Re: [VOTE] Release Apache Tomcat 9.0.24
On Wed, Aug 14, 2019 at 11:45 PM Mark Thomas wrote: > The proposed Apache Tomcat 9.0.24 release is now available for voting. > > The major changes compared to the 9.0.22 release are: > > - Expand Graal native image support to include JNDI, JSPs and JULI > Thanks, that item makes more sense :) > > - Expand the HTTP/2 excessive overhead protection to cover various forms > of abusive client behaviour and close the connection if any such > behaviour is detected. > > - Security improvements to the Windows installer including a change in > the default user from Local System to Local Service. > > Along with lots of other bug fixes and improvements. > > For full details, see the changelog: > https://ci.apache.org/projects/tomcat/tomcat9/docs/changelog.html > > It can be obtained from: > https://dist.apache.org/repos/dist/dev/tomcat/tomcat-9/v9.0.24/ > The Maven staging repo is: > https://repository.apache.org/content/repositories/orgapachetomcat-1227/ > The tag is: > https://github.com/apache/tomcat/tree/9.0.24 > > > The proposed 9.0.24 release is: > [ ] Broken - do not release > [X] Stable - go ahead and release as 9.0.24 > > Rémy
Re: [VOTE] Release Apache Tomcat 9.0.24
On 14/08/2019 22:45, Mark Thomas wrote: > The proposed 9.0.24 release is: > [ ] Broken - do not release > [X] Stable - go ahead and release as 9.0.24 Tested NIO, NIO2 and APR/Native (1.2.23) on Linux MacOS and Windows. All tests passed. Mark - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
Re: [VOTE] Release Apache Tomcat 9.0.24
On Wed, Aug 14, 2019 at 2:45 PM Mark Thomas wrote: > > The proposed 9.0.24 release is: > [ ] Broken - do not release > [X] Stable - go ahead and release as 9.0.24 > All unit tests passed successfully on Windows 10 and Ubuntu 18.04 Best, Igal > > - > To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org > For additional commands, e-mail: dev-h...@tomcat.apache.org > >
Re: [VOTE] Release Apache Tomcat 9.0.24
On Thu, Aug 15, 2019 at 12:45 AM Mark Thomas wrote: > The proposed Apache Tomcat 9.0.24 release is now available for voting. > > The major changes compared to the 9.0.22 release are: > > - Expand Graal native image support to include JNDI, JSPs and JULI > > - Expand the HTTP/2 excessive overhead protection to cover various forms > of abusive client behaviour and close the connection if any such > behaviour is detected. > > - Security improvements to the Windows installer including a change in > the default user from Local System to Local Service. > > Along with lots of other bug fixes and improvements. > > For full details, see the changelog: > https://ci.apache.org/projects/tomcat/tomcat9/docs/changelog.html > > It can be obtained from: > https://dist.apache.org/repos/dist/dev/tomcat/tomcat-9/v9.0.24/ > The Maven staging repo is: > https://repository.apache.org/content/repositories/orgapachetomcat-1227/ > The tag is: > https://github.com/apache/tomcat/tree/9.0.24 > > > The proposed 9.0.24 release is: > [ ] Broken - do not release > [ X ] Stable - go ahead and release as 9.0.24 > Regards, Martin > > - > To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org > For additional commands, e-mail: dev-h...@tomcat.apache.org > >
Re: [VOTE] Release Apache Tomcat 9.0.24
On 14/08/2019 22:56, Guild, Jason A (DOT) wrote: > Hi Mark: > > Glad to see the privilege reduction. > > I don't use the Windows installer. > WRT the change below, I am wondering if this will also be the case for > service installation by tomcat9.exe via the bin\service.bat script. > > I am hoping the tomcat9.exe will somehow be doing the equivalent of: > sc config my-tomcat-service-name obj= "NT AUTHORITY\LocalService" > password= "" > > Any info you can provide is appreciated. Yes, the default service user should apply when installed via service.bat as well as by the Windows installer. Mark > > Thanks, > Jason > > On 8/14/2019 1:45 PM, Mark Thomas wrote: >> The major changes compared to the 9.0.22 release are: >> >> - Security improvements to the Windows installer including a change in >>the default user from Local System to Local Service. > > > - > To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org > For additional commands, e-mail: dev-h...@tomcat.apache.org > - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
Re: [VOTE] Release Apache Tomcat 9.0.24
Hi Mark: Glad to see the privilege reduction. I don't use the Windows installer. WRT the change below, I am wondering if this will also be the case for service installation by tomcat9.exe via the bin\service.bat script. I am hoping the tomcat9.exe will somehow be doing the equivalent of: sc config my-tomcat-service-name obj= "NT AUTHORITY\LocalService" password= "" Any info you can provide is appreciated. Thanks, Jason On 8/14/2019 1:45 PM, Mark Thomas wrote: > The major changes compared to the 9.0.22 release are: > > - Security improvements to the Windows installer including a change in >the default user from Local System to Local Service.
