On Wed, Jun 20, 2018 at 9:45 PM Mark Thomas <ma...@apache.org> wrote:
> The proposed Apache Tomcat 9.0.10 release is now available for voting. > > Note: > 9.0.9 was tagged and uploaded when BZ 62476 was created and the decision > was taken to re-tag to pick up that fix. > > The major changes compared to the 9.0.8 release are: > > - Add the RemoteCIDRFilter and RemoteCIDRValve that can be used to > allow/deny requests based on IPv4 and/or IPv6 client address where the > IP ranges are defined using CIDR notation. > Based on a patch by Francis Galiegue. > > - Use NIO2 API for websockets writes. > > - Update the packaged version of the Tomcat Native Library to 1.2.17 to > pick up the latest Windows binaries built with APR 1.6.3 and OpenSSL > 1.0.2o. > > - Correct a regression in the Host validation by removing the > requirement that the final component of a FQDN must be alphabetic. > > Along with lots of other bug fixes and improvements. > > For full details, see the changelog: > http://svn.apache.org/repos/asf/tomcat/trunk/webapps/docs/changelog.xml > > It can be obtained from: > https://dist.apache.org/repos/dist/dev/tomcat/tomcat-9/v9.0.10/ > The Maven staging repo is: > https://repository.apache.org/content/repositories/orgapachetomcat-1186/ > The svn tag is: > http://svn.apache.org/repos/asf/tomcat/tags/TOMCAT_9_0_10/ > > The proposed 9.0.10 release is: > [ ] Broken - do not release > [X] Stable - go ahead and release as 9.0.10 > No issues testing the usual stuff. Ran into unusual problems testing SSL with JSSE (OpenSSL worked well) on Java 10 and 11, nothing conclusive yet. Will investigate for the next build. Rémy
