Update apache-tomcat8 to 8.0.36

Huge number of fixes listed at

  http://tomcat.apache.org/tomcat-8.0-doc/changelog.html

Highlights of fixes:

     * Fix: RMI Target related memory leaks are avoidable which makes them
       an application bug that needs to be fixed rather than a JRE bug to
       work around. Therefore, start logging RMI Target related memory
       leaks on web application stop. Add an option that controls if the
       check for these leaks is made. Log a warning if running on Java 9
       with this check enabled but without the command line option it
       requires. (markt)
     * Fix: Ensure NPE will not be thrown during deployment when scanning
       jar files without MANIFEST.MF file. (violetagg)
     * Fix: 59604: Correct the assumption made in the URL decoding that
       the default platform encoding is always compatible with ISO-8859-1.
       This assumption is not always valid, e.g. on z/OS. (markt)
     * Fix: 59608: Skip over any invalid Class-Path attribute from JAR
       manifests. Log errors at debug level due to many bad libraries.
       (remm)
     * Fix: Ensure that requests with HTTP method names that are not
       tokens (as required by RFC 7231) are rejected with a 400 response.
       (markt)
     * Fix: When an asynchronous request is processed by the AJP
       connector, ensure that request processing has fully completed
       before starting the next request. (markt)
     * Fix: If an async dispatch results in the completion of request
       processing, ensure that any remaining request body is swallowed
       before starting the processing of the next request else the
       remaining body may be read as the start of the next request leading
       to a 400 response. (markt)
     * Fix: Fix a memory leak in the expression language implementation
       that caused the class loader of the first web application to use
       expressions to be pinned in memory. (markt)
     * Fix: Correctly configure the base path for a resources directory
       provided by an expanded JAR file. Patch provided by hengyunabc.
       (markt)
     * Fix: 59317: Ensure that HttpServletRequest.getRequestURI() returns
       an encoded URI rather than a decoded URI after a dispatch. (markt)

Highlights of non-fixes:

     * Update: Update the internal fork of Commons DBCP 2 to r1743696
       (2.1.1 plus additional fixes). (markt)
     * Update: Update the internal fork of Commons Pool 2 to r1743697
       (2.4.2 plus additional fixes). (markt)
     * Update: Update the internal fork of Commons File Upload to r1743698
       (1.3.1 plus additional fixes). (markt)
     * Update: Update the option code coverage tool Cobertura to 2.1.1 so
       it is easier to compare the change in lines of code between 8.0.x
       and 9.0.x. (markt)
     * Add: Add a new environment variable JSSE_OPTS that is intended to
       be used to pass JVM wide configuration to the JSSE implementation.
       The default value is -Djdk.tls.ephemeralDHKeySize=2048 which
       protects against weak Diffie-Hellman keys with Java 8. (markt)
     * Update: Exclude ciphers that use RSA keys from the default cipher
       list since they do not support forward secrecy. (markt)
     * Update: Update the packaged version of the Tomcat Native Library to
       1.2.7 to pick up the Windows binaries that are based on OpenSSL
       1.0.2h and APR 1.5.2. (markt)
This commit is contained in:
prlw1 2016-06-16 12:44:01 +00:00
parent 372f9f8dc6
commit f779e840dc
2 changed files with 7 additions and 7 deletions

View file

@ -1,4 +1,4 @@
# $NetBSD: Makefile,v 1.7 2016/05/01 00:42:21 ryoon Exp $
# $NetBSD: Makefile,v 1.8 2016/06/16 12:44:01 prlw1 Exp $
#
DISTNAME= apache-tomcat-${TOMCAT_VER}
@ -21,7 +21,7 @@ USE_TOOLS+= pax
.include "../../mk/bsd.prefs.mk"
TOMCAT_VER= 8.0.33
TOMCAT_VER= 8.0.36
TOMCAT_HOME= ${PREFIX}/share/tomcat
EGDIR= ${PREFIX}/share/examples/tomcat
DOCDIR= ${PREFIX}/share/doc/tomcat

View file

@ -1,6 +1,6 @@
$NetBSD: distinfo,v 1.8 2016/05/01 00:42:21 ryoon Exp $
$NetBSD: distinfo,v 1.9 2016/06/16 12:44:01 prlw1 Exp $
SHA1 (apache-tomcat-8.0.33.tar.gz) = c44e6b6a58b514818e9c944d8f04ca5cc58d0777
RMD160 (apache-tomcat-8.0.33.tar.gz) = 81e7455249f55be0cf1104b16741f1d59a3a94b8
SHA512 (apache-tomcat-8.0.33.tar.gz) = 62b932357db364d23460adb2a16aa025c36d2baa6cb4da067736e4c534ba5b00cf0906c5dd8575f10267326192f42cc2526077a771ad32560516645cef163d57
Size (apache-tomcat-8.0.33.tar.gz) = 9250362 bytes
SHA1 (apache-tomcat-8.0.36.tar.gz) = c711970918f4c0ebd120cf35605795c416e342c8
RMD160 (apache-tomcat-8.0.36.tar.gz) = 455ff967d703d9a553e5e320a7b37007c8d56ecc
SHA512 (apache-tomcat-8.0.36.tar.gz) = 6ef75a86173d07587ef1a8cae93aed2af34741e0c9dd42aee2ff49441b546f007f884e0baf9aa65ed35bfaeabfac5bd1dbd1e888b4f954fc75445746cdded51f
Size (apache-tomcat-8.0.36.tar.gz) = 9277365 bytes