Log Message:
Update to 8.0.26

Changelog:
Tomcat 8.0.26 (markt)
Web applications

    Add: 58255: Document the Semaphore valve. Patch provided by Kyohei Nakamura. \ 
(markt)

not released Tomcat 8.0.25 (markt)
Catalina

    Fix: Make the WAR manifest file available for WebResource instances from an \ 
unpacked WAR in the same way the manifest is available if the WAR is not \ 
unpacked. (markt)
    Fix: Ensure that only /WEB-INF/classes/ and /WEB-INF/lib/ are excluded from \ 
the web resource caching. (Resources loaded from these locations are cached by \ 
the web application class loader.) (markt)
    Add: 57741: Enable the CGI servlet to use the standard error page mechanism. \ 
Note that if the CGI servlet's debug init parameter is set to 10 or higher then \ 
the standard error page mechanism will be bypassed and a debug response \ 
generated by the CGI servlet will be returned instead. (markt)
    Fix: 58031: Make the (first) reason parameter parsing failed available as a \ 
request attribute and then use it to provide a better status code via the \ 
FailedRequstFilter (if configured). (markt)
    Fix: 58086: Correct a regression in the fix for 58086 that incorrectly \ 
handled WAR URLs. (violetagg)
    Fix: 58096: Classes loaded from /WEB-INF/classes/ should use that directory \ 
as their code base. (markt)
    Fix: Fix possible resource leaks by closing streams properly. Issues \ 
reported by Coverity Scan. (violetagg)
    Fix: 58116: Fix regression in the fix for 57281 that broke Comet support \ 
when running under a security manager. Based on a patch provided by Johno \ 
Crawford. (markt)
    Fix: 58125: Avoid a possible ClassCircularityError when running under a \ 
security manager. (markt)
    Fix: 58179: Fix a thread safety issues that could mean concurrent threads \ 
setting the same attribute on a ServletContext could both see null as the old \ 
value. (markt)
    Fix: Allow web archives bigger than 2G to be deployed using ANT tasks. \ 
(violetagg)
    Fix: 58192: Correct a regression in the previous fix for 58023. Ensure that \ 
classes are associated with their manifest even if the class file is first read \ 
(and cached) without the manifest. (markt)
    Fix: Fix thread safety issue in the AsyncContext implementation that meant a \ 
sequence of start();dispatch(); calls using non-container threads could result \ 
in a previous dispatch interfering with a subsequent start. (markt)
    Fix: 58228: Make behaviour of ServletContext.getResource() and \ 
ServletContext.getResourceAsStream() consistent with each other and the expected \ 
behaviour of the GET_RESOURCE_REQUIRE_SLASH system property. (markt)
    Fix: 58230: Fix input stream corruption if non-blocking I/O is used and the \ 
first read is made immediately after the switch to async mode rather than in \ 
response to onDataAvaiable() and that read does not read all the available data. \ 
(markt)
    Fix: Ensure that log4javascript*.jar was not excluded from the standard JAR \ 
scanning by default. (markt)

Coyote

    Fix: 57943: Prevent the same socket being added to the cache twice. Patch \ 
based on analysis by Ian Luo / Sun Qi. (markt)
    Fix: Add text/javascript,application/javascript to the default list of \ 
compressable MIME types. (violetagg)
    Fix: 58103: When pipelining requests, and the previous request was an async \ 
request, ensure that the socket is removed from the waiting requests so that the \ 
async timeout thread doesn't process it during the next request. (markt)
    Fix: 58151: Correctly handle EOF in the AJP APR/native connector to prevent \ 
the connector entering a loop and generate excessive CPU load. (markt)
    Fix: In the AJP and HTTP NIO connectors, ensure that the socket timeout is \ 
correctly set before adding the socket back to the poller for read. (markt)
    Fix: 58157: Ensure that the handling of async timeouts does not result in an \ 
unnecessary dispatch to a container thread that could result in the current \ 
socket being added to the Poller multiple times with multiple attempts to \ 
process the same event for the same socket. (markt)
    Fix: Correct a coupe of edge cases in RequestUtil.normalize(). (markt)

Jasper

    Fix: 58110: Like scriptlet sections, declaration sections of JSP pages have \ 
a one-to-one mapping of lines to the generated .java file. Use this information \ 
to provide more accurate error messages if a compilation error occurs in a \ 
declaration section. (markt)
    Fix: 58119: When tags are compiled they must be placed in the \ 
org/apache/jsp/tag/web directory. Correct a regression in the fix for 52725. \ 
(violetagg)
    Fix: Fix a resource leak in JspC identified by Eclipse. (markt)
    Fix: 58178: Expressions in a tag file should use the tag file's PageContext \ 
rather than that of the containing page. (markt)
    Fix: Following on from the fix for 58178, expressions in a tag file should \ 
use the tag file's imports rather than those of the containing page. (markt)

WebSocket

    Fix: 58166: Allow applications to send close codes in the range 3000-4999 \ 
inclusive. (markt)
    Fix: 58232: Avoid possible NPE when adding endpoints programmatically to the \ 
javax.websocket.server.ServerContainer. Based on a patch provided by \ 
bastian.(violetagg)

Web applications

    Fix: Correct the incorrect document of QueryTimeoutInterceptor. The setting \ 
value is not in milliseconds but in seconds. (kfujino)
    Fix: 58112: Update the documentation for using the Catalina tasks in an \ 
Apache Ant build file. (markt)
    Fix: Imve the Javadoc for some of the APR socket read functions that have \ 
inconsistent behaviour for return values. (markt)

jdbc-pool

    Fix: 58042: The default value of logFailed attribute of SlowQueryReport is \ 
changed to false so that the failed queries arejino)
    Fix: The fairness attribute and ignoreExceptionOnPreLoad attribute do not \ 
allow a change via JMX. (kfujino)
    Fix: If the timeBetweenEvictionRunsMillis attribute is changed via jmx, it \ 
should restart the pool cleaner because this attribute affia JMX. (kfujino)

Other

    Update: Update optional Checkstyle library to 6.8.1. (kkolinko)
    Fix: Update sample Eclipse IDE configuration to exclude test/webapp* and \ 
similar paths from compiler sourcepath. (kkolinko)
    Update: Update package renameote that using this with a value of greater \ 
than one will disbale Cobertura code coverage. (markt)

2015-07-06 Tomcat 8.0.24 (markt)
Catalina

    Fix: 57938: Correctly handle empty form fields when a form is submitted as \ 
multipart/form-data, the maxPostSize attribute of the Connector has been set to \ 
a negative value and the Context has been configured with a value of true for \ 
allowCasualMultipartParsing. The meaning of the value zero for the maxPostSize \ 
has also been changed to mean a limit of zero rather than no limit to align it \ 
with maxSavePostSize and to be more intuitive. (markt)
    Fix: 57977: Correctly bind and unbind the web application class loader \ 
during execution of the PersistentValve. (markt)
    Fix: Remove some unnecessary code from the web application class loader and \ 
deprecate the now unused validate() method since the requirements of SRV.10.7.2 \ 
are met using cleaner code in loadClass(String, boolean) and filter(). (markt)
    Fix: Correct a bug that prevented the web application class loader's \ 
filter() from working correctly. It only returned true for classes in \ 
sub-packages of the listed packages, but not classes located in the packages \ 
themselves. (markt)
    Fix: Add the WebSocket API classes to the list of classes that the web \ 
application class loader will always delegate to its parent for loading first. \ 
(markt)
    Fix: 58015: Ensure that whenever the web application class loader checks to \ 
see if it should delegate first, it also checks the result of the filter() \ 
method which may indicate that it should always delegate first for the current \ 
class/resource regardless of the value of the delegate configuration option. \ 
(markt)
    Fix: 58023: Fix potentially excessive memory usage due to unnecessary \ 
caching of JAR manifests in the web application class loader. (markt)
    Fix: 57700: Ensure that Container event ADD_CHILD_EVENT will be sent in all \ 
cases. (violetagg)
    Fix: 58086: Ensure that WAR URLs are handled properly when using ANT for web \ 
application deployment. Based on a patch provided by Lukasz Jader. (violetagg)
    Fix: Fix CredentialHandler element handling in storeconfig. (remm)

Coyote

    Fix: 57265: Further fix to address a potential threading issue when sendfile \ 
is used in conjunction with TLS. (markt)
    Fix: 57936: Improve robustness of the acceptor thread count parameter for \ 
NIO2, since it must be set to 1. Submitted by Oliver Kant. (remm)
    Add: 57943: Added a work-around to catch ConcurrentModificationExceptions \ 
during Poller timeout processing that were causing the Poller thread to stop. \ 
The root cause of these exceptions is currently unknown. (markt)
    Fix: 57944: Ensure that if non-blocking I/O listeners are set on a \ 
non-container thread that the expected listener events are still triggered. \ 
(markt)
    Fix: Fix possible very long (1000 seconds) timeout with APR/native \ 
connector. (markt)
    Add: Support "-" separator in the SSLProtocol configuration of the \ 
APR/native connector for protocol exclusion. (rjung)
    Fix: 58004: Fix AJP buffering output data even in blocking mode. (remm)

WebSocket

    Fix: 57969: Provide path parameters to POJO via per session \ 
javax.websocket.server.ServerEndpointConfig as they vary between different \ 
requests. (violetagg)
    Fix: 57974: Session.getOpenSessions should return all sessions associated \ 
with a given endpoint instance, rather than all sessions from the endpoint \ 
class. (remm)

Web applications

    Fix: 57282: Update request processing sequence diagrams. Updated diagrams \ 
provided by Stephen Chen. (markt)
    Fix: 57971: Correct the documentation for the cluster configuration setting \ 
recoverySleepTime. (markt)
    Add: 57758: Add document of testOnConnect attribute in jdbc-pool doc. (kfujino)
    Add: Add description of validatorClassName attribute to testXXXX attributes \ 
in jdbc-pool docs. (kfujino)

Tribes

    Code: Use StringManager to provide i18n support in the \ 
org.apache.catalina.tribes packages. (kfujino)
    Fix: Do not set the nodes that failed to replication to the backup nodes. \ 
Ensure that the nodes that the data has been successfully replicated are set to \ 
the backup node. (kfujino)
    Fix: When failed to replication, rather than all member is handled as a \ 
failed member, exclude the failure members from backup members. (kfujino)

jdbc-pool

    Fix: Refactoring of the removeOldest method in SlowQueryReport to behave as \ 
expected. (kfujino)
    Fix: 57783: Fix NullPointerException in SlowQueryReport. To avoid this NPE, \ 
Refactor SlowQueryReport#removeOldest and handle the abandoned connection \ 
properly. (kfujino)
    Fix: 58042: In SlowQueryReportJmx, the LogSlow and logFailed attributes that \ 
inherited from SlowQueryReport are used as a condition of whether JMX \ 
notifications are sent. (kfujino)
    Fix: Ensure that specified Boolean attribute values of SlowQueryReport \ 
reflect correctly. The LogSlow and the logFailed are not system property, these \ 
are attributes of SlowQueryReport. (kfujino)

Other

    Update: Update package renamed Apache Commons BCEL to r1682271 to pick up \ 
some some code clean up. (markt)
    Update: Update package renamed Apache Commons DBCP to r1682314 to pick up \ 
the DBCP 2.1 release and additional fixes since then. (markt)
    Update: Update package renamed Apache Commons Pool to the 2.4 release. (markt)
    Update: Update package renamed Apache Commons File upload to r1682322 to \ 
pick up the post 1.3.1 fixes. (markt)
    Update: Update package renamed Apache Commons Codec to r1682326. No \ 
functional changes. Javadoc only. (markt)
    Update: Update optional Checkstyle library to 6.7. (kkolinko)