Hi Jacques, Yours is a good catch, thank you. Let's cancel the vote. I am preparing the new release with the updated dependency to Tomcat 9.0.118
Jacopo On Wed, May 13, 2026 at 10:40 AM Jacques Le Roux via dev < [email protected]> wrote: > Hi Jacopo, > > Why not updating Tomcat to 9.0.118 because of a lot of CVEs (I saw you did > only for websocket) ? > > Do I miss something? > > TIA > > Jacques > > Le 13/05/2026 à 10:13, Jacopo Cappellato a écrit : > > This is the second vote thread to publish "Apache OFBiz 24.09.06", the > sixth > > release from the release24.09 branch. > > > > The release files can be downloaded from here: > > https://dist.apache.org/repos/dist/dev/ofbiz/ > > and are: > > * apache-ofbiz-24.09.06.zip > > * KEYS: text file with keys > > * apache-ofbiz-24.09.06.zip.asc: the detached signature file > > * apache-ofbiz-24.09.06.zip.sha512: checksum file > > > > Please download and test the zip file, verify the signature > > and the checksum (for instructions about release verification see > > http://www.apache.org/info/verification.html). > > > > Vote: > > [ +1] release as Apache OFBiz 24.09.06 > > [ -1] do not release > > > > This vote will remain open for at least 5 days. > > > > For more details about this process please refer to > > http://www.apache.org/foundation/voting.html >
