tomcat-announce mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Mark Thomas <>
Subject [ANN] Apache Tomcat 7.0.21 released
Date Fri, 02 Sep 2011 08:51:38 GMT
The Apache Tomcat team announces the immediate availability of Apache
Tomcat 7.0.21

Apache Tomcat 7.0.21 includes security fixes, bug fixes and new features
compared to version 7.0.20 including:
- A fix for CVE-2011-3190 that allowed an attacker to inject requests
when Tomcat was configured behind a reverse proxy using the AJP protocol.
- Multiple additions and improvements to the memory leak
detection/prevention features.
- Improved validation of received AJP messages.

Please refer to the change log for the complete list of changes:

Note that this version has 4 zip binaries: a generic one and three
bundled with Tomcat native binaries for Windows operating systems
running on different CPU architectures.


Migration guide from Apache Tomcat 5.5.x and 6.0.x:

Thank you,

-- The Apache Tomcat Team

View raw message