tomcat-announce mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Violeta Georgieva <>
Subject [ANN] Apache Tomcat 7.0.67 released
Date Fri, 11 Dec 2015 09:35:54 GMT
The Apache Tomcat team announces the immediate availability of Apache
Tomcat 7.0.67.

Apache Tomcat is an open source software implementation of the Java
Servlet, JavaServer Pages, Java Expression Language and Java
WebSocket technologies.

This release contains a number of bug fixes and improvements compared to
version 7.0.65. The notable changes since 7.0.65 include:

- Allow file based configuration resources (e.g. key stores) to be
  using URLs.

- Add an option to control (per context) quoting of EL expressions in JSP
  attributes. Restore the default behavior in Jasper to align with 7.0.64
  earlier as well as other JSP implementations.

- Add a new RestCsrfPreventionFilter that provides basic CSRF protection for

- Use instance manager for WebSocket server endpoint instances.

- Location headers for redirects now use relative URIs. This can be
  per Context with the useRelativeRedirects attribute.

Please refer to the change log for the complete list of changes:

Note: This version has 4 zip binaries: a generic one and
          three bundled with Tomcat native binaries for Windows operating
          systems running on different CPU architectures.

Note: Use of the Java WebSocket 1.1 implementation requires Java 7.

Note: If you use the APR/native AJP or HTTP connector you *must* upgrade
          to version 1.1.33 or later of the APR/native library.


Migration guides from Apache Tomcat 5.5.x and 6.0.x:


The Apache Tomcat team

View raw message