Rémy,
Thanks for RMing.
On 3/3/25 2:52 PM, Rémy Maucherat wrote:
The proposed Apache Tomcat 9.0.102 release is now available for voting.
The notable changes compared to 9.0.100 are:
- Improve the checks for exposure to and protection against
CVE-2024-56337 so that reflection is not used unless required. The
checks for whether the file system is case sensitive or not have been
removed.
- Use Transfer-Encoding for compression rather than Content-Encoding if
the client submits a TE header containing gzip
- Add makensis as an option for building the Installer for Windows on
non-Windows platforms.
For full details, see the changelog:
https://nightlies.apache.org/tomcat/tomcat-9.0.x/docs/changelog.html
It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-9/v9.0.102/
The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1537
The tag is:
https://github.com/apache/tomcat/tree/9.0.102
2a8337689eedee1f2edf15a17cedbf8b2f27b47e
The proposed 9.0.102 release is:
[ ] -1, Broken - do not release
[ ] +1, Stable - go ahead and release as 9.0.102
+1 for stable release.
Build is reproducible (except for fulldocs package) and the unit tests
pass on MacOS aarch64.
Details:
* Environment
* Java (build): openjdk version "17.0.14" 2025-01-21 OpenJDK Runtime
Environment Temurin-17.0.14+7 (build 17.0.14+7) OpenJDK 64-Bit Server VM
Temurin-17.0.14+7 (build 17.0.14+7, mixed mode, sharing)
* Java (ffm): openjdk version "23.0.2" 2025-01-21 OpenJDK Runtime
Environment Temurin-23.0.2+7 (build 23.0.2+7) OpenJDK 64-Bit Server VM
Temurin-23.0.2+7 (build 23.0.2+7, mixed mode, sharing)
* Java (test): openjdk version "23.0.2" 2025-01-21 OpenJDK Runtime
Environment Temurin-23.0.2+7 (build 23.0.2+7) OpenJDK 64-Bit Server VM
Temurin-23.0.2+7 (build 23.0.2+7, mixed mode, sharing)
* Ant: Apache Ant(TM) version 1.10.15 compiled on August 25
2024
* OS: Darwin 24.1.0 arm64
* cc: Apple clang version 16.0.0 (clang-1600.0.26.4)
* make: GNU Make 3.81
* OpenSSL: OpenSSL 3.4.0 22 Oct 2024 (Library: OpenSSL 3.4.0 22
Oct 2024)
* APR: 1.7.5
*
* Valid SHA-512 signature for apache-tomcat-9.0.102.zip
* Valid GPG signature for apache-tomcat-9.0.102.zip
* Valid SHA-512 signature for apache-tomcat-9.0.102.tar.gz
* Valid GPG signature for apache-tomcat-9.0.102.tar.gz
* Valid SHA-512 signature for apache-tomcat-9.0.102.exe
* Valid GPG signature for apache-tomcat-9.0.102.exe
* Valid Windows Digital Signature for apache-tomcat-9.0.102.exe
* Valid SHA512 signature for apache-tomcat-9.0.102-src.zip
* Valid GPG signature for apache-tomcat-9.0.102-src.zip
* Valid SHA512 signature for apache-tomcat-9.0.102-src.tar.gz
* Valid GPG signature for apache-tomcat-9.0.102-src.tar.gz
*
* Binary Zip and tarball: Same
* Source Zip and tarball: Same
*
* Building dependencies returned: 0
* Tomcat builds cleanly
* tcnative builds cleanly
* Junit Tests: PASSED
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
