<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd">
<html lang="en">
<head>
<meta content="text/html; charset=US-ASCII" http-equiv="Content-Type">
<title>
GitLab
</title>



<style>img {
max-width: 100%; height: auto;
}
</style>
</head>
<body>
<div class="content">

<h3>
Markus Koschany pushed to branch master
at <a href="https://salsa.debian.org/java-team/tomcat9">Debian Java Maintainers / tomcat9</a>
</h3>
<h4>
Commits:
</h4>
<ul>
<li>
<strong><a href="https://salsa.debian.org/java-team/tomcat9/-/commit/8e19a9522c13f1ec926d7ae03158fcfefcd6269f">8e19a952</a></strong>
<div>
<span>by Markus Koschany</span>
<i>at 2021-08-08T15:25:13+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update changelog
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/tomcat9/-/commit/641d5d5cd83773fe6b0191340b9538aad7c4c56e">641d5d5c</a></strong>
<div>
<span>by Markus Koschany</span>
<i>at 2021-08-10T18:25:35+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">CVE-2021-30640: Fix NullPointerException

If no userRoleAttribute is specified in the user's Realm configuration its
default value will be null. This will cause a NPE in the methods
doFilterEscaping and doAttributeValueEscaping. This is upstream bug

https://bz.apache.org/bugzilla/show_bug.cgi?id=65308
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/tomcat9/-/commit/3feebf33bc7c797be7b5c41c4123db20f4a4637f">3feebf33</a></strong>
<div>
<span>by Markus Koschany</span>
<i>at 2021-09-24T12:37:20+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Declare compliance with Debian Policy 4.6.0.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/tomcat9/-/commit/bc1c5847a6daef456306ba2e51b3d153910d1f3a">bc1c5847</a></strong>
<div>
<span>by Markus Koschany</span>
<i>at 2021-09-24T12:42:55+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update copyright years
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/tomcat9/-/commit/a0ca0f2289dee1ace692d407de071a23499bc201">a0ca0f22</a></strong>
<div>
<span>by Markus Koschany</span>
<i>at 2021-09-24T12:44:08+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">New upstream version 9.0.53</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/tomcat9/-/commit/2e6975700ce33b0ab0c46499404998c2aa5db59a">2e697570</a></strong>
<div>
<span>by Markus Koschany</span>
<i>at 2021-09-24T12:44:21+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update upstream source from tag 'upstream/9.0.53'

Update to upstream version '9.0.53'
with Debian dir 34bd11b7b977daa77c0ef1c0a7da3c484269f6ef</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/tomcat9/-/commit/1e969ffcfa81899e782141cbe1e8e6fe2b73d4db">1e969ffc</a></strong>
<div>
<span>by Markus Koschany</span>
<i>at 2021-09-24T14:23:06+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Set the fileOwner of catalina.out to tomcat explicitly.

Closes: #987179
Thanks: Adam Cecile for the report.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/tomcat9/-/commit/56e88617ea770e179db01a61b8c7446ccd6cbe8e">56e88617</a></strong>
<div>
<span>by Markus Koschany</span>
<i>at 2021-09-24T14:28:45+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge commit '1e969ffcfa81899e782141cbe1e8e6fe2b73d4db'
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/tomcat9/-/commit/286f98fd7b868ba3376605b8e09d8d8cbc37f383">286f98fd</a></strong>
<div>
<span>by Markus Koschany</span>
<i>at 2021-09-24T14:49:54+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Drop CVE patches. Fixed upstream.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/tomcat9/-/commit/5ea783fe6f877e2d6cdcb93e5b4cf99825fd960c">5ea783fe</a></strong>
<div>
<span>by Markus Koschany</span>
<i>at 2021-09-24T14:50:15+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove 0021-dont-test-unsupported-ciphers.patch
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/tomcat9/-/commit/fec2d2346f78cab1ace9d86ff57eb109fd224542">fec2d234</a></strong>
<div>
<span>by Markus Koschany</span>
<i>at 2021-09-24T14:53:56+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refresh 0021-dont-test-unsupported-ciphers.patch
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/tomcat9/-/commit/79e222e8a072e32d8276e5faf859df13a98e2d7e">79e222e8</a></strong>
<div>
<span>by Markus Koschany</span>
<i>at 2021-09-24T15:37:38+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">tomcat9.cron.daily: Set maxdepth to 1 so that log files of custom applications

in subdirectories of /var/log/tomcat9 are not compressed.

Closes: #982961
Thanks: Ludovic Pouzenc for the report.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/tomcat9/-/commit/1fdc94c90335403ac5ca0bc8457918ebd10306f8">1fdc94c9</a></strong>
<div>
<span>by Markus Koschany</span>
<i>at 2021-09-24T15:40:08+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update changelog
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/tomcat9/-/commit/d18f218084340759b262614294ab609c40274ae6">d18f2180</a></strong>
<div>
<span>by Markus Koschany</span>
<i>at 2021-09-24T16:20:05+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add no-java17-yet.patch
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/tomcat9/-/commit/8bcc790e7c05bb4b2e26377e76a1106e4607443b">8bcc790e</a></strong>
<div>
<span>by Markus Koschany</span>
<i>at 2021-09-24T16:58:06+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Exclude TestJNDIRealmIntegration because of missing dependencies.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/java-team/tomcat9/-/commit/f0ea9cde7d9eef40f9f7ac8f118f5682600f592f">f0ea9cde</a></strong>
<div>
<span>by Markus Koschany</span>
<i>at 2021-09-24T18:47:46+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Set addOSGi to false when building the tests to prevent a FTBFS.
</pre>
</li>
</ul>
<h4>30 changed files:</h4>
<ul>
<li class="file-stats">
<a href="#626a747c8694eaae66f2afb3d1a745b045782c70">
<span class="new-file">
+
.editorconfig
</span>
</a>
</li>
<li class="file-stats">
<a href="#dea01dd89a3b602828e630677fde5d77c06441c8">
.travis.yml
</a>
</li>
<li class="file-stats">
<a href="#0426576666947b851d4dcbe4b44ebfb8d143e67c">
BUILDING.txt
</a>
</li>
<li class="file-stats">
<a href="#3f454a98e586d1aa0d322e19afd5e67e08f2d3c8">
CONTRIBUTING.md
</a>
</li>
<li class="file-stats">
<a href="#ac97fd8044e211b8965191abd3e1372d4a6075d6">
KEYS
</a>
</li>
<li class="file-stats">
<a href="#cc4e050782ea7fd5e442b75a3fcf3d0bab86e52a">
MERGE.txt
</a>
</li>
<li class="file-stats">
<a href="#8ec9a00bfd09b3190ac6b22251dbb1aa95a0579d">
README.md
</a>
</li>
<li class="file-stats">
<a href="#cb86e615f954ac0764cd9533120468266cbeef48">
bin/service.bat
</a>
</li>
<li class="file-stats">
<a href="#65d04013ea262a52ba54c8de534eae494865583c">
build.properties.default
</a>
</li>
<li class="file-stats">
<a href="#bdc348bf75801c527f51cdeddc8edf027f7ef35a">
build.xml
</a>
</li>
<li class="file-stats">
<a href="#2bc5147650c40facb1ae57d0ead22ec78b01819c">
conf/catalina.policy
</a>
</li>
<li class="file-stats">
<a href="#cec98519b001bb6e04c456eb4b182b986ad0f344">
conf/catalina.properties
</a>
</li>
<li class="file-stats">
<a href="#a9e258d7e74856eb9f4422837b9ca038d050463f">
conf/server.xml
</a>
</li>
<li class="file-stats">
<a href="#42bba660e667eb6ccf333f10bf495bc2aa1b1bfa">
conf/tomcat-users.xml
</a>
</li>
<li class="file-stats">
<a href="#9c96da0e9f91d7d8937b69b524702c106258f0d1">
debian/changelog
</a>
</li>
<li class="file-stats">
<a href="#58ef006ab62b83b4bec5d81fe5b32c3b4c2d1cc2">
debian/control
</a>
</li>
<li class="file-stats">
<a href="#adb7f75f79e3bb85eb62912a2904c5d24af878fb">
debian/copyright
</a>
</li>
<li class="file-stats">
<a href="#e7dab03a7457d9b8246f5f9edb8c9ecfbcf9b91b">
debian/patches/0021-dont-test-unsupported-ciphers.patch
</a>
</li>
<li class="file-stats">
<a href="#e0cf2a3959f9db90e9add13eb7754f722cf1900e">
<span class="deleted-file">

debian/patches/CVE-2021-30640.patch
</span>
</a>
</li>
<li class="file-stats">
<a href="#61f0fc736f1d136eacf9e212ae857673d50e1f79">
<span class="deleted-file">

debian/patches/CVE-2021-33037.patch
</span>
</a>
</li>
<li class="file-stats">
<a href="#cea747b5ac5c90eb01212f4a9a125ea501654dd5">
<span class="new-file">
+
debian/patches/exclude-TestJNDIRealmIntegration.patch
</span>
</a>
</li>
<li class="file-stats">
<a href="#f8ec77e2b423332934a23f9256654a3c8d57eaad">
<span class="new-file">
+
debian/patches/no-java17-yet.patch
</span>
</a>
</li>
<li class="file-stats">
<a href="#bc34014ab4b9a49dd7a27bdd8d352912607c3a96">
debian/patches/series
</a>
</li>
<li class="file-stats">
<a href="#be405a1ec0b86d96639209d8bd0b1964e77e11f1">
debian/rsyslog/tomcat9.conf
</a>
</li>
<li class="file-stats">
<a href="#8756c63497c8dc39f7773438edf53b220c773f67">
debian/rules
</a>
</li>
<li class="file-stats">
<a href="#c508709a080421c9dbc44189a3c9dac73b5fa761">
debian/tomcat9.cron.daily
</a>
</li>
<li class="file-stats">
<a href="#7b3a29c9a895f9ec65573e45a075b5586494e8b4">
java/javax/annotation/sql/DataSourceDefinition.java
</a>
</li>
<li class="file-stats">
<a href="#6afb8283a952f0719646bbe28094e2d41647383c">
java/javax/ejb/EJB.java
</a>
</li>
<li class="file-stats">
<a href="#1e34e76ce79ba8fb5041311858933d27908df516">
java/javax/ejb/EJBs.java
</a>
</li>
<li class="file-stats">
<a href="#0827350ba225260db8f7fa2beb814660bf2c82e3">
java/javax/el/ArrayELResolver.java
</a>
</li>
</ul>
<h5>The diff was not included because it is too large.</h5>

</div>
<div class="footer" style="margin-top: 10px;">
<p style="font-size: small; color: #666;">

<br>
<a href="https://salsa.debian.org/java-team/tomcat9/-/compare/d9ccdf7ccf6e386b1c7166eb776ff254718073f2...f0ea9cde7d9eef40f9f7ac8f118f5682600f592f">View it on GitLab</a>.
<br>
You're receiving this email because of your account on salsa.debian.org.
If you'd like to receive fewer emails, you can
adjust your notification settings.



</p>
</div>
</body>
</html>