The Apache Tomcat Project is proud to announce the release of version 8.5.45 of Apache Tomcat. Apache Tomcat 8.5.x replaces 8.0.x and includes new features pulled forward from Tomcat 9.0.x. The minimum Java version and implemented specification versions remain unchanged. The notable changes compared to 8.5.43 include:
- Expand the HTTP/2 excessive overhead protection to cover various forms of abusive client behaviour and close the connection if any such behaviour is detected.
- Security improvements to the Windows installer including a change in the default user from Local System to Local Service.
- Improve handling of invalid requests so that 400 responses are returned to the client rather than 500 responses.