Note that DBCP comes in three versions which are for different JDBC releases:
Note: The tar files in the distribution use GNU tar extensions and must be untarred with a GNU compatible version of tar. The version of tar on Solaris and Mac OS X will not work with these files
The changes in this release are detailed in the release notes.
Thank you for using Commons DBCP.
From the Apache Commons Project
Do not download from www.apache.org. Please use a mirror site to help us save apache.org bandwidth. Go here to find your nearest mirror.
Many of the files have been digitally signed using GnuPG. If so, there will be an accompanying file.asc signature file in the same directory as the file (binaries/ or source/). The signing keys can be found in the distribution directory at <https://www.apache.org/dist/commons/KEYS>.
Always download the KEYS file directly from the Apache site, never from a mirror site.
Always test available signatures, e.g., $ pgpk -a KEYS $ pgpv commons-dbcp2-2.9.0-bin.tar.gz.asc or, $ pgp -ka KEYS $ pgp commons-dbcp2-2.9.0-bin.tar.gz.asc or, $ gpg --import KEYS $ gpg --verify commons-dbcp2-2.9.0-bin.tar.gz.asc