Content
Apache Tomcat
The Apache Tomcat® software is an open source implementation
of the
Jakarta Servlet,
Jakarta Server Pages,
Jakarta Expression Language,
Jakarta WebSocket,
Jakarta Annotations and
Jakarta Authentication
specifications. These specifications are part of the
Jakarta EE platform.
The Jakarta EE platform is the evolution of the Java EE platform. Tomcat 10
and later implement specifications developed as part of Jakarta EE. Tomcat 9 and
earlier implement specifications developed as part of Java EE.
The Apache Tomcat software is developed in an open and participatory
environment and released under the
Apache License version 2. The
Apache Tomcat project is intended to be a collaboration of the best-of-breed
developers from around the world. We invite you to participate in this open
development project. To learn more about getting involved,
click here.
Apache Tomcat software powers numerous large-scale, mission-critical web
applications across a diverse range of industries and organizations. Some of
these users and their stories are listed on the
PoweredBy
wiki page.
Apache Tomcat, Tomcat, Apache, the Apache feather, and the Apache Tomcat
project logo are trademarks of the Apache Software Foundation.
2022-05-16 Tomcat 9.0.63 Released
The Apache Tomcat Project is proud to announce the release of version 9.0.63
of Apache Tomcat. This release implements specifications that are part of the
Java EE 8 platform. The notable changes compared to 9.0.62 include:
- Provide a property source that sources values from Kubernetes service
bindings. Provided by Sumit Kulhadia and Gareth Evans.
- The root cause of the Linux kernel duplicate accept bug has been
identified along with the version of the kernel that includes the fix.
The error message displayed when this bug occurs has been updated to
reflect this new information and to advise users to update to a
version of the OS that uses kernel 5.10 or later. Thanks to
Christopher Gual for the research into this issue.
- Update the packaged version of the Tomcat Native Library to 1.2.33 to
pick up Windows binaries built with OpenSSL 1.1.1o.
- Add support for encrypted PKCS#1 formatted private keys when configuring
the internal, in memory key store.
Full details of these changes, and all the other changes, are available in the
Tomcat 9
changelog.
Download
2022-05-16 Tomcat 10.0.21 Released
The Apache Tomcat Project is proud to announce the release of version 10.0.20
of Apache Tomcat. This release implements specifications that are part of the
Jakarta EE 9 platform.
Applications that run on Tomcat 9 and earlier will not run on Tomcat 10
without changes. Java EE based applications designed for Tomcat 9 and earlier
may be placed in the $CATALINA_BASE/webapps-javaee
directory and
Tomcat will automatically convert them to Jakarta EE and copy them to the
webapps directory. This conversion is performed using the
Apache Tomcat
migration tool for Jakarta EE tool which is also available as a separate
download for off-line use.
The notable changes in this release are:
- Provide a property source that sources values from Kubernetes service
bindings. Provided by Sumit Kulhadia and Gareth Evans.
- The root cause of the Linux kernel duplicate accept bug has been
identified along with the version of the kernel that includes the fix.
The error message displayed when this bug occurs has been updated to
reflect this new information and to advise users to update to a
version of the OS that uses kernel 5.10 or later. Thanks to
Christopher Gual for the research into this issue.
- Update the packaged version of the Tomcat Native Library to 1.2.33 to
pick up Windows binaries built with OpenSSL 1.1.1o.
Full details of these changes, and all the other changes, are available in the
Tomcat 10
changelog.
Download
2022-05-16 Tomcat 10.1.0-M15 (alpha) Released
The Apache Tomcat Project is proud to announce the release of version 10.1.0-M15
of Apache Tomcat. This release is a milestone release and is targeted at Jakarta
EE 10.
Applications that run on Tomcat 9 and earlier will not run on Tomcat 10
without changes. Java EE based applications designed for Tomcat 9 and earlier
may be placed in the $CATALINA_BASE/webapps-javaee
directory and
Tomcat will automatically convert them to Jakarta EE and copy them to the
webapps directory. This conversion is performed using the
Apache Tomcat
migration tool for Jakarta EE tool which is also available as a separate
download for off-line use.
The notable changes in this release are:
- Provide a property source that sources values from Kubernetes service
bindings. Provided by Sumit Kulhadia and Gareth Evans.
- The root cause of the Linux kernel duplicate accept bug has been
identified along with the version of the kernel that includes the fix.
The error message displayed when this bug occurs has been updated to
reflect this new information and to advise users to update to a
version of the OS that uses kernel 5.10 or later. Thanks to
Christopher Gual for the research into this issue.
- Update the packaged version of the Tomcat Native Library to 1.2.33 to
pick up Windows binaries built with OpenSSL 1.1.1o.
Full details of these changes, and all the other changes, are available in the
Tomcat 10.1
(alpha) changelog.
Download
2022-05-09 Tomcat Native 1.2.33 Released
The Apache Tomcat Project is proud to announce the release of version 1.2.33 of
Tomcat Native. The notable changes since 1.2.32 include:
- Windows binaries built with OpenSSL 1.1.1o.
- Fixing a potential crash when attempting to read the TLS session ID after a
handshake failure.
Download |
ChangeLog for 1.2.33
2022-04-01 Tomcat 8.5.78 Released
The Apache Tomcat Project is proud to announce the release of version 8.5.78
of Apache Tomcat. This release implements specifications that are part of the
Java EE 7 platform. The notable changes compared to 8.5.77 include:
- Update the packaged version of the Tomcat Native Library to 1.2.32 to
pick up Windows binaries built with OpenSSL 1.1.1n.
- Improve logging of unknown HTTP/2 settings frames. Pull request by
Thomas Hoffmann.
- Add additional warnings if incompatible TLS configurations are used
such as HTTP/2 with CLIENT-CERT authentication.
- Harden the class loader to provide a mitigation for CVE-2022-22965
a Spring Framework vulnerability.
Full details of these changes, and all the other changes, are available in the
Tomcat 8
changelog.
Download
The Apache Tomcat Project is proud to announce the release of 1.0.0 of the
Apache Tomcat Migration Tool for Jakarta EE. This release contains a number of
bug fixes and improvements compared to version 0.2.0.
The notable changes in this release are:
- Further fixes to exclude javax.xml packages that are not part of Java EE
from the migration.
- The class transformer now validates that the target classes in the Jakarta
namespace exist in the runtime environment.
Full details of these changes, and all the other changes, are available in the
changelog.
Download
2020-03-06 Tomcat Connectors 1.2.48 Released
The Apache Tomcat Project is proud to announce the release of version 1.2.48 of
Apache Tomcat Connectors.
This version fixes a number of bugs found in previous releases.
Download |
ChangeLog for 1.2.48
2015-03-17 Apache Standard Taglib 1.2.5 Released
The Apache Tomcat Project is proud to announce the release of version 1.2.5 of
the Standard Taglib. This tag library provides Apache's implementation
of the JSTL 1.2 specification.
Version 1.2.5 is a minor bug fix release reverting a change made in 1.2.1 where
<c:import> modified the HTTP method during POST operations, and fixing an
issues that resulted in an AccessControlException during startup unless
permission was granted to read the accessExternalEntity property.
Please see the Taglibs section for more details.
Download |
Changes
2013-11-11 Tomcat Maven Plugin 2.2 Released
The Apache Tomcat team is pleased to announce the release of Tomcat Maven Plugin 2.2.
Changelog available here.
The Apache Tomcat Maven Plugin provides goals
to manipulate WAR projects within the Apache Tomcat servlet container.
The binaries are available from Maven repositories. You should specify the
version in your project's plugin configuration:
<plugin>
<groupId>org.apache.tomcat.maven</groupId>
<artifactId>tomcat7-maven-plugin</artifactId>
<version>2.2</version>
</plugin>
or
<plugin>
<groupId>org.apache.tomcat.maven</groupId>
<artifactId>tomcat6-maven-plugin</artifactId>
<version>2.2</version>
</plugin>
Old news