Log Message:
Update to Tomcat 8.0.41. Upstream changelog:

Tomcat 8.0.41 (violetagg)
Cluster

    Add: Make the accessTimeout configurable in BackupManager. The accessTimeout \ 
is used as a timeout period for PING in replication map. (kfujino)

Web applications

    Fix: Ensure the ASF logo image is displayed in host-manager. (violetagg)

not released Tomcat 8.0.40 (violetagg)
Catalina

    Add: 53602: Add HTTP status code 451 (RFC 7725) to the list of HTTP status \ 
codes recognised by Tomcat. (markt)
    Fix: 60446: Handle the case where the stored user credential uses a \ 
different key length than the length currently configured for the \ 
CredentialHandler. Based on a patch by Niklas Holm. (markt)
    Fix: 60351: Delay creating META-INF/war-tracker file until after the WAR has \ 
been expanded to address the case where the Tomcat process terminates during the \ 
expansion. (markt)
    Fix: Correctly handle the configClass attribute of a Host when embedding \ 
Tomcat. (markt)
    Fix: 60379: Dispose of the GSS credential once it is no longer required. \ 
Patch provided by Michael Osipov. (markt)
    Fix: 60380: Ensure that a call to HttpServletRequest#logout() triggers a \ 
call to TomcatPrincipal#logout(). Based on a patch by Michael Osipov. (markt)
    Fix: 60387: Correct the javadoc for \ 
o.a.catalina.AccessLog.setRequestAttributesEnabled. The default value is \ 
different for the different implementations. (violetagg)
    Code: 60393: Use consistent parameter naming in implementations of \ 
Realm#authenticate(GSSContext, boolean). (markt)
    Fix: 60395: Log when an Authenticator passes an incomplete GSSContext to a \ 
Realm since it indicates a bug in the Authenticator. Patch provided by Michael \ 
Osipov. (markt)
    Fix: Correctly generate URLs for resources located inside JARs that are \ 
themselves located inside a packed WAR file. (markt)
    Fix: 60410: Ensure that multiple calls to JarInputStreamWrapper#close() do \ 
not incorrectly trigger the closure of the underlying JAR or WAR file. (markt)
    Fix: 60411: Implement support in the RewriteValve for symbolic names to \ 
specify the redirect code to use when returning a redirect response to the user \ 
agent. Patch provided by Michael Osipov. (markt)
    Fix: 60413: In the RewriteValve write empty capture groups as the empty \ 
string rather than as "null" when generating the re-written URL. Based \ 
on a patch by Michael Osipov. (markt)
    Update: Update the warnings that reference required options for running on \ 
Java 9 to use the latest syntax for those options. (markt)
    Fix: 60513: Fix thread safety issue with RMI cleanup code. (remm)

Coyote

    Fix: Ensure that the endpoint is able to unlock the acceptor thread during \ 
shutdown if the endpoint is configured to listen to any local address of a \ 
specific type such as 0.0.0.0 or ::. (markt)
    Fix: Prevent read time out when the file is deleted while serving the \ 
response. The issue was observed only with APR Connector and sendfile enabled. \ 
(violetagg)
    Fix: Improve the logic that selects an address to use to unlock the Acceptor \ 
to take account of platforms what do not listen on all local addresses when \ 
configured with an address of 0.0.0.0 or ::. (markt)
    Fix: 60409: When unable to complete sendfile request, ensure the Processor \ 
will be added to the cache only once. (markt/violetagg)

Jasper

    Fix: 60431: Improve handling of varargs in UEL expressions. Based on a patch \ 
by Ben Wolfe. (markt)
    Fix: 60497: Restore previous tag reuse behavior following the use of \ 
try/finally. (remm)
    Fix: Improve the error handling for simple tags to ensure that the tag is \ 
released and destroyed once used. (remm)
    Fix: 60497: Follow up fix using a better variable name for the tag reuse \ 
flag. (remm)
    Fix: Revert use of try/finally for simple tags. (remm)

Web applications

    Fix: Correct a typo in Host Configuration Reference. Issue reported via \ 
comments.apache.org. (violetagg)
    Fix: 60344: Add a note to BUILDING.txt regarding using the source bundle \ 
with the correct line endings. (markt)
    Fix: 60412: Add information on the comment syntax for the RewriteValve \ 
configuration. (markt)
    Fix: 60467: remove problematic characters from XML documentation. Based upon \ 
a patch by Michael Osipov. (schultz)
    Add: In the documentation web application, be explicit that clustering \ 
requires a secure network for all of the cluster network traffic. (markt)
    Update: Update the ASF logos to the new versions.
    Fix: 60468: Correct the format of the sample ISO-8601 date used to report \ 
the build date for the documentation. Patch provided by Michael Osipov. (markt)

Tribes

    Fix: Reduce the warning logs for a message received from a different domain \ 
in order to avoid excessive log outputs. (kfujino)
    Add: Add log message that PING message has received beyond the timeout \ 
period. (kfujino)
    Fix: When a PING message that beyond the time-out period has been received, \ 
make sure that valid member is added to the map membership. (kfujino)

WebSocket

    Fix: 60437: Avoid possible handshake overflows in the websocket client. (remm)

jdbc-pool

    Add: 58816: Implement the statistics of jdbc-pool. The stats infos are \ 
borrowedCount, returnedCount, createdCount, releasedCount, reconnectedCount, \ 
releasedIdleCount and removeAbandonedCount. (kfujino)
    Fix: 60194: If validationQuery is not specified, connection validation is \ 
done by calling the isValid() method. (kfujino)
    Fix: 60398: Fix testcase of TestSlowQueryReport. (kfujino)
    Add: Enable reset the statistics without restarting the pool. (kfujino)

Other

    Fix: 60366: Change catalina.bat to use directly LOGGING_MANAGER and \ 
LOGGING_CONFIG variables in order to configure logging, instead of modifying \ 
JAVA_OPTS. Patch provided by Petter Isberg. (violetagg)
    Add: New property is added test.verbose in order to control whether the \ 
output of the tests is displayed on the console or not. Patch provided by \ 
Emmanuel Bourg. (violetagg)
    Update: Update the ASF logos used in the Apache Tomcat installer for Windows \ 
to use the new versions.
    Fix: Spelling corrections provided by Josh Soref. (violetagg)