All,

On 7/1/25 5:45 PM, Christopher Schultz wrote:
The proposed Apache Tomcat 10.1.43 release is now available for
voting.

All committers and PMC members are kindly requested to provide a vote if possible. ANY TOMCAT USER MAY VOTE, though only PMC members votes are binding. We welcome non-committer votes or comments on release builds.

The notable changes compared to 10.1.42 are:

- Increase the default for maxPartCount from 10 to 50. Update the
   documentation to provide more details on the memory requirements
   to support multi-part uploads while avoiding a denial of service risk.

- Improvements to http/2 support, including data-frame padding,
   request statistics, and suppression of warnings when client
   certificate verification has been configured in certain environments.

- Fix a regression in the fix for CVE-2025-49125 that prevented access
   to PreResources and PostResources when mounted below the web
   application root with a path that was terminated with a file
   separator.

For full details, see the change log:
https://nightlies.apache.org/tomcat/tomcat-10.1.x/docs/changelog.html

Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 without changes. Java EE applications designed for Tomcat 9 and earlier may be placed in the $CATALINA_BASE/webapps-javaee directory and Tomcat will automatically convert them to Jakarta EE and copy them to the webapps directory.

It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-10/v10.1.43/

The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1551

The tag is:
https://github.com/apache/tomcat/tree/10.1.43
https://github.com/apache/tomcat/commit/ e6c2a4b773a2bf03f94a31ed8fc30df1a735217e

Please reply with a +1 for release or +0/-0/-1 with an explanation.

+1 for stable release

Unit tests all pass on MacOS aarch64.

Details:
* Environment
* Java (build): openjdk version "24.0.1" 2025-04-15 OpenJDK Runtime Environment Temurin-24.0.1+9 (build 24.0.1+9) OpenJDK 64-Bit Server VM Temurin-24.0.1+9 (build 24.0.1+9, mixed mode, sharing) * Java (test): openjdk version "24.0.1" 2025-04-15 OpenJDK Runtime Environment Temurin-24.0.1+9 (build 24.0.1+9) OpenJDK 64-Bit Server VM Temurin-24.0.1+9 (build 24.0.1+9, mixed mode, sharing) * Ant: Apache Ant(TM) version 1.10.15 compiled on August 25 2024
*  OS:              Darwin 24.5.0 arm64
*  cc:              Apple clang version 17.0.0 (clang-1700.0.13.5)
*  make:            GNU Make 3.81
* OpenSSL: OpenSSL 3.5.0 8 Apr 2025 (Library: OpenSSL 3.5.0 8 Apr 2025)
*  APR:             1.7.6
*
* Valid SHA-512 signature for apache-tomcat-10.1.43.zip
* Valid GPG signature for apache-tomcat-10.1.43.zip
* Valid SHA-512 signature for apache-tomcat-10.1.43.tar.gz
* Valid GPG signature for apache-tomcat-10.1.43.tar.gz
* Valid SHA-512 signature for apache-tomcat-10.1.43.exe
* Valid GPG signature for apache-tomcat-10.1.43.exe
* Valid Windows Digital Signature for apache-tomcat-10.1.43.exe
* Valid SHA512 signature for apache-tomcat-10.1.43-src.zip
* Valid GPG signature for apache-tomcat-10.1.43-src.zip
* Valid SHA512 signature for apache-tomcat-10.1.43-src.tar.gz
* Valid GPG signature for apache-tomcat-10.1.43-src.tar.gz
*
* Binary Zip and tarball: Same
* Source Zip and tarball: Same
*
* Building dependencies returned: 0
* Tomcat builds cleanly
* tcnative builds cleanly
* Junit Tests: PASSED



---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to