Han,
On 8/9/22 10:46, Han Li wrote:
2022年8月9日 22:25，Rémy Maucherat <r...@apache.org> 写道：
On Tue, Aug 9, 2022 at 12:16 AM Christopher Schultz
<ch...@christopherschultz.net <mailto:ch...@christopherschultz.net>> wrote:
The proposed Apache Tomcat 8.5.82 release is now available for voting.
The notable changes compared to 8.5.81 are:
- Update the packaged version of the Tomcat Native Library to 1.2.35 to
pick up Windows binaries built with OpenSSL 1.1.1q.
- Enable the use of the FIPS provider for TLS enabled Connectors when
using Tomcat Native 1.2.34 onwards built with OpenSSL 3.0.x onwards.
- Improvements to HTTP/2 header handling.
- Fix CVE-2022-34305, a low severity XSS vulnerability in the
Form authentication example.
Along with lots of other bug fixes and improvements.
For full details, see the changelog:
https://nightlies.apache.org/tomcat/tomcat-8.5.x/docs/changelog.html
It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-8/v8.5.82/
The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1385
The tag is:
https://github.com/apache/tomcat/tree/8.5.82/
237076605ea6b44ec7b97ee1158d5aa7f2f0b53c
The proposed 8.5.82 release is:
[ ] Broken - do not release
[X] Stable - go ahead and release as 8.5.82 (stable)
Well, I still have a problem. JSP seems to be less functional now with
Java 17+ (at least the one from fedora).
As a quick test, maybe try
http://127.0.0.1:8080/examples/jsp/include/include.jsp
<http://127.0.0.1:8080/examples/jsp/include/include.jsp>
With it I get an error about JDT (we use an older version due to Java 7):
Hmm, I don’t get any errors with Java 17.0.2+8-86.
I have another question, when doing these tests, what JDK version should I
choose for the tests?
Should I choose the lowest JDK version supported by the current tomcat version,
or is anything above the lowest version ok?
You should use any version that is supported.
I use Java 8 because that's what I (still) run in production.
Theoretically, Java 7 should allow (nearly) all tests to pass, and the
product should work properly.
So please feel free to use whatever you have laying around.
Thanks,
-chris
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
