Thanks for your reply. Han
> 2022年8月10日 02:36，Christopher Schultz <ch...@christopherschultz.net> 写道： > > Han, > > On 8/9/22 10:46, Han Li wrote: >>> 2022年8月9日 22:25，Rémy Maucherat <r...@apache.org> 写道： >>> >>> On Tue, Aug 9, 2022 at 12:16 AM Christopher Schultz >>> <ch...@christopherschultz.net <mailto:ch...@christopherschultz.net>> wrote: >>>> >>>> The proposed Apache Tomcat 8.5.82 release is now available for voting. >>>> >>>> The notable changes compared to 8.5.81 are: >>>> >>>> - Update the packaged version of the Tomcat Native Library to 1.2.35 to >>>> pick up Windows binaries built with OpenSSL 1.1.1q. >>>> >>>> - Enable the use of the FIPS provider for TLS enabled Connectors when >>>> using Tomcat Native 1.2.34 onwards built with OpenSSL 3.0.x onwards. >>>> >>>> - Improvements to HTTP/2 header handling. >>>> >>>> - Fix CVE-2022-34305, a low severity XSS vulnerability in the >>>> Form authentication example. >>>> >>>> Along with lots of other bug fixes and improvements. >>>> >>>> For full details, see the changelog: >>>> https://nightlies.apache.org/tomcat/tomcat-8.5.x/docs/changelog.html >>>> >>>> It can be obtained from: >>>> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-8/v8.5.82/ >>>> The Maven staging repo is: >>>> https://repository.apache.org/content/repositories/orgapachetomcat-1385 >>>> The tag is: >>>> https://github.com/apache/tomcat/tree/8.5.82/ >>>> 237076605ea6b44ec7b97ee1158d5aa7f2f0b53c >>>> >>>> The proposed 8.5.82 release is: >>>> [ ] Broken - do not release >>>> [X] Stable - go ahead and release as 8.5.82 (stable) >>> >>> Well, I still have a problem. JSP seems to be less functional now with >>> Java 17+ (at least the one from fedora). >>> >>> As a quick test, maybe try >>> http://127.0.0.1:8080/examples/jsp/include/include.jsp >>> <http://127.0.0.1:8080/examples/jsp/include/include.jsp> >>> With it I get an error about JDT (we use an older version due to Java 7): >> Hmm, I don’t get any errors with Java 17.0.2+8-86. >> I have another question, when doing these tests, what JDK version should I >> choose for the tests? >> Should I choose the lowest JDK version supported by the current tomcat >> version, or is anything above the lowest version ok? > > You should use any version that is supported. > > I use Java 8 because that's what I (still) run in production. > > Theoretically, Java 7 should allow (nearly) all tests to pass, and the > product should work properly. > > So please feel free to use whatever you have laying around. > > Thanks, > -chris > > --------------------------------------------------------------------- > To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org > For additional commands, e-mail: dev-h...@tomcat.apache.org > --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
