+1

-----Original Message-----
From: Rémy Maucherat <r...@apache.org> 
Sent: Monday, March 3, 2025 1:52 PM
To: Tomcat Developers List <dev@tomcat.apache.org>
Subject: [EXTERNAL] [VOTE] Release Apache Tomcat 9.0.102

CAUTION: This email originated from outside of the organization. Do not click 
links or open attachments unless you can confirm the sender and know the 
content is safe.



The proposed Apache Tomcat 9.0.102 release is now available for voting.

The notable changes compared to 9.0.100 are:

- Improve the checks for exposure to and protection against
   CVE-2024-56337 so that reflection is not used unless required. The
   checks for whether the file system is case sensitive or not have been
   removed.

- Use Transfer-Encoding for compression rather than Content-Encoding if
   the client submits a TE header containing gzip

- Add makensis as an option for building the Installer for Windows on
   non-Windows platforms.

For full details, see the changelog:
https://nightlies.apache.org/tomcat/tomcat-9.0.x/docs/changelog.html

It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-9/v9.0.102/

The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1537

The tag is:
https://github.com/apache/tomcat/tree/9.0.102
2a8337689eedee1f2edf15a17cedbf8b2f27b47e

The proposed 9.0.102 release is:
[ ] -1, Broken - do not release
[ X] +1, Stable - go ahead and release as 9.0.102

Rémy

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional 
commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to