Content

Apache Tomcat

The Apache Tomcat® software is an open source implementation of the Jakarta Servlet, Jakarta Server Pages, Jakarta Expression Language, Jakarta WebSocket, Jakarta Annotations and Jakarta Authentication specifications. These specifications are part of the Jakarta EE platform.

The Jakarta EE platform is the evolution of the Java EE platform. Tomcat 10 and later implement specifications developed as part of Jakarta EE. Tomcat 9 and earlier implement specifications developed as part of Java EE.

The Apache Tomcat software is developed in an open and participatory environment and released under the Apache License version 2. The Apache Tomcat project is intended to be a collaboration of the best-of-breed developers from around the world. We invite you to participate in this open development project. To learn more about getting involved, click here.

Apache Tomcat software powers numerous large-scale, mission-critical web applications across a diverse range of industries and organizations. Some of these users and their stories are listed on the PoweredBy wiki page.

Apache Tomcat, Tomcat, Apache, the Apache feather, and the Apache Tomcat project logo are trademarks of the Apache Software Foundation.

2022-09-26 Tomcat 10.1.0 Released

The Apache Tomcat Project is proud to announce the release of version 10.1.0 of Apache Tomcat. This is the first stable release of Apache Tomcat targeted at Jakarta EE 10.

Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 without changes. Java EE based applications designed for Tomcat 9 and earlier may be placed in the $CATALINA_BASE/webapps-javaee directory and Tomcat will automatically convert them to Jakarta EE and copy them to the webapps directory. This conversion is performed using the Apache Tomcat migration tool for Jakarta EE tool which is also available as a separate download for off-line use.

The notable changes in this release are:

  • Add support for authenticating WebSocket clients with an HTTP forward proxy when establishing a connection to a WebSocket endpoint via a forward proxy that requires authentication. Based on a patch provided by Joe Mokos.
  • Various fixes for edge case bugs in EL processing.
  • Improve host header handling for HTTP/2 requests.

Full details of these changes, and all the other changes, are available in the Tomcat 10.1 changelog.

Download

2022-09-27 Tomcat 10.0.26 Released

The Apache Tomcat Project is proud to announce the release of version 10.0.26 of Apache Tomcat. This release implements specifications that are part of the Jakarta EE 9 platform.

Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 without changes. Java EE based applications designed for Tomcat 9 and earlier may be placed in the $CATALINA_BASE/webapps-javaee directory and Tomcat will automatically convert them to Jakarta EE and copy them to the webapps directory. This conversion is performed using the Apache Tomcat migration tool for Jakarta EE tool which is also available as a separate download for off-line use.

The notable changes in this release are:

  • Add support for authenticating WebSocket clients with an HTTP forward proxy when establishing a connection to a WebSocket endpoint via a forward proxy that requires authentication. Based on a patch provided by Joe Mokos.
  • Various fixes for edge case bugs in EL processing.
  • Improve host header handling for HTTP/2 requests.

Full details of these changes, and all the other changes, are available in the Tomcat 10 changelog.

Download

2022-09-26 Tomcat 9.0.67 Released

The Apache Tomcat Project is proud to announce the release of version 9.0.67 of Apache Tomcat. This release implements specifications that are part of the Java EE 8 platform. The notable changes compared to 9.0.65 include:

  • Add support for authenticating WebSocket clients with an HTTP forward proxy when establishing a connection to a WebSocket endpoint via a forward proxy that requires authentication. Based on a patch provided by Joe Mokos.
  • Various fixes for edge case bugs in EL processing.
  • Improve host header handling for HTTP/2 requests.

Full details of these changes, and all the other changes, are available in the Tomcat 9 changelog.

Download

2022-09-20 Tomcat Migration Tool for Jakarta EE 1.0.4 Released

The Apache Tomcat Project is proud to announce the release of 1.0.4 of the Apache Tomcat Migration Tool for Jakarta EE. This release contains a number of bug fixes and improvements compared to version 1.0.3.

The notable changes in this release are:

  • Improve the fix converting web applications that include JARs that store one or more entries in uncompressed form.
  • Add a new conversion profile that converts from Jakarta EE 9 to Java EE 8.

Full details of these changes, and all the other changes, are available in the changelog.

Download

2022-08-13 Tomcat 8.5.82 Released

The Apache Tomcat Project is proud to announce the release of version 8.5.82. of Apache Tomcat. This release implements specifications that are part of the Java EE 7 platform. The notable changes compared to 8.5.81 include:

  • Update the packaged version of the Tomcat Native Library to 1.2.35 to pick up Windows binaries built with OpenSSL 1.1.1q.
  • Enable the use of the FIPS provider for TLS enabled Connectors when using Tomcat Native 1.2.34 onwards built with OpenSSL 3.0.x onwards.
  • Improvements to HTTP/2 header handling.
  • Fix CVE-2022-34305, a low severity XSS vulnerability in the Form authentication example.

Full details of these changes, and all the other changes, are available in the Tomcat 8 changelog.

Download

2022-07-20 Tomcat 9.0.65 Released

The Apache Tomcat Project is proud to announce the release of version 9.0.65 of Apache Tomcat. This release implements specifications that are part of the Java EE 8 platform. The notable changes compared to 9.0.64 include:

  • Implement support for repeatable builds.
  • Update the packaged version of the Tomcat Native Library to 1.2.35. This includes Windows binaries built with OpenSSL 1.1.1q.
  • Fix CVE-2022-34305, a low severity XSS vulnerability in the Form authentication example.

Full details of these changes, and all the other changes, are available in the Tomcat 9 changelog.

Download

2022-07-12 Tomcat Native 2.0.1 Released

The Apache Tomcat Project is proud to announce the release of version 2.0.1 of Tomcat Native. This is the first release of the 2.0.x branch. The notable changes compared to the 1.2x branch include:

  • The JNI API has been reduced to just that required to support Tomcat's OpenSSL based TLS implementation. The APR/native connector is no longer supported in the 2.0.x branch.
  • The minimum supported versions have been increased to OpenSSL 3.0.x, Apache APR 1.7.x, Java 11, Windows 7 / Server 2008 R2.
  • The windows binaries in this release have been built with OpenSSL 3.0.5

Download | ChangeLog for 2.0.1

2022-07-12 Tomcat Native 1.2.35 Released

The Apache Tomcat Project is proud to announce the release of version 1.2.35 of Tomcat Native. The notable changes since 1.2.34 include:

  • Windows binaries built with OpenSSL 1.1.1q.
  • Document TLS renegotiation behaviour
  • Document the release process

Download | ChangeLog for 1.2.35

2020-03-06 Tomcat Connectors 1.2.48 Released

The Apache Tomcat Project is proud to announce the release of version 1.2.48 of Apache Tomcat Connectors. This version fixes a number of bugs found in previous releases.

Download | ChangeLog for 1.2.48

2015-03-17 Apache Standard Taglib 1.2.5 Released

The Apache Tomcat Project is proud to announce the release of version 1.2.5 of the Standard Taglib. This tag library provides Apache's implementation of the JSTL 1.2 specification.

Version 1.2.5 is a minor bug fix release reverting a change made in 1.2.1 where <c:import> modified the HTTP method during POST operations, and fixing an issues that resulted in an AccessControlException during startup unless permission was granted to read the accessExternalEntity property.

Please see the Taglibs section for more details.

Download | Changes

2013-11-11 Tomcat Maven Plugin 2.2 Released

The Apache Tomcat team is pleased to announce the release of Tomcat Maven Plugin 2.2. Changelog available here.

The Apache Tomcat Maven Plugin provides goals to manipulate WAR projects within the Apache Tomcat servlet container.

The binaries are available from Maven repositories. You should specify the version in your project's plugin configuration: 

<plugin>
  <groupId>org.apache.tomcat.maven</groupId>
  <artifactId>tomcat7-maven-plugin</artifactId>
  <version>2.2</version>
</plugin>

or

<plugin>
  <groupId>org.apache.tomcat.maven</groupId>
  <artifactId>tomcat6-maven-plugin</artifactId>
  <version>2.2</version>
</plugin>

Old news

See former announcements.