You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by Christopher Schultz <ch...@christopherschultz.net> on 2022/03/22 13:56:41 UTC
Tomcat 8.5.78 (and other branches as well)
All,
Given the fact that tcnative 1.2.32 was released to include a
freshly-patched, statically-linked openssl binary, I plan on rolling
8.5.78 next Thursday, March 31st. (I would have done Friday but I don't
want any confusion over the use of April 1st as a day to announce
anything.) This will give Windows admins a chance to have a package they
can install without having to juggle a Tomcat release separately from a
tcnative release.
I would like to take this opportunity to remind any Windows admins out
there that there is also a new binary release of Apache httpd available
from Apache Lounge[1] which includes all the latest CVEs reported
against httpd itself as well as OpenSSL. I would make that a priority if
I were you.
-chris
[1] https://www.apachelounge.com/download/
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
Re: Tomcat 8.5.78 (and other branches as well)
Posted by Rémy Maucherat <re...@apache.org>.
On Tue, Mar 22, 2022 at 5:11 PM Mark Thomas <ma...@apache.org> wrote:
>
> FYI I'm aiming to tag 10.1.x and 10.0.x late Tuesday next week with a
> view to completing the VOTE on Saturday as I have other things on the
> first full week of April and finding time to do a release could be tricky.
+1
Rémy
Rémy
> Mark
>
>
> On 22/03/2022 13:56, Christopher Schultz wrote:
> > All,
> >
> > Given the fact that tcnative 1.2.32 was released to include a
> > freshly-patched, statically-linked openssl binary, I plan on rolling
> > 8.5.78 next Thursday, March 31st. (I would have done Friday but I don't
> > want any confusion over the use of April 1st as a day to announce
> > anything.) This will give Windows admins a chance to have a package they
> > can install without having to juggle a Tomcat release separately from a
> > tcnative release.
> >
> > I would like to take this opportunity to remind any Windows admins out
> > there that there is also a new binary release of Apache httpd available
> > from Apache Lounge[1] which includes all the latest CVEs reported
> > against httpd itself as well as OpenSSL. I would make that a priority if
> > I were you.
> >
> > -chris
> >
> > [1] https://www.apachelounge.com/download/
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
> > For additional commands, e-mail: dev-help@tomcat.apache.org
> >
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: dev-help@tomcat.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
RE: Tomcat 8.5.78 (and other branches as well)
Posted by jo...@wellsfargo.com.INVALID.
Chris,
> -----Original Message-----
> From: Christopher Schultz <ch...@christopherschultz.net>
> Sent: Tuesday, March 22, 2022 11:43 AM
> To: dev@tomcat.apache.org
> Subject: Re: Tomcat 8.5.78 (and other branches as well)
>
> Jon,
>
> On 3/22/22 12:25, jonmcalexander@wellsfargo.com.INVALID wrote:
> > So, you are planning to release just 2 to 3 weeks after the last one?
> > Talk about a cadence. :-)
> Hey, "Release Early, Release Often".
>
> We have been keeping-up a roughly monthly release cycle for a few years,
> now. The Feb and March releases were delayed a bit so we could finish-up
> some thing we wanted to get into those, so the April releases seem "sooner"
> than usual. Enjoy!
>
I know about the monthly cadence, it just seems a lot sooner lately, that's all. :-) Keeping me on my toes with no relaxation time. :-)
> -Chris
>
> >> -----Original Message-----
> >> From: Mark Thomas <ma...@apache.org>
> >> Sent: Tuesday, March 22, 2022 11:11 AM
> >> To: dev@tomcat.apache.org
> >> Subject: Re: Tomcat 8.5.78 (and other branches as well)
> >>
> >> FYI I'm aiming to tag 10.1.x and 10.0.x late Tuesday next week with a
> >> view to completing the VOTE on Saturday as I have other things on the
> >> first full week of April and finding time to do a release could be tricky.
> >>
> >> Mark
> >>
> >>
> >> On 22/03/2022 13:56, Christopher Schultz wrote:
> >>> All,
> >>>
> >>> Given the fact that tcnative 1.2.32 was released to include a
> >>> freshly-patched, statically-linked openssl binary, I plan on rolling
> >>> 8.5.78 next Thursday, March 31st. (I would have done Friday but I
> >>> don't want any confusion over the use of April 1st as a day to
> >>> announce
> >>> anything.) This will give Windows admins a chance to have a package
> >>> they can install without having to juggle a Tomcat release
> >>> separately from a tcnative release.
> >>>
> >>> I would like to take this opportunity to remind any Windows admins
> >>> out there that there is also a new binary release of Apache httpd
> >>> available from Apache Lounge[1] which includes all the latest CVEs
> >>> reported against httpd itself as well as OpenSSL. I would make that
> >>> a priority if I were you.
> >>>
> >>> -chris
> >>>
> >>> [1]
> >>>
> >>
> https://urldefense.com/v3/__https://www.apachelounge.com/download/_
> >> _;!
> >>>
> >>
> !F9svGWnIaVPGSwU!521rcPGj71ChiJc7_7kSSFFdPVJI9Lqnga4H4aU5lCv2eXjR
> >> 0OK2e
> >>> nUWxohrRyVTotTrVQQ$
> >>>
> >>> --------------------------------------------------------------------
> >>> - To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org For
> >>> additional commands, e-mail: dev-help@tomcat.apache.org
> >>>
> >>
> >> ---------------------------------------------------------------------
> >> To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org For
> >> additional commands, e-mail: dev-help@tomcat.apache.org
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org For
> > additional commands, e-mail: dev-help@tomcat.apache.org
> >
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org For additional
> commands, e-mail: dev-help@tomcat.apache.org
Dream * Excel * Explore * Inspire
Jon McAlexander
Infrastructure Engineer
Asst Vice President
He/His
Middleware Product Engineering
Enterprise CIO | EAS | Middleware | Infrastructure Solutions
8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508
jonmcalexander@wellsfargo.com
This message may contain confidential and/or privileged information. If you are not the addressee or authorized to receive this for the addressee, you must not use, copy, disclose, or take any action based on this message or any information herein. If you have received this message in error, please advise the sender immediately by reply e-mail and delete this message. Thank you for your cooperation.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
Re: Tomcat 8.5.78 (and other branches as well)
Posted by Christopher Schultz <ch...@christopherschultz.net>.
Jon,
On 3/22/22 12:25, jonmcalexander@wellsfargo.com.INVALID wrote:
> So, you are planning to release just 2 to 3 weeks after the last one?
> Talk about a cadence. :-)
Hey, "Release Early, Release Often".
We have been keeping-up a roughly monthly release cycle for a few years,
now. The Feb and March releases were delayed a bit so we could finish-up
some thing we wanted to get into those, so the April releases seem
"sooner" than usual. Enjoy!
-chris
>> -----Original Message-----
>> From: Mark Thomas <ma...@apache.org>
>> Sent: Tuesday, March 22, 2022 11:11 AM
>> To: dev@tomcat.apache.org
>> Subject: Re: Tomcat 8.5.78 (and other branches as well)
>>
>> FYI I'm aiming to tag 10.1.x and 10.0.x late Tuesday next week with a view to
>> completing the VOTE on Saturday as I have other things on the first full week
>> of April and finding time to do a release could be tricky.
>>
>> Mark
>>
>>
>> On 22/03/2022 13:56, Christopher Schultz wrote:
>>> All,
>>>
>>> Given the fact that tcnative 1.2.32 was released to include a
>>> freshly-patched, statically-linked openssl binary, I plan on rolling
>>> 8.5.78 next Thursday, March 31st. (I would have done Friday but I
>>> don't want any confusion over the use of April 1st as a day to
>>> announce
>>> anything.) This will give Windows admins a chance to have a package
>>> they can install without having to juggle a Tomcat release separately
>>> from a tcnative release.
>>>
>>> I would like to take this opportunity to remind any Windows admins out
>>> there that there is also a new binary release of Apache httpd
>>> available from Apache Lounge[1] which includes all the latest CVEs
>>> reported against httpd itself as well as OpenSSL. I would make that a
>>> priority if I were you.
>>>
>>> -chris
>>>
>>> [1]
>>>
>> https://urldefense.com/v3/__https://www.apachelounge.com/download/_
>> _;!
>>>
>> !F9svGWnIaVPGSwU!521rcPGj71ChiJc7_7kSSFFdPVJI9Lqnga4H4aU5lCv2eXjR
>> 0OK2e
>>> nUWxohrRyVTotTrVQQ$
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org For
>>> additional commands, e-mail: dev-help@tomcat.apache.org
>>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org For additional
>> commands, e-mail: dev-help@tomcat.apache.org
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: dev-help@tomcat.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
RE: Tomcat 8.5.78 (and other branches as well)
Posted by jo...@wellsfargo.com.INVALID.
So, you are planning to release just 2 to 3 weeks after the last one? Talk about a cadence. :-)
Dream * Excel * Explore * Inspire
Jon McAlexander
Infrastructure Engineer
Asst Vice President
He/His
Middleware Product Engineering
Enterprise CIO | EAS | Middleware | Infrastructure Solutions
8080 Cobblestone Rd | Urbandale, IA 50322
MAC: F4469-010
Tel 515-988-2508 | Cell 515-988-2508
jonmcalexander@wellsfargo.com
This message may contain confidential and/or privileged information. If you are not the addressee or authorized to receive this for the addressee, you must not use, copy, disclose, or take any action based on this message or any information herein. If you have received this message in error, please advise the sender immediately by reply e-mail and delete this message. Thank you for your cooperation.
> -----Original Message-----
> From: Mark Thomas <ma...@apache.org>
> Sent: Tuesday, March 22, 2022 11:11 AM
> To: dev@tomcat.apache.org
> Subject: Re: Tomcat 8.5.78 (and other branches as well)
>
> FYI I'm aiming to tag 10.1.x and 10.0.x late Tuesday next week with a view to
> completing the VOTE on Saturday as I have other things on the first full week
> of April and finding time to do a release could be tricky.
>
> Mark
>
>
> On 22/03/2022 13:56, Christopher Schultz wrote:
> > All,
> >
> > Given the fact that tcnative 1.2.32 was released to include a
> > freshly-patched, statically-linked openssl binary, I plan on rolling
> > 8.5.78 next Thursday, March 31st. (I would have done Friday but I
> > don't want any confusion over the use of April 1st as a day to
> > announce
> > anything.) This will give Windows admins a chance to have a package
> > they can install without having to juggle a Tomcat release separately
> > from a tcnative release.
> >
> > I would like to take this opportunity to remind any Windows admins out
> > there that there is also a new binary release of Apache httpd
> > available from Apache Lounge[1] which includes all the latest CVEs
> > reported against httpd itself as well as OpenSSL. I would make that a
> > priority if I were you.
> >
> > -chris
> >
> > [1]
> >
> https://urldefense.com/v3/__https://www.apachelounge.com/download/_
> _;!
> >
> !F9svGWnIaVPGSwU!521rcPGj71ChiJc7_7kSSFFdPVJI9Lqnga4H4aU5lCv2eXjR
> 0OK2e
> > nUWxohrRyVTotTrVQQ$
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org For
> > additional commands, e-mail: dev-help@tomcat.apache.org
> >
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org For additional
> commands, e-mail: dev-help@tomcat.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
Re: Tomcat 8.5.78 (and other branches as well)
Posted by Mark Thomas <ma...@apache.org>.
FYI I'm aiming to tag 10.1.x and 10.0.x late Tuesday next week with a
view to completing the VOTE on Saturday as I have other things on the
first full week of April and finding time to do a release could be tricky.
Mark
On 22/03/2022 13:56, Christopher Schultz wrote:
> All,
>
> Given the fact that tcnative 1.2.32 was released to include a
> freshly-patched, statically-linked openssl binary, I plan on rolling
> 8.5.78 next Thursday, March 31st. (I would have done Friday but I don't
> want any confusion over the use of April 1st as a day to announce
> anything.) This will give Windows admins a chance to have a package they
> can install without having to juggle a Tomcat release separately from a
> tcnative release.
>
> I would like to take this opportunity to remind any Windows admins out
> there that there is also a new binary release of Apache httpd available
> from Apache Lounge[1] which includes all the latest CVEs reported
> against httpd itself as well as OpenSSL. I would make that a priority if
> I were you.
>
> -chris
>
> [1] https://www.apachelounge.com/download/
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: dev-help@tomcat.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org