_36/conf/
302	--new=http://svn.apache.org/repos/asf/tomcat/tc6.0.x/tags/TOMCAT_6_0_37/conf/	305	--new=http://svn.apache.org/repos/asf/tomcat/tc6.0.x/tags/TOMCAT_6_0_37/conf/</source>
303	</pre>
304	</subsection>	306	</subsection>
305		307
306	</section>	308	</section>

Lines 51-59 Link Here

(-)xdocs/migration-8.xml (-29 / +30 lines)
51	<code>ReadListener</code>, the following JSP page will cease to compile in	51	<code>ReadListener</code>, the following JSP page will cease to compile in
52	Tomcat 8:</p>	52	Tomcat 8:</p>
53		53
54	<source>	54	<source><![CDATA[<%@page import="a.*"%>
55	<%@page import="a.*"%>	55	<% ReadListener listener = new ReadListener(); %>]]></source>
56	<% ReadListener listener = new ReadListener(); %></source>
57		56
58	<p>This happens because implicit import of <code>javax.servlet.*</code>	57	<p>This happens because implicit import of <code>javax.servlet.*</code>
59	and explicit import of <code>a.*</code> will provide conflicting	58	and explicit import of <code>a.*</code> will provide conflicting
Lines 132-156 Link Here
132	below and then click "View differences" to see the differences.	131	below and then click "View differences" to see the differences.
133	The differences will be shown in a new tab/window.</p>	132	The differences will be shown in a new tab/window.</p>
134		133
135	<script type="text/javascript" language="JavaScript">	134	<script type="text/javascript"><![CDATA[
136	function updateTc8ActionUrl() {	135	"use strict"; // Enable strict mode
		136
		137	document.addEventListener("DOMContentLoaded", function() {
		138	var formSubmit = document.getElementById("tc8Submit");
		139	formSubmit.addEventListener("submit", function() {
137	var revisions = {	140	var revisions = {
138	"HEAD":"HEAD",	141	"HEAD":"HEAD",
139	"8.0.0-RC1":"1509411",	142	"8.0.0-RC1":"1509411",
140	};	143	};
141	var formSubmit= document.getElementById('tc8Submit');	144
142	var elementsSelect= document.getElementById('tc8Select').elements;
143	formSubmit.action = "http://svn.apache.org/viewvc/tomcat/trunk/" +	145	formSubmit.action = "http://svn.apache.org/viewvc/tomcat/trunk/" +
144	elementsSelect['filename'].value;	146	document.getElementById('select-filename').value;
145	formSubmit.elements['r1'].value = revisions[elementsSelect['r1'].value];	147	formSubmit.elements['r1'].value = revisions[document.getElementById('select-r1').value];
146	formSubmit.elements['r2'].value = revisions[elementsSelect['r2'].value];	148	formSubmit.elements['r2'].value = revisions[document.getElementById('select-r2').value];
147	return true;	149	return true;
148	}	150	}, false);
149	</script>	151	}, false);
		152	]]></script>
150		153
151	<form id="tc8Select" action="not-used">	154
152	<p>Configuration file:	155	<p><label>Configuration file:
153	<select name="filename">	156	<select id="select-filename">
154	<option value="conf/catalina.policy">catalina.policy</option>	157	<option value="conf/catalina.policy">catalina.policy</option>
155	<option value="conf/catalina.properties">catalina.properties</option>	158	<option value="conf/catalina.properties">catalina.properties</option>
156	<option value="conf/context.xml">context.xml</option>	159	<option value="conf/context.xml">context.xml</option>
Lines 158-188 Link Here
158	<option value="conf/server.xml">server.xml</option>	161	<option value="conf/server.xml">server.xml</option>
159	<option value="conf/tomcat-users.xml">tomcat-users.xml</option>	162	<option value="conf/tomcat-users.xml">tomcat-users.xml</option>
160	<option value="conf/web.xml">web.xml</option>	163	<option value="conf/web.xml">web.xml</option>
161	</select>	164	</select></label>
162	</p>	165	</p>
163	<p>Old version:	166	<p><label>Old version:
164	<select name="r1">	167	<select id="select-r1">
165	<option value="8.0.0-RC1" selected="selected">8.0.0-RC1</option>	168	<option value="8.0.0-RC1" selected="selected">8.0.0-RC1</option>
166	</select>, new version:	169	</select>,</label> <label>new version:
167	<select name="r2">	170	<select id="select-r2">
168	<option value="HEAD" selected="selected">trunk (unreleased)</option>	171	<option value="HEAD" selected="selected">trunk (unreleased)</option>
169	</select>	172	</select></label>
170	</p>	173	</p>
171	</form>	174
172	<form id="tc8Submit" action="to-be-replaced" method="get"	175	<form id="tc8Submit" action="to-be-replaced" method="get"
173	target="_blank">	176	target="_blank">
174	<p>	177	<p>
175	<input type="hidden" name="diff_format" value="h"/>	178	<input type="hidden" name="diff_format" value="h"/>
176	<input type="hidden" name="r1" /><input type="hidden" name="r2" />	179	<input type="hidden" name="r1"/><input type="hidden" name="r2"/>
177	<input type="submit" value="View Differences"	180	<button>View Differences</button>
178	onClick="return updateTc8ActionUrl();"/>
179	</p>	181	</p>
180	</form>	182	</form>
181	<p>You can also use Subversion command similar to the following (all on one line):</p>	183	<p>You can also use Subversion command similar to the following (all on one line):</p>
182	<pre> svn diff	184	<source>svn diff
183	--old=http://svn.apache.org/repos/asf/tomcat/tags/TOMCAT_8_0_0/conf/	185	--old=http://svn.apache.org/repos/asf/tomcat/tags/TOMCAT_8_0_0/conf/
184	--new=http://svn.apache.org/repos/asf/tomcat/tags/TOMCAT_8_0_1/conf/	186	--new=http://svn.apache.org/repos/asf/tomcat/tags/TOMCAT_8_0_1/conf/</source>
185	</pre>
186	</subsection>	187	</subsection>
187		188
188	</section>	189	</section>

Lines 22-28 Link Here

(-)xdocs/oldnews-2011.xml (-10 / +25 lines)
22	Apache Tomcat. This release includes security and bug fixes over Apache Tomcat 6.0.33.	22	Apache Tomcat. This release includes security and bug fixes over Apache Tomcat 6.0.33.
23		23
24	</p>	24	</p>
25	<p align="center">	25	<p style="text-align: center;">
26	<a href="download-60.cgi">Download</a> \|	26	<a href="download-60.cgi">Download</a> \|
27	<a href="tomcat-6.0-doc/changelog.html#Tomcat_6.0.35_(jfclere)">ChangeLog for 6.0.35</a>	27	<a href="tomcat-6.0-doc/changelog.html#Tomcat_6.0.35_(jfclere)">ChangeLog for 6.0.35</a>
28	</p>	28	</p>
Lines 33-38 Link Here
33	The Apache Tomcat Project is proud to announce the release of version 7.0.23 of	33	The Apache Tomcat Project is proud to announce the release of version 7.0.23 of
34	Apache Tomcat. This release includes numerous bug fixes and several new features	34	Apache Tomcat. This release includes numerous bug fixes and several new features
35	compared to version 7.0.22. The notable new features include:	35	compared to version 7.0.22. The notable new features include:
		36	</p>
36	<ul>	37	<ul>
37	<li>The ability to start and stop child containers (primarily Contexts - i.e.	38	<li>The ability to start and stop child containers (primarily Contexts - i.e.
38	web applications) in parallel which can significantly improve start times.	39	web applications) in parallel which can significantly improve start times.
Lines 45-55 Link Here
45	can be fixed (e.g. via JMX) and another attempt made to start it rather than	46	can be fixed (e.g. via JMX) and another attempt made to start it rather than
46	it having to be removed.</li>	47	it having to be removed.</li>
47	</ul>	48	</ul>
		49	<p>
48	Full details of these changes, and all the other changes, are available in the	50	Full details of these changes, and all the other changes, are available in the
49	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.23_(markt)">Tomcat 7 changelog</a>.	51	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.23_(markt)">Tomcat 7 changelog</a>.
50	</p>	52	</p>
51		53
52	<p align="center">	54	<p style="text-align: center;">
53	<a href="download-70.cgi">Download</a> \|	55	<a href="download-70.cgi">Download</a> \|
54	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.23_(markt)">ChangeLog for 7.0.23</a>	56	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.23_(markt)">ChangeLog for 7.0.23</a>
55	</p>	57	</p>
Lines 60-65 Link Here
60	The Apache Tomcat Project is proud to announce the release of version 7.0.22 of	62	The Apache Tomcat Project is proud to announce the release of version 7.0.22 of
61	Apache Tomcat. This release includes bug fixes and new features compared to	63	Apache Tomcat. This release includes bug fixes and new features compared to
62	version 7.0.21 including:	64	version 7.0.21 including:
		65	</p>
63	<ul>	66	<ul>
64	<li>Further improvements to the memory leak detection and prevention	67	<li>Further improvements to the memory leak detection and prevention
65	features.</li>	68	features.</li>
Lines 68-78 Link Here
68	<li>Add support for controlling which session attributes are replicated when	71	<li>Add support for controlling which session attributes are replicated when
69	using session replication (a.k.a clustering).</li>	72	using session replication (a.k.a clustering).</li>
70	</ul>	73	</ul>
		74	<p>
71	Full details of these changes, and all the other changes, are available in the	75	Full details of these changes, and all the other changes, are available in the
72	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.22_(markt)">Tomcat 7 changelog</a>.	76	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.22_(markt)">Tomcat 7 changelog</a>.
73	</p>	77	</p>
74		78
75	<p align="center">	79	<p style="text-align: center;">
76	<a href="download-70.cgi">Download</a> \|	80	<a href="download-70.cgi">Download</a> \|
77	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.22_(markt)">ChangeLog for 7.0.22</a>	81	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.22_(markt)">ChangeLog for 7.0.22</a>
78	</p>	82	</p>
Lines 87-93 Link Here
87	<p><strong>Note:</strong> End of life date for Apache Tomcat 5.5.x is announced.	91	<p><strong>Note:</strong> End of life date for Apache Tomcat 5.5.x is announced.
88	<a href="tomcat-55-eol.html">Read more...</a>	92	<a href="tomcat-55-eol.html">Read more...</a>
89	</p>	93	</p>
90	<p align="center">	94	<p style="text-align: center;">
91	<a href="download-55.cgi">Download</a> \|	95	<a href="download-55.cgi">Download</a> \|
92	<a href="tomcat-5.5-doc/changelog.html#Tomcat_5.5.34_(jim)">ChangeLog for 5.5.34</a>	96	<a href="tomcat-5.5-doc/changelog.html#Tomcat_5.5.34_(jim)">ChangeLog for 5.5.34</a>
93	</p>	97	</p>
Lines 98-103 Link Here
98	The Apache Tomcat Project is proud to announce the release of version 7.0.21 of	102	The Apache Tomcat Project is proud to announce the release of version 7.0.21 of
99	Apache Tomcat. This release includes security fixes, bug fixes and new features	103	Apache Tomcat. This release includes security fixes, bug fixes and new features
100	compared to version 7.0.20 including:	104	compared to version 7.0.20 including:
		105	</p>
101	<ul>	106	<ul>
102	<li>A fix for CVE-2011-3190 that allowed an attacker to inject requests when	107	<li>A fix for CVE-2011-3190 that allowed an attacker to inject requests when
103	Tomcat was configured behind a reverse proxy using the AJP protocol.</li>	108	Tomcat was configured behind a reverse proxy using the AJP protocol.</li>
Lines 105-116 Link Here
105	detection/prevention features.</li>	110	detection/prevention features.</li>
106	<li>Improved validation of received AJP messages.</li>	111	<li>Improved validation of received AJP messages.</li>
107	</ul>	112	</ul>
		113	<p>
108	Full details of these changes, and all the other changes, are available in the	114	Full details of these changes, and all the other changes, are available in the
109	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.21_(markt)">Tomcat 7	115	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.21_(markt)">Tomcat 7
110	changelog</a>.	116	changelog</a>.
111	</p>	117	</p>
112		118
113	<p align="center">	119	<p style="text-align: center;">
114	<a href="download-70.cgi">Download</a> \|	120	<a href="download-70.cgi">Download</a> \|
115	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.21_(markt)">ChangeLog for	121	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.21_(markt)">ChangeLog for
116	7.0.21</a>	122	7.0.21</a>
Lines 122-128 Link Here
122	The Apache Tomcat Project is proud to announce the release of version 6.0.33 of	128	The Apache Tomcat Project is proud to announce the release of version 6.0.33 of
123	Apache Tomcat. This release includes security and bug fixes over Apache Tomcat 6.0.32.	129	Apache Tomcat. This release includes security and bug fixes over Apache Tomcat 6.0.32.
124	</p>	130	</p>
125	<p align="center">	131	<p style="text-align: center;">
126	<a href="download-60.cgi">Download</a> \|	132	<a href="download-60.cgi">Download</a> \|
127	<a href="tomcat-6.0-doc/changelog.html#Tomcat_6.0.33_(jfclere)">ChangeLog for 6.0.33</a>	133	<a href="tomcat-6.0-doc/changelog.html#Tomcat_6.0.33_(jfclere)">ChangeLog for 6.0.33</a>
128	</p>	134	</p>
Lines 133-138 Link Here
133	The Apache Tomcat Project is proud to announce the release of version 7.0.20 of	139	The Apache Tomcat Project is proud to announce the release of version 7.0.20 of
134	Apache Tomcat. This release includes bug fixes and the following new features	140	Apache Tomcat. This release includes bug fixes and the following new features
135	compared to version 7.0.19 including:	141	compared to version 7.0.19 including:
		142	</p>
136	<ul>	143	<ul>
137	<li>JSP files with dependencies in JARs are no longer recompiled on every access	144	<li>JSP files with dependencies in JARs are no longer recompiled on every access
138	thereby improving performance.</li>	145	thereby improving performance.</li>
Lines 141-152 Link Here
141	<li>Update to Commons Daemon 1.0.7.</li>	148	<li>Update to Commons Daemon 1.0.7.</li>
142	<li>Converted unit tests to JUnit 4.</li>	149	<li>Converted unit tests to JUnit 4.</li>
143	</ul>	150	</ul>
		151	<p>
144	Full details of these changes, and all the other changes, are available in the	152	Full details of these changes, and all the other changes, are available in the
145	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.20_(markt)">Tomcat 7	153	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.20_(markt)">Tomcat 7
146	changelog</a>.	154	changelog</a>.
147	</p>	155	</p>
148		156
149	<p align="center">	157	<p style="text-align: center;">
150	<a href="download-70.cgi">Download</a> \|	158	<a href="download-70.cgi">Download</a> \|
151	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.20_(markt)">ChangeLog for	159	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.20_(markt)">ChangeLog for
152	7.0.20</a>	160	7.0.20</a>
Lines 171-176 Link Here
171	The Apache Tomcat Project is proud to announce the release of version 7.0.19 of	179	The Apache Tomcat Project is proud to announce the release of version 7.0.19 of
172	Apache Tomcat. This release includes security fixes, bug fixes and the following	180	Apache Tomcat. This release includes security fixes, bug fixes and the following
173	new features compared to version 7.0.16:	181	new features compared to version 7.0.16:
		182	</p>
174	<ul>	183	<ul>
175	<li>JSP recompilation is now triggered by any change (backwards as well as	184	<li>JSP recompilation is now triggered by any change (backwards as well as
176	forwards) in the last modified time of the JSP or any of its	185	forwards) in the last modified time of the JSP or any of its
Lines 178-189 Link Here
178	<li>Support for installing multiple instances with the Windows Installer</li>	187	<li>Support for installing multiple instances with the Windows Installer</li>
179	<li>Include jdbc-pool (an alternative database connection pool)</li>	188	<li>Include jdbc-pool (an alternative database connection pool)</li>
180	</ul>	189	</ul>
		190	<p>
181	Full details of these changes, and all the other changes, are available in the	191	Full details of these changes, and all the other changes, are available in the
182	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.19_(markt)">Tomcat 7	192	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.19_(markt)">Tomcat 7
183	changelog</a>.	193	changelog</a>.
184	</p>	194	</p>
185		195
186	<p align="center">	196	<p style="text-align: center;">
187	<a href="download-70.cgi">Download</a> \|	197	<a href="download-70.cgi">Download</a> \|
188	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.19_(markt)">ChangeLog for	198	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.19_(markt)">ChangeLog for
189	7.0.19</a>	199	7.0.19</a>
Lines 203-219 Link Here
203	The Apache Tomcat Project is proud to announce the release of version 7.0.16 of	213	The Apache Tomcat Project is proud to announce the release of version 7.0.16 of
204	Apache Tomcat. This release includes bug fixes and the following new features	214	Apache Tomcat. This release includes bug fixes and the following new features
205	compared to version 7.0.14:	215	compared to version 7.0.14:
		216	</p>
206	<ul>	217	<ul>
207	<li>NIO implementation of the AJP connector.</li>	218	<li>NIO implementation of the AJP connector.</li>
208	<li>Enable Servlet 3 asynchronous processing support when using clustering.</li>	219	<li>Enable Servlet 3 asynchronous processing support when using clustering.</li>
209	<li>Add parallel deployment support to the Manager's Ant tasks.</li>	220	<li>Add parallel deployment support to the Manager's Ant tasks.</li>
210	</ul>	221	</ul>
		222	<p>
211	Full details of these changes, and all the other changes, are available in the	223	Full details of these changes, and all the other changes, are available in the
212	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.16_(markt)">Tomcat 7	224	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.16_(markt)">Tomcat 7
213	changelog</a>.	225	changelog</a>.
214	</p>	226	</p>
215		227
216	<p align="center">	228	<p style="text-align: center;">
217	<a href="download-70.cgi">Download</a> \|	229	<a href="download-70.cgi">Download</a> \|
218	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.16_(markt)">ChangeLog for	230	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.16_(markt)">ChangeLog for
219	7.0.16</a>	231	7.0.16</a>
Lines 225-235 Link Here
225	The Apache Tomcat Project is proud to announce the release of version 7.0.14 of	237	The Apache Tomcat Project is proud to announce the release of version 7.0.14 of
226	Apache Tomcat. This release includes bug fixes and the following new features	238	Apache Tomcat. This release includes bug fixes and the following new features
227	compared to version 7.0.12:	239	compared to version 7.0.12:
		240	</p>
228	<ul>	241	<ul>
229	<li>The StuckThreadDetectionValve to identify long running requests.</li>	242	<li>The StuckThreadDetectionValve to identify long running requests.</li>
230	<li>JAAS authentication support to the JMXRemoteLifecycleListener.</li>	243	<li>JAAS authentication support to the JMXRemoteLifecycleListener.</li>
231	<li>Updated MIME type mappings to align with those of Apache httpd.</li>	244	<li>Updated MIME type mappings to align with those of Apache httpd.</li>
232	</ul>	245	</ul>
		246	<p>
233	Full details of these changes, and all the other changes, are available in the	247	Full details of these changes, and all the other changes, are available in the
234	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.14_(markt)">Tomcat 7	248	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.14_(markt)">Tomcat 7
235	changelog</a>.	249	changelog</a>.
Lines 240-246 Link Here
240	<p>	254	<p>
241	The Apache Tomcat Project is proud to announce the release of version 7.0.12 of	255	The Apache Tomcat Project is proud to announce the release of version 7.0.12 of
242	Apache Tomcat. This release includes bug fixes, security fixes and the following	256	Apache Tomcat. This release includes bug fixes, security fixes and the following
243	new features compared to version 7.0.11:	257	new features compared to version 7.0.11:</p>
244	<ul>	258	<ul>
245	<li>initial support for SPNEGO/Kerberos authentication (also referred to as	259	<li>initial support for SPNEGO/Kerberos authentication (also referred to as
246	Windows authentication);</li>	260	Windows authentication);</li>
Lines 248-253 Link Here
248	JNDI resource when it is no longer required;</li>	262	JNDI resource when it is no longer required;</li>
249	<li>optional support for pre-emptive authentication.</li>	263	<li>optional support for pre-emptive authentication.</li>
250	</ul>	264	</ul>
		265	<p>
251	Full details of these changes, and all the other changes, are available in the	266	Full details of these changes, and all the other changes, are available in the
252	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.12_(markt)">Tomcat 7	267	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.12_(markt)">Tomcat 7
253	changelog</a>.	268	changelog</a>.

Lines 13-18 Link Here

(-)xdocs/oldnews.xml (-5 / +15 lines)
13	The Apache Tomcat Project is proud to announce the release of version 7.0.41 of	13	The Apache Tomcat Project is proud to announce the release of version 7.0.41 of
14	Apache Tomcat. This release contains a number of bug fixes	14	Apache Tomcat. This release contains a number of bug fixes
15	and improvements compared to version 7.0.40. The notable changes include:	15	and improvements compared to version 7.0.40. The notable changes include:
		16	</p>
16	<ul>	17	<ul>
17	<li>Add a Servlet Filter that implements	18	<li>Add a Servlet Filter that implements
18	<a href="http://www.w3.org/TR/cors/" rel="nofollow">CORS</a>. Patch	19	<a href="http://www.w3.org/TR/cors/" rel="nofollow">CORS</a>. Patch
Lines 24-34 Link Here
24	tasks for interfacing with the text based Manager application. Patch	25	tasks for interfacing with the text based Manager application. Patch
25	provided by Sergey Tcherednichenko.</li>	26	provided by Sergey Tcherednichenko.</li>
26	</ul>	27	</ul>
		28	<p>
27	Full details of these changes, and all the other changes, are available in the	29	Full details of these changes, and all the other changes, are available in the
28	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.41_(markt)">Tomcat 7 changelog</a>.	30	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.41_(markt)">Tomcat 7 changelog</a>.
29	</p>	31	</p>
30		32
31	<p align="center">	33	<p style="text-align: center;">
32	<a href="download-70.cgi">Download</a> \|	34	<a href="download-70.cgi">Download</a> \|
33	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.41_(markt)">ChangeLog for 7.0.41</a>	35	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.41_(markt)">ChangeLog for 7.0.41</a>
34	</p>	36	</p>
Lines 40-45 Link Here
40	The Apache Tomcat Project is proud to announce the release of version 7.0.40 of	42	The Apache Tomcat Project is proud to announce the release of version 7.0.40 of
41	Apache Tomcat. This release contains a security fix and a number of bug fixes	43	Apache Tomcat. This release contains a security fix and a number of bug fixes
42	and improvements compared to version 7.0.39. The notable changes include:	44	and improvements compared to version 7.0.39. The notable changes include:
		45	</p>
43	<ul>	46	<ul>
44	<li>A fix for CVE-2013-2071 (bug <bug>54178</bug>) an information disclosure	47	<li>A fix for CVE-2013-2071 (bug <bug>54178</bug>) an information disclosure
45	issue.</li>	48	issue.</li>
Lines 50-60 Link Here
50	while checking for memory leaks when a web application is being stopped.	53	while checking for memory leaks when a web application is being stopped.
51	</li>	54	</li>
52	</ul>	55	</ul>
		56	<p>
53	Full details of these changes, and all the other changes, are available in the	57	Full details of these changes, and all the other changes, are available in the
54	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.40_(markt)">Tomcat 7 changelog</a>.	58	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.40_(markt)">Tomcat 7 changelog</a>.
55	</p>	59	</p>
56		60
57	<p align="center">	61	<p style="text-align: center;">
58	<a href="download-70.cgi">Download</a> \|	62	<a href="download-70.cgi">Download</a> \|
59	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.40_(markt)">ChangeLog for 7.0.40</a>	63	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.40_(markt)">ChangeLog for 7.0.40</a>
60	</p>	64	</p>
Lines 65-70 Link Here
65	The Apache Tomcat Project is proud to announce the release of version 7.0.39 of	69	The Apache Tomcat Project is proud to announce the release of version 7.0.39 of
66	Apache Tomcat. This release contains a number of bug fixes and improvements	70	Apache Tomcat. This release contains a number of bug fixes and improvements
67	compared to version 7.0.37. The notable changes include:	71	compared to version 7.0.37. The notable changes include:
		72	</p>
68	<ul>	73	<ul>
69	<li>There have been multiple improvements in the bytes to/from characters	74	<li>There have been multiple improvements in the bytes to/from characters
70	conversion process. The core conversion process has been refactored to use	75	conversion process. The core conversion process has been refactored to use
Lines 88-98 Link Here
88	dependency on Commons Codec was added to replace Tomcat's internal Base64	93	dependency on Commons Codec was added to replace Tomcat's internal Base64
89	encoder/decoder.</li>	94	encoder/decoder.</li>
90	</ul>	95	</ul>
		96	<p>
91	Full details of these changes, and all the other changes, are available in the	97	Full details of these changes, and all the other changes, are available in the
92	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.39_(markt)">Tomcat 7 changelog</a>.	98	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.39_(markt)">Tomcat 7 changelog</a>.
93	</p>	99	</p>
94		100
95	<p align="center">	101	<p style="text-align: center;">
96	<a href="download-70.cgi">Download</a> \|	102	<a href="download-70.cgi">Download</a> \|
97	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.39_(markt)">ChangeLog for 7.0.39</a>	103	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.39_(markt)">ChangeLog for 7.0.39</a>
98	</p>	104	</p>
Lines 103-108 Link Here
103	The Apache Tomcat Project is proud to announce the release of version 7.0.37 of	109	The Apache Tomcat Project is proud to announce the release of version 7.0.37 of
104	Apache Tomcat. This release contains a small number of bug fixes and	110	Apache Tomcat. This release contains a small number of bug fixes and
105	improvements compared to version 7.0.35. The notable changes include:	111	improvements compared to version 7.0.35. The notable changes include:
		112	</p>
106	<ul>	113	<ul>
107	<li>Fix the regression in the JspC tool that is used to pre-compile JSP pages	114	<li>Fix the regression in the JspC tool that is used to pre-compile JSP pages
108	introduced in 7.0.35. See	115	introduced in 7.0.35. See
Lines 116-126 Link Here
116	an empty set of options (which essentially disables HTTPS support).</li>	123	an empty set of options (which essentially disables HTTPS support).</li>
117	<li>Update to Commons Daemon 1.0.13.</li>	124	<li>Update to Commons Daemon 1.0.13.</li>
118	</ul>	125	</ul>
		126	<p>
119	Full details of these changes, and all the other changes, are available in the	127	Full details of these changes, and all the other changes, are available in the
120	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.37_(markt)">Tomcat 7 changelog</a>.	128	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.37_(markt)">Tomcat 7 changelog</a>.
121	</p>	129	</p>
122		130
123	<p align="center">	131	<p style="text-align: center;">
124	<a href="download-70.cgi">Download</a> \|	132	<a href="download-70.cgi">Download</a> \|
125	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.37_(markt)">ChangeLog for 7.0.37</a>	133	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.37_(markt)">ChangeLog for 7.0.37</a>
126	</p>	134	</p>
Lines 132-137 Link Here
132	The Apache Tomcat Project is proud to announce the release of version 7.0.35 of	140	The Apache Tomcat Project is proud to announce the release of version 7.0.35 of
133	Apache Tomcat. This release contains a small number of bug fixes and	141	Apache Tomcat. This release contains a small number of bug fixes and
134	improvements compared to version 7.0.34. The notable changes include:	142	improvements compared to version 7.0.34. The notable changes include:
		143	</p>
135	<ul>	144	<ul>
136	<li>Integrate documentation of Tomcat 7 with Apache Comments System. People can	145	<li>Integrate documentation of Tomcat 7 with Apache Comments System. People can
137	leave their comments when reading the <a	146	leave their comments when reading the <a
Lines 143-148 Link Here
143	that provide tag plug-in implementations. Based on a patch by Sheldon	152	that provide tag plug-in implementations. Based on a patch by Sheldon
144	Shao.</li>	153	Shao.</li>
145	</ul>	154	</ul>
		155	<p>
146	Full details of these changes, and all the other changes, are available in the	156	Full details of these changes, and all the other changes, are available in the
147	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.35_(markt)">Tomcat 7 changelog</a>.	157	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.35_(markt)">Tomcat 7 changelog</a>.
148	</p>	158	</p>
Lines 153-159 Link Here
153	for details.	163	for details.
154	</p>	164	</p>
155		165
156	<p align="center">	166	<p style="text-align: center;">
157	<a href="download-70.cgi">Download</a> \|	167	<a href="download-70.cgi">Download</a> \|
158	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.35_(markt)">ChangeLog for 7.0.35</a>	168	<a href="tomcat-7.0-doc/changelog.html#Tomcat_7.0.35_(markt)">ChangeLog for 7.0.35</a>
159	</p>	169	</p>

Lines 138-144 Link Here

(-)xdocs/security-5.xml (-6 / +9 lines)
138	rel="nofollow">CVE-2011-1184</a>.</p>	138	rel="nofollow">CVE-2011-1184</a>.</p>
139		139
140	<p>The implementation of HTTP DIGEST authentication was discovered to have	140	<p>The implementation of HTTP DIGEST authentication was discovered to have
141	several weaknesses:	141	several weaknesses:</p>
142	<ul>	142	<ul>
143	<li>replay attacks were permitted</li>	143	<li>replay attacks were permitted</li>
144	<li>server nonces were not checked</li>	144	<li>server nonces were not checked</li>
Lines 147-152 Link Here
147	<li>realm values were not checked</li>	147	<li>realm values were not checked</li>
148	<li>the server secret was hard-coded to a known string</li>	148	<li>the server secret was hard-coded to a known string</li>
149	</ul>	149	</ul>
		150	<p>
150	The result of these weaknesses is that DIGEST authentication was only as	151	The result of these weaknesses is that DIGEST authentication was only as
151	secure as BASIC authentication.	152	secure as BASIC authentication.
152	</p>	153	</p>
Lines 187-199 Link Here
187	When running under a security manager, this lack of validation allowed a	188	When running under a security manager, this lack of validation allowed a
188	malicious web application to do one or more of the following that would	189	malicious web application to do one or more of the following that would
189	normally be prevented by a security manager:	190	normally be prevented by a security manager:
		191	</p>
190	<ul>	192	<ul>
191	<li>return files to users that the security manager should make	193	<li>return files to users that the security manager should make
192	inaccessible</li>	194	inaccessible</li>
193	<li>terminate (via a crash) the JVM</li>	195	<li>terminate (via a crash) the JVM</li>
194	</ul>	196	</ul>
195	Additionally, these vulnerabilities only occur when all of the following	197	<p>Additionally, these vulnerabilities only occur when all of the following
196	are true:	198	are true:</p>
197	<ul>	199	<ul>
198	<li>untrusted web applications are being used</li>	200	<li>untrusted web applications are being used</li>
199	<li>the SecurityManager is used to limit the untrusted web applications	201	<li>the SecurityManager is used to limit the untrusted web applications
Lines 201-207 Link Here
201	<li>the HTTP APR connector is used</li>	203	<li>the HTTP APR connector is used</li>
202	<li>sendfile is enabled for the connector (this is the default)</li>	204	<li>sendfile is enabled for the connector (this is the default)</li>
203	</ul>	205	</ul>
204	</p>
205		206
206	<p>This was fixed in <revlink rev="1158244">revision 1158244</revlink>.</p>	207	<p>This was fixed in <revlink rev="1158244">revision 1158244</revlink>.</p>
207		208
Lines 218-228 Link Here
218	capabilities allowing the application to access files and directories	219	capabilities allowing the application to access files and directories
219	owned by superuser. This vulnerability only occurs when all of the	220	owned by superuser. This vulnerability only occurs when all of the
220	following are true:	221	following are true:
		222	</p>
221	<ul>	223	<ul>
222	<li>Tomcat is running on a Linux operating system</li>	224	<li>Tomcat is running on a Linux operating system</li>
223	<li>jsvc was compiled with libcap</li>	225	<li>jsvc was compiled with libcap</li>
224	<li>-user parameter is used</li>	226	<li>-user parameter is used</li>
225	</ul>	227	</ul>
		228	<p>
226	Affected Tomcat versions shipped with source files for jsvc that included	229	Affected Tomcat versions shipped with source files for jsvc that included
227	this vulnerability.	230	this vulnerability.
228	</p>	231	</p>
Lines 248-253 Link Here
248	full control over the AJP message permitting authentication bypass and	251	full control over the AJP message permitting authentication bypass and
249	information disclosure. This vulnerability only occurs when all of the	252	information disclosure. This vulnerability only occurs when all of the
250	following are true:	253	following are true:
		254	</p>
251	<ul>	255	<ul>
252	<li>The org.apache.jk.server.JkCoyoteHandler AJP connector is not used	256	<li>The org.apache.jk.server.JkCoyoteHandler AJP connector is not used
253	</li>	257	</li>
Lines 254-260 Link Here
254	<li>POST requests are accepted</li>	258	<li>POST requests are accepted</li>
255	<li>The request body is not processed</li>	259	<li>The request body is not processed</li>
256	</ul>	260	</ul>
257	</p>
258		261
259	<p>This was fixed in <revlink rev="1162960">revision 1162960</revlink>.</p>	262	<p>This was fixed in <revlink rev="1162960">revision 1162960</revlink>.</p>
260		263
Lines 723-728 Link Here
723	<p>The following Java system properties have been added to Tomcat to provide	726	<p>The following Java system properties have been added to Tomcat to provide
724	additional control of the handling of path delimiters in URLs (both options	727	additional control of the handling of path delimiters in URLs (both options
725	default to false):	728	default to false):
		729	</p>
726	<ul>	730	<ul>
727	<li>	731	<li>
728	<code>org.apache.tomcat.util.buf.UDecoder.ALLOW_ENCODED_SLASH</code>: <code>true\|false</code>	732	<code>org.apache.tomcat.util.buf.UDecoder.ALLOW_ENCODED_SLASH</code>: <code>true\|false</code>
Lines 731-737 Link Here
731	<code>org.apache.catalina.connector.CoyoteAdapter.ALLOW_BACKSLASH</code>: <code>true\|false</code>	735	<code>org.apache.catalina.connector.CoyoteAdapter.ALLOW_BACKSLASH</code>: <code>true\|false</code>
732	</li>	736	</li>
733	</ul>	737	</ul>
734	</p>
735		738
736	<p>Due to the impossibility to guarantee that all URLs are handled by Tomcat as	739	<p>Due to the impossibility to guarantee that all URLs are handled by Tomcat as
737	they are in proxy servers, Tomcat should always be secured as if no proxy	740	they are in proxy servers, Tomcat should always be secured as if no proxy

Lines 230-235 Link Here

(-)xdocs/security-6.xml (-5 / +9 lines)
230	full control over the AJP message permitting authentication bypass and	230	full control over the AJP message permitting authentication bypass and
231	information disclosure. This vulnerability only occurs when all of the	231	information disclosure. This vulnerability only occurs when all of the
232	following are true:	232	following are true:
		233	</p>
233	<ul>	234	<ul>
234	<li>The org.apache.jk.server.JkCoyoteHandler AJP connector is not used	235	<li>The org.apache.jk.server.JkCoyoteHandler AJP connector is not used
235	</li>	236	</li>
Lines 236-242 Link Here
236	<li>POST requests are accepted</li>	237	<li>POST requests are accepted</li>
237	<li>The request body is not processed</li>	238	<li>The request body is not processed</li>
238	</ul>	239	</ul>
239	</p>
240		240
241	<p>This was fixed in <revlink rev="1162959">revision 1162959</revlink>.</p>	241	<p>This was fixed in <revlink rev="1162959">revision 1162959</revlink>.</p>
242		242
Lines 310-315 Link Here
310		310
311	<p>The implementation of HTTP DIGEST authentication was discovered to have	311	<p>The implementation of HTTP DIGEST authentication was discovered to have
312	several weaknesses:	312	several weaknesses:
		313	</p>
313	<ul>	314	<ul>
314	<li>replay attacks were permitted</li>	315	<li>replay attacks were permitted</li>
315	<li>server nonces were not checked</li>	316	<li>server nonces were not checked</li>
Lines 318-323 Link Here
318	<li>realm values were not checked</li>	319	<li>realm values were not checked</li>
319	<li>the server secret was hard-coded to a known string</li>	320	<li>the server secret was hard-coded to a known string</li>
320	</ul>	321	</ul>
		322	<p>
321	The result of these weaknesses is that DIGEST authentication was only as	323	The result of these weaknesses is that DIGEST authentication was only as
322	secure as BASIC authentication.	324	secure as BASIC authentication.
323	</p>	325	</p>
Lines 358-370 Link Here
358	When running under a security manager, this lack of validation allowed a	360	When running under a security manager, this lack of validation allowed a
359	malicious web application to do one or more of the following that would	361	malicious web application to do one or more of the following that would
360	normally be prevented by a security manager:	362	normally be prevented by a security manager:
		363	</p>
361	<ul>	364	<ul>
362	<li>return files to users that the security manager should make	365	<li>return files to users that the security manager should make
363	inaccessible</li>	366	inaccessible</li>
364	<li>terminate (via a crash) the JVM</li>	367	<li>terminate (via a crash) the JVM</li>
365	</ul>	368	</ul>
366	Additionally, these vulnerabilities only occur when all of the following	369	<p>Additionally, these vulnerabilities only occur when all of the following
367	are true:	370	are true:</p>
368	<ul>	371	<ul>
369	<li>untrusted web applications are being used</li>	372	<li>untrusted web applications are being used</li>
370	<li>the SecurityManager is used to limit the untrusted web applications	373	<li>the SecurityManager is used to limit the untrusted web applications
Lines 372-378 Link Here
372	<li>the HTTP NIO or HTTP APR connector is used</li>	375	<li>the HTTP NIO or HTTP APR connector is used</li>
373	<li>sendfile is enabled for the connector (this is the default)</li>	376	<li>sendfile is enabled for the connector (this is the default)</li>
374	</ul>	377	</ul>
375	</p>
376		378
377	<p>This was fixed in <revlink rev="1146703">revision 1146703</revlink>.</p>	379	<p>This was fixed in <revlink rev="1146703">revision 1146703</revlink>.</p>
378		380
Lines 389-399 Link Here
389	capabilities allowing the application to access files and directories	391	capabilities allowing the application to access files and directories
390	owned by superuser. This vulnerability only occurs when all of the	392	owned by superuser. This vulnerability only occurs when all of the
391	following are true:	393	following are true:
		394	</p>
392	<ul>	395	<ul>
393	<li>Tomcat is running on a Linux operating system</li>	396	<li>Tomcat is running on a Linux operating system</li>
394	<li>jsvc was compiled with libcap</li>	397	<li>jsvc was compiled with libcap</li>
395	<li>-user parameter is used</li>	398	<li>-user parameter is used</li>
396	</ul>	399	</ul>
		400	<p>
397	Affected Tomcat versions shipped with source files for jsvc that included	401	Affected Tomcat versions shipped with source files for jsvc that included
398	this vulnerability.	402	this vulnerability.
399	</p>	403	</p>
Lines 902-907 Link Here
902	<p>The following Java system properties have been added to Tomcat to provide	906	<p>The following Java system properties have been added to Tomcat to provide
903	additional control of the handling of path delimiters in URLs (both options	907	additional control of the handling of path delimiters in URLs (both options
904	default to false):	908	default to false):
		909	</p>
905	<ul>	910	<ul>
906	<li>	911	<li>
907	<code>org.apache.tomcat.util.buf.UDecoder.ALLOW_ENCODED_SLASH</code>: <code>true\|false</code>	912	<code>org.apache.tomcat.util.buf.UDecoder.ALLOW_ENCODED_SLASH</code>: <code>true\|false</code>
Lines 910-916 Link Here
910	<code>org.apache.catalina.connector.CoyoteAdapter.ALLOW_BACKSLASH</code>: <code>true\|false</code>	915	<code>org.apache.catalina.connector.CoyoteAdapter.ALLOW_BACKSLASH</code>: <code>true\|false</code>
911	</li>	916	</li>
912	</ul>	917	</ul>
913	</p>
914		918
915	<p>Due to the impossibility to guarantee that all URLs are handled by Tomcat as	919	<p>Due to the impossibility to guarantee that all URLs are handled by Tomcat as
916	they are in proxy servers, Tomcat should always be secured as if no proxy	920	they are in proxy servers, Tomcat should always be secured as if no proxy

Lines 305-310 Link Here

(-)xdocs/security-7.xml (-4 / +8 lines)
305	full control over the AJP message permitting authentication bypass and	305	full control over the AJP message permitting authentication bypass and
306	information disclosure. This vulnerability only occurs when all of the	306	information disclosure. This vulnerability only occurs when all of the
307	following are true:	307	following are true:
		308	</p>
308	<ul>	309	<ul>
309	<li>The org.apache.jk.server.JkCoyoteHandler AJP connector is not used	310	<li>The org.apache.jk.server.JkCoyoteHandler AJP connector is not used
310	</li>	311	</li>
Lines 311-317 Link Here
311	<li>POST requests are accepted</li>	312	<li>POST requests are accepted</li>
312	<li>The request body is not processed</li>	313	<li>The request body is not processed</li>
313	</ul>	314	</ul>
314	</p>
315		315
316	<p>This was fixed in <revlink rev="1162958">revision 1162958</revlink>.</p>	316	<p>This was fixed in <revlink rev="1162958">revision 1162958</revlink>.</p>
317		317
Lines 346-356 Link Here
346	capabilities allowing the application to access files and directories	346	capabilities allowing the application to access files and directories
347	owned by superuser. This vulnerability only occurs when all of the	347	owned by superuser. This vulnerability only occurs when all of the
348	following are true:	348	following are true:
		349	</p>
349	<ul>	350	<ul>
350	<li>Tomcat is running on a Linux operating system</li>	351	<li>Tomcat is running on a Linux operating system</li>
351	<li>jsvc was compiled with libcap</li>	352	<li>jsvc was compiled with libcap</li>
352	<li>-user parameter is used</li>	353	<li>-user parameter is used</li>
353	</ul>	354	</ul>
		355	<p>
354	Affected Tomcat versions shipped with source files for jsvc that included	356	Affected Tomcat versions shipped with source files for jsvc that included
355	this vulnerability.	357	this vulnerability.
356	</p>	358	</p>
Lines 376-388 Link Here
376	When running under a security manager, this lack of validation allowed a	378	When running under a security manager, this lack of validation allowed a
377	malicious web application to do one or more of the following that would	379	malicious web application to do one or more of the following that would
378	normally be prevented by a security manager:	380	normally be prevented by a security manager:
		381	</p>
379	<ul>	382	<ul>
380	<li>return files to users that the security manager should make	383	<li>return files to users that the security manager should make
381	inaccessible</li>	384	inaccessible</li>
382	<li>terminate (via a crash) the JVM</li>	385	<li>terminate (via a crash) the JVM</li>
383	</ul>	386	</ul>
384	Additionally, these vulnerabilities only occur when all of the following	387	<p>Additionally, these vulnerabilities only occur when all of the following
385	are true:	388	are true:</p>
386	<ul>	389	<ul>
387	<li>untrusted web applications are being used</li>	390	<li>untrusted web applications are being used</li>
388	<li>the SecurityManager is used to limit the untrusted web applications	391	<li>the SecurityManager is used to limit the untrusted web applications
Lines 390-396 Link Here
390	<li>the HTTP NIO or HTTP APR connector is used</li>	393	<li>the HTTP NIO or HTTP APR connector is used</li>
391	<li>sendfile is enabled for the connector (this is the default)</li>	394	<li>sendfile is enabled for the connector (this is the default)</li>
392	</ul>	395	</ul>
393	</p>
394		396
395	<p>This was fixed in revisions	397	<p>This was fixed in revisions
396	<revlink rev="1145383">1145383</revlink>,	398	<revlink rev="1145383">1145383</revlink>,
Lines 513-518 Link Here
513		515
514	<p>The implementation of HTTP DIGEST authentication was discovered to have	516	<p>The implementation of HTTP DIGEST authentication was discovered to have
515	several weaknesses:	517	several weaknesses:
		518	</p>
516	<ul>	519	<ul>
517	<li>replay attacks were permitted</li>	520	<li>replay attacks were permitted</li>
518	<li>server nonces were not checked</li>	521	<li>server nonces were not checked</li>
Lines 521-526 Link Here
521	<li>realm values were not checked</li>	524	<li>realm values were not checked</li>
522	<li>the server secret was hard-coded to a known string</li>	525	<li>the server secret was hard-coded to a known string</li>
523	</ul>	526	</ul>
		527	<p>
524	The result of these weaknesses is that DIGEST authentication was only as	528	The result of these weaknesses is that DIGEST authentication was only as
525	secure as BASIC authentication.	529	secure as BASIC authentication.
526	</p>	530	</p>

Lines 22-31 Link Here

(-)xdocs/tools.xml (-12 / +12 lines)
22	</section>	22	</section>
23		23
24	<section name="Apache Tools">	24	<section name="Apache Tools">
25	<table>	25	<table class="defaultTable">
26	<tr>	26	<tr>
27	<td><a href="http://ant.apache.org/">	27	<td><a href="http://ant.apache.org/">
28	<img src="http://ant.apache.org/images/ant_logo_medium.gif"/></a></td>	28	<img src="http://ant.apache.org/images/ant_logo_medium.gif" alt="Apache Ant"/></a></td>
29	<td><p>Apache Tomcat is built using Apache Ant.</p>	29	<td><p>Apache Tomcat is built using Apache Ant.</p>
30	</td>	30	</td>
31	</tr>	31	</tr>
Lines 33-42 Link Here
33	</section>	33	</section>
34		34
35	<section name="Open Source Tools">	35	<section name="Open Source Tools">
36	<table>	36	<table class="defaultTable">
37	<tr>	37	<tr>
38	<td><a href="http://www.eclipse.org/" rel="nofollow">	38	<td><a href="http://www.eclipse.org/" rel="nofollow">
39	<img src="images/eclipse.gif"/></a></td>	39	<img src="images/eclipse.gif" alt="Eclipse"/></a></td>
40	<td><p>A variety of IDEs are used by the Tomcat developers. One of them is	40	<td><p>A variety of IDEs are used by the Tomcat developers. One of them is
41	the Eclipse IDE.</p>	41	the Eclipse IDE.</p>
42	</td>	42	</td>
Lines 43-49 Link Here
43	</tr>	43	</tr>
44	<tr>	44	<tr>
45	<td><a href="http://www.ucdetector.org/" rel="nofollow">	45	<td><a href="http://www.ucdetector.org/" rel="nofollow">
46	<img src="http://www.ucdetector.org/ucdetector32.png"/></a></td>	46	<img src="http://www.ucdetector.org/ucdetector32.png" alt="UCDetector"/></a></td>
47	<td><p>The Unnecessary Code Detector is used by the Tomcat developers to	47	<td><p>The Unnecessary Code Detector is used by the Tomcat developers to
48	identify code to be removed from future versions of Tomcat.</p>	48	identify code to be removed from future versions of Tomcat.</p>
49	</td>	49	</td>
Lines 50-56 Link Here
50	</tr>	50	</tr>
51	<tr>	51	<tr>
52	<td><a href="http://findbugs.sourceforge.net/" rel="nofollow">	52	<td><a href="http://findbugs.sourceforge.net/" rel="nofollow">
53	<img src="http://findbugs.sourceforge.net/buggy-sm.png"/></a></td>	53	<img src="http://findbugs.sourceforge.net/buggy-sm.png" alt="FindBugs"/></a></td>
54	<td><p>FindBugs is used by the Tomcat developers to identify potential coding	54	<td><p>FindBugs is used by the Tomcat developers to identify potential coding
55	errors.</p>	55	errors.</p>
56	</td>	56	</td>
Lines 57-63 Link Here
57	</tr>	57	</tr>
58	<tr>	58	<tr>
59	<td><a href="http://checkstyle.sourceforge.net/" rel="nofollow">	59	<td><a href="http://checkstyle.sourceforge.net/" rel="nofollow">
60	<img src="http://checkstyle.sourceforge.net/images/logo.png"/></a></td>	60	<img src="http://checkstyle.sourceforge.net/images/logo.png" alt="Checkstyle"/></a></td>
61	<td><p>Checkstyle is used by the Tomcat developers to maintain the Tomcat	61	<td><p>Checkstyle is used by the Tomcat developers to maintain the Tomcat
62	coding standard.</p>	62	coding standard.</p>
63	</td>	63	</td>
Lines 64-70 Link Here
64	</tr>	64	</tr>
65	<tr>	65	<tr>
66	<td><a href="http://www.farmanager.com/index.php?l=en" rel="nofollow">	66	<td><a href="http://www.farmanager.com/index.php?l=en" rel="nofollow">
67	<img src="images/far-icon.png"/></a></td>	67	<img src="images/far-icon.png" alt="Far Manager"/></a></td>
68	<td><p>Far Manager is a two-panel file manager application for	68	<td><p>Far Manager is a two-panel file manager application for
69	Microsoft Windows. It works in console mode and is very useful	69	Microsoft Windows. It works in console mode and is very useful
70	to run command-line tools and make small edits that do not require	70	to run command-line tools and make small edits that do not require
Lines 76-85 Link Here
76	</section>	76	</section>
77		77
78	<section name="Commercial Tools">	78	<section name="Commercial Tools">
79	<table>	79	<table class="defaultTable">
80	<tr>	80	<tr>
81	<td><a href="http://www.yourkit.com/" rel="nofollow">	81	<td><a href="http://www.yourkit.com/" rel="nofollow">
82	<img src="images/yjp.gif"/></a></td>	82	<img src="images/yjp.gif" alt="YourKit"/></a></td>
83	<td><p>YourKit, LLC kindly provide free licenses for the YourKit Java Profiler	83	<td><p>YourKit, LLC kindly provide free licenses for the YourKit Java Profiler
84	to open source projects. YourKit Java Profiler is primarily used to	84	to open source projects. YourKit Java Profiler is primarily used to
85	investigate performance and memory leak issues reported in Apache Tomcat.	85	investigate performance and memory leak issues reported in Apache Tomcat.
Lines 89-95 Link Here
89	</tr>	89	</tr>
90	<tr>	90	<tr>
91	<td><a href="http://msdn.microsoft.com/" rel="nofollow">	91	<td><a href="http://msdn.microsoft.com/" rel="nofollow">
92	<img src="images/msdn.png"/></a></td>	92	<img src="images/msdn.png" alt="MSDN"/></a></td>
93	<td><p>Microsoft kindly provide free MSDN licenses to Apache committers that	93	<td><p>Microsoft kindly provide free MSDN licenses to Apache committers that
94	have a requirement for them. MSDN is primarily used to provide build and	94	have a requirement for them. MSDN is primarily used to provide build and
95	test environments for the ISAPI redirector and the Windows APR/native	95	test environments for the ISAPI redirector and the Windows APR/native
Lines 99-105 Link Here
99	</tr>	99	</tr>
100	<tr>	100	<tr>
101	<td><a href="http://www.structure101.com/" rel="nofollow">	101	<td><a href="http://www.structure101.com/" rel="nofollow">
102	<img src="images/s101.png"/></a></td>	102	<img src="images/s101.png" alt="Structure 101"/></a></td>
103	<td><p>Headway software kindly provide free licenses for Structure 101 to open	103	<td><p>Headway software kindly provide free licenses for Structure 101 to open
104	source projects. Structure 101 is primarily being used in Tomcat trunk to	104	source projects. Structure 101 is primarily being used in Tomcat trunk to
105	analyze the current package dependencies and identify areas where they may	105	analyze the current package dependencies and identify areas where they may

Lines 143-153 Link Here

(-)xdocs/whichversion.xml (-7 / +5 lines)
143	<strong>Servlet 3.1</strong>, <strong>JSP 2.3</strong>, <strong>EL 3.0</strong>	143	<strong>Servlet 3.1</strong>, <strong>JSP 2.3</strong>, <strong>EL 3.0</strong>
144	and <strong>Web Socket 1.0</strong> specifications. In addition	144	and <strong>Web Socket 1.0</strong> specifications. In addition
145	to that, it includes the following improvements:	145	to that, it includes the following improvements:
		146	</p>
146	<ul>	147	<ul>
147	<li>A single, common resources implementation to replace the multiple resource	148	<li>A single, common resources implementation to replace the multiple resource
148	extension features provided in earlier versions.</li>	149	extension features provided in earlier versions.</li>
149	</ul>	150	</ul>
150	</p>
151		151
152	<p>Tomcat 8 is currently in an alpha state. Regular (at least monthly) release	152	<p>Tomcat 8 is currently in an alpha state. Regular (at least monthly) release
153	candidates are being made available for testing. All the specifications are	153	candidates are being made available for testing. All the specifications are
Lines 168-173 Link Here
168	Tomcat 6.0.x and implements the <strong>Servlet 3.0</strong>,	168	Tomcat 6.0.x and implements the <strong>Servlet 3.0</strong>,
169	<strong>JSP 2.2</strong> and <strong>EL 2.2</strong> specifications. In addition	169	<strong>JSP 2.2</strong> and <strong>EL 2.2</strong> specifications. In addition
170	to that, it includes the following improvements:	170	to that, it includes the following improvements:
		171	</p>
171	<ul>	172	<ul>
172	<li>Web application memory leak detection and prevention</li>	173	<li>Web application memory leak detection and prevention</li>
173	<li>Improved security for the Manager and Host Manager applications</li>	174	<li>Improved security for the Manager and Host Manager applications</li>
Lines 175-181 Link Here
175	<li>Support for including external content directly in a web application</li>	176	<li>Support for including external content directly in a web application</li>
176	<li>Refactoring (connectors, lifecycle) and lots of internal code clean-up</li>	177	<li>Refactoring (connectors, lifecycle) and lots of internal code clean-up</li>
177	</ul>	178	</ul>
178	</p>
179		179
180	</section>	180	</section>
181		181
Lines 186-197 Link Here
186	Tomcat 5.5.x and implements the <strong>Servlet 2.5</strong> and	186	Tomcat 5.5.x and implements the <strong>Servlet 2.5</strong> and
187	<strong>JSP 2.1</strong> specifications. In addition to that, it includes the	187	<strong>JSP 2.1</strong> specifications. In addition to that, it includes the
188	following improvements:	188	following improvements:
		189	</p>
189	<ul>	190	<ul>
190	<li>Memory usage optimizations</li>	191	<li>Memory usage optimizations</li>
191	<li>Advanced IO capabilities</li>	192	<li>Advanced IO capabilities</li>
192	<li>Refactored clustering</li>	193	<li>Refactored clustering</li>
193	</ul>	194	</ul>
194	</p>
195		195
196	</section>	196	</section>
197		197
Lines 209-215 Link Here
209	</p>	209	</p>
210		210
211	<p><strong>Apache Tomcat 5.0.x</strong> improves on Apache Tomcat 4.1 in many	211	<p><strong>Apache Tomcat 5.0.x</strong> improves on Apache Tomcat 4.1 in many
212	ways, including:	212	ways, including:</p>
213	<ul>	213	<ul>
214	<li>Performance optimizations and reduced garbage collection</li>	214	<li>Performance optimizations and reduced garbage collection</li>
215	<li>Refactored application deployer, with an optional standalone deployer	215	<li>Refactored application deployer, with an optional standalone deployer
Lines 224-230 Link Here
224	<li>Integrated session clustering</li>	224	<li>Integrated session clustering</li>
225	<li>Expanded documentation</li>	225	<li>Expanded documentation</li>
226	</ul>	226	</ul>
227	</p>
228		227
229	</section>	228	</section>
230		229
Lines 239-245 Link Here
239	specifications.</p>	238	specifications.</p>
240		239
241	<p><strong>Apache Tomcat 4.1.x</strong> is a refactoring	240	<p><strong>Apache Tomcat 4.1.x</strong> is a refactoring
242	of Apache Tomcat 4.0.x, and contains significant enhancements, including:	241	of Apache Tomcat 4.0.x, and contains significant enhancements, including:</p>
243	<ul>	242	<ul>
244	<li>JMX based administration features</li>	243	<li>JMX based administration features</li>
245	<li>JSP and Struts based administration web application</li>	244	<li>JSP and Struts based administration web application</li>
Lines 251-257 Link Here
251	<li>Custom Ant tasks to interact with the manager application directly	250	<li>Custom Ant tasks to interact with the manager application directly
252	from build.xml scripts</li>	251	from build.xml scripts</li>
253	</ul>	252	</ul>
254	</p>
255		253
256	<p><strong>Apache Tomcat 4.0.x</strong>. Apache Tomcat 4.0.6 is the old production	254	<p><strong>Apache Tomcat 4.0.x</strong>. Apache Tomcat 4.0.6 is the old production
257	quality release. The 4.0 servlet	255	quality release. The 4.0 servlet