The Apache Tomcat team announces the immediate availability of Apache
Tomcat 8.5.93.
Apache Tomcat 8 is an open source software implementation of the Java
Servlet, JavaServer Pages, Java Unified Expression Language, Java
WebSocket and JASPIC technologies.
Apache Tomcat 8.5.93 is a bugfix and feature release. The notable
changes compared to 8.5.92 include:
- If an application or library sets both a non-500 error code and the
jakarta.servlet.error.exception</code> request attribute, use the
provided error code during error page processing rather than assuming
an error code of 500.
- Fix for FORM authentication open redirect - CVE-2023-41080
Along with lots of other bug fixes and improvements.
Please refer to the change log for the complete list of changes:
https://tomcat.apache.org/tomcat-8.5-doc/changelog.html
Downloads:
https://tomcat.apache.org/download-80.cgi
Migration guides from Apache Tomcat 7.x and 8.0:
https://tomcat.apache.org/migration.html
Please note that Tomcat 8.5.x will reach End-of-life (EOL) on 31 March
2024. For more information please visit
https://tomcat.apache.org/tomcat-85-eol.html
Enjoy!
- The Apache Tomcat team
