Content

Apache Tomcat

Apache Tomcat is an open source software implementation of the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed under the Java Community Process.

Apache Tomcat is developed in an open and participatory environment and released under the Apache License version 2. Apache Tomcat is intended to be a collaboration of the best-of-breed developers from around the world. We invite you to participate in this open development project. To learn more about getting involved, click here.

Apache Tomcat powers numerous large-scale, mission-critical web applications across a diverse range of industries and organizations. Some of these users and their stories are listed on the PoweredBy wiki page.

Apache Tomcat, Tomcat, Apache, the Apache feather, and the Apache Tomcat project logo are trademarks of the Apache Software Foundation.

2015-02-20 Apache Standard Taglib 1.2.3 Released

The Apache Tomcat Project is proud to announce the release of version 1.2.3 of the Standard Taglib. This tag library provides Apache's implementation of the JSTL 1.2 specification.

Version 1.2.3 is a security and bug fix release. It fixes a few bugs found in Standard Taglib 1.2.1 and provides protection against CVE-2015-0254 vulnerability (XXE and RCE via XSL extension in JSTL XML tags).

Please see the Standard Taglib site for more details.

Download | Changes

2015-02-20 Tomcat 8.0.20 Released

The Apache Tomcat Project is proud to announce the release of version 8.0.20 of Apache Tomcat. Apache Tomcat 8.0.20 includes a numerous fixes for issues identified in 8.0.18 as well as a number of other enhancements and changes. The notable changes since 8.0.18 include:

  • Fix a performance regression in the new resources implementation when signed JARs are used in a web application.
  • Fix several bugs that could cause multiple registrations for write events for a single socket when using Servlet 3.0 async. Typically, the side effects of these multiple registrations would be exceptions appearing in the logs.
  • Enhance the bean factory used for JNDI resources. The new attribute forceString allows to support non-standard string argument property setters.

Full details of these changes, and all the other changes, are available in the Tomcat 8 changelog.

Download

2015-02-04 Tomcat 7.0.59 Released

The Apache Tomcat Project is proud to announce the release of version 7.0.59 of Apache Tomcat. This release contains a number of bug fixes and improvements compared to version 7.0.57. The notable changes since 7.0.57 include:

  • Session ID Generator is now extensible.

Full details of these changes, and all the other changes, are available in the Tomcat 7 changelog.

Download | ChangeLog for 7.0.59

2014-11-22 Tomcat 6.0.43 Released

The Apache Tomcat Project is proud to announce the release of version 6.0.43 of Apache Tomcat. This release includes a number of bug fixes over Apache Tomcat 6.0.41. The notable changes include:

  • Update to Tomcat Native Library version 1.1.32 to pick up the Windows binaries that are based on OpenSSL 1.0.1j and APR 1.5.1.
  • Add support for TLSv1.1 and TLSv1.2 for APR connector. Based upon a patch by Marcel Ĺ ebek. This feature requires Tomcat Native library 1.1.32 or later.
  • Disable SSLv3 by default for all HTTPS connectors.

Download | ChangeLog for 6.0.43

2014-10-23 Tomcat Native 1.1.32 Released

The Apache Tomcat Project is proud to announce the release of version 1.1.32 of Tomcat Native. The notable changes since 1.1.31 include:

  • Added support for TLSv1.1 and TLSv1.2
  • Windows binaries are linked with OpenSSL 1.0.1j and APR 1.5.1

Download | ChangeLog for 1.1.32

2014-04-15 Tomcat Connectors 1.2.40 Released

The Apache Tomcat Project is proud to announce the release of version 1.2.40 of Apache Tomcat Connectors. This version fixes few bugs found in previous releases.

Download | ChangeLog for 1.2.40

2013-11-11 Tomcat Maven Plugin 2.2 Released

The Apache Tomcat team is pleased to announce the release of Tomcat Maven Plugin 2.2. Changelog available here.

The Apache Tomcat Maven Plugin provides goals to manipulate WAR projects within the Apache Tomcat servlet container.

The binaries are available from Maven repositories. You should specify the version in your project's plugin configuration:

<plugin>
  <groupId>org.apache.tomcat.maven</groupId>
  <artifactId>tomcat7-maven-plugin</artifactId>
  <version>2.2</version>
</plugin>

or

<plugin>
  <groupId>org.apache.tomcat.maven</groupId>
  <artifactId>tomcat6-maven-plugin</artifactId>
  <version>2.2</version>
</plugin>

Old news