Mark,
Thanks for RMing.
On 2/28/25 12:06 PM, Mark Thomas wrote:
The proposed Apache Tomcat 11.0.5 release is now available for voting.
The notable changes compared to 11.0.4 include:
- Improve the checks for exposure to and protection against
CVE-2024-56337 so that reflection is not used unless required. The
checks for whether the file system is case sensitive or not have been
removed.
- Use Transfer-Encoding for compression rather than Content-Encoding if
the client submits a TE header containing gzip
- Add makensis as an option for building the Installer for Windows on
non-Windows platforms.
For full details, see the change log:
https://nightlies.apache.org/tomcat/tomcat-11.0.x/docs/changelog.html
Applications that run on Tomcat 9 and earlier will not run on Tomcat 11
without changes. Java EE applications designed for Tomcat 9 and earlier
may be placed in the $CATALINA_BASE/webapps-javaee directory and Tomcat
will automatically convert them to Jakarta EE and copy them to the
webapps directory. Applications using deprecated APIs may require
further changes.
It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-11/v11.0.5/
The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1534
The tag is:
https://github.com/apache/tomcat/tree/11.0.5
1ba1f9061e49ce03c77b57beff3d50e5c2c3ee29
The proposed 11.0.5 release is:
[ ] -1 Broken - do not release
[ ] +1 Stable - go ahead and release as 11.0.5
+1 for stable release.
Build is 100% reproducible on MacOS aarch64 and the unit tests pass.
Details:
* Environment
* Java (build): openjdk version "23.0.2" 2025-01-21 OpenJDK Runtime
Environment Temurin-23.0.2+7 (build 23.0.2+7) OpenJDK 64-Bit Server VM
Temurin-23.0.2+7 (build 23.0.2+7, mixed mode, sharing)
* Java (test): openjdk version "23.0.2" 2025-01-21 OpenJDK Runtime
Environment Temurin-23.0.2+7 (build 23.0.2+7) OpenJDK 64-Bit Server VM
Temurin-23.0.2+7 (build 23.0.2+7, mixed mode, sharing)
* Ant: Apache Ant(TM) version 1.10.15 compiled on August 25
2024
* OS: Darwin 24.1.0 arm64
* cc: Apple clang version 16.0.0 (clang-1600.0.26.4)
* make: GNU Make 3.81
* OpenSSL: OpenSSL 3.4.0 22 Oct 2024 (Library: OpenSSL 3.4.0 22
Oct 2024)
* APR: 1.7.5
*
* Valid SHA-512 signature for apache-tomcat-11.0.5.zip
* Valid GPG signature for apache-tomcat-11.0.5.zip
* Valid SHA-512 signature for apache-tomcat-11.0.5.tar.gz
* Valid GPG signature for apache-tomcat-11.0.5.tar.gz
* Valid SHA-512 signature for apache-tomcat-11.0.5.exe
* Valid GPG signature for apache-tomcat-11.0.5.exe
* Valid Windows Digital Signature for apache-tomcat-11.0.5.exe
* Valid SHA512 signature for apache-tomcat-11.0.5-src.zip
* Valid GPG signature for apache-tomcat-11.0.5-src.zip
* Valid SHA512 signature for apache-tomcat-11.0.5-src.tar.gz
* Valid GPG signature for apache-tomcat-11.0.5-src.tar.gz
*
* Binary Zip and tarball: Same
* Source Zip and tarball: Same
*
* Building dependencies returned: 0
* Tomcat builds cleanly
* tcnative builds cleanly
* Junit Tests: PASSED
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
