Re: AW: [ANN] Apache Tomcat 11.0.23 Available

On 22/06/2026 13:22, Thomas Hoffmann (Speed4Trade GmbH) via users wrote:
> Hello Mark,
> 
> after upgrading from 11.0.22 to 11.0.23 I got a core dump during startup:
> 
> Stack: [0x00007514e1100000,0x00007514e1200000],  sp=0x00007514e11fd370,  free space=1012k
> Native frames: (J=compiled Java code, j=interpreted, Vv=VM code, C=native code)
> C  [libapr-1.so.0+0x20370]  apr_pool_create_ex+0x150
> C  [libtcnative-2.so.0.0.13+0xaefa]  Java_org_apache_tomcat_jni_Pool_create+0x3a
> j  org.apache.tomcat.util.net.openssl.OpenSSLEngine.<clinit>()V+35
> v  ~StubRoutines::call_stub 0x00007514c7d37cc6
> V  [libjvm.so+0x915134]  JavaCalls::call_helper(JavaValue*, methodHandle const&, JavaCallArguments*, JavaThread*)+0x2f4
> V  [libjvm.so+0x8e9545]  InstanceKlass::call_class_initializer(JavaThread*)+0x265
> V  [libjvm.so+0x8eb22f]  InstanceKlass::initialize_impl(JavaThread*)+0x62f
> V  [libjvm.so+0xb6a013]  LinkResolver::resolve_field(fieldDescriptor&, LinkInfo const&, Bytecodes::Code, bool, JavaThread*)+0x3b3
> V  [libjvm.so+0xb6a4ce]  LinkResolver::resolve_field_access(fieldDescriptor&, constantPoolHandle const&, int, methodHandle const&, Bytecodes::Code, JavaThread*)+0x5e
> V  [libjvm.so+0x90c99c]  InterpreterRuntime::resolve_get_put(JavaThread*, Bytecodes::Code)+0x1cc
> V  [libjvm.so+0x90d4a5]  InterpreterRuntime::resolve_from_cache(JavaThread*, Bytecodes::Code)+0xe5
> j  org.apache.tomcat.util.net.openssl.OpenSSLUtil.getImplementedProtocols()Ljava/util/Set;+0
> j  org.apache.tomcat.util.net.SSLUtilBase.<init>(Lorg/apache/tomcat/util/net/SSLHostConfigCertificate;Z)V+26
> j  org.apache.tomcat.util.net.SSLUtilBase.<init>(Lorg/apache/tomcat/util/net/SSLHostConfigCertificate;)V+3
> j  org.apache.tomcat.util.net.openssl.OpenSSLUtil.<init>(Lorg/apache/tomcat/util/net/SSLHostConfigCertificate;)V+2
> j  org.apache.tomcat.util.net.openssl.OpenSSLImplementation.getSSLUtil(Lorg/apache/tomcat/util/net/SSLHostConfigCertificate;)Lorg/apache/tomcat/util/net/SSLUtil;+5
> j  org.apache.tomcat.util.net.AbstractEndpoint.createSSLContext(Lorg/apache/tomcat/util/net/SSLHostConfig;)V+89
> j  org.apache.tomcat.util.net.AbstractEndpoint.initialiseSsl()V+54
> j  org.apache.tomcat.util.net.NioEndpoint.bind()V+17
> j  org.apache.tomcat.util.net.AbstractEndpoint.bindWithCleanup()V+1
> j  org.apache.tomcat.util.net.AbstractEndpoint.init()V+8
> j  org.apache.coyote.AbstractProtocol.init()V+169
> j  org.apache.coyote.http11.AbstractHttp11Protocol.init()V+57
> j  org.apache.catalina.connector.Connector.initInternal()V+159
> j  org.apache.catalina.util.LifecycleBase.init()V+29
> ....
> 
> Upgrading tcnative from 2.0.13 to 2.0.15 fixed it for me.
> Just in case somebody else has similar issue.

The minimum Tomcat Native version was increased to 2.0.15 for 11.0.23.

The core dump shouldn't have happened but it looks like running with 
2.0.13 triggers the core dump before Tomcat has a chance to realise an 
incorrect version of Native is being used. Not sure why at this point.

Something to look into.

Mark


> 
> Core dump didn’t happen with Tomcat 11.0.22.
> (Environment Ubuntu 24.04 LTS, amazon-corretto-21.0.8.9.1)
> 
> Thanks!
> Thomas
> 
> 
>> -----Ursprüngliche Nachricht-----
>> Von: Mark Thomas <[email protected]>
>> Gesendet: Montag, 22. Juni 2026 13:18
>> An: Tomcat Users List <[email protected]>
>> Cc: [email protected]; [email protected]; Tomcat
>> Developers List <[email protected]>
>> Betreff: [ANN] Apache Tomcat 11.0.23 Available
>>
>> The Apache Tomcat team announces the immediate availability of Apache
>> Tomcat 11.0.23.
>>
>> Apache Tomcat 11 is an open source software implementation of the
>> Jakarta Servlet, Jakarta Pages, Jakarta Expression Language, Jakarta
>> WebSocket, Jakarta Authentication and Jakarta Annotations
>> specifications.
>>
>> The notable changes compared to 11.0.22 include:
>>
>> - Align the rewrite conditions ornext flag processing with
>>     mod_rewrite, which follows a purely sequential evaluation
>>     strategy.
>>
>> - Ensure that malformed HTTP/2 messages that should trigger a
>>     stream reset do so, rather than triggered a connection close.
>>
>> - Add replay protection to the EncryptInterceptor. This is a
>>     breaking change for the EncryptInterceptor.
>>
>> Please refer to the change log for the complete list of changes:
>> http://tomcat.apache.org/tomcat-11.0-doc/changelog.html
>>
>> Downloads:
>> http://tomcat.apache.org/download-11.cgi
>>
>> Migration guides from Apache Tomcat 9.0.x and 10.1.x:
>> http://tomcat.apache.org/migration.html
>>
>> Enjoy!
>>
>> - The Apache Tomcat team
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: [email protected]
>> For additional commands, e-mail: [email protected]
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
>