Am 03.03.25 um 20:52 schrieb Rémy Maucherat:
The proposed Apache Tomcat 9.0.102 release is now available for voting.
The notable changes compared to 9.0.100 are:
- Improve the checks for exposure to and protection against
CVE-2024-56337 so that reflection is not used unless required. The
checks for whether the file system is case sensitive or not have been
removed.
- Use Transfer-Encoding for compression rather than Content-Encoding if
the client submits a TE header containing gzip
- Add makensis as an option for building the Installer for Windows on
non-Windows platforms.
For full details, see the changelog:
https://nightlies.apache.org/tomcat/tomcat-9.0.x/docs/changelog.html
It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-9/v9.0.102/
The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1537
The tag is:
https://github.com/apache/tomcat/tree/9.0.102
2a8337689eedee1f2edf15a17cedbf8b2f27b47e
The proposed 9.0.102 release is:
[ ] -1, Broken - do not release
[ ] +1, Stable - go ahead and release as 9.0.102
Rémy
+1
Reproducibility of the build checked (including the Windows installer)
on Linux Mint 22.1 (x86_64) using custom makensis. OK after setting
LANG=en_US.utf8 for javadoc (fixed in main).
One known difference in the javadoc for the jre compat classes due to
strange javadoc behavior wrt. derived classes (probably a javadoc bug).
Tested on platforms
- RHEL 6, 7, 8 and 9, SLES 11, 12 and 15, Solaris 10+11 Sparc
using
- current patch versions of JDK 1.8.0, 11, 17, 21, 23 and 24+25 (current
EAs)
from
- Eclipse Adoptium, Azul Zulu, Amazon Corretto, Oracle, RedHat and
OpenJDK (for the EAs)
where available.
Also tested with
- tcnative 1.3.1, tcnative 2.0.8 and panama
based on
- OpenSSL 3.0.16, 3.1.8, 3.2.4, 3.3.3 and 3.4.1.
All tests fine, except for the usual sporadic crashes with tcnative
during shutdown.
Thanks for RM!
Best regards,
Rainer
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
