All,

The following votes were cast:

Binding:
+1: remm, markt, schultz, dsoumis

No other votes were case, therefore the vote passes.

Thanks to everyone who contributed toward this release.

-chris

On 7/1/25 5:45 PM, Christopher Schultz wrote:
The proposed Apache Tomcat 10.1.43 release is now available for
voting.

All committers and PMC members are kindly requested to provide a vote if possible. ANY TOMCAT USER MAY VOTE, though only PMC members votes are binding. We welcome non-committer votes or comments on release builds.

The notable changes compared to 10.1.42 are:

- Increase the default for maxPartCount from 10 to 50. Update the
   documentation to provide more details on the memory requirements
   to support multi-part uploads while avoiding a denial of service risk.

- Improvements to http/2 support, including data-frame padding,
   request statistics, and suppression of warnings when client
   certificate verification has been configured in certain environments.

- Fix a regression in the fix for CVE-2025-49125 that prevented access
   to PreResources and PostResources when mounted below the web
   application root with a path that was terminated with a file
   separator.

For full details, see the change log:
https://nightlies.apache.org/tomcat/tomcat-10.1.x/docs/changelog.html

Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 without changes. Java EE applications designed for Tomcat 9 and earlier may be placed in the $CATALINA_BASE/webapps-javaee directory and Tomcat will automatically convert them to Jakarta EE and copy them to the webapps directory.

It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-10/v10.1.43/

The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1551

The tag is:
https://github.com/apache/tomcat/tree/10.1.43
https://github.com/apache/tomcat/commit/ e6c2a4b773a2bf03f94a31ed8fc30df1a735217e

Please reply with a +1 for release or +0/-0/-1 with an explanation.


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to