Return-Path: X-Original-To: apmail-announce-archive@www.apache.org Delivered-To: apmail-announce-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 194D4104F7 for ; Mon, 8 Jul 2013 12:04:53 +0000 (UTC) Received: (qmail 61206 invoked by uid 500); 8 Jul 2013 12:04:42 -0000 Delivered-To: apmail-announce-archive@apache.org Received: (qmail 60651 invoked by uid 500); 8 Jul 2013 12:04:37 -0000 Mailing-List: contact announce-help@apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Delivered-To: mailing list announce@apache.org Delivered-To: moderator for announce@apache.org Received: (qmail 30394 invoked by uid 99); 8 Jul 2013 09:51:56 -0000 Message-ID: <51DA8BBA.1030201@apache.org> Date: Mon, 08 Jul 2013 10:51:54 +0100 From: Mark Thomas User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:17.0) Gecko/20130620 Thunderbird/17.0.7 MIME-Version: 1.0 To: Tomcat Users List CC: announce@apache.org, announce@tomcat.apache.org, Tomcat Developers List Subject: [ANN] Apache Tomcat 7.0.42 released Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit The Apache Tomcat team announces the immediate availability of Apache Tomcat 7.0.42. Apache Tomcat is an open source software implementation of the Java Servlet, JavaServer Pages and Java Expression Language technologies. This release contains a number of bug fixes and improvements compared to version 7.0.41. The notable changes include: - Add support for time to first byte in the AccessLogValve. Patch provided by Jeremy Boynes. - Correct a regression introduced in 7.0.39 (refactoring of base 64 encoding and decoding) that broke the JNDI Realm when userPassword was set and passwords were hashed with MD5 or SHA1. - Ensure that the build process produces Javadoc that is not vulnerable to CVE-2013-1571. Based on a patch by Uwe Schindler. Please refer to the change log for the complete list of changes: http://tomcat.apache.org/tomcat-7.0-doc/changelog.html Note: This version has 4 zip binaries: a generic one and three bundled with Tomcat native binaries for Windows operating systems running on different CPU architectures. Note: If you use the APR/native AJP or HTTP connector you *must* upgrade to version 1.1.24 or later of the AJP/native library and it is recommended that you upgrade to 1.1.27 Downloads: http://tomcat.apache.org/download-70.cgi Migration guides from Apache Tomcat 5.5.x and 6.0.x: http://tomcat.apache.org/migration.html