Apache Commons DBCP 2.4.0 已发布，DBCP(Database Connection Pool)是一个依赖 Jakarta commons-pool 对象池机制的数据库连接池，Tomcat 的数据源使用的就是 DBCP。
下载地址：http://commons.apache.org/proper/commons-dbcp/download_dbcp.cgi
本次更新包含 bug 修复和一些变更：
Fixed Bugs: o DBCP-484:Connection leak during XATransaction in high load. o DBCP-496:Add support for pooling CallableStatements to the org.apache.commons.dbcp2.cpdsadapter package. Changes: o DBCP-492:Drop Ant build. o DBCP-491:Ensure DBCP ConnectionListener can deal with transaction managers which invoke rollback in a separate thread. o DBCP-494:org.apache.commons.dbcp2.PStmtKey should make copies of given arrays in constructors. o DBCP-495:Remove duplicate code in org.apache.commons.dbcp2.cpdsadapter.PStmtKeyCPDS. o DBCP-497:Deprecate use of PStmtKeyCPDS in favor of PStmtKey. o DBCP-498:org.apache.commons.dbcp2.DataSourceConnectionFactory should use a char[] instead of a String to store passwords. o DBCP-499:org.apache.commons.dbcp2.managed.DataSourceXAConnectionFactory should use a char[] instead of a String to store passwords. o DBCP-500:org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS should use a char[] instead of a String to store passwords. o DBCP-501:org.apache.commons.dbcp2.datasources.CPDSConnectionFactory should use a char[] instead of a String to store passwords. o DBCP-502:org.apache.commons.dbcp2.datasources internals should use a char[] instead of a String to store passwords. o DBCP-503:org.apache.commons.dbcp2.datasources.InstanceKeyDataSourceFactory.closeAll() does not close all.