{"shas":[["2e4952c8b3bdc185ee5bb1d9a6cab8d8ffa7b55e","092419982d0c6461ed120da249e9ffa3109950e0","Repo copy files","repo-copy"],["482378c7362edd5b6dd87d5400463b7bcb0f7f7a","8ccf35525eea5c998706e64c29299d3cc02322fa","Update apache-tomcat55 to 5.5.34.\n\nGeneral\n * Update Tomcat-Native to 1.1.22. (jim)\n * Fix CVE-2011-2729. Update to Commons Daemon 1.0.7. (markt)\n * 33262: When using the Windows installer, the monitor is now auto-started for\n   the current user rather than all users to be consistent with menu item\n   creation. (markt)\n * 40510: Provide an option within the Windows installer to create menu entries\n   for the current user or all users. (markt)\n * 50949: Add the ability to specify the AJP port and the shutdown port when\n   using the Windows installer. (markt)\n * 51135: Fix auto-detection of JAVA_HOME for 64-bit Windows platforms that only\n   have a 32-bit JVM installed when using the Windows installer. (markt)\n\nCatalina\n * 27988: Improve reporting of missing files. (markt)\n * 28852: Add URL encoding where missing to parameters in URLs presented by Ant\n   tasks to the Manager application. Based on a patch by Stephane Bailliez.\n   (mark)\n * 41179: Return 404 rather than 400 for requests to the ROOT context when no\n   ROOT context has been deployed. (markt)\n * 50189: Once the application has finished writing to the response, prevent\n   further reads from the request since this causes various problems in the\n   connectors which do not expect this. (markt)\n * Fix CVE-2011-2204. Prevent user passwords appearing in log files if a\n   runtime exception (e.g. OOME) occurs while creating a new user for a\n   MemoryUserDatabase via JMX. (markt)\n * 51042: Don't trigger session creation listeners when a session ID is changed\n   as part of the authentication process. (markt)\n * 51324: Improve handling of exceptions when flushing the response buffer to\n   ensure that the doFlush flag does not get stuck in the enabled state. Patch\n   provided by Jeremy Norris. (kkolinko)\n * 51403: Avoid NullPointerException in JULI FileHandler if formatter is\n   misconfigured. (kkolinko)\n * 51473: Fix concatenation of values in SecurityConfig.setSecurityProperty()\n   when the value provided by JRE is null. (kkolinko)\n * 51550: Internal errors in Tomcat components that process requests before they\n   are passed to a web application, such as Authenticators, now return a 500\n   response rather than a 200 response. (markt)\n * Add additional configuration options to the DIGEST authenticator. (markt)\n\nCoyote\n * Fix CVE-2011-2526. Protect against crashes (HTTP APR) if sendfile is\n   configured to send more data than is available in the file. (markt)\n * 50394: Return -1 from read operation instead of throwing an exception when\n   encountering an EOF with the HTTP APR connector. (kkolinko)\n * 50744: Skip the SSL configuration check on platforms where an unbounded\n   socket cannot be created. (kkolinko)\n * 51073: Throw an exception and do not start the APR connector if it is\n   configured for SSL and an invalid value is provided for SSLProtocol. (markt)\n * 51698: Fix CVE-2011-3190. Prevent AJP message injection. (markt)\n\nJasper\n * 36362: Handle the case where tag file attributes (which can use any valid XML\n   name) have a name which is not a Java identifier. (markt)\n * Fix possible threading issue in JSP compilation when development mode is\n   enabled. (markt)\n\nCluster\n * 48717: Ensure session activation events are fired. (markt)\n * 50771: Ensure HttpServletRequest#getAuthType() returns the name of the\n   authentication scheme if request has already been authenticated. (kfujino)\n * 51647: Fix session replication when a session attribute is a Java dynamic\n   proxy. Based on a patch by Tomasz Skutnik. (markt)\n\nWebapps\n * 41498: Add the allRolesMode attribute to the Realm configuration page in the\n   documentation web application. (markt)\n *  Configure Security Manager How-To to include a copy of the actual\n    conf/catalina.policy file when the documentation is built, rather than\n    maintaining a copy of its content. (kkolinko)\n * 48997: Fixed some typos and improve cross-referencing to the HTTP Connector\n   and APR documentation with the SSL How-To page of the documentation web\n   application. (markt)\n\nOther\n * Align jpda settings in catalina.bat with catalina.sh, tc6.0.x, tc7.0.x and\n   trunk. (markt)\n * Clarify error messages in *.sh files to mention that if a script is not found\n   it might be because execute permission is needed. (kkolinko)","obache"],["a9d84f91bf334e29b8d2e50aac14f6f72cd8bc98","8ccf35525eea5c998706e64c29299d3cc02322fa","Updated www/apache-tomcat55 to 5.5.34","obache"],["66ad35962dbe4c07bc8df7c1d078074cf12bfb66","87d10de1d38d207c8404ff018e5e7247a4c9d109@dragonflybsd.org","Fixup fromcvs/togit conversion","pkgsrc fixup"]],"ref":"refs/heads/master","size":4,"head":"66ad35962dbe4c07bc8df7c1d078074cf12bfb66","push_id":43921246}