Apache Tomcat 9.0.0.M17 contains several enhancements and bug fixes. Notable changes from 9.0.0.M15-0 include:
- Catalina:
- Extend the JreMemoryLeakPreventionListener to provide protection against ForkJoinPool.commonPool() related memory leaks.
- Add HTTP status code 451 (RFC 7725) to the list of HTTP status codes recognised by the ErrorReportValve.
- Update: Update the warnings that reference required options for running on Java 9 to use the latest syntax for those options.
- Fix: Handle the case where the stored user credential uses a different key length than the length currently configured for the CredentialHandler. Based on a patch by Niklas Holm.
- Fix: Fix thread safety issue with RMI cleanup code
- Coyote:
- Fix: Ensure UpgradeProcessor instances associated with closed connections are removed from the map of current connections to Processors.
- Fix: Remove a workaround for a problem previously reported with WebSocket, TLS and APR that treated some error conditions as not errors.
- Fix: Expand the search process for a server certificate when OpenSSL is used with a JSSE connector and an explicit alias has not been configured.
- Extract the common Acceptor code from each Endpoint into a new Acceptor class that is used by all Endpoints.
- Fix: Improve the selection algorithm for the default trust store type for a TLS Virtual Host. In particular, don't use PKCS12 as a default trust store type. Better document how the default trust store type is selected for a TLS virtual host.
- Fix: Correctly handle HTTP/2 header values that contain characters with unicode code points in the range 128 to 255. Reject with a clear error message HTTP/2 header values that contain characters with unicode code points above 255.
- Fix: Improve the logic that selects an address to use to unlock the Acceptor to take account of platforms what do not listen on all local addresses when configured with an address of 0.0.0.0 or ::.
- Fix: Correct a regression in the refactoring to make wider use of ByteBuffer that caused an intermittent failure in the unit tests.
- Fix: HTTP/2 shouldn't do URL decoding on the query string.
- Fix: Fix an HTTP/2 compression error. Once a new size has been agreed for the dynamic HPACK table, the next header block must begin with a dynamic table update.
- Fix: Set request start time for HTTP/2.
- Fix: The default output buffer size for AJP connectors is now based on the configured AJP packet size rather than the minimum permitted AJP packet size.
- Jasper:
- Fix: 60497: Follow up fix using a better variable name for the tag reuse flag.
- Fix: Revert use of try/finally for simple tags.
- Update: Implement a simpler JSP file encoding detector that delegates XML prolog encoding detection to the JRE rather than using a custom XML parser.
- Fix: Restore previous tag reuse behavior following the use of try/finally.
- Fix: Improve the error handling for simple tags to ensure that the tag is released and destroyed once used.
- WebSocket:
- Fix: Correctly handle blocking WebSocket writes when the write times out just before the write is attempted.
- Fix: Prevent potential processing loop on unexpected WebSocket connection closure
- Web applications:
- Fix: Prevent potential processing loop on unexpected WebSocket connection closure.
- Fix: Improve the error handling for simple tags to ensure that the tag is released and destroyed once used.
- Fix: Restore previous tag reuse behavior following the use of try/finally.
- Implement a simpler JSP file encoding detector that delegates XML prolog encoding detection to the JRE rather than using a custom XML parser.
- Tribes:
- Fix: Reduce the warning logs for a message received from a different domain in order to avoid excessive log outputs.
- Other:
- Update: Update the NSIS Installer used to build the Windows installer to version 3.01.
- Fix: Spelling corrections provided by Josh Soref.
- Update: Update the ASF logos used in the Apache Tomcat installer for Windows to use the new versions.
Sameer Naik
Bitnami Bot
Juan Ariza Toledano
jdrios
Andrés Bono
Fran
Adnan Abdulhussein
Adnan Abdulhussein
Sameer Naik