Apache Tomcat 8.5.16 发布了。 更新内容: Fix: 61072: Respect the documentation statements that allow using the platform default secure random for session id generation. (remm) Fix: Correct the javadoc for o.a.c.connector.CoyoteAdapter#parseSessionCookiesId. Patch provided by John Andrew (XUZHOUWANG) via Github. (violetagg) Fix: 61101: CORS filter should set Vary header in response. Submitted by Rick Riemer. (remm) Add: 61105: Add a new JULI FileHandler configuration for specifying the maximum number of days to keep the log files. (violetagg) 完整内容请查看 Changelog。 下载地址: http://tomcat.apache.org/download-80.cgi#8.5.16 Apache Tomcat 8.5.16 发布下载地址