Tanzu tc Server 10.1.x has been released

Note: As of 4.1.33.RELEASE, Tanzu tc Server is now distributed as part of Spring Enterprise Subscription. Past releases are not being migrated. Please download from Tanzu Network before May 31st, 2024 if prior releases are required.

For tc Runtime 7.0.x, 8.5.x, and 9.0.x it is recommended to use VMware Tanzu tc Server 4.1.x

For tc Runtime 10.1.x it is recommended to use VMware Tanzu tc Server 10.1.x

VMware tc Server 4.1.34 | 24 JUN 2024

VMware tc Server 4.1.33 | 28 MAY 2024

VMware tc Server 4.1.32 | 05 APR 2024

VMware tc Server 4.1.31 | 26 FEB 2024

VMware tc Server 4.1.30 | 16 JAN 2024

VMware tc Server 4.1.29 | 15 DEC 2023

VMware tc Server 4.1.28 | 27 NOV 2023

VMware tc Server 4.1.27 | 11 OCT 2023

VMware tc Server 4.1.26 | 10 OCT 2023

VMware tc Server 4.1.25 | 22 AUG 2023

VMware tc Server 4.1.25 | 22 AUG 2023

VMware tc Server 4.1.24 | 17 AUG 2023

VMware tc Server 4.1.23 | 20 JUN 2023

VMware tc Server 4.1.22 | 23 APR 2023

VMware tc Server 4.1.21 | 03 MAR 2023

VMware tc Server 4.1.20 | 20 JAN 2023

VMware tc Server 4.1.19 | 23 DEC 2022

VMware tc Server 4.1.18 | 23 OCT 2022

VMware tc Server 4.1.17 | 01 AUG 2022

VMware tc Server 4.1.16 | 25 MAY 2022

VMware tc Server 4.1.15 | 05 APR 2022

VMware tc Server 4.1.14 | 07 MAR 2022

VMware tc Server 4.1.13 | 26 JAN 2022

VMware tc Server 4.1.12 | 29 NOV 2021

VMware tc Server 4.1.11 | 11 OCT 2021

VMware tc Server 4.1.10 | 24 AUG 2021

VMware tc Server 4.1.9 | 13 JUL 2021

VMware tc Server 4.1.8 | 20 MAY 2021

VMware tc Server 4.1.7 | 05 MAY 2021

VMware tc Server 4.1.6 | 10 FEB 2021

VMware tc Server 4.1.5 | 24 NOV 2020

VMware tc Server 4.1.4 | 25 SEP 2020

VMware tc Server 4.1.3 | 01 JUL 2020

VMware tc Server 4.1.2 | 15 JUN 2020

VMware tc Server 4.1.1 | 06 MAY 2020

VMware tc Server 4.1.0 | 13 APR 2020

What's in the Release Notes

These release notes cover the following topics:

What's New in VMware tc Server 4.1.34

This VMware Tanzu tc Server release includes the following new features and changes:

What's New in VMware tc Server 4.1.33

This VMware Tanzu tc Server release includes the following new features and changes:

What's New in VMware tc Server 4.1.32

This VMware Tanzu tc Server release includes the following new features and changes:

  • New tc Runtime versions:

    • Bundled tc Runtime:
      • 9.0.87.B.RELEASE, equivalent to Apache Tomcat 9.0.87, with the following changes:
        • Fix regression in TLS reloading

  • Additional tc Runtimes:

  • Deprecation Notice: As part of the Broadcom of VMware the ability to download tc Runtimes from Tanzu Network via the get-runtime command will cease in May 2024. As a result the list-runtimes and the get-runtime commands usage of Tanzu Network will be removed in a future version of tc Server. The recommendation is to download and install the tc Runtime manually. More information will be provided at a later date.

What's New in VMware tc Server 4.1.31

This VMware tc Server release includes the following new features and changes:

  • New tc Runtime versions:

    • Bundled tc Runtime:
      • 9.0.86.A.RELEASE, equivalent to Apache Tomcat 9.0.86

  • On-demand tc Runtimes:

    • 8.5.99.A.RELEASE, equivalent to Apache Tomcat 8.5.99

  • Deprecation Notice: The list-runtimes and the get-runtime commands usage of Tanzu Network will be removed in a future version of tc Server. The recommendation is to download and install the tc Runtime manually. More information will be provided at a later date.

What's New in VMware tc Server 4.1.30

This VMware tc Server release includes the following new features and changes:

  • New tc Runtime versions:

    • Bundled tc Runtime:
      • 9.0.85.A.RELEASE, equivalent to Apache Tomcat 9.0.85

  • On-demand tc Runtimes:

    • 8.5.98.A.RELEASE, equivalent to Apache Tomcat 8.5.98

  • Deprecation Notice: The list-runtimes and the get-runtime commands usage of Tanzu Network will be removed in a future version of tc Server. The recommendation is to download and install the tc Runtime manually. More information will be provided at a later date.

What's New in VMware tc Server 4.1.29

This VMware tc Server release includes the following new features and changes:

  • New tc Runtime versions:

    • Bundled tc Runtime:
      • 9.0.84.B.RELEASE, equivalent to Apache Tomcat 9.0.84, with the following additions:
        • Fix regression in fix for BZ 67675 - support PEM encoded key files with default PRF

  • On-demand tc Runtimes:

    • 8.5.97.B.RELEASE, equivalent to Apache Tomcat 8.5.97, with the following additions:
      • Fix regression in fix for BZ 67675 - support PEM encoded key files with default PRF

  • Deprecation Notice: The list-runtimes and the get-runtime commands usage of Tanzu Network will be removed in a future version of tc Server. The recommendation is to download and install the tc Runtime manually. More information will be provided at a later date.

What's New in VMware tc Server 4.1.28

This VMware tc Server release includes the following new features and changes:

  • New tc Runtime versions:

    • Bundled tc Runtime:

      • 9.0.83.A.RELEASE, equivalent to Apache Tomcat 9.0.83

    • On-demand tc Runtimes: - 8.5.96.A.RELEASE, equivalent to Apache Tomcat 8.5.96

  • Deprecation Notice: The list-runtimes and the get-runtime commands usage of Tanzu Network will be removed in a future version of tc Server. The recommendation is to download and install the tc Runtime manually. More information will be provided at a later date.

What's New in VMware tc Server 4.1.27

This VMware tc Server release includes the following new features and changes:

  • New tc Runtime versions:

    • Bundled tc Runtime:
      • 9.0.81.D.RELEASE, equivalent to Apache Tomcat 9.0.81 with the following addition
        • Fix regression that broke jdbc-pool
        • Fix regression that broke HTTP compression

  • On-demand tc Runtimes:

    • 8.5.94.C.RELEASE, equivalent to Apache Tomcat 8.5.94 with the following addition
      • Fix regression that broke jdbc-pool
      • Fix regression that broke HTTP compression

What's New in VMware tc Server 4.1.26

This VMware tc Server release includes the following new features and changes:

  • New tc Runtime versions:

    • Bundled tc Runtime:
      • 9.0.81.B.RELEASE, equivalent to Apache Tomcat 9.0.81 with the following addition
        • Fix regression that broke jdbc-pool

  • On-demand tc Runtimes:

    • 8.5.94.B.RELEASE, equivalent to Apache Tomcat 8.5.94 with the following addition
      • Fix regression that broke jdbc-pool

What's New in VMware tc Server 4.1.25

This VMware tc Server release includes the following new features and changes:

  • New tc Runtime versions:

    • Bundled tc Runtime:
      • 9.0.79.B.RELEASE, equivalent to Apache Tomcat 9.0.79 with the following addition

  • On-demand tc Runtimes:

    • 8.5.92.B.RELEASE, equivalent to Apache Tomcat 8.5.92 with the following addition

What's New in VMware tc Server 4.1.24

This VMware tc Server release includes the following new features and changes:

  • New tc Runtime versions:
    • Bundled tc Runtime:
      • 9.0.79.A.RELEASE, equivalent to Apache Tomcat 9.0.79
  • On-demand tc Runtimes:
    • 8.5.92.A.RELEASE, equivalent to Apache Tomcat 8.5.92

What's New in VMware tc Server 4.1.23

This VMware tc Server release includes the following new features and changes:

  • New tc Runtime versions:
    • Bundled tc Runtime:
      • 9.0.76.A.RELEASE, equivalent to Apache Tomcat 9.0.76
  • On-demand tc Runtimes:
    • 8.5.90.A.RELEASE, equivalent to Apache Tomcat 8.5.90

What's New in VMware tc Server 4.1.22

This VMware tc Server release includes the following new features and changes:

  • New tc Runtime versions:

    • Bundled tc Runtime:
      • 9.0.74.A.RELEASE, equivalent to Apache Tomcat 9.0.73. This version is incorrectly built on Apache Tomcat 9.0.73. Please download 9.0.74.B.RELEASE or use tc Server 4.1.23 which has 9.0.76.A.RELEASE

  • On-demand tc Runtimes:

    • 8.5.88.A.RELEASE, equivalent to Apache Tomcat 8.5.88

    • 9.0.74.B.RELEASE, equivalent to Apache Tomcat 9.0.74. This version replaces 9.0.74.A.RELEASE which was incorrectly built on 9.0.73.

What's New in VMware tc Server 4.1.21

Note: The deprecated Runtimes Repository will be shutdown on March 31, 2023. Please migrate to using Tanzu Network (see below) before then.

This VMware tc Server release includes the following new features and changes:

  • New tc Runtime versions:

    • Bundled tc Runtime:
      • 9.0.73.A.RELEASE, equivalent to Apache Tomcat 9.0.73

  • On-demand tc Runtimes:

    • 8.5.87.A.RELEASE, equivalent to Apache Tomcat 8.5.87

  • As with 4.1.29 this verion no longer defaults to using the deprecated tc Runtime Repository which means manual configuration must be set in order for get-runtime andlist-runtimes to property work. Please see tc Server Repository Changes.

  • Fix bug where tcserver would report no runtimes installed when tcserver has been installed via RPM.

What's New in VMware tc Server 4.1.20

Note: This version contains a breaking change to the way remote runtimes are accessed unless a configuration property is set. Please see the note below.

This VMware tc Server release includes the following new features and changes:

  • New tc Runtime versions:

    • Bundled tc Runtime:
      • 9.0.71.B.RELEASE, equivalent to Apache Tomcat 9.0.71, with the following addition - Complete update to BND 6.4.

  • On-demand tc Runtimes:

    • 8.5.85.A.RELEASE, equivalent to Apache Tomcat 8.5.85

  • As with 4.1.19 this verion no longer defaults to using the deprecated tc Runtime Repository which means manual configuration must be set in order for get-runtime andlist-runtimes to property work. Please see tc Server Repository Changes.

  • The usage of --runtimes-directory, --instances-directory, and --templates-directory has been deprecated on the command line. Please use runtimes.directory, instances.directory, and templates.directory in tcserver.properties instead. These command line options have been removed in tc Server 5.0.0.

  • Fixed issue with where tcserver could not create an instance using a JVM version less than 8.

  • Fixed issue with java compatibility check not working correctly

  • Fixed issue with when an invalid Tanzu Network API token is used tcserver would continue to attempt to connect to the repository.

  • Fixed issue with when a PID file contains invalid data. A more informative error message will now be provided.

What's New in VMware tc Server 4.1.19

Note: This version contains a breaking change to the way remote runtimes are accessed unless a configuration property is set. Please see the note below.

This VMware tc Server release includes the following new features and changes:

  • New tc Runtime versions:

    • Bundled tc Runtime:
      • 9.0.70.A.RELEASE, equivalent to Apache Tomcat 9.0.70

  • On-demand tc Runtimes:

    • 8.5.84.A.RELEASE, equivalent to Apache Tomcat 8.5.84

  • This version no longer defaults to using the deprecated tc Runtime Repository which means manual configuration must be set in order for get-runtime andlist-runtimes to property work. Please see tc Server Repository Changes.

  • There is a typo in the output when no Tanzu Network Token is configured. The message should read Found runtimes.tanzunet=true, however, no token configured. Please edit conf/tcserver.properties and add the value for tanzunet.token. The location specified in the message mentions cont as the directory instead it should be conf.

What's New in VMware tc Server 4.1.18

This VMware tc Server release includes the following new features and changes:

  • New tc Runtime versions:

    • Bundled tc Runtime:
      • 9.0.68.A.RELEASE, equivalent to Apache Tomcat 9.0.68

  • On-demand tc Runtimes:

    • 8.5.83.A.RELEASE, equivalent to Apache Tomcat 8.5.83

  • The next tc Server 4.1.x release (4.1.19) will no longer use the deprecated tc Runtime Repository. tc Server 4.1.19 and onward will require manually configuring the Tanzu Network Repository in order to use the on-demand feature.

What's New in VMware tc Server 4.1.17

This VMware tc Server release includes the following new features and changes:

  • New tc Runtime versions:

    • Bundled tc Runtime:
      • 9.0.65.A.RELEASE, equivalent to Apache Tomcat 9.0.65

  • On-demand tc Runtimes:

    • 8.5.81.A.RELEASE, equivalent to Apache Tomcat 8.5.81

  • Rocky Linux 9 has been added as a supported platform

  • The End of General Support date for tc Runtime 8.5.x has been extended to June 30, 2024

  • Update Spring jars to 5.3.21 to replace jars getting incorrectly flagged by vulnerability scanners related to CVE-2022-22970 and CVE-2022-22971. The spring jars are used only by the tcserver command which is not a web application and it does not use websockets or file uploads therefore it is not vulnerable to CVE-2022-22970 or CVE-2022-22971.

What's New in VMware tc Server 4.1.16

This VMware tc Server release includes the following new features and changes:

  • New tc Runtime versions:

    • Bundled tc Runtime:
      • 9.0.63.A.RELEASE, equivalent to Apache Tomcat 9.0.63

  • On-demand tc Runtimes:

    • 8.5.79.A.RELEASE, equivalent to Apache Tomcat 8.5.79

  • tc Server changes:

    A new about command has been introduced to show information about how the tcserver command is configured. This is intended to be used for diagnosing issues with the tcserver command and provided information to support.

What's New in VMware tc Server 4.1.15

This VMware tc Server release includes the following new features and changes:

  • New tc Runtime versions:

    • Bundled tc Runtime:
      • 9.0.62.A.RELEASE, equivalent to Apache Tomcat 9.0.62

  • On-demand tc Runtimes:

    • 8.5.78.A.RELEASE, equivalent to Apache Tomcat 8.5.78

    • 7.0.109.D.RELEASE, equivalent to Apache Tomcat 7.0.109, with the following additions:

  • tc Server changes:

    • The tc Runtime and Template repository server has been deprecated as of this tc Server release. Users will see a message informing them of this change if using tcserver commands which use this repository.
    • Information about the repository changes and how to configure the tcserver command to use a new repository is available at tc Server Repository Changes.
    • Updated Spring Framework dependencies. The formerly included version of spring-core could be identified by vulnerability scanning tools related to CVE-2022-22965, however, tc Server itself does not include any ability to be exploited by CVE-2022-22965.

What's New in VMware tc Server 4.1.14

This VMware tc Server release includes the following new features and changes:

  • New tc Runtime versions:

    • Bundled tc Runtime:
      • 9.0.59.A.RELEASE, equivalent to Apache Tomcat 9.0.59

  • On-demand tc Runtimes:

    • 8.5.76.A.RELEASE, equivalent to Apache Tomcat 8.5.76

    • 7.0.109.C.RELEASE, equivalent to Apache Tomcat 7.0.109, with the following additions:

  • The tcserver command no longer defaults to runtimes.ondemand=true in conf/tcserver.properties this prevents some issues with slow startup time.

What's New in VMware tc Server 4.1.13

This VMware tc Server release includes the following new features and changes:

  • New tc Runtime versions:

    • Bundled tc Runtime:
      • 9.0.58.A.RELEASE, equivalent to Apache Tomcat 9.0.58

  • On-demand tc Runtimes:

    • 8.5.75.A.RELEASE, equivalent to Apache Tomcat 8.5.75
    • 7.0.109.C.RELEASE, equivalent to Apache Tomcat 7.0.109, with the following additions:

What's New in VMware tc Server 4.1.12

This VMware tc Server release includes the following new features and changes:

  • New tc Runtime versions:

    • Bundled tc Runtime:
      • 9.0.55.B.RELEASE, equivalent to Apache Tomcat 9.0.55 - Includes ASF commit 6b5b4c99 which removes test code committed in error.

  • On-demand tc Runtimes:

    • 8.5.73.A.RELEASE, equivalent to Apache Tomcat 8.5.73

  • The HomeBrew Tap has been removed as an installation method for tc Server

  • This release of tc Runtimes deprecates the usage of tcEnc:// and s2enc:// prefixes in property decoding and will be removed in a future release.

What's New in VMware tc Server 4.1.11

This VMware tc Server release includes the following new features and changes:

  • New tc Runtime versions:

    • Bundled tc Runtime:
      • 9.0.54.A.RELEASE, equivalent to Apache Tomcat 9.0.54

  • On-demand tc Runtimes:

    • 8.5.72.A.RELEASE, equivalent to Apache Tomcat 8.5.72

  • New configtest subcommand introduced to the tcserver CLI. This runs the cataliina command configtest on an instance.

What's New in VMware tc Server 4.1.10

This VMware tc Server release includes the following new features and changes:

  • New tc Runtime versions:

    • Bundled tc Runtime:
      • 9.0.52.A.RELEASE, equivalent to Apache Tomcat 9.0.52

  • On-demand tc Runtimes:

    • 8.5.70.A.RELEASE, equivalent to Apache Tomcat 8.5.70

  • This release has been tested to work with Java 16.

  • This release introduces support for JDK_JVM_OPTIONS environment variable in setenv

What's New in VMware tc Server 4.1.9

This VMware tc Server release includes the following new features and changes:

  • New tc Runtime versions:

    • Bundled tc Runtime:
      • 9.0.50.B.RELEASE, equivalent to Apache Tomcat 9.0.50, with the following additions
        • Fix sendfile support for HTTP/2. ASF commits 08647222 0c7ad6fd
        • Fix connection window management for HTTP/2. ASF commits 50015e69

  • On-demand tc Runtimes:

    • 8.5.69.A.RELEASE, equivalent to Apache Tomcat 8.5.69

    • 7.0.109.B.RELEASE, equivalent to Apache Tomcat 7.0.109

What's New in VMware tc Server 4.1.8

This VMware tc Server release includes the following new features and changes:

  • New tc Runtime versions:

    • Bundled tc Runtime:
      • 9.0.46.B.RELEASE, equivalent to Apache Tomcat 9.0.46
        • Fix BZ 65308 - NPE in JNDIRealm when no userRoleAttribute is specified
        • Includes CVE-2021-33037

  • On-demand tc Runtimes:

    • 8.5.66.B.RELEASE, equivalent to Apache Tomcat 8.5.66
      • Fix BZ 65308 - NPE in JNDIRealm when no userRoleAttribute is specified
      • Includes CVE-2021-33037
    • 7.0.109.B.RELEASE, equivalent to Apache Tomcat 7.0.109

What's New in VMware tc Server 4.1.7

This VMware tc Server release includes the following new features and changes:

  • New tc Runtime versions:

    • Bundled tc Runtime:
      • 9.0.45.B.RELEASE, equivalent to Apache Tomcat 9.0.45

  • On-demand tc Runtimes:

    • 8.5.65.B.RELEASE, equivalent to Apache Tomcat 8.5.65

    • 7.0.109.A.RELEASE, equivalent to Apache Tomcat 7.0.109

What's New in VMware tc Server 4.1.6

This VMware tc Server release includes the following new features and changes:

  • New tc Runtime versions:

  • Bundled tc Runtime:

  • On-demand tc Runtimes:

  • Bugs fixed:

    • Fixes an issue when the tcserver command is attempting to determine the runtimes directory and the error Property 'runtimes.directory' must be set is thrown.

What's New in VMware tc Server 4.1.5

This VMware tc Server release includes the following new features and changes:

  • New tc Runtime versions:

    • Bundled tc Runtime:
      • 9.0.40.A.RELEASE, equivalent to Apache Tomcat 9.0.40 - Includes CVE-2020-17527

  • On-demand tc Runtimes:

    • 8.5.60.A.RELEASE, equivalent to Apache Tomcat 8.5.60 - Includes CVE-2020-17527
    • 7.0.107.A.RELEASE, equivalent to Apache Tomcat 7.0.107

  • New tc Server features:

    • The Templates on demand feature may be disabled by setting templates.ondemand=false in conf/tcserver.properties.
    • The Tomcat Manager template has been added to the Template Repository. This template can be used by tc Server versions prior to 4.1.5 which uses newer tc Runtimes.

What's New in VMware tc Server 4.1.4

This VMware tc Server release includes the following new features and changes:

  • New tc Runtime versions:
    • Bundled tc Runtime:
      • 9.0.38.B.RELEASE, equivalent to Apache Tomcat 9.0.38 including the following fixes: - Fix for 64743 - Fix for 64745
  • On-demand tc Runtimes:
    • 8.5.58.B.RELEASE, equivalent to Apache Tomcat 8.5.58 including the following fixes: - Fix for 64743 - Fix for 64745
    • 7.0.106.A.RELEASE, equivalent to Apache Tomcat 7.0.106
  • New tc Server features:
    • get-runtime has been enhanced to allow specifying a URL to a tc Runtime zip archive. This allows for a local repository of tc Runtime zip archives to be used instead of the public tc Runtime Repository.
    • The tc Runtimes on demand feature will now gracefully fail and the local repository will be used when unable to connect to remote tc Runtime Repository.

What's New in VMware tc Server 4.1.3

This VMware tc Server release includes the following new features and changes:

  • New tc Runtime versions:
    • Bundled tc Runtime:
  • On-demand tc Runtimes:
    • 8.5.56.B.RELEASE, equivalent to Apache Tomcat 8.5.56 including the following fixes:
    • 7.0.104.B.RELEASE, equivalent to Apache Tomcat 7.0.104 including the following fixes:

What's New in VMware tc Server 4.1.2

This VMware tc Server release includes the following new features and changes:

  • New tc Runtime versions:
    • Bundled tc Runtime:
      • 9.0.36.A.RELEASE, equivalent to Apache Tomcat 9.0.36
  • On-demand tc Runtimes:
    • 8.5.56.A.RELEASE, equivalent to Apache Tomcat 8.5.56
    • 7.0.104.A.RELEASE, equivalent to Apache Tomcat 7.0.104

What's New in VMware tc Server 4.1.1

  • New tc Runtime Versions:

    • Bundled tc Runtime:

    • 9.0.34.B.RELEASE, equivalent to Apache Tomcat 8.5.54, including the following fixes:

      • Rework the fix for BZ 64021 for better custom class loader support (ASF commit: 47edccf)
      • Fix compilation of JSPs with inner classes with ECJ 4.14 onwards (ASF commit: 85e93fb)
      • Includes CVE-2020-9484

    • On-demand tc Runtimes:

    • 8.5.54.B.RELEASE, equivalent to Apache Tomcat 8.5.54, including the following fixes:

      • Rework the fix for BZ 64021 for better custom class loader support (ASF commit: 33074db)
      • Fix compilation of JSPs with inner classes with ECJ 4.14 onwards (ASF commit: 5bc5ed2)
      • Includes CVE-2020-9484

    • 7.0.103.B.RELEASE, equivalent to Apache Tomcat 7.0.103, including the following fixes:

      • Rework the fix for BZ 64021 for better custom class loader support (ASF commit: b732c45)
      • Fix compilation of JSPs with inner classes with ECJ 4.14 onwards (ASF commit: 94cbea7)
      • Includes CVE-2020-9484

What's New in VMware tc Server 4.1.0

This VMware tc Server release includes the following new features and changes:

  • Features Highlights:

  • Kubernetes Friendly Features

    • YAML File Format supported for instance descriptor file
    • Deploy a .war file during instance creation
    • Run an instance after creation
    • Install templates automatically from the template repository
    • Install tc Runtime automatically version from tc Runtime Repository

  • Encoded Properties changes:

    • Removed support for tcEnc (support for s2enc was removed in previous release)
    • The encode command will use an instance's catalina.properties for passphrase information and automatically encode the specified properties.

  • Java Support

    • The minimum supported Java version for the tcserver command is 8.
    • A tc Runtime Instance version 7.0.x may still be created and ran with Java 6+ by using the --java-home option.
    • A tc Runtime Instance version 8.5.x may still be created and ran with Java 7 by using the --java-home option.

  • Automatic download of runtimes

    • tc Server will automatically attempt to download the tc Runtime version specified to create if it isn't found locally. This feature may be turned off by setting runtimes.ondemand=false in conf/tcserver.properties

  • tc Runtimes:

  • Our bundled tc Runtime version:

    • 9.0.33.A.RELEASE, equivalent to Apache Tomcat 9.0.33

  • On-demand tc Runtime versions:

    • 8.5.53.A.RELEASE, equivalent to Apache Tomcat 8.5.53
    • 7.0.103.A.RELEASE, equivalent to Apache Tomcat 7.0.103

Security and Vulnerability Information

All CVEs (Common Vulnerabilities and Exposures) are registered with cve.mitre.org. Once the CVE information is released to the public, it can take some time before this site is updated with all the details. If you do not see the updated CVE information, please visit Apache Tomcat's Security pages for more detailed information about the CVE.

Here are the links to Apache Tomcat security and vulnerability details per release:

Known Issues

Issue Number Description
N/A Versions of tc Server earlier than 4.1.10 and 4.0.22 are not compatible with Java 16.
N/A The manager template provided with tc Server Versions prior to 4.0.16 are not compatible with tc Runtime versions 9.0.60.A.RELEASE, 8.5.60.A.RELEASE, and 7.0.107.A.RELEASE or newer. A replacement template has been added to the tc Server Templates Repository
N/A The default OpenJDK build of Java 9 on Ubuntu is a non-GA version and will cause issues when running tc Server. Upgrade to a GA version of OpenJDK to resolve the issues.
N/A As of tc Runtime versions 7.0.100.A.RELEASE, 8.5.51.A.RELEASE, and 9.0.31.A.RELEASE the AJP connector attributes have changed. Unmodified server.xml files may result in the following message in the catalina.log Caused by: java.lang.IllegalArgumentException: The AJP Connector is configured with secretRequired="true" but the secret attribute is either null or "". This combination is not valid. Please see https://tomcat.apache.org/tomcat-8.5-doc/config/ajp.html for how to update the configuration. AJP Template documentation

Glossary

Term Definition
tc Runtime tc Runtime is the Apache Tomcat runtime binaries packaged for use by tc Server. See tc Server Versioning to understand the naming scheme.
Bundled tc Runtime This is a tc Runtime that is packaged with the tc Server installation. For example tc Server 4.0.0 has tc Runtime 9.0.6.B.RELEASE bundled in the distribution.
On-demand tc Runtime This is a tc Runtime that is available for download by using the tcserver get-runtime command or by manually downloading the tc Runtime from VMware Tanzu Network. You can see the available tc Runtimes by calling the tcserver list-runtimes command.

tc Server Versioning

The tc Runtime version refers to the corresponding Apache Tomcat release. A letter is added to indicate whether additional patches not yet released by the Apache Software Foundation are applied.

For example:

  • tc Runtime 9.0.33.A.RELEASE is equivalent to Apache Tomcat 9.0.33.

  • tc Runtime 9.0.33.B.RELEASE is equivalent to Apache Tomcat 9.0.33 plus important bug fixes, enhancements, or security fixes. The letter could also refer to a pre-release of Apache Tomcat 9.0.34.

    The letter is incremented (9.0.33.C.RELEASE, 9.0.33.D.RELEASE, and so on) if additional patches or security fixes are applied after a release is named and released.

See the Apache Tomcat changelogs for a list of improvements introduced by release:

VMware Tanzu tc Server Support Lifecycle

VMware Tanzu tc Server 4.1.x, which includes:

  • tc Runtime 7.0.x
  • tc Runtime 8.5.x
  • tc Runtime 9.0.x

Support Lifecycle Dates:

  • End of General Support is no earlier than December 31, 2027.
  • End of Technical Guidance is no earlier than June 30, 2028.

General Support includes fixes for major bugs and CVEs. New features will not be added to the 4.1.x branch. Fixes are provided in the form of patch releases (the 3rd digit in the version number).

Note: "No earlier than" means that the date will not be moved earlier, however, the date could be moved ahead into the future.

tc Server Naming

Since the original release of SpringSource tc Server there have been many names of the core product often referred to as tc Server. These include vFabric tc Server, Appsuite tc Server, Pivotal tc Server, and VMware tc Server. the branding name may change, even between minor releases, however, it is the same core product. The current full name is VMware Tanzu tc Server or Tanzu tc Server for short name usage.

check-circle-line exclamation-circle-line close-line
Scroll to top icon