You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by Mark Thomas <ma...@apache.org> on 2023/08/23 23:29:58 UTC

[VOTE] Release Apache Tomcat 9.0.80

The proposed Apache Tomcat 9.0.80 release is now available for voting.

The notable changes compared to 9.0.79 are:

- If an application or library sets both a non-500 error code and the
   jakarta.servlet.error.exception</code> request attribute, use the
   provided error code during error page processing rather than assuming
   an error code of 500.

- Fix for FORM authentication open redirect - CVE-2023-41080


Along with lots of other bug fixes and improvements.

For full details, see the changelog:
https://nightlies.apache.org/tomcat/tomcat-9.0.x/docs/changelog.html

It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-9/v9.0.80/

The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1453

The tag is:
https://github.com/apache/tomcat/tree/9.0.80
0ea24187a89ca09f3841e4690f931cca56e222fd

The proposed 9.0.80 release is:
[ ] -1, Broken - do not release
[ ] +1, Stable - go ahead and release as 9.0.80

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org

Re: [VOTE] Release Apache Tomcat 9.0.80

Posted by jean-frederic clere <jf...@gmail.com>.
On 8/24/23 01:29, Mark Thomas wrote:
> [X] +1, Stable - go ahead and release as 9.0.80

Tested with openjdk version "17.0.8", tc-native 1.2.37 and openssl 3.0.9

-- 
Cheers

Jean-Frederic


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org

Re: [VOTE] Release Apache Tomcat 9.0.80

Posted by Rémy Maucherat <re...@apache.org>.
On Thu, Aug 24, 2023 at 1:30 AM Mark Thomas <ma...@apache.org> wrote:
>
> The proposed Apache Tomcat 9.0.80 release is now available for voting.
>
> The notable changes compared to 9.0.79 are:
>
> - If an application or library sets both a non-500 error code and the
>    jakarta.servlet.error.exception</code> request attribute, use the
>    provided error code during error page processing rather than assuming
>    an error code of 500.
>
> - Fix for FORM authentication open redirect - CVE-2023-41080
>
>
> Along with lots of other bug fixes and improvements.
>
> For full details, see the changelog:
> https://nightlies.apache.org/tomcat/tomcat-9.0.x/docs/changelog.html
>
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-9/v9.0.80/
>
> The Maven staging repo is:
> https://repository.apache.org/content/repositories/orgapachetomcat-1453
>
> The tag is:
> https://github.com/apache/tomcat/tree/9.0.80
> 0ea24187a89ca09f3841e4690f931cca56e222fd
>
> The proposed 9.0.80 release is:
> [ ] -1, Broken - do not release
> [X] +1, Stable - go ahead and release as 9.0.80

Rémy

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org

[VOTE][RESULT] Release Apache Tomcat 9.0.80

Posted by Mark Thomas <ma...@apache.org>.
The following votes were cast:

Binding:
+1: lihan, jfclere, markt, remm

No other votes were cast. The vote therefore passes.

Thanks to everyone who contributed to this release.

Mark

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org

Re: [VOTE] Release Apache Tomcat 9.0.80

Posted by Mark Thomas <ma...@apache.org>.
On 23/08/2023 16:29, Mark Thomas wrote:

> The proposed 9.0.80 release is:
> [ ] -1, Broken - do not release
> [X] +1, Stable - go ahead and release as 9.0.80

Tests pass on x64 Linux, M1 MacOS and x64 Windiws with Tomcat Native 1.2.38.

The APR tests were a little unstable but I think I know what is going on 
there. I need to tweak the test environment.

Mark

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org

Re: [VOTE] Release Apache Tomcat 9.0.80

Posted by Han Li <li...@apache.org>.

> On Aug 24, 2023, at 07:29, Mark Thomas <ma...@apache.org> wrote:
> 
> The proposed Apache Tomcat 9.0.80 release is now available for voting.
> 
> The notable changes compared to 9.0.79 are:
> 
> - If an application or library sets both a non-500 error code and the
>  jakarta.servlet.error.exception</code> request attribute, use the
>  provided error code during error page processing rather than assuming
>  an error code of 500.
> 
> - Fix for FORM authentication open redirect - CVE-2023-41080
> 
> 
> Along with lots of other bug fixes and improvements.
> 
> For full details, see the changelog:
> https://nightlies.apache.org/tomcat/tomcat-9.0.x/docs/changelog.html
> 
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-9/v9.0.80/
> 
> The Maven staging repo is:
> https://repository.apache.org/content/repositories/orgapachetomcat-1453
> 
> The tag is:
> https://github.com/apache/tomcat/tree/9.0.80
> 0ea24187a89ca09f3841e4690f931cca56e222fd
> 
> The proposed 9.0.80 release is:
> [ ] -1, Broken - do not release
> [X] +1, Stable - go ahead and release as 9.0.80
Tests pass on macOS(Intel).

Han
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: dev-help@tomcat.apache.org
> 


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org