Update to 8.0.53

Changelog:
Tomcat 8.0.53 (violetagg)

Catalina
	Fix:  Treat the <mapped-name> element of a <env-entry> in web.xml in the same way as the mappedName element of the equivalent @Resource annotation. Both now attempt to set the mappedName property of the resource. (markt)
	Fix:  Correct the processing of resources with <injection-target>s defined in web.xml. First look for a match using JavaBean property names and then, only if a match is not found, look for a match using fields. (markt)
	Fix:  When restoring a saved request with a request body after FORM authentication, ensure that calls to the HttpServletRequest methods getRequestURI(), getQueryString() and getProtocol() are not corrupted by the processing of the saved request body. (markt)
	Fix:  JNDI resources that are defined with injection targets but no value are now treated as if the resource is not defined. (markt)
	Fix:  Ensure that JNDI names used for <lookup-name> entries in web.xml and for lookup elements of @Resource annotations specify a name with an explicit java: namespace. (markt)
	Code:  Refactor the org.apache.naming package to reduce duplicate code. Duplicate code identified by the Simian tool. (markt)
	Fix:  50019: Add support for <lookup-name>. Based on a patch by Gurkan Erdogdu. (markt)
	Fix:  60490: Various formatting and layout improvements for the ErrorReportValve. Patch provided by Michael Osipov. (markt)
	Fix:  62343: Make CORS filter defaults more secure. This is the fix for CVE-2018-8014. (markt)
	Fix:  Ensure that the web application resources implementation does not incorrectly cache results for resources that are only visible as class loader resources. (markt)
	Fix:  Make all loggers associated with Tomcat provided Filters non-static to ensure that log messages are not lost when a web application is reloaded. (markt)
	Fix:  Correct the manifest for the annotations-api.jar. The JAR implements the Common Annotations API 1.2 and the manifest should reflect that. (markt)
	Fix:  Switch to non-static loggers where there is a possibility of a logger becoming associated with a web application class loader causing log messages to be lost if the web application is stopped. (markt)
	Add:  62389: Add the IPv6 loopback address to the default internalProxies regular expression. Patch by Craig Andrews. (markt)
	Fix:  In the RemoteIpValve and RemoteIpFilter, correctly handle the case when the request passes through one or more trustedProxies but no internalProxies. Based on a patch by zhanhb. (markt)
	Fix:  Correct the logic in MBeanFactory.removeConnector() to ensure that the correct Connector is removed when there are multiple Connectors using different addresses but the same port. (markt)
	Fix:  Make JAASRealm mis-configuration more obvious by requiring the authenticated Subject to include at least one Principal of a type specified by userClassNames. (markt)
	Fix:  62476: Use GMT timezone for the value of Expires header as required by HTTP specification (RFC 7231, 7234). (kkolinko)

2 files changed, 7 insertions, 7 deletions

diff --git a/www/apache-tomcat8/Makefile b/www/apache-tomcat8/Makefile
index aa2f597c930..c0ffd99cbf6 100644
--- a/www/apache-tomcat8/Makefile
+++ b/www/apache-tomcat8/Makefile
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.17 2018/03/23 13:16:38 ryoon Exp $
+# $NetBSD: Makefile,v 1.18 2018/07/25 21:20:02 zafer Exp $
 #
 
 DISTNAME=	apache-tomcat-${TOMCAT_VER}
@@ -21,7 +21,7 @@ USE_TOOLS+=	pax
 
 .include "../../mk/bsd.prefs.mk"
 
-TOMCAT_VER=		8.0.50
+TOMCAT_VER=		8.0.53
 TOMCAT_HOME=		${PREFIX}/share/tomcat
 EGDIR=			${PREFIX}/share/examples/tomcat
 DOCDIR=			${PREFIX}/share/doc/tomcat
diff --git a/www/apache-tomcat8/distinfo b/www/apache-tomcat8/distinfo
index 754b39dcd3b..4268a1deea2 100644
--- a/www/apache-tomcat8/distinfo
+++ b/www/apache-tomcat8/distinfo
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.18 2018/03/23 13:16:38 ryoon Exp $
+$NetBSD: distinfo,v 1.19 2018/07/25 21:20:02 zafer Exp $
 
-SHA1 (apache-tomcat-8.0.50.tar.gz) = ec66581d322a8ef58e3988fc72e2c076968f3e2e
-RMD160 (apache-tomcat-8.0.50.tar.gz) = bbfee30149d69acf67c037177858f3ca800e50f8
-SHA512 (apache-tomcat-8.0.50.tar.gz) = c8923e610f1d3f7f13d5d0cc765a97ef1b5b34a527b57dfb7058f0bd65555cec748b83198859e6bba41b29cc3d5071ed05618097edc5d6cfad2f380f8230e7f5
-Size (apache-tomcat-8.0.50.tar.gz) = 9417189 bytes
+SHA1 (apache-tomcat-8.0.53.tar.gz) = 7681e57a7094cf1e468e09ea059d9f1e2a4673ec
+RMD160 (apache-tomcat-8.0.53.tar.gz) = 4e24291c25b7207e2f150813223e30ff5a39c532
+SHA512 (apache-tomcat-8.0.53.tar.gz) = cd8a4e48a629a2f2bb4ce6b101ebcce41da52b506064396ec1b2915c0b0d8d82123091242f2929a649bcd8b65ecf6cd1ab9c7d90ac0e261821097ab6fbe22df9
+Size (apache-tomcat-8.0.53.tar.gz) = 9455895 bytes