Release Notes / Version 10.2107
Table Of ContentsUpdated (embedded) Tomcat to 9.0.70
Embedded Tomcat has been updated to version 9.0.70 (see Changelog Tomcat 9.0.70 ) to prevent known vulnerabilities.
Please be aware that Tomcat >= 9.0.69 serves cookies with dates formatted as required by RFC 6265 (see
Changelog Tomcat 9.0.69
). This may have to be respected in HTTP client implementations. When e.g. the
Apache HttpClient
is used and cookies are retrieved via the
CookieStore
, the cookie specification must be set to
standard
- see
RequestConfig.Builder#setCookieSpec
and
CookieSpecs
.
(CMS-22519)