Fwd: [ANN] Apache Tomcat 8.0.15 available

[Jacques Le Roux]

Interesting points about Poodle issue

Jacques

-------- Message transféré --------
Sujet : [ANN] Apache Tomcat 8.0.15 available
Date : Wed, 12 Nov 2014 10:43:41 +0000
De : Mark Thomas <[hidden email]>
Pour : Tomcat Users List <[hidden email]>
Copie à : Tomcat Developers List <[hidden email]>, [hidden email], [hidden email]



The Apache Tomcat team announces the immediate availability of Apache
Tomcat 8.0.15.

Apache Tomcat 8 is an open source software implementation of the Java
Servlet, JavaServer Pages, Java Unified Expression Language and Java
WebSocket technologies.

Apache Tomcat 8.0.15 includes numerous fixes for issues identified
in 8.0.14 as well as a number of other enhancements and changes. The
notable changes since 8.0.14 include:

- Add support for RFC6265 cookie parsing and generation. This is
   currently disabled by default and may be enabled via the
   CookieProcessor element of a Context.

- Add pluggable password derivation support to the Realms via the new
   CredentialHandler interface.

- Add support for TLSv1.1 and TLSv1.2 for APR connector. Based upon a
   patch by Marcel Šebek. This feature requires Tomcat Native library
   1.1.32 or later.

- Disable SSLv3 by default for all HTTPS connectors

Please refer to the change log for the complete list of changes:
http://tomcat.apache.org/tomcat-8.0-doc/changelog.html


Downloads:
http://tomcat.apache.org/download-80.cgi

Migration guides from Apache Tomcat 5.5.x, 6.0.x and 7.0.x:
http://tomcat.apache.org/migration.html

Enjoy!

- The Apache Tomcat team