Apache Tomcat

Apache Tomcat™ is an open source software implementation of the Java Servlet, JavaServer Pages, Java Expression Language and Java WebSocket technologies. The Java Servlet, JavaServer Pages, Java Expression Language and Java WebSocket specifications are developed under the Java Community Process.

Apache Tomcat is developed in an open and participatory environment and released under the Apache License version 2. Apache Tomcat is intended to be a collaboration of the best-of-breed developers from around the world. We invite you to participate in this open development project. To learn more about getting involved, click here.

Apache Tomcat powers numerous large-scale, mission-critical web applications across a diverse range of industries and organizations. Some of these users and their stories are listed on the PoweredBy wiki page.

Apache Tomcat, Tomcat, Apache, the Apache feather, and the Apache Tomcat project logo are trademarks of the Apache Software Foundation.

The Apache Tomcat Project is proud to announce the release of version 1.2.3 of Tomcat Native. The notable changes since 1.2.2 include:

• Java keystore support.
• Various fixes to align the Java and native APIs
• Various fixes if building without OpenSSL

Note that, unless a regression is discovered in 1.2.x, users should now be using 1.2.x in preference to 1.1.x.

Download | ChangeLog for 1.2.3

The Apache Tomcat Project is proud to announce the release of version 1.1.34 of Tomcat Native. The notable changes since 1.1.33 include:

• Unconditionally disable export Ciphers
• Improve ephemeral key handling for DH and ECDH
• Various fixes to build with newer OPenSSL versions

Note that, unless a regression is discovered in 1.2.x, users should now be using 1.2.x in preference to 1.1.x.

Download | ChangeLog for 1.1.34

The Apache Tomcat Project is proud to announce the release of version 7.0.67 of Apache Tomcat. This release contains a number of bug fixes and improvements compared to version 7.0.65. The notable changes since 7.0.65 include:

• Allow file based configuration resources (e.g. key stores) to be configured using URLs.
• Add an option to control (per context) quoting of EL expressions in JSP attributes. Restore the default behavior in Jasper to align with 7.0.64 and earlier as well as other JSP implementations.
• Add a new RestCsrfPreventionFilter that provides basic CSRF protection for REST APIs.
• Use instance manager for WebSocket server endpoint instances.
• Location headers for redirects now use relative URIs. This can be controlled per Context with the useRelativeRedirects attribute.

Full details of these changes, and all the other changes, are available in the Tomcat 7 changelog.

Download | ChangeLog for 7.0.67

The Apache Tomcat Project is proud to announce the release of version 8.0.30 of Apache Tomcat. Apache Tomcat 8.0.30 includes fixes for issues identified in 8.0.29 as well as other enhancements and changes. The notable changes since 8.0.29 include:

• Location headers for redirects now use relative URIs. This can be controlled per Context with the useRelativeRedirects attribute.
• Correct a regression in 8.0.29 that broke redirects for context roots.
• Restore the default setting of quoteAttributeEL in Jasper to true to align with 8.0.26/7.0.64 and earlier as well as other JSP implementations.

Full details of these changes, and all the other changes, are available in the Tomcat 8 changelog.

Download

The Apache Tomcat Project is proud to announce the release of version 9.0.0.M1 (alpha) of Apache Tomcat. The is the first milestone release of the 9.0.x branch and has been made to provide users with early access to the new features in Apache Tomcat 9.0.x so that they may provide feedback.The notable changes compared to 8.0.x include:

• Adding support for HTTP/2, and TLS virtual hosting
• An implementation of the current draft of the Servlet 4.0 specification
• The BIO connectors, support for Windows Itanium and support for Comet have been removed

Full details of these changes, and all the other changes, are available in the Tomcat 9 changelog.

Download

The Apache Tomcat Project is proud to announce the release of version 1.2.41 of Apache Tomcat Connectors. This version fixes one security issue (CVE-2014-8111) and a number of bugs found in previous releases.

Download | ChangeLog for 1.2.41

The Apache Tomcat Project is proud to announce the release of version 6.0.44 of Apache Tomcat. This release includes a number of security and bug fixes over Apache Tomcat 6.0.44. The notable changes include:

• Update to Tomcat Native Library version 1.1.33 to pick up the Windows binaries that are based on OpenSSL 1.0.1m.

Note: End of life date for Apache Tomcat 6.0.x is announced. Read more...

Download | ChangeLog for 6.0.44

The Apache Tomcat Project is proud to announce the release of version 1.2.5 of the Standard Taglib. This tag library provides Apache's implementation of the JSTL 1.2 specification.

Version 1.2.5 is a minor bug fix release reverting a change made in 1.2.1 where <c:import> modified the HTTP method during POST operations, and fixing an issues that resulted in an AccessControlException during startup unless permission was granted to read the accessExternalEntity property.

Please see the Taglibs section for more details.

Download | Changes

The Apache Tomcat team is pleased to announce the release of Tomcat Maven Plugin 2.2. Changelog available here.

The Apache Tomcat Maven Plugin provides goals to manipulate WAR projects within the Apache Tomcat servlet container.

The binaries are available from Maven repositories. You should specify the version in your project's plugin configuration:

<plugin>
  <groupId>org.apache.tomcat.maven</groupId>
  <artifactId>tomcat7-maven-plugin</artifactId>
  <version>2.2</version>
</plugin>

or

<plugin>
  <groupId>org.apache.tomcat.maven</groupId>
  <artifactId>tomcat6-maven-plugin</artifactId>
  <version>2.2</version>
</plugin>

See former announcements.