You are viewing a plain text version of this content. The canonical link for it is here.

Posted to announce@tomcat.apache.org by Christopher Schultz <sc...@apache.org> on 2022/08/13 14:54:48 UTC

[ANN] Apache Tomcat 8.5.82 available

The Apache Tomcat team announces the immediate availability of Apache
Tomcat 8.5.82.

Apache Tomcat 8 is an open source software implementation of the Java
Servlet, JavaServer Pages, Java Unified Expression Language, Java
WebSocket and JASPIC technologies.

Apache Tomcat 8.5.82 is a bugfix and feature release. The notable
changes compared to 8.5.82 include:

  - Update the packaged version of the Tomcat Native Library to 1.2.35 to
    pick up Windows binaries built with OpenSSL 1.1.1q.

  - Enable the use of the FIPS provider for TLS enabled Connectors when
    using Tomcat Native 1.2.34 onwards built with OpenSSL 3.0.x onwards.

  - Improvements to HTTP/2 header handling.

  - Fix CVE-2022-34305, a low severity XSS vulnerability in the
    Form authentication example.


Along with lots of other bug fixes and improvements.

Please refer to the change log for the complete list of changes:
https://tomcat.apache.org/tomcat-8.5-doc/changelog.html


Downloads:
https://tomcat.apache.org/download-80.cgi

Migration guides from Apache Tomcat 7.x and 8.0:
https://tomcat.apache.org/migration.html

Enjoy!

- The Apache Tomcat team