tomcat11-docs-webapp-11.0.18-150600.13.15.1<>,Lip9|_W/t6>#Mhw<~:0mN]g7[52_a$t<"}@=OKJ[79m.1JG !ts2qрb=PG Hfaf%r%4`{΅AAQͥhW#TMD_6?W{gd6p4gAM$I >@?Ӹd . [ 'AGN <    4R 5 7;?8?`BHB B CM CCC(C8C 9C :D >FGHIXY\]^b1cd]ebfelgu|vdzXhlrӴCtomcat11-docs-webapp11.0.18150600.13.15.1The "docs" web application for Apache TomcatThe documentation of web application for Apache Tomcat.ih03-ch2a>SUSE Linux Enterprise 15SUSE LLC Apache-2.0https://www.suse.com/Productivity/Networking/Web/Servershttps://tomcat.apache.orglinuxnoarchchown -R tomcat:tomcat /usr/share/tomcat/tomcat-webapps/docs/META-INF runuser -u tomcat -g tomcat -- xsltproc --output /usr/share/tomcat/tomcat-webapps/docs/META-INF/context.xml /etc/tomcat/allowLinking.xslt /usr/share/tomcat/tomcat-webapps/docs/META-INF/context.xml if [ ! -e /usr/share/tomcat/webapps/docs ]; then ln -sf /usr/share/tomcat/tomcat-webapps/docs /usr/share/tomcat/webapps/docs fi`rF>DF@l5SW8@lHw rO>c  % \$G _1 |$}  q 7dI ^^F2 ,:rCS"ِRL' fb^S37?B6R$J38{(=Z@i+s#/0": LT0$ =ZqqK-P`uz37/Lmu R`YURdXLSXRs+8J<i~ x{]'+*X,m/EA T \B% T r D P'.QLcA큤A큤AA큤A큤A큤A큤A큤A큤AA큤AA큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤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.0.18-150600.13.15.1.src.rpmtomcat-implementation-docs-webapptomcat11-docs-webapp     /bin/shlibxslt-toolsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PartialHardlinkSets)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)tomcat11util-linux3.0.4-14.6.0-14.0.4-14.0-15.2-111.0.18-150600.13.15.1tomcat-implementation-docs-webapp4.14.3ii_i hhP@hChZ@hH@h@hhmricardo.mestre@suse.commichele.bussolotto@suse.comricardo.mestre@suse.comfstrba@suse.commichele.bussolotto@suse.commichele.bussolotto@suse.commichele.bussolotto@suse.commichele.bussolotto@suse.comfstrba@suse.comfstrba@suse.comricardo.mestre@suse.com- Update to Tomcat 11.0.18 - adapt tomcat-jdt.patch * Fixed CVEs: + CVE-2025-66614: client certificate verification bypass due to virtual host mapping (bsc#1258371) + CVE-2026-24733: improper input validation on HTTP/0.9 requests (bsc#1258385) + CVE-2026-24734: certificate revocation bypass due to incomplete OCSP verification checks (bsc#1258387) * Catalina + Fix: 69932: Fix request end access log pattern regression, which would log the start time of the request instead. (remm) + Fix: 69623: Additional fix for the long standing regression that meant that calls to ClassLoader.getResource().getContent() failed when made from within a web application with resource caching enabled if the target resource was packaged in a JAR file. (markt) + Fix: Pull request #923: Avoid adding multiple CSRF tokens to a URL in the CsrfPreventionFilter. (schultz) + Fix: 69918: Ensure request parameters are correctly parsed for HTTP/2 requests when the content-length header is not set. (dsoumis) + Update: Enable minimum and recommended Tomcat Native versions to be set separately for Tomcat Native 1.x and 2.x. Update the minimum and recommended versions for Tomcat Native 1.x to 1.3.4. Update the minimum and recommended versions for Tomcat Native 2.x to 2.0.12. (markt) + Add: Add a new ssoReauthenticationMode to the Tomcat provided Authenticators that provides a per Authenticator override of the SSO Valve requireReauthentication attribute. (markt) + Fix: Ensure URL encoding errors in the Rewrite Valve trigger an exception rather than silently using a replacement character. (markt) + Fix: 69871: Increase log level to INFO for missing configuration for the rewrite valve. (remm) + Fix: Add log warnings for additional Host appBase suspicious values. (remm) + Fix: Remove hard dependency on tomcat-jni.jar for catalina.jar. org.apache.catalina.Connector no longer requires org.apache.tomcat.jni.AprStatus to be present. (markt) + Add: Add the ability to use a custom function to generate the client identifier in the CrawlerSessionManagerValve. This is only available programmatically. Pull request #902 by Brian Matzon. (markt) + Fix: Change the SSO reauthentication behaviour for SPNEGO authentication so that a normal SPNEGO authentication is performed if the SSL Valve is configured with reauthentication enabled. This is so that the delegated credentials will be available to the web application. (markt) + Fix: When generating the class path in the Loader, re-order the check on individual class path components to avoid a potential NullPointerException. Identified by Coverity Scan. (markt) + Fix: Fix SSL socket factory configuration in the JNDI realm. Based on pull request #915 by Joshua Rogers. (remm) + Update: Add an attribute, digestInRfc3112Order, to MessageDigestCredentialHandler to control the order in which the credential and salt are digested. By default, the current, non-RFC 3112 compliant, order of salt then credential will be used. This default will change in Tomcat 12 to the RFC 3112 compliant order of credential then salt. (markt) * Cluster + Add: 62814: Document that human-readable names may be used for mapSendOptions and align documentation with channelSendOptions. Based on pull request #929 by archan0621. (markt) * Clustering + Fix: Correct a regression introduced in 11.0.11 that broke some clustering configurations. (markt) * Coyote + Fix: 69936: Fix bug in previous fix for Tomcat Native crashes on shutdown that triggered a significant memory leak. Patch provided by Wes. (markt) + Fix: Prevent concurrent release of OpenSSLEngine resources and the termination of the Tomcat Native library as it can cause crashes during Tomcat shutdown. (markt) + Fix: Improve warnings when setting ciphers lists in the FFM code, mirroring the tomcat-native changes. (remm) + Fix: 69910: Dereference TLS objects right after closing a socket to improve memory efficiency. (remm) + Fix: Relax the JSSE vs OpenSSL configuration style checks on SSLHostConfig to reflect the existing implementation that allows one configuration style to be used for the trust attributes and a different style for all the other attributes. (markt) + Fix: Better warning message when OpenSSLConf configuration elements are used with a JSSE TLS implementation. (markt) + Fix: When using OpenSSL via FFM, don't log a warning about missing CA certificates unless CA certificates were configured and the configuration failed. (markt) + Add: For configuration consistency between OpenSSL and JSSE TLS implementations, TLSv1.3 cipher suites included in the ciphers attribute of an SSLHostConfig are now always ignored (previously they would be ignored with OpenSSL implementations and used with JSSE implementations) and a warning is logged that the cipher suite has been ignored. (markt) + Add: Add the ciphersuite attribute to SSLHostConfig to configure the TLSv1.3 cipher suites. (markt) + Add: Add OCSP support to JSSE based TLS connectors and make the use of OCSP configurable per connector for both JSSE and OpenSSL based TLS implementations. Align the checks performed by OpenSSL with those performed by JSSE. (markt) + Add: Add support for soft failure of OCSP checks with soft failure support disabled by default. (markt) + Add: Add support for configuring the verification flags passed to OCSP_basic_verify when using an OpenSSL based TLS implementation. (markt) + Fix: Fix OpenSSL FFM code compatibility with LibreSSL versions below 3.5. (remm) + Fix: Don't log an incorrect certificate KeyStore location when creating a TLS connector if the KeyStore instance has been set directly on the connector. (markt) + Fix: HTTP/0.9 only allows GET as the HTTP method. (remm) + Add: Add strictSni attribute on the Connector to allow matching the SSLHostConfig configuration associated with the SNI host name to the SSLHostConfig configuration matched from the HTTP protocol host name. Non matching configurations will cause the request to be rejected. The attribute default value is true, enabling the matching. (remm) + Fix: Graceful failure for OCSP on BoringSSL in the FFM code. (remm) + Fix: 69866: Fix a memory leak when using a trust store with the OpenSSL provider. Pull request #912 by aogburn. (markt) + Fix: Fix potential crash on shutdown when a Connector depends on the Tomcat Native library. (markt) + Fix: Fix AJP message length check. Pull request #916 by Joshua Rogers. (remm) * Jasper + Fix: 69333: Correct a regression in the previous fix for 69333 and ensure that reuse() or release() is always called for a tag. (markt) + Fix: 69877: Catch IllegalArgumentException when processing URIs when creating the classpath to handle invalid URIs. (remm) + Fix: Fix populating the classpath with the webapp classloader repositories. (remm) + Fix: 69862: Avoid NPE unwrapping Servlet exception which would hide some exception details. Patch submitted by Eric Blanquer. (remm) * Jdbc-pool + Fix: 64083: If the underlying connection has been closed, don't add it to the pool when it is returned. Pull request #235 by Alex Panchenko. (markt) * Web applications + Fix: Manager: Fix abrupt truncation of the HTML and JSON complete server status output if one or more of the web applications failed to start. (schultz) + Add: Manager: Include web application state in the HTML and JSON complete server status output. (markt) + Add: Documentation: Expand the documentation to better explain when OCSP is supported and when it is not. (markt) * Websocket + Fix: 69920: When attempting to write to a closed Writer or OutputStream obtained from a WebSocket session, throw an IOException rather than an IllegalStateExcpetion as required by Writer and strongly suggested by OutputStream. (markt) * Other + Add: Add property "gpg.sign.files" to optionally disable release artefact signing with GPG. (rjung) + Add: Add test.silent property to suppress JUnit console output during test execution. Useful for cleaner console output when running tests with multiple threads. (csutherl) + Update: Update the internal fork of Commons Pool to 2.13.1. (markt) + Update: Update the internal fork of Commons DBCP to 2.14.0. (markt) + Update: Update Commons Daemon to 1.5.1. (markt) + Update: Update to the Eclipse JDT compiler 4.37. (markt) + Update: Update ByteBuddy to 1.18.3. (markt) + Update: Update UnboundID to 7.0.4. (markt) + Update: Update Checkstyle to 12.3.1. (markt) + Add: Improvements to French translations. (markt) + Add: Improvements to Japanese translations provided by tak7iji. (markt) + Add: Improvements to Chinese translations provided by Yang. vincent.h and yong hu. (markt) + Update: Update Tomcat Native to 2.0.12. (markt) + Add: Add test profile system for selective test execution. Profiles can be specified via -Dtest.profile= to run specific test subsets without using patterns directly. Profile patterns are defined in test-profiles.properties. (csutherl) + Update: Update file extension to media type mappings to align with the current list used by the Apache Web Server (httpd). (markt) + Update: Update the packaged version of the Tomcat Migration Tool for Jakarta EE to 1.0.10. (markt) + Update: Update Commons Daemon to 1.5.0. (markt) + Update: Update Byte Buddy to 1.18.2. (markt) + Update: Update Checkstyle to 12.2.0. (markt) + Add: Improvements to Spanish translations provided by White Vogel. (markt) + Add: Improvements to French translations. (remm) + Add: Improvements to Japanese translations provided by tak7iji. (markt) + Update: Update the internal fork of Apache Commons BCEL to 6.11.0. (markt) + Update: Update to the Eclipse JDT compiler 4.37. (markt) + Update: Update to Byte Buddy 1.17.8. (markt) + Update: Update to Checkstyle 12.1.1. (markt) + Update: Update to Jacoco 0.8.14. (markt) + Update: Update to SpotBugs 4.9.8. (markt) + Update: Update to JSign 7.4. (markt) + Update: Update Maven Resolver Ant Tasks to 1.6.0. (rjung) + Add: Improvements to French translations. (remm) + Add: Improvements to Japanese translations provided by tak7iji. (markt)- make catalina.sh %config(noreplace) (bsc#1253460)- Update to Tomcat 11.0.13 * Fixed CVEs: + CVE-2025-55752: directory traversal via rewrite with possible RCE if PUT is enabled (bsc#1252753) + CVE-2025-55754: Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat (bsc#1252905) + CVE-2025-61795: temporary copies during the processing of multipart upload can lead to a denial of service (bsc#1252756) * Catalina + Add: Add CIDR support for the configuration of internal and trusted proxies for the RemoteIpFilter and RemoteIpValve. Configuration via regular expression has been deprecated and will be removed in Tomcat 12. (markt) + Fix: Log warnings when the SSO configuration does not comply with the documentation. (remm) + Update: Deprecate the RemoteAddrFilter and RemoteAddValve in favour of the RemoteCIDRFilter and RemoteCIDRValve. (markt) + Fix: 69837: Fix corruption of the class path generated by the Loader when running on Windows. (markt) + Fix: Reject requests that map to invalid Windows file names earlier. (markt) + Fix: 69839: Ensure that changes to session IDs (typically after authentication) are promulgated to the SSO Valve to ensure that SSO entries are fully clean-up on session expiration. Patch provided by Kim Johan Andersson. (markt) + Fix: Fix a race condition in the creation of the storage location for the FileStore. (markt) + Update: Change the digest used to calculate strong ETags (if enabled) for the default Servlet from SHA-1 to SHA-256 to align with the recommendation in RFC 9110 that hash functions used to generate strong ETags should be collision resistant. (markt) + Fix: HTTP methods are case-sensitive so always use case sensitive comparisons when comparing HTTP methods. (markt) + Fix: 69814: Ensure that HttpSession.isNew() returns false once the client has joined the session. (markt) + Fix: Further performance improvements for ParameterMap. (jengebr/markt) + Code: Refactor access log time stamps to be based on the Instant request processing starts. (markt) + Fix: Fix a case-sensitivity issue in the trailer header allow list. (markt) + Fix: Be proactive in cleaning up temporary files after a failed multi-part upload rather than waiting for GC to do it. (markt) + Code: Remove a number of unnecessary packages from the catalina-deployer.jar. (markt) + Fix: 69781: Fix concurrent access issues in the session FileStore implementation that were causing lost sessions when the store was used with the PersistentValve. Based on pull request #882 by Aaron Ogburn. (markt) + Code: Refactor WebResource locking to use the new KeyedReentrantReadWriteLock. (markt) + Fix: Fix handling of QSA and QSD flags in RewriteValve. (markt) * Cluster + Fix: Prevent the channel configuration (sender, receiver, membership service) from being changed unless the channel is fully stopped. (markt) + Fix: Handle spurious wake-ups during leader election for NonBlockingCoordinator. (markt) + Fix: Handle spurious wake-ups during sending of messages by RpcChannel. (markt) * Coyote + Fix: 69836: Incorrect processing of partitioned setting when generating session cookie. Patch submitted by Marc Pynaert. (remm) + Fix: 69848: Fix copy/paste errors in 11.0.12 that meant DELETE requests received via the AJP connector were processed as OPTIONS requests and PROPFIND requests were processed as TRACE. (markt) + Update: Add specific certificate selection code for TLS 1.3 supporting post quantum cryptography. Certificates defined with type MLDSA will be selected depending on the TLS client hello. (remm) + Update: Add groups attribute on SSLHostConfig allowing to restrict which groups can be enabled on the SSL engine. (remm) + Add: Optimize the conversion of HTTP method from byte form to String form. (markt) + Fix: Store HTTP request headers using the original case for the header name rather than forcing it to lower case. (markt) + Fix: 69762: Additional overflow fix for HPACK decoding of integers. Pull request #880 by Chenjp. (markt) + Fix: Ensure keys are handed out to OpenSSL even if PEMFile fails to process it, with appropriate logging. (remm) + Fix: Add new ML-DSA key algorithm to PEMFile and improve reporting when reading a key fails. (remm) + Fix: Fix possible early timeouts for network operations caused by a spurious wake-up of a waiting thread. Found by Coverity Scan. (markt) * Web applications + Fix: Documentation. Clarify the purpose of the maxPostSize attribute of the Connector element. (markt) + Fix: Avoid NPE in manager webapp displaying certificate information. (remm) * Websocket + Fix: 69845: When using permessage-deflate with Java 25 onwards, handle the underlying Inflater and/or Deflater throwing IllegalStateException when closed rather than NullPointerException as they do in Java 24 and earlier. (markt) * Other + Fix: 69847: Remove remaining references to the org.apache.tomcat.util.codec.binary package which has been deleted. (markt) + Update: Update Byte Buddy to 1.17.7. (markt) + Update: Update Checkstyle to 11.1.0. (markt) + Update: Update SpotBugs to 4.9.6. (markt) + Update: Update Jsign to 7.2. (markt) + Add: Improvements to Russian translations provided by usmazat. (markt) + Add: Improvements to French translations. (remm) + Add: Improvements to Japanese translations provided by tak7iji. (markt) + Update: Minor refactoring in JULI loggers. Patch provided by minjund. (schultz) + Code: Review logging and include the full stack trace and exception message by default rather then just the exception message when logging an error or warning in response to an exception. (markt) + Add: Add escaping to log formatters to align with JSON formatter. (markt) + Update: Update Checkstyle to 11.0.0. (markt)- Do not use update-alternatives- Update to Tomcat 11.0.10 * Fixed CVEs: + CVE-2025-48989: Update the HTTP/2 overhead documentation (bsc#1243895) * Catalina + Fix: Fix bloom filter population for archive indexing when using a packed WAR containing one or more JAR files. (markt) * Coyote + Fix: 69748: Add missing call to set keep-alive timeout when using HTTP/1.1 following an async request, which was present for AJP. (remm/markt) + Fix: 69762: Fix possible overflow during HPACK decoding of integers. Note that the maximum permitted value of an HPACK decoded integer is Integer.MAX_VALUE. (markt) + Fix: Update the HTTP/2 overhead documentation - particularly the code comments - to reflect the deprecation of the PRIORITY frame and clarify that a stream reset always triggers an overhead increase. (markt) * Cluster + Update: Add enableStatistics configuration attribute for the DeltaManager, defaulting to true. (remm) * WebSocket + Fix: Align the WebSocket extension handling for WebSocket client connections with WebSocket server connections. The WebSocket client now only includes an extension requested by an endpoint in the opening handshake if the WebSocket client supports that extension. (markt) * Web applications + Fix: Manager and Host Manager. Provide the Manager and Host Manager web applications with a dedicated favicon file rather than using the one from the ROOT web application which might not be present or may represent something entirely different. Pull requests #876 and #878 by Simon Arame. * Other + Update: Update Checkstyle to 10.26.1. (markt) + Add: Improvements to French translations. (remm) + Add: Improvements to Japanese translations by tak7iji. (markt)- Update to Tomcat 11.0.9 - adapt tomcat-jdt.patch * Fixed CVEs: + CVE-2025-52520: Align size tracking for multipart requests with FileUpload's use of long. (bsc#1246388) + CVE-2025-53506: Apply the initial HTTP/2 connection limits earlier. (bsc#1246318) * Catalina + Fix: Ensure application configured welcome files override the defaults when configuring an embedded web application programmatically. (markt) + Update: Optimize Request#getCharsetHolder to avoid repeated parsing when charset is null. Patch provided by morning-gu. (schultz) + Fix: Allow the default servlet to set the content length when the content length is known, no content has been written and a Writer is being used. (markt) + Fix: 69717: Correct a regression in the fix for CVE-2025-49125 that prevented access to PreResources and PostResources when mounted below the web application root with a path that was terminated with a file separator. (remm/markt) + Fix: 69731: Fix an issue that meant that the value of maxParameterCount applied was smaller than intended for multipart uploads with non-file parts when the parts were processed before query string parameters. (markt) + Fix: Align size tracking for multipart requests with FileUpload's use of long. (schultz) * Coyote + Fix: 69710: Increase the default for maxPartCount from 10 to 50. Update the documentation to provide more details on the memory requirements to support multi-part uploads while avoiding a denial of service risk. (markt) + Fix: 69713: Correctly handle an HTTP/2 data frame that includes padding when the headers include a content-length. (remm/markt) + Fix: Correctly collect statistics for HTTP/2 requests and avoid counting one request multiple times. Based on pull request #868 by qingdaoheze. (markt) + Fix: Fix JMX value for keepAliveCount on the endpoint. Also add the value of useVirtualThreads in JMX. (remm) + Fix: 69728: Remove incorrect warning when HTTP/2 is used with optional certificate verification and improve the warnings when a web application tries to use CLIENT-CERT with either HTTP/2 or a JSSE implementation of TLS 1.3. (markt) + Fix: When setting the initial HTTP/2 connection limit, apply those limits earlier. (markt) * Jasper + Code: Remove IMPL_OBJ_START from EL grammar for IDENTIFIER. (markt) + Code: Remove the INSTANCEOF and FUNCTIONSUFFIX definitions from the EL grammar as both are unused. (markt) * Web applications + Add: Documentation. Provide more explicit guidance regarding the security considerations for enabling write access to the web application via WebDAV, HTTP PUT requests or similar. (markt) + Add: Documentation. Add a section on reverse proxies to the security considerations page. (markt) * Other + Update: Update to the Eclipse JDT compiler 4.36. (markt) + Update: Update UnboundID to 7.0.3. (markt) + Update: Update Checkstyle to 10.25.1. (markt) + Update: Improvements to French translations. (remm) + Update: Improvements to Japanese translations provided by tak7iji. (markt)- Update to Tomcat 11.0.8 * Fixed CVEs: + CVE-2025-46701: refactor CGI servlet to access resources via WebResources (bsc#1243815) + CVE-2025-48988: limits the total number of parts in a multi-part request and limits the size of the headers provided with each part (bsc#1244656) + CVE-2025-49125: Expand checks for webAppMount (bsc#1244649) * Catalina + Add: Support for the java:module namespace which mirrors the java:comp namespace. + Fix: 69690: Calling HttpServletRequest.getParameter() and related methods for a request with content type multipart/form-data when the mapped servlet does not have a @MultipartConfig or equivalent should not trigger an exception. Note that calling getPart() or getParts() is these circumstances will trigger an exception. + Add: Support parsing of multiple path parameters separated by ; in a single URL segment. Based on pull request #860 by Chenjp. + Fix: 69699: Encode redirect URL used by the rewrite valve with the session id if appropriate, and handle cross context with different session configuration when using rewrite. + Add: #863: Support for comments at the end of lines in text rewrite map files to align behaviour with Apache httpd. Pull request provided by Chenjp. + Fix: 69706: Saved request serialization issue in FORM introduced when allowing infinite session timeouts. + Fix: Expand the path checks for Pre-Resources and Post-Resources mounted at a path within the web application. + Fix: Process possible path parameters rewrite production in the rewrite valve. + Fix: 69588: Enable allowLinking to be set on PreResources, JarResources and PostResources. If not set explicitly, the setting will be inherited from the Resources. + Add: 69633: Support for Filters using context root mappings. + Fix: 69643: Optimize directory listing for large amount of files. Patch submitted by Loic de l'Eprevier. + Fix: #843: Off by one validation logic for partial PUT ranges and associated test case. Submitted by Chenjp. + Refactor: GCI servlet to access resources via the WebResource API. + Fix: 69662: Report name in exception message when a naming lookup failure occurs. Based on code submitted by Donald Smith. + Fix: Ensure that the FORM authentication attribute authenticationSessionTimeout works correctly when sessions have an infinite timeout when authentication starts. + Add: Provide a content type based on file extension when web application resources are accessed via a URL. * Coyote + Refactor: #861: TaskQueue to use the new interface RetryableQueue which enables better integration of custom Executors which provide their own BlockingQueue implementation. Pull request provided by Paulo Almeida. + Add: Finer grained control of multi-part request processing via two new attributes on the Connector element. maxPartCount limits the total number of parts in a multi-part request and maxPartHeaderSize limits the size of the headers provided with each part. Add support for these new attributes to the ParameterLimitValve. * Jasper + Fix: 69696: Mark the JSP wrapper for reload after a failed compilation. + Fix: 69635: Add support to jakarta.el.ImportHandler for resolving inner classes. + Add: #842: Support for optimized execution of c:set and c:remove tags, when activated via JSP servlet param useNonstandardTagOptimizations. + Fix: An edge case compilation bug for JSP and tag files on case insensitive file systems that was exposed by the test case for 69635. * Web applications + Fix: 69694: Improve error reporting of deployment tasks done using the manager webapp when a copy operation fails. + Add: 68876: Documentation. Update the UML diagrams for server start-up, request processing and authentication using PlantUML and include the source files for each diagram. * Other + Add: Thread name to webappClassLoader.stackTraceRequestThread message. Patch provided by Felix Zhang. + Update: Tomcat Native to 2.0.9. + Update: The internal fork of Apache Commons FileUpload to 1.6.0-RC1 (2025-06-05). + Update: EasyMock to 5.6.0. + Update: Checkstyle to 10.25.0. + Fix: Use the full path when the installer for Windows sets calls icacls.exe to set file permissions. + Update: Improvements to Japanese translations provided by tak7iji. + Update: Jacoco to 0.8.13. + Code: Explicitly set the locale to be used for Javadoc. For official releases, this locale will be English (US) to support reproducible builds. + Update: Byte Buddy to 1.17.5. + Update: Checkstyle to 10.23.1. + Update: File extension to media type mappings to align with the current list used by the Apache Web Server (httpd). + Update: Improvements to French translations. + Update: Improvements to Japanese translations provided by tak7iji.- Hardening permissions (bsc#1242722)- Do not require standalone versions of apis that tomcat itself carries - Do not version dependencies- Make conflicts and provides more generic- Initial packaging of tomcat11 11.0.6/bin/shh03-ch2a 1773077705  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~$11.0.1811.0.18-150600.13.15.1    docsBUILDING.txtMETA-INFcontext.xmlRELEASE-NOTES.txtRUNNING.txtWEB-INFjsp403.jspweb.xmlaio.htmlannotationapiindex.htmlapiindex.htmlappdevbuild.xml.txtdeployment.htmlindex.htmlinstallation.htmlintroduction.htmlprocesses.htmlsamplebuild.xmldocsREADME.txtindex.htmlsrcmypackageHello.javawebWEB-INFweb.xmlhello.jspimagestomcat.gifindex.htmlsource.htmlweb.xml.txtapr.htmlarchitectureindex.htmloverview.htmlrequestProcessrequestProcess.html11_nio.plantuml11_nio.png21_http11.plantuml21_http11.png31_synchronous.plantuml31_synchronous.png41_basic.plantuml41_basic.pngstartupstartup.html1_overview.plantuml1_overview.png2_catalina_init.plantuml2_catalina_init.png3_catalina_start_1.plantuml3_catalina_start_1.png4_catalina_start_2.plantuml4_catalina_start_2.png5_catalina_start_3.plantuml5_catalina_start_3.png6_catalina_host_config.plantuml6_catalina_host_config.png7_catalina_context_config.plantuml7_catalina_context_config.pngbalancer-howto.htmlbuilding.htmlcdi.htmlcgi-howto.htmlchangelog.htmlclass-loader-howto.htmlcluster-howto.htmlcomments.htmlconfigajp.htmlautomatic-deployment.htmlcluster-channel.htmlcluster-deployer.htmlcluster-interceptor.htmlcluster-listener.htmlcluster-manager.htmlcluster-membership.htmlcluster-receiver.htmlcluster-sender.htmlcluster-valve.htmlcluster.htmlcontext.htmlcookie-processor.htmlcredentialhandler.htmlengine.htmlexecutor.htmlfilter.htmlglobalresources.htmlhost.htmlhttp.htmlhttp2.htmlindex.htmljar-scan-filter.htmljar-scanner.htmljaspic.htmllisteners.htmlloader.htmlmanager.htmlrealm.htmlresources.htmlruntime-attributes.htmlserver.htmlservice.htmlsessionidgenerator.htmlsystemprops.htmlvalve.htmlconnectors.htmldefault-servlet.htmldeployer-howto.htmldevelopers.htmlelapiindex.htmlgraal.htmlhost-manager-howto.htmlhtml-host-manager-howto.htmlhtml-manager-howto.htmlimagesadd.gifasf-logo.svgcode.gifcors-flowchart.pngdesign.gifdocs-stylesheet.cssdocs.giffix.giffontsOpenSans400.woffOpenSans400italic.woffOpenSans600.woffOpenSans600italic.woffOpenSans700.woffOpenSans700italic.wofffonts.csstomcat.giftomcat.pngupdate.gifvoid.gifindex.htmlintroduction.htmljasper-howto.htmljaspicapiindex.htmljdbc-pool.htmljndi-datasource-examples-howto.htmljndi-resources-howto.htmljspapiindex.htmllogging.htmlmanager-howto.htmlmaven-jars.htmlmbeans-descriptors-howto.htmlmbeans-descriptors.dtdmonitoring.htmlproxy-howto.htmlrealm-howto.htmlrewrite.htmlsecurity-howto.htmlservletapiindex.htmlsetup.htmlssi-howto.htmlssl-howto.htmltribesdevelopers.htmlfaq.htmlinterceptors.htmlintroduction.htmlmembership.htmlsetup.htmlstatus.htmltransport.htmlvirtual-hosting-howto.htmlweb-socket-howto.htmlwebsocketapiindex.htmlwindows-auth-howto.htmlwindows-service-howto.html/usr/share/tomcat/tomcat-webapps//usr/share/tomcat/tomcat-webapps/docs//usr/share/tomcat/tomcat-webapps/docs/META-INF//usr/share/tomcat/tomcat-webapps/docs/WEB-INF//usr/share/tomcat/tomcat-webapps/docs/WEB-INF/jsp//usr/share/tomcat/tomcat-webapps/docs/annotationapi//usr/share/tomcat/tomcat-webapps/docs/api//usr/share/tomcat/tomcat-webapps/docs/appdev//usr/share/tomcat/tomcat-webapps/docs/appdev/sample//usr/share/tomcat/tomcat-webapps/docs/appdev/sample/docs//usr/share/tomcat/tomcat-webapps/docs/appdev/sample/src//usr/share/tomcat/tomcat-webapps/docs/appdev/sample/src/mypackage//usr/share/tomcat/tomcat-webapps/docs/appdev/sample/web//usr/share/tomcat/tomcat-webapps/docs/appdev/sample/web/WEB-INF//usr/share/tomcat/tomcat-webapps/docs/appdev/sample/web/images//usr/share/tomcat/tomcat-webapps/docs/architecture//usr/share/tomcat/tomcat-webapps/docs/architecture/requestProcess//usr/share/tomcat/tomcat-webapps/docs/architecture/startup//usr/share/tomcat/tomcat-webapps/docs/config//usr/share/tomcat/tomcat-webapps/docs/elapi//usr/share/tomcat/tomcat-webapps/docs/images//usr/share/tomcat/tomcat-webapps/docs/images/fonts//usr/share/tomcat/tomcat-webapps/docs/jaspicapi//usr/share/tomcat/tomcat-webapps/docs/jspapi//usr/share/tomcat/tomcat-webapps/docs/servletapi//usr/share/tomcat/tomcat-webapps/docs/tribes//usr/share/tomcat/tomcat-webapps/docs/websocketapi/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:43101/SUSE_SLE-15-SP6_Update/79afb111eebfd78ee177b74122bae983-tomcat11.SUSE_SLE-15-SP6_Updatedrpmxz5noarch-suse-linux     directoryASCII textXML 1.0 document, ASCII textHTML document, ASCII textHTML document, ASCII text, with very long linesexported SGML document, ASCII textPerl5 module source, ASCII textGIF image data, version 89a, 146 x 92PNG image data, 1682 x 1495, 8-bit/color RGB, non-interlacedPNG image data, 546 x 401, 8-bit/color RGB, non-interlacedPNG image data, 2974 x 2013, 8-bit/color RGB, non-interlacedPNG image data, 1948 x 1360, 8-bit/color RGB, non-interlacedPNG image data, 574 x 1324, 8-bit/color RGB, non-interlacedPNG image data, 1585 x 1915, 8-bit/color RGB, non-interlacedPNG image data, 1667 x 2547, 8-bit/color RGB, non-interlacedPNG image data, 1476 x 2047, 8-bit/color RGB, non-interlacedPNG image data, 2312 x 3480, 8-bit/color RGB, non-interlacedPNG image data, 807 x 1177, 8-bit/color RGB, non-interlacedPNG image data, 786 x 1567, 8-bit/color RGB, non-interlacedHTML document, UTF-8 Unicode text, with very long linesGIF image data, version 89a, 20 x 20SVG Scalable Vector Graphics imagePNG image data, 976 x 756, 8-bit/color RGB, non-interlacedWeb Open Font Format, TrueType, length 21956, version 1.1Web Open Font Format, TrueType, length 21092, version 1.1Web Open Font Format, TrueType, length 22604, version 1.1Web Open Font Format, TrueType, length 21252, version 1.1Web Open Font Format, TrueType, length 22748, version 1.1Web Open Font Format, TrueType, length 21184, version 1.1PNG image data, 146 x 92, 8-bit/color RGBA, non-interlacedGIF image data, version 89a, 1 x 1y+ uo: =0Cutf-8c8c488c49cb67e6b530b380609f44d4e7c3f6ef78717e9ba41533807c72a63d7?7zXZ !t/)*]"k%3u Y]\ !xvd9hEW6]h;L8J}:PI람Q_vl94{r]8;lL҃Azۆ9"#&r5\DbDc _:`Pweaw g[G>a9B_g9L=5)1`8=$K$_pTzSl̺1&wt"&PΆ+jv(_ZmBU$Xc[sirqgJ؀"[c#^2Nŭ3]jCl?ͺM/Kx2}2cvWnTRTPDH>ڣDqkj"BK73W z&@%,W'`VLl{({|r_s%%a<._m<=Rrk[dfpdw52[JJۑ{^o%4Bf `(r0N1zJ ҚvϏYÌ@^O]\$덃F3(;3.ޓMẸYDq3Q/nh5Ң~ |xlEm.SdsB)RPZZPrs/- } 'YʹU[3-(Mр#:)_h g?jB*ȩT,>􅡏' t*4ɸmcR]-)Ou4K'p"1 tǘ?@NCr]pb Oߢ`[(ݫ|=}(~X$#LXы1רy ~h^Odlrp,.h C[s?Ptc,Wy$w©Ic2yuW?0OsDDSal7Z,3 ҞӭR?q޳M-XS:!<l^R@<6tL!<;5>PkJH6VjB%`^dzN(ZrI.͜gLxLq|ڿtaΗL/F1"]da-T&_eX9B0vjk\īeʰkQȍCK) K {#1飡,GȲa)X&z0;1!Gyv$\2n% Ls$ޚrQn\oivNʫg ">^&n/33XKvʞ^CTC25՞ k-萃Ou:rZE_4"lvĕmfWq<~WK쾙Lҩ u ChV!CNb:%!K ݦCtY?3jӀ u=4~!Yox=_y;q&S5$o5\owE;tBzfUgIßP!lGB *!iں '퟊,"Y!vNgQ u+ٻUm).ͷ tfդ::!C#U^@AttlAfU\N-\fA&0-h#)ˇΧZ6fJ![nxnyʗBUyJu+lrnnQآB UfmcBo9:-%PQ:i aEe=Ǜ3'˒c [!(֑&`'zywzkl*CTP ⋗۶gQ;*-FeXW_3d|&F>"/ аrЏA9 rvi7ʼn7<}.o+hƈ%#[Җ=s@C 4$A<X rH8P6$\4YfN,sELZrRF^=x`PQdԆ5DP? gUChڔ$9_4Lx{{Ď+WhwgY& ea~vB9mE\9/\Fw4ā Og }5oP=pR V:_\$;zGkgml(UՖdrʖ4#6Q1wog38&@ i<7sG*pǸɝlǞ!~GVPl 숓u回9rTfӭ<߆،4WӅEvTݮNIa۩;E@!bEuNUޢd <>ӏI Y[.JQ"jIWhr~\^AxRCgG\ǓVrAжE۹ډ6p,6\ܭPfIFɗVJdiMҍW@!+$ͅ N\Ҳ(BD5 ,#xM"<z'FFB7N0~p7@(;'Z5#]#!}p'.ٹInsZ.hM'QAVffrhO}6v45|;3^*چ)GyEa M?FMzqL W$gԥ Azʋ;dӎXXOCdBa[`|~a&Pk)龗w]XQYWʻg4%<`0^eV;<|V"|lY֣Cބ+K`ٹJIV}8iFﶈe5<?{w{5U4羚N K M!tKòޗ̵ߥL{I *.2;&cg&H)hՙrל*lgӆ30_l%_P@ W#I )}v+S]*,wW],O rGvCWx; 9f/V_$mcdjGjk7mB6hF?;f$0m>:yE]s~ Ϥ# }Aw6nt-B hIvnu&JQK&|һTjZ΃Ԟ/f u zSFL>q[[}u-}'?dtWcM4=7}rLO)l?|}㒠Dty.v= {l*PZBEj] *RS>&LMkX(y?\!t44KJ7W-'0`x!76|u[1Rڥ;J_0c'gRs XͿi.Zq\4v9F'yllP8<Hl k::3jN\7 UH) !,=:9vIfB\Cxڇ+t|:ckwUdWѦcqؐXwldзՐqU2]o_edcy0AȜ,jY( {٧Blf͢z\ʫih5Dd̓)6 Zȼtn bwZjE<.D&enRQ:":eKR#ɬYId6m3:'3nALKײl(Qk)M9e{JrT.h`8\h 4>pF؁Ha.8 n!6z%Ъ8&i=^SJ2 g͞N Iov];.U  U'Bkg)̞a%# R~ey)eLo 6&h]- Ī0qB'C1\Lz!O-TZ&`)TS@nd5 s#jl)om欑>l_ : $C1IbH[i;E+ \]`Ř;!7yȔךہ7t(Mb_앛Kc_ly"M(8&-3Ah|,ƭ/T_ Fm~5֬PzU-؂\cSd-^.Tw>M~i'8E;>QٲϏP(J߿UrN[{ѻQ>  :2TNH`SfLBq qY [=9a~{ }fyxzEY_w'IUwTój` "4T8a'{{-IdL #@L1 Vz?\&*wKKhſC8;{PMq/ɗD7J}(x!sVQz/ J=+A=V+ޚ~X8 5AAj8N>\E: -x],^״嵹𯏜3rrxOr F A|G0}_3[1`7LoRxU[[g2&O8y\`m1=9*2ȝ7j¬zOÔCz\݋Ij m7-}bto?*?nMME*EWoSDcBEQh~D%=cKm7ǪU{1v9eᤫY-a DBu}ȅ&Vѷ'䅍\=LI+BEH(`U[c 馳xn@Lyj"1&|<GS%y+.k{sҢ-rzwxQcۇ͙^\׳%2PWŦ1 ɖR4c3SZE۝Vզz/}kGDt&*t$Ff^̟ɡ7%`ܛnlq1" ?{t<.HIQ_?XYJܬUoD=k@aiٙa{xKߠQ ]:Оߞ5D3\~<8XؐVMzMalL@M^GͺNGfVcY h~B줇,bKa?Z Qs2 Vi)I1%q"JRAnU2M i:NQY9C~ FzjVV[UKwfHHyp;nTj&T *u,TR݇2I Ʒ?v+FXD6DFw~lW$5:c4΍'c䇟bI{#{ab/xٱhb8@I0os+`> {+lǥձ{6V Fv=%}oVk8~ ^ǻ‘UO>!3,gg`tQ#VyB^'Wsڇo6JH-R"%xy!xV1f#b >e`T.MH~L}xm˚Dt+j!Q8IRѸQn mG.8-.8:xHhzbG=0sc+D!~q evM  -UxȤi;q|iRJ浪suD,^8 {^uϛ4-Yδ'ӐN,S4\ ÃR}"kK8uˣQ8p51yx[<,*NW4=n#夭gh7nxֺsك7ʑWXpeLy\ 5 ^5vr2n4} ^0Ԫxu9ܷJmd^W爨E4v)1k$~K>)j+|9wplT'L5̀eh3Hح:K$ϣAsܶ[v$ (Rw hq$!Q%|jMmxp Qb" 45cRcF< YsC]@BB｟ILXlEna'vUxzOѐ##;\-U=Qe)gh1#ÿv=8$xGT`wh RYb ֟+䤽䒸IQMOY KfBK` S)x$1KPf3{HZ/Iu [ eB.:0Lb+\Q3an8#zFCG3Ց9T<nPw,⁷y!1g!Av4 l-`a] EmYٲ@,/w񶳨& :ۇz(R/ESPx[+s&뙳4ܛoUiP+oI()B<^޴?C;RIux(2ę'N+;wens5⌴w^!$pP"\h.>q $f9 `uҲQ.Ff6D+cna"AE)UR)ɣgq& hVY )o)<;ϰmMX|t!}ࢍ¢{h &ߩ]QvR2s1x{ҦN~:Sӛ'd}x2# J {4an%5LR7į7Xّr^O 3< 0~xO]{]E! KQQ[ 0w=hVn^'S5m52 ^ nk QCbXpH3Sq8>MqL޺8(,!CHȶbN*ylΛɩ|փ:!,ICDibubAQ]yLQyK2L,9t9o[qk()H#ġ6ןsQ}|D%Z_K:YEþnWV+|'tFAElB{]:QGZ+NV(y{]g`eY=AJP.ծI ȃ** 8nNO)嘬0$?#. D{MGSiVzpYvOyJ'l8{:H;wV99ͨ:i]Ep8 ]1O8-Y\o.?PiW~E YL7 {La:P RJrH4;q dDXm+?yj~J6^avdt7~=Bp&OR24{~yImW*A,KXB: :$`-^ /P/P5-tCuxm=dI8q7dL\wً}%ϸ]w|Nq9_Ml4י w%ϡfl=;#aJ2>pvҵu%(j_+ kĘ&_sW5<lrEa7jz2%PwJ7ZL獥|{JzMuÚHK3|36ζu>he67z:讁74z3_GXj1U&S.d=28%#@%._v|IԙNoYcW& @AJJwm/f&\n]J<}%A R?~9A\(0R)r@ti} ƴ@ef8-|tx1cޟPkm<؜+|sK&Rt7b~5ރd`H!5ˬ;~  WN{t~z D,DNJztBDLj;cdZ6Nh t'O<%4iIJvfSA_}s&J}cSg_vePve;V[&4f!^ʽՎQ4ZH@}Fm Ylreb#,<6ۈ͸t|21B!.lڴf(FTޡ6SPM fPstƩk3"ḛsi7vB%6k-ByƳRIM'L PE'!+FP|RfcxQJNr)$IgB&3WL KsCG8' ϚԩL,owpS{JR&|`߼Mphj3G9Yr)̝~UalޢAh-'b$igtoPѻsٔ[^Ͽ7WsDqEuthtYaTTK*$ Q=ӿ.1r2q_w⪼Wr bfsJe;o%efB~F?L"UzNNJ/M$qY[E,%iݣL ~A>DZB}/F|Ⱦ-J&#z{0vh|o4iҙHTowQdN ~MtXB>E'"c%U()uPMХOm'DZJW\ aE> }p5n׫tLF> :me2ޕ9O[me/ D\MLbnjO{.[Z%[{ʄ[lOvE0ݾhw![dy .¦~k$qPVe Y2T) D"7KKQ@ܼ?h_{nkъυh1 ]]KE[vK8N,+( 1p*{ F7eFE;;T"ZΗ]>qbE g,&*P{۩]q\E/Q;I3= /Sޢf_{vjƷH5MP%U\,RT< YZ