| Version | Change log |
| Apache Tomcat 11.0.2 Dec 9, 2024 |
Add strong ETag support for the WebDAV and default servlet, which can be enabled by using the useStrongETags init parameter with a value set to true. The ETag generated will be a SHA-1 checksum of the resource content. Add support for RateLimit header fields for HTTP (RFC draft) in the RateLimitFilter. Based on pull request #775 provided by Chenjp. Update Tomcat's fork of Commons DBCP to 2.13.0. |
| Apache Tomcat 11.0.1 Nov 11, 2024 |
Fix a regression caused by the improvement 69333 which caused the tag release to be called when using tag pooling, and to be skipped when not using it. Patch submitted by Michal Sobkiewicz. Further WebDAV fixes and improvements. |
| Apache Tomcat 11.0.0 Nov 9, 2024 |
Multiple fixes and improvements for WebDAV Improvements to the recently adding request/response recycling for HTTP/2 Improve the stability of Tomcat Native during GC |
| Apache Tomcat 10.1.30 Sep 17, 2024 | Fix the regression in HTTP/2 support introduced in 10.1.29. |
| Apache Tomcat 10.1.29 Sep 11, 2024 |
If an HTTP/2 client resets a stream before the request body is fully written, ensure that any ReadListener is notified via a call to ReadListener.onErrror(). An Exception being thrown during WebSocket message processing (e.g. in a method annotated with @onMessage) should not automatically cause the connection to close. The application should handle the exception and make the decision whether or not to close the connection. Correct a regression in the fix for non-blocking reads of chunked request bodies that caused InputStream.available() to return a non-zero value when there was no data to read. In some circumstances this could cause a blocking read to block waiting for more data rather than return the data it had already received. |
| Apache Tomcat 10.1.28 Aug 7, 2024 |
Move OpenSSL support using FFM to a separate JAR named tomcat-coyote-ffm.jar that advertises Java 22 in its manifest. When using include directives in a tag file packaged in a JAR file, ensure that the include directives are processed correctly. Expand the implementation of the filter value of the Authenticator attribute allowCorsPreflight, so that it applies to all requests that match the configured URL patterns for the CORS filter, rather than only applying if the CORS filter is mapped to /* |
| Apache Tomcat 10.1.26 Aug 6, 2024 |
Move OpenSSL support using FFM to a separate JAR named tomcat-coyote-ffm.jar that advertises Java 22 in its manifest. When using include directives in a tag file packaged in a JAR file, ensure that the include directives are processed correctly. Expand the implementation of the filter value of the Authenticator attribute allowCorsPreflight, so that it applies to all requests that match the configured URL patterns for the CORS filter, rather than only applying if the CORS filter is mapped to /* |
| Apache Tomcat 10.1.25 Jun 20, 2024 | |
| Apache Tomcat 10.1.24 May 20, 2024 | |
| Apache Tomcat 10.1.23 Apr 24, 2024 |
