Am 06.10.26 um 21:33 schrieb Rémy Maucherat:
The proposed Apache Tomcat 9.0.123 release is now available for voting.
The notable changes compared to 9.0.122 are:
- Fix possible corruption when using HTTP/2 and async IO on uploads.
Submitted by Tim Burke.
- When StoreConfig re-writes an existing server.xml or context configuration
file, preserve the layout of the existing file.
- Fix TLS handshake issues with MLDSA caused by large signatures. Patch
submitted by Lukas Hellebrandt.
For full details, see the changelog:
https://nightlies.apache.org/tomcat/tomcat-9.0.x/docs/changelog.html
It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-9/v9.0.123/
The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1609
The tag is:
https://github.com/apache/tomcat/tree/9.0.123
110077ac321964192c316e5836d4285f096e9d05
The proposed 9.0.123 release is:
[ ] -1, Broken - do not release
[X] +1, Stable - go ahead and release as 9.0.123
+1 to release.
Reproducibility of the build checked (including the Windows installer)
using "ant verify-release" on Linux Mint 22.3. OK after setting LANG.
Original Windows installer signature verified with osslsigncode 2.10.
Unit tests ran on platforms
- RHEL 7, 8, 9 and 10 and SLES 12 and 15
using
- recent patch versions of JDK 8, JDK 17, 21, 25, 27 and 28 (EA)
from
- Eclipse Adoptium, Azul Zulu, Amazon Corretto, Oracle, RedHat (27
missing) and from OpenJDK for 28
Also tested with
- tcnative 1.3.9, 2.0.16 and panama
based on
- OpenSSL 3.5.9, 3.6.5, 4.0.3 and 4.1.0beta1 (the last two only for
tcnative 2 and panama)
Each combination of platform, JVM and JSSE or tcnative or panama only
tested for NIO or NIO2 (randomized). Total number of test combinations:
81 nio2 jsse
125 nio2 panama
486 nio2 tcnative
89 nio jsse
107 nio panama
534 nio tcnative
Test observations:
- IMHO nothing critical
- TestPQC with MLDSA fails for JDK28 with tcnative (see separate mail
in TC 11 vote thread)
- TestStandardVirtualThreadExecutor fails to missing support below
Java 21 (already fixed in HEAD, thanks)
- in addition
- no crash failures with JSSE (170 runs)
- few crashes with tcnative (9 in 1020 runs)
- no crash failures with panama (232 runs)
- few non-crash failures with jsse (19 in 170 runs)
- few non-crash failures with tcnative (10 in 1020 runs)
- no non-crash failures with panama (232 runs)
- the numbers are slightly higher than usual, likely because by
accident I ran two test executions in parallel for a few hours before I
noticed it)
Thanks for RM!
Best regards,
Rainer
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
