Mark,
Thanks for RMing.
On 6/17/26 6:19 PM, Mark Thomas wrote:
The proposed Apache Tomcat 11.0.23 release is now available for voting.
The notable changes compared to 11.0.22 include:
- Align the rewrite conditions ornext flag processing with
mod_rewrite, which follows a purely sequential evaluation
strategy.
- Ensure that malformed HTTP/2 messages that should trigger a
stream reset do so, rather than triggered a connection close.
- Add replay protection to the EncryptInterceptor. This is a
breaking change for the EncryptInterceptor.
For full details, see the change log:
https://nightlies.apache.org/tomcat/tomcat-11.0.x/docs/changelog.html
Applications that run on Tomcat 9 and earlier will not run on Tomcat 11
without changes. Java EE applications designed for Tomcat 9 and earlier
may be placed in the $CATALINA_BASE/webapps-javaee directory and Tomcat
will automatically convert them to Jakarta EE and copy them to the
webapps directory. Applications using deprecated APIs may require
further changes.
It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-11/v11.0.23/
The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1594
The tag is:
https://github.com/apache/tomcat/tree/11.0.23
b5c1bba61f2e54875bd6d538ae145fffd7b217a8
The proposed 11.0.23 release is:
[ ] -1 Broken - do not release
[ ] +1 Stable - go ahead and release as 11.0.23
+1 for stable release.
Build is reproducible and all unit tests pass on MacOS aarch64.
Details:
* Environment
* Java (build): openjdk version "25.0.3" 2026-04-21 LTS
OpenJDK Runtime Environment Temurin-25.0.3+9 (build 25.0.3+9-LTS)
OpenJDK 64-Bit Server VM Temurin-25.0.3+9 (build 25.0.3+9-LTS, mixed
mode, sharing)
* Java (test): openjdk version "25.0.3" 2026-04-21 LTS
OpenJDK Runtime Environment Temurin-25.0.3+9 (build 25.0.3+9-LTS)
OpenJDK 64-Bit Server VM Temurin-25.0.3+9 (build 25.0.3+9-LTS, mixed
mode, sharing)
* Ant: Apache Ant(TM) version 1.10.17 compiled on April 6 2026
* OS: Darwin 25.3.0 arm64
* cc: Apple clang version 17.0.0 (clang-1700.6.4.2)
* make: GNU Make 3.81
* OpenSSL: OpenSSL 3.6.2 7 Apr 2026 (Library: OpenSSL 3.6.2 7
Apr 2026)
* APR: 1.7.6
*
* Valid SHA-512 signature for apache-tomcat-11.0.23.zip
* Valid GPG signature for apache-tomcat-11.0.23.zip
* Valid SHA-512 signature for apache-tomcat-11.0.23.tar.gz
* Valid GPG signature for apache-tomcat-11.0.23.tar.gz
* Valid SHA-512 signature for apache-tomcat-11.0.23.exe
* Valid GPG signature for apache-tomcat-11.0.23.exe
* Valid Windows Digital Signature for apache-tomcat-11.0.23.exe
* Valid SHA512 signature for apache-tomcat-11.0.23-src.zip
* Valid GPG signature for apache-tomcat-11.0.23-src.zip
* Valid SHA512 signature for apache-tomcat-11.0.23-src.tar.gz
* Valid GPG signature for apache-tomcat-11.0.23-src.tar.gz
*
* Binary Zip and tarball: Same
* Source Zip and tarball: Same
*
* Building dependencies returned: 0
* Tomcat builds cleanly
* tcnative builds cleanly
* Junit Tests: PASSED (on the second try)
-chris
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
