Apache Tomcat

Apache Tomcat is an open source software implementation of the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed under the Java Community Process.

Apache Tomcat is developed in an open and participatory environment and released under the Apache License version 2. Apache Tomcat is intended to be a collaboration of the best-of-breed developers from around the world. We invite you to participate in this open development project. To learn more about getting involved, click here.

Apache Tomcat powers numerous large-scale, mission-critical web applications across a diverse range of industries and organizations. Some of these users and their stories are listed on the PoweredBy wiki page.

Apache Tomcat, Tomcat, Apache, the Apache feather, and the Apache Tomcat project logo are trademarks of the Apache Software Foundation.

The Apache Tomcat Project is proud to announce the release of version 7.0.52 of Apache Tomcat. This release contains a number of bug fixes and improvements compared to version 7.0.50. The notable changes since 7.0.50 include:

• Fix CVE-2014-0050, a DoS vulnerability related to multi-part processing.

Full details of these changes, and all the other changes, are available in the Tomcat 7 changelog.

Download | ChangeLog for 7.0.52

The Apache Tomcat Project is proud to announce the release of version 8.0.3 (beta) of Apache Tomcat. Tomcat 8 is aligned with Java EE 7. In addition to supporting updated versions of the Java EE specifications, Tomcat 8 includes a number of improvements compared to Tomcat 7. The notable changes include:

• Support for Java Servlet 3.1, JavaServer Pages 2.3, Java Unified Expression Language 3.0 and Java WebSocket 1.0.
• The default connector implementation is now the Java non-blocking implementation (NIO) for both HTTP and AJP.
• A new resources implementation that replaces Aliases, VirtualLoader, VirtualDirContext, JAR resources and external repositories with a single, consistent approach for configuring additional web application resources. The new resources implementation can also be used to implement overlays (using a master WAR as the basis for multiple web applications that each have their own customizations).

Apache Tomcat 8.0.3 (beta) includes numerous fixes for issues identified in 8.0.1 as well as a number of other enhancements and changes. The notable changes since 8.0.1 include:

• Fix CVE-2014-0050, a DoS vulnerability related to multi-part processing.
• Fix WebDAV support broken by the resources refactoring.
• Enable non-blocking reads to take place on non-container threads.

Full details of these changes, and all the other changes, are available in the Tomcat 8 changelog.

The purpose of this beta release is to give users an opportunity to test Tomcat 8 and to provide feedback to the Tomcat community. Although it is a beta release, it is expected to run stably and is being used in production at the ASF for the ASF's Jira instance. The beta status is primarily because the Tomcat developers feel more feedback is required before a stable release. It is also because 8.0.3 depends on a snapshot rather than a release build of Apache Commons DBCP2 and because there may be a small amount of further refactoring.

Download

The Apache Tomcat Project is proud to announce the release of version 6.0.39 of Apache Tomcat. This release includes a number of security and bug fixes over Apache Tomcat 6.0.37. The notable changes include:

• Various improvements to XML configuration file validation.
• Better adherence to RFC2616 for Content-Type and Content-Length headers.
• Avoid CVE-2013-1571 when generating Javadoc.

Download | ChangeLog for 6.0.39

The Apache Tomcat Project is proud to announce the release of version 1.2.1 of the Standard Taglib. This is the first official release of Apache's implementation of the JSTL 1.2 specification.

Please see the Standard Taglib site for more details.

Download

The Apache Tomcat team is pleased to announce the release of Tomcat Maven Plugin 2.2. Changelog available here.

The Apache Tomcat Maven Plugin provides goals to manipulate WAR projects within the Apache Tomcat servlet container.

The binaries are available from Maven repositories. You should specify the version in your project's plugin configuration:

<plugin>
  <groupId>org.apache.tomcat.maven</groupId>
  <artifactId>tomcat7-maven-plugin</artifactId>
  <version>2.2</version>
</plugin>

or

<plugin>
  <groupId>org.apache.tomcat.maven</groupId>
  <artifactId>tomcat6-maven-plugin</artifactId>
  <version>2.2</version>
</plugin>

The Apache Tomcat Project is proud to announce the release of version 1.1.29 of Tomcat Native.

Download | ChangeLog for 1.1.29

The Apache Tomcat Project is proud to announce the release of version 1.2.37 of Apache Tomcat Connectors. This version fixes few bugs and regressions found in 1.2.36 release.

Download | ChangeLog for 1.2.37

See former announcements.