Log Message:
Update to 8.0.33

Changelog:
Tomcat 8.0.33 (markt)
Catalina

    Fix: Correct a regression in the fix for 58867. When configuring a Context \ 
to use an external directory for the docBase, and that directory happens to be \ 
located along side the original WAR, use the directory as the docBase rather \ 
than expanding the WAR into the appBase and using the newly created expanded \ 
directory as the docBase. (markt)
    Add: 58351: Make the server build date and server version number accessible \ 
via JMX. Patch provided by Huxing Zhang. (markt)
    Add: 58988: Special characters in the substitutions for the RewriteValve can \ 
now be quoted with a backslash. (fschumacher)
    Fix: 58999: Fix class and resource name filtering in WebappClassLoader. It \ 
throws a StringIndexOutOfBoundsException if the name is exactly "org" \ 
or "javax". (rjung)
    Code: Remove unnecessary code. There is no support for context level \ 
cluster. (kfujino)
    Add: Make checking for var and map replacement in RewriteValve a bit \ 
stricter and correct detection of colon in var replacement. (fschumacher)
    Fix: Fix the type of InstanceManager attribute of mbean definition of \ 
StandardContext. (kfujino)
    Fix: Refactor the web application class loader to reduce the impact of JAR \ 
scanning on the memory footprint of the web application. (markt)
    Fix: Fix some resource leaks in the error handling for accessing files from \ 
JARs and WARs. (markt)
    Fix: Refactor the JAR and JAR-in-WAR resource handling to reduce the memory \ 
footprint of the web application. (markt)
    Fix: 57809: Deprecate the custom context attribute \ 
org.apache.tomcat.util.scan.MergedWebXml which will be removed in Tomcat 9. \ 
(markt)
    Fix: 59001: Correctly handle the case when Tomcat is installed on a path \ 
where one of the segments ends in an exclamation mark. (markt)
    Fix: Expand the fix for 59001 to cover the special sequences used in \ 
Tomcat's custom jar:war: URLs. (markt)
    Fix: 59043: Avoid warning while expiring sessions associated with a single \ 
sign on if HttpServletRequest.logout() is used. (markt)
    Fix: 59054: Ensure that using the CrawlerSessionManagerValve in a \ 
distributed environment does not trigger an error when the Valve registers \ 
itself in the session. (markt)
    Fix: Storeconfig handling of alternate cookie processors. (markt/remm)
    Fix: Storeconfig handling for socket properties. (remm)
    Add: Log a warning message if a user tries to configure the default session \ 
timeout via the deprecated (and ignored) Manager.setMaxInactiveInterval() \ 
method. (markt)
    Fix: Fix incorrect parsing of the NE and NC flags in rewrite rules. (remm)
    Fix: 59065: Correct the timing of the check for colons in paths on \ 
non-Windows systems implemented in catalina.sh so it works correctly with \ 
Cygwin. Patch provided by Ed Randall. (markt)
    Fix: When a Host is configured with an appBase that does not exist, create \ 
the appBase before trying to expand an external WAR file into it. (markt)
    Fix: 59115: When using the Servlet 3.0 file upload, the submitted file name \ 
may be provided as a token or a quoted-string. If a quoted-string, unquote the \ 
string before returning it to the user. (markt)
    Fix: 59123: Close NamingEnumeration objects used by the JNDIRealm once they \ 
are no longer required. (fschumacher/markt)
    Fix: 59138: Correct a false positive warning for ThreadLocal related memory \ 
leaks when the key class but not the value class has been loaded by the web \ 
application class loader. (markt)
    Fix: 59145: Don't log an invalid warning when a user logs out of a session \ 
associated with SSO. (markt)
    Fix: 59151: Fix a regression in the fix for 56917 that added additional (and \ 
arguably unnecessary) validation to the provided redirect location. (markt)
    Fix: 59154: Fix a NullPointerException in the JASSMemoryLoginModue resulting \ 
from the introduction of the CredentialHandler to Realms. (schultz/markt)

Coyote

    Fix: 58646: Correct a problem with sendfile that resulted in a Processor \ 
being added to the cache twice leading to broken responses. (markt)
    Fix: 59015: Fix potential cause of endless APR Poller loop during shutdown \ 
if the Poller experiences an error during the shutdown process. (markt)
    Fix: Align cipher aliases for kECDHE and ECDHE with the current OpenSSL \ 
implementation. (markt)
    Fix: 59081: Retain the user defined cipher order when defining ciphers using \ 
the OpenSSL format. (markt)
    Fix: 59089: Correctly ignore HTTP headers that include non-token characters \ 
in the header name. (markt)
    Add: Add support for additional OpenSSL cipher aliases from OpenSSL master \ 
when specifying ciphers using the OpenSSL syntax. (markt)

Jasper

    Fix: 57583: Improve the performance of \ 
javax.servlet.jsp.el.ScopedAttributeELResolver when resolving attributes that do \ 
not exist. This improvement only works when Jasper is used with with Tomcat's EL \ 
implementation. (markt)
    Update: 58111: Update to the Eclipse JDT Compiler 4.5. (markt)
    Add: Add Java 9 support for JSPs. (markt)

WebSocket

    Fix: 59014: Ensure that a WebSocket close message can be sent after a close \ 
message has been received. (markt)
    Fix: Correctly handle compression of partial messages when the final message \ 
fragment has a zero length payload. (markt)
    Fix: 59119: Correct read logic for WebSocket client when using secure \ 
connections. (markt)
    Fix: 59134: Correct client connect logic for secure connections made through \ 
a proxy. (markt)
    Fix: 59189: Explicitly release the native memory held by the Inflater and \ 
Deflater when using PerMessageDeflate and the WebSocket session ends. Based on a \ 
patch by Henrik Olsson. (markt)

Web applications

    Fix: Correct an error in the documentation of the expected behaviour for \ 
automatic deployment. If a WAR is updated and an expanded directory is present, \ 
the directory will always be deleted and recreated by expanding the WAR if \ 
unpackWARs is true. (markt)
    Fix: 58935: Remove incorrect references in the documentation to using \ 
jar:file: URLs with the Manager application. (markt)
    Fix: Correct the description of the ServletRequest.getServerPort() in Proxy \ 
How-To. Issue reported via comments.apache.org. (violetagg)
    Fix: Fix a potenital indefinite wait in the Comet Chat servlet in the \ 
examples web application. (markt)

Tribes

    Fix: If promoting a proxy node to a primary node when getting a session, \ 
notify the change of the new primary node to the original backup node. (kfujino)

Other

    Fix: 58283: Change the default download location for libraries during the \ 
build process from /usr/share/java to ${user.home}/temp. Patch provided by Ahmed \ 
Hosni. (markt)
    Fix: 59031: When using the Windows uninstaller, do not remove the contents \ 
of any directories that have been symlinked into the Tomcat directory structure. \ 
(markt)
    Update: Update the packaged version of the Tomcat Native Library to 1.2.5 to \ 
pick up the Windows binaries that are based on OpenSSL 1.0.2g and APR 1.5.1. \ 
(markt)
    Update: Modify the default tomcat-users.xml file to make it harder for users \ 
to configure the entries intended for use with the examples web application for \ 
the Manager application. (markt)