Am 10.09.26 um 10:36 schrieb Rémy Maucherat:
The proposed Apache Tomcat 9.0.122 release is now available for voting.

The notable changes compared to 9.0.121 are:

- Update Tomcat Native to 2.0.16 (built with OpenSSL 3.5.8 for Windows)
    and make 2.0.16b the minimum required version.

- Various improvements to the RewriteValve

- Various TLS improvements including more robust OCSP and ALPN handling

- Ensure that WebSocket write timeouts apply to the complete message and
    are not lost if two writes have the same timeout.

For full details, see the changelog:
https://nightlies.apache.org/tomcat/tomcat-9.0.x/docs/changelog.html

It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-9/v9.0.122/

The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1606

The tag is:
https://github.com/apache/tomcat/tree/9.0.122
26913a2ff2a92ecdfdc734b8f2144f86573ad1a8

The proposed 9.0.122 release is:
[ ] -1, Broken - do not release
[X] +1, Stable - go ahead and release as 9.0.122
+1 to release.

Reproducibility of the build checked (including the Windows installer) using "ant verify-release" on Linux Mint 22.3. OK after setting LANG.

Original Windows installer signature verified with osslsigncode 2.10.

Unit tests ran on platforms

- RHEL 7, 8, 9 and 10 and SLES 12 and 15

using

- almost recent patch versions of JDK 8, JDK 11, JDK 17, 21, 25, 26 and 27+28 (EA) (most tests used the JVM July releases, some were run again with the .1 releases from August)

from

- Eclipse Adoptium, Azul Zulu, Amazon Coretto, Oracle, RedHat (26 missing) and from OpenJDK for 27+28

Also tested with

- tcnative 1.3.9, 2.0.16 and panama

based on

- OpenSSL 3.5.8, 3.6.4, 4.0.1 and 4.1.0alpha1 (the last two only for tcnative 2 and panama)

Each combination of platform, JVM and JSSE or tcnative or panama only tested for NIO or NIO2 (randomized). Total number of test combinations:

    103 nio2 jsse
     98 nio2 panama
    451 nio2 tcnative
    108 nio jsse
     94 nio panama
    460 nio tcnative

Test observations:

  - IMHO nothing critical

- almost consistent failure for TestCrlSupport on Java 8 only (but not for Oracle JVM); reported to list, not yet fixed

  - in addition
    - two crash failures with JSSE (2 in 211 runs)
    - few crashes with tcnative (10 in 911 runs)
    - no crash failures with panama (192 runs)
    - very few non-crash failures with jsse (7 in 211 runs)
    - very few non-crash failures with tcnative (5 in 911 runs)
    - very few non-crash failures with panama (1 in 192 runs)

Thanks for RM!

Best regards,

Rainer

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to