Log Message:
Update to 8.0.45

Changelog:
Tomcat 8.0.45 (violetagg)
Catalina

    Fix: 61101: CORS filter should set Vary header in response. Submitted by \ 
Rick Riemer. (remm)
    Add: 61105: Add a new JULI FileHandler configuration for specifying the \ 
maximum number of days to keep the log files. (violetagg)
    Fix: 61125: Ensure that WarURLConnection returns the correct value for calls \ 
to getLastModified() as this is required for the correct detection of JSP \ 
modifications when the JSP is packaged in a WAR file. (markt)
    Fix: Improve the SSLValve so it is able to handle client certificate headers \ 
from Nginx. Based on a patch by Lucas Ventura Carro. (markt)
    Fix: 61154: Allow the Manager and Host Manager web applications to start by \ 
default when running under a security manager. This was accomplished by adding a \ 
custom permission, org.apache.catalina.security.DeployXmlPermission, that \ 
permits an application to use a META-INF/context.xml file and then granting that \ 
permission to the Manager and Host Manager. (markt)
    Fix: 61173: Polish the javadoc for o.a.catalina.startup.Tomcat. Patch \ 
provided by peterhansson_se. (violetagg)
    Add: A new configuration property crawlerIps is added to the \ 
o.a.catalina.valves.CrawlerSessionManagerValve. Using this property one can \ 
specify a regular expression that will be used to identify crawlers based on \ 
their IP address. Based on a patch provided by Tetradeus. (violetagg)
    Fix: 61180: Log a warning message rather than an information message if it \ 
takes more than 100ms to initialised a SecureRandom instance for a web \ 
application to use to generate session identifiers. Patch provided by Piotr \ 
Chlebda. (markt)
    Fix: 61185: When an asynchronous request is dispatched via \ 
AsyncContext.dispatch() ensure that getRequestURI() for the dispatched request \ 
matches that of the original request. (markt)
    Fix: 61201: Ensure that the SCRIPT_NAME environment variable for CGI \ 
executables is populated in a consistent way regardless of how the CGI servlet \ 
is mapped to a request. (markt)
    Fix: 61215: Correctly define addConnectorPort and \ 
invalidAuthenticationWhenDeny in the mbean-descriptors.xml file for the \ 
org.apache.catalina.valves package so that the attributes are accessible via \ 
JMX. (markt)

Coyote

    Fix: 61086: Explicitly signal an empty request body for HTTP 205 responses. \ 
(markt)
    Fix: Revert a change introduced in the fix for bug 60718 that changed the \ 
status code recorded in the access log when the client dropped the connection \ 
from 200 to 500. (markt)
    Fix: Make asynchronous error handling more robust. In particular ensure that \ 
onError() is called for any registered AsyncListeners after an I/O error on a \ 
non-container thread. (markt)

Jasper

    Fix: 44787: Improve error message when JSP compiler configuration options \ 
are not valid. (markt)
    Fix: 61137: j.s.jsp.tagext.TagLibraryInfo#uri and \ 
j.s.jsp.tagext.TagLibraryInfo#prefix fields should not be final. Patch provided \ 
by Katya Todorova. (violetagg)

WebSocket

    Fix: Correct the log message when a MessageHandler for PongMessage does not \ 
implement MessageHandler.Whole. (rjung)
    Fix: Improve thread-safety of Futures used to report the result of sending \ 
WebSocket messages. (markt)
    Fix: 61183: Correct a regression in the previous fix for 58624 that could \ 
trigger a deadlock depending on the locking strategy employed by the client \ 
code. (markt)

Web applications

    Fix: Better document the meaning of the trimSpaces option for Jasper. (markt)
    Fix: 61150: Configure the Manager and Host-Manager web applications to \ 
permit serialization and deserialization of CRSFPreventionFilter related session \ 
objects to avoid warning messages and/or stack traces on web application stop \ 
and/or start when running under a security manager. (markt)

Other

    Add: 45832: Add HTTP DIGEST authentication support to the Catalina Ant tasks \ 
used to communicate with the Manager application. (markt)
    Fix: 45879: Add the RELEASE-NOTES file to the root of the installation \ 
created by the Tomcat installer for Windows to make it easier for users to \ 
identify the installed Tomcat version. (markt)
    Fix: 61055: Clarify the code comments in the rewrite valve to make clear \ 
that there are no plans to provide proxy support for this valve since Tomcat \ 
does not have proxy capbilities. (markt)
    Fix: 61076: Document the altDDName attribute for the Context element. (markt)
    Fix: Correct typo in Jar Scan Filter Configuration Reference. Issue reported \ 
via comments.apache.org. (violetagg)
    Fix: 61145: Add missing @Documented annotation to annotations in the \ 
annotations API. Patch provided by Katya Todorova. (markt)
    Fix: 61146: Add missing lookup() method to @EJB annotation in the \ 
annotations API. Patch provided by Katya Todorova. (markt)
    Fix: Correct typo in Context Container Configuration Reference. Patch \ 
provided by Katya Todorova. (violetagg)