Am 04.03.25 um 20:13 schrieb Christopher Schultz:
The proposed Apache Tomcat 10.1.39 release is now available for
voting.
All committers and PMC members are kindly requested to provide a vote if
possible. ANY TOMCAT USER MAY VOTE, though only PMC members votes are
binding. We welcome non-committer votes or comments on release builds.
Note that 10.1.37 and 10.1.38 were not released due to packaging errors.
The notable changes compared to 10.1.36 are:
- Improve the checks for exposure to and protection against
CVE-2024-56337 so that reflection is not used unless required. The
checks for whether the file system is case sensitive or not have been
removed.
- Use Transfer-Encoding for compression rather than Content-Encoding if
the client submits a TE header containing gzip.
- Add makensis as an option for building the Installer for Windows on
non-Windows platforms.
For full details, see the change log:
https://nightlies.apache.org/tomcat/tomcat-10.1.x/docs/changelog.html
Applications that run on Tomcat 9 and earlier will not run on Tomcat 10
without changes. Java EE applications designed for Tomcat 9 and earlier
may be placed in the $CATALINA_BASE/webapps-javaee directory and Tomcat
will automatically convert them to Jakarta EE and copy them to the
webapps directory.
It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-10/v10.1.38/
The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1539
The tag is:
https://github.com/apache/tomcat/tree/10.1.39
https://github.com/apache/tomcat/
commit/1e17b1d03591faa17a6eedeaeb3a9f9f7aac12fa
Please reply with a +1 for release or +0/-0/-1 with an explanation.
I am late, but for the sake of completeness:
+1
Reproducibility of the build checked (including the Windows installer)
on Linux Mint 22.1 (x86_64) using custom makensis. OK after setting
LANG=en_US.utf8 for javadoc (fixed in main).
Tested on platforms
- RHEL 6, 7, 8 and 9, SLES 11, 12 and 15, Solaris 11 Sparc
using
- current patch versions of JDK 11, 17, 21, 23 and 24+25 (current EAs)
from
- Eclipse Adoptium, Azul Zulu, Amazon Corretto, Oracle, RedHat and
OpenJDK (for the EAs)
where available.
Also tested with
- tcnative 1.3.1, tcnative 2.0.8 and panama
based on
- OpenSSL 3.0.16, 3.1.8, 3.2.4, 3.3.3 and 3.4.1.
All tests fine, except for the usual sporadic crashes with tcnative
during shutdown.
Thanks for RM!
Best regards,
Rainer
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
