Apache Tomcat^®

Announcements from previous years can be found here:

• year 2022
• year 2021
• year 2020
• year 2019
• year 2018
• year 2017
• year 2016
• year 2015
• year 2014
• year 2013
• year 2012
• year 2011
• year 2010

The Apache Tomcat Project is proud to announce the release of version 8.0.48 of Apache Tomcat. Apache Tomcat 8.0.48 includes fixes for issues identified in 8.0.47 as well as other enhancements and changes. The notable changes compared to 8.0.47 include:

• Java 9 is fully supported
• Updated the packaged version of the Tomcat Native Library to 1.2.16 to pick up the latest Windows binaries built with APR 1.6.3 and OpenSSL 1.0.2m

Full details of these changes, and all the other changes, are available in the Tomcat 8 changelog.

Note: End of life date for Apache Tomcat 8.0.x is announced. Read more...

Download

The Apache Tomcat Project is proud to announce the release of version 8.5.24 of Apache Tomcat. Apache Tomcat 8.5.x is intended to replace 8.0.x and includes new features pulled forward from Tomcat 9.0.x. The minimum Java version and implemented specification versions remain unchanged. The notable changes compared to 8.5.23 include:

• Java 9 is fully supported
• Fixed a number of HTTP/2 issues
• Fixed numerous JASPIC issues with patches from Lazar
• Updated the packaged version of the Tomcat Native Library to 1.2.16 to pick up the latest Windows binaries built with APR 1.6.3 and OpenSSL 1.0.2m

Full details of these changes, and all the other changes, are available in the Tomcat 8.5 changelog.

Download

The Apache Tomcat Project is proud to announce the release of version 9.0.2 (beta) of Apache Tomcat. The notable changes compared to 9.0.1 include:

• Java 9 is fully supported
• Fixed a number of HTTP/2 issues
• Fixed numerous JASPIC issues with patches from Lazar
• Updated the packaged version of the Tomcat Native Library to 1.2.16 to pick up the latest Windows binaries built with APR 1.6.3 and OpenSSL 1.0.2m

Full details of these changes, and all the other changes, are available in the Tomcat 9 changelog.

Download

The Apache Tomcat Project is proud to announce the release of version 1.2.16 of Tomcat Native. The notable changes since 1.2.14 include:

• Windows binaries built with APR 1.6.3 and OpenSSL 1.0.2m.
• Fixes for OCSP support.

Note that users should now be using 1.2.x in preference to 1.1.x.

Download | ChangeLog for 1.2.16

The Apache Tomcat Project is proud to announce the release of version 7.0.82 of Apache Tomcat. This release contains a number of bug fixes and improvements compared to version 7.0.81. The notable changes compared to 7.0.81 include:

• A fix for CVE-2017-12617.
• Update the packaged version of the Tomcat Native Library to 1.2.14 to pick up the latest Windows binaries built with APR 1.6.2 and OpenSSL 1.0.2l.

Full details of these changes, and all the other changes, are available in the Tomcat 7 changelog.

Download

The Apache Tomcat Project is proud to announce the release of version 8.0.47 of Apache Tomcat. Apache Tomcat 8.0.47 includes fixes for issues identified in 8.0.46 as well as other enhancements and changes. The notable changes compared to 8.0.46 include:

• A fix for CVE-2017-12617.
• Add ExtractingRoot, a new WebResourceRoot implementation that extracts JARs to the work directory for improved performance when deploying packed WAR files.
• Update the packaged version of the Tomcat Native Library to 1.2.14 to pick up the latest Windows binaries built with APR 1.6.2 and OpenSSL 1.0.2l.

Full details of these changes, and all the other changes, are available in the Tomcat 8 changelog.

Note: End of life date for Apache Tomcat 8.0.x is announced. Read more...

Download

The Apache Tomcat Project is proud to announce the release of version 8.5.23 of Apache Tomcat. Apache Tomcat 8.5.x is intended to replace 8.0.x and includes new features pulled forward from Tomcat 9.0.x. The minimum Java version and implemented specification versions remain unchanged. The notable changes compared to 8.5.20 include:

• A fix for CVE-2017-12617.
• Stricter validation of the HTTP Host header.
• Add ExtractingRoot, a new WebResourceRoot implementation that extracts JARs to the work directory for improved performance when deploying packed WAR files.
• Added support for the OpenSSL SSL_CONF API. To support this the minimum required Tomcat Native version is 1.2.14.

Full details of these changes, and all the other changes, are available in the Tomcat 8.5 changelog.

Download

The Apache Tomcat Project is proud to announce the release of version 9.0.1 (beta) of Apache Tomcat. The notable changes compared to 9.0.0.M26 include:

• This is the first release after the publication of the Servlet 4.0 specification and fully implements the new specification.
• A fix for CVE-2017-12617.
• The ability to update the TLS configuration without restarting Tomcat or the TLS connector.
• Stricter validation of the HTTP Host header.

Full details of these changes, and all the other changes, are available in the Tomcat 9 changelog.

Download

The Apache Tomcat Project is proud to announce the release of version 1.2.14 of Tomcat Native. The notable changes since 1.2.12 include:

• Windows binaries built with APR 1.6.2 and OpenSSL 1.0.2l.
• Support for the SSL_CONF_cmd API.
• Support for specifying trusted certificates in raw form.

Note that users should now be using 1.2.x in preference to 1.1.x.

Download | ChangeLog for 1.2.14

The Apache Tomcat Project is proud to announce the release of version 7.0.81 of Apache Tomcat. This release contains a number of bug fixes and improvements compared to version 7.0.79. The notable changes compared to 7.0.79 include:

• Add the ability to set the defaults used by the Windows installer from a configuration file. Patch provided by Sandra Madden.
• Add support to the WebSocket client for following redirects when attempting to establish a WebSocket connection. Patch provided by J Fernandez.

Full details of these changes, and all the other changes, are available in the Tomcat 7 changelog.

Download

The Apache Tomcat Project is proud to announce the release of version 8.0.46 of Apache Tomcat. Apache Tomcat 8.0.46 includes fixes for issues identified in 8.0.45 as well as other enhancements and changes. The notable changes compared to 8.0.45 include:

• Add the ability to set the defaults used by the Windows installer from a configuration file. Patch provided by Sandra Madden.
• Add support to the WebSocket client for following redirects when attempting to establish a WebSocket connection. Patch provided by J Fernandez.

Full details of these changes, and all the other changes, are available in the Tomcat 8 changelog.

Note: End of life date for Apache Tomcat 8.0.x is announced. Read more...

Download

The Apache Tomcat Project is proud to announce the release of version 8.5.20 of Apache Tomcat. Apache Tomcat 8.5.x is intended to replace 8.0.x and includes new features pulled forward from Tomcat 9.0.x. The minimum Java version and implemented specification versions remain unchanged. The notable changes compared to 8.5.16 include:

• Add the ability to set the defaults used by the Windows installer from a configuration file. Patch provided by Sandra Madden.
• Add support to the WebSocket client for following redirects when attempting to establish a WebSocket connection. Patch provided by J Fernandez.
• Add support for the %X pattern in the AccessLogValve that reports the connection status at the end of the request. Patch provided by Zemian Deng.

Full details of these changes, and all the other changes, are available in the Tomcat 8.5 changelog.

Download

The Apache Tomcat Project is proud to announce the release of version 9.0.0.M26 (alpha) of Apache Tomcat. The is a milestone release of the 9.0.x branch and has been made to provide users with early access to the new features in Apache Tomcat 9.0.x so that they may provide feedback. The notable changes compared to 9.0.0.M22 include:

• When generating JSP runtime error messages that quote the relevant JSP source code, switch from using the results of the JSP page parsing process to using the JSR 045 source map data to identify the correct part of the JSP source from the stack trace. This significantly reduces the memory footprint of Jasper in development mode, provides a small performance improvement for error page generation and enables source quotes to continue to be provided after a Tomcat restart.
• Add LoadBalancerDrainingValve, a Valve designed to reduce the amount of time required for a node to drain its authenticated users
• Improve the Default Servlet's handling of static files when the file encoding is not compatible with the required response encoding.
• Add support for a Tomcat specific deployment descriptor, /WEB-INF/tomcat-web.xml. This descriptor has an identical format to /WEB-INF/web.xml. The Tomcat descriptor takes precedence over any settings in conf/web.xml but does not take precedence over any settings in /WEB-INF/web.xml.
• Add ExtractingRoot, a new WebResourceRoot implementation that extracts JARs to the work directory for improved performance when deploying packed WAR files.
• Add support to the WebSocket client for following redirects when attempting to establish a WebSocket connection. Patch provided by J Fernandez.
• Add support for the %X pattern in the AccessLogValve that reports the connection status at the end of the request. Patch provided by Zemian Deng.

Full details of these changes, and all the other changes, are available in the Tomcat 9 changelog.

Download

The Apache Tomcat Project is proud to announce the release of version 8.0.45 of Apache Tomcat. Apache Tomcat 8.0.45 includes fixes for issues identified in 8.0.44 as well as other enhancements and changes. The notable changes compared to 8.0.44 include:

• Add a new JULI FileHandler configuration for specifying the maximum number of days to keep the log files. By default the log files will be kept indefinitely.
• Improvements to enable the Manager and HostManager to work in the default configuration when working under a security manager.

Full details of these changes, and all the other changes, are available in the Tomcat 8 changelog.

Note: End of life date for Apache Tomcat 8.0.x is announced. Read more...

Download

The Apache Tomcat Project is proud to announce the release of version 7.0.79 of Apache Tomcat. This release contains a number of bug fixes and improvements compared to version 7.0.78. The notable changes compared to 7.0.78 include:

• Add a new JULI FileHandler configuration for specifying the maximum number of days to keep the log files. By default the log files will be kept indefinitely.
• Improvements to enable the Manager and HostManager to work in the default configuration when working under a security manager.

Full details of these changes, and all the other changes, are available in the Tomcat 7 changelog.

Download

The Apache Tomcat Project is proud to announce the release of version 8.5.16 of Apache Tomcat. Apache Tomcat 8.5.x is intended to replace 8.0.x and includes new features pulled forward from Tomcat 9.0.x. The minimum Java version and implemented specification versions remain unchanged. The notable changes compared to 8.5.15 include:

• Add a new JULI FileHandler configuration for specifying the maximum number of days to keep the log files. By default the log files will be kept indefinitely.
• Improvements to enable the Manager and HostManager to work in the default configuration when working under a security manager.
• Introduce new API o.a.tomcat.websocket.WsSession#suspend / o.a.tomcat.websocket.WsSession#resume that can be used to suspend / resume reading of the incoming messages.

Full details of these changes, and all the other changes, are available in the Tomcat 8.5 changelog.

Download

The Apache Tomcat Project is proud to announce the release of version 9.0.0.M22 (alpha) of Apache Tomcat. The is a milestone release of the 9.0.x branch and has been made to provide users with early access to the new features in Apache Tomcat 9.0.x so that they may provide feedback. The notable changes compared to 9.0.0.M21 include:

• Add a new JULI FileHandler configuration for specifying the maximum number of days to keep the log files. By default the log files will be kept for 90 days.
• Update the Servlet 4.0 implementation to add support for setting trailer fields for HTTP responses.
• When pre-compiling with JspC, report all compilation errors rather than stopping after the first error.

Full details of these changes, and all the other changes, are available in the Tomcat 9 changelog.

Download

The Apache Tomcat Project is proud to announce the release of version 8.0.44 of Apache Tomcat. Apache Tomcat 8.0.44 includes fixes for issues identified in 8.0.43 as well as other enhancements and changes. The notable changes compared to 8.0.43 include:

• Various improvements to the handling of static custom error pages
• Update to Eclipse JDT Compiler 4.6.3
• Review those places where Tomcat re-encodes a URI or URI component and ensure that the correct encoding is consistently applied.

Full details of these changes, and all the other changes, are available in the Tomcat 8 changelog.

Download

The Apache Tomcat Project is proud to announce the release of version 7.0.78 of Apache Tomcat. This release contains a number of bug fixes and improvements compared to version 7.0.77. The notable changes compared to 7.0.77 include:

• Various improvements to the handling of static custom error pages
• Review those places where Tomcat re-encodes a URI or URI component and ensure that the correct encoding is consistently applied.

Full details of these changes, and all the other changes, are available in the Tomcat 7 changelog.

Download

The Apache Tomcat Project is proud to announce the release of version 8.5.15 of Apache Tomcat. Apache Tomcat 8.5.x is intended to replace 8.0.x and includes new features pulled forward from Tomcat 9.0.x. The minimum Java version and implemented specification versions remain unchanged. The notable changes compared to 8.5.14 include:

• Various improvements to the handling of static custom error pages
• Update to Eclipse JDT Compiler 4.6.3
• Review those places where Tomcat re-encodes a URI or URI component and ensure that the correct encoding is consistently applied.

Full details of these changes, and all the other changes, are available in the Tomcat 8.5 changelog.

Download

The Apache Tomcat Project is proud to announce the release of version 9.0.0.M21 (alpha) of Apache Tomcat. The is a milestone release of the 9.0.x branch and has been made to provide users with early access to the new features in Apache Tomcat 9.0.x so that they may provide feedback. The notable changes compared to 9.0.0.M20 include:

• Update the default URIEncoding for a Connector to UTF-8 as required by the Servlet 4.0 specification.
• Various improvements to the handling of static custom error pages
• Update to Eclipse JDT Compiler 4.6.3

Full details of these changes, and all the other changes, are available in the Tomcat 9 changelog.

Download

The Apache Tomcat Project is proud to announce the release of version 8.5.14 of Apache Tomcat. Apache Tomcat 8.5.x is intended to replace 8.0.x and includes new features pulled forward from Tomcat 9.0.x. The minimum Java version and implemented specification versions remain unchanged. The notable changes compared to 8.5.13 include:

• Correct a regression that broke JMX operations (including the Manager web application) if the operation took parameters
• Calls to isReady() no longer throw exceptions after timeouts for async servlets

Full details of these changes, and all the other changes, are available in the Tomcat 8.5 changelog.

Download

The Apache Tomcat Project is proud to announce the release of version 9.0.0.M20 (alpha) of Apache Tomcat. The is a milestone release of the 9.0.x branch and has been made to provide users with early access to the new features in Apache Tomcat 9.0.x so that they may provide feedback. The notable changes compared to 9.0.0.M19 include:

• Correct a regression that broke JMX operations (including the Manager web application) if the operation took parameters
• Add JMX support for Tribes components
• Calls to isReady() no longer throw exceptions after timeouts for async servlets

Full details of these changes, and all the other changes, are available in the Tomcat 9 changelog.

Download

The Apache Tomcat Project is proud to announce the release of version 6.0.53 of Apache Tomcat. This release includes a number of bug fixes over Apache Tomcat 6.0.51.

Note: Apache Tomcat 6.0.x has reached end of life. Read more...

Download | ChangeLog for 6.0.53

The Apache Tomcat Project is proud to announce the release of version 7.0.77 of Apache Tomcat. This release contains a number of bug fixes and improvements compared to version 7.0.76.

Full details of these changes, and all the other changes, are available in the Tomcat 7 changelog.

Download

The Apache Tomcat Project is proud to announce the release of version 8.0.43 of Apache Tomcat. Apache Tomcat 8.0.43 includes fixes for issues identified in 8.0.42 as well as other enhancements and changes.

Full details of these changes, and all the other changes, are available in the Tomcat 8 changelog.

Download

The Apache Tomcat Project is proud to announce the release of version 8.5.13 of Apache Tomcat. Apache Tomcat 8.5.x is intended to replace 8.0.x and includes new features pulled forward from Tomcat 9.0.x. The minimum Java version and implemented specification versions remain unchanged. The notable changes compared to 8.5.12 include:

• Various HTTP/2 improvements
• Fixes for sendfile related issues that could cause subsequent requests to experience IllegalStateExceptions
• Servlet 4.0 early access updates

Full details of these changes, and all the other changes, are available in the Tomcat 8.5 changelog.

Download

The Apache Tomcat Project is proud to announce the release of version 9.0.0.M19 (alpha) of Apache Tomcat. The is a milestone release of the 9.0.x branch and has been made to provide users with early access to the new features in Apache Tomcat 9.0.x so that they may provide feedback. The notable changes compared to 9.0.0.M18 include:

• Various HTTP/2 improvements
• Fixes for sendfile related issues that could cause subsequent requests to experience IllegalStateExceptions
• Servlet 4.0 updates

Full details of these changes, and all the other changes, are available in the Tomcat 9 changelog.

Download

The Apache Tomcat Project is proud to announce the release of version 6.0.51 of Apache Tomcat. This release includes a number of bug fixes over Apache Tomcat 6.0.48. The notable changes since 6.0.48 include:

• Update Tomcat Native to 1.2.12 to pick up the latest Windows binaries built with OpenSSL 1.0.2k
• Add support for varargs in UEL expressions. Includes work by Ben Wolfe
• Update the NSIS Installer used to build the Windows installer to version 3.01.

Note: Apache Tomcat 6.0.x has reached end of life. Read more...

Download | ChangeLog for 6.0.51

The Apache Tomcat Project is proud to announce the release of version 7.0.76 of Apache Tomcat. This release contains a number of bug fixes and improvements compared to version 7.0.75. The notable changes since 7.0.75 include:

• Limited relaxation of the HTTP request line validation
• Support for Java 9 during annotation scanning
• Update Tomcat Native to 1.2.12 to pick up the latest Windows binaries built with OpenSSL 1.0.2k

Full details of these changes, and all the other changes, are available in the Tomcat 7 changelog.

Download

The Apache Tomcat Project is proud to announce the release of version 8.0.42 of Apache Tomcat. Apache Tomcat 8.0.42 includes fixes for issues identified in 8.0.41 as well as other enhancements and changes. The notable changes since 8.0.41 include:

• Limited relaxation of the HTTP request line validation
• Support for Java 9 during annotation scanning
• Update Tomcat Native to 1.2.12 to pick up the latest Windows binaries built with OpenSSL 1.0.2k

Full details of these changes, and all the other changes, are available in the Tomcat 8 changelog.

Download

The Apache Tomcat Project is proud to announce the release of version 8.5.12 of Apache Tomcat. Apache Tomcat 8.5.x is intended to replace 8.0.x and includes new features pulled forward from Tomcat 9.0.x. The minimum Java version and implemented specification versions remain unchanged. The notable changes compared to 8.5.11 include:

• Updates to the early access version of the Servlet 4.0 API to align it with the most recent discussions in the Servlet EG
• Support for Java 9 during annotation scanning
• Update Tomcat Native to 1.2.12 to pick up the latest Windows binaries built with OpenSSL 1.0.2k

Full details of these changes, and all the other changes, are available in the Tomcat 8.5 changelog.

Download

The Apache Tomcat Project is proud to announce the release of version 9.0.0.M18 (alpha) of Apache Tomcat. The is a milestone release of the 9.0.x branch and has been made to provide users with early access to the new features in Apache Tomcat 9.0.x so that they may provide feedback. The notable changes compared to 9.0.0.M17 include:

• Updates to the early access version of the Servlet 4.0 API to align it with the most recent discussions in the Servlet EG
• Support for Java 9 during annotation scanning
• Enable ALPN (and hence HTTP/2) for NIO and NIO2 connectors when using JSSE for TLS on Java 9
• Update Tomcat Native to 1.2.12 to pick up the latest Windows binaries built with OpenSSL 1.0.2k

Full details of these changes, and all the other changes, are available in the Tomcat 9 changelog.

Download

The Apache Tomcat Project is proud to announce the release of version 1.2.12 of Tomcat Native. The notable changes since 1.2.10 include:

• Windows binaries built with APR 1.5.2 and OpenSSL 1.0.2k.
• Better documentation for building on Windows including with FIPS enabled OpenSSL.

Note that users should now be using 1.2.x in preference to 1.1.x.

Download | ChangeLog for 1.2.12

The Apache Tomcat Project is proud to announce the release of version 7.0.75 of Apache Tomcat. This release contains a number of bug fixes and improvements compared to version 7.0.73. The notable changes since 7.0.73 include:

• Add support for varargs in UEL expressions.
• Ensure that the endpoint is able to unlock the acceptor thread during shutdown if the endpoint is configured to listen to any local address of a specific type such as 0.0.0.0 or ::.

Full details of these changes, and all the other changes, are available in the Tomcat 7 changelog.

Download

The Apache Tomcat Project is proud to announce the release of version 8.0.41 of Apache Tomcat. Apache Tomcat 8.0.41 includes fixes for issues identified in 8.0.39 as well as other enhancements and changes. The notable changes since 8.0.39 include:

• Improve handling of varargs in UEL expressions.
• Ensure that the endpoint is able to unlock the acceptor thread during shutdown if the endpoint is configured to listen to any local address of a specific type such as 0.0.0.0 or ::.

Full details of these changes, and all the other changes, are available in the Tomcat 8 changelog.

Download

The Apache Tomcat Project is proud to announce the release of version 8.5.11 of Apache Tomcat. Apache Tomcat 8.5.x is intended to replace 8.0.x and includes new features pulled forward from Tomcat 9.0.x. The minimum Java version and implemented specification versions remain unchanged. The notable changes compared to 8.5.9 include:

• HTTP/2 fixes and improvements
• Improve the logic that selects an address to use to unlock the Acceptor to take account of platforms what do not listen on all local addresses when configured with an address of 0.0.0.0 or ::
• Fix a bug in APR/native socket close handling that resulted in unexpected errors for upgraded connections

Full details of these changes, and all the other changes, are available in the Tomcat 8.5 changelog.

Download

The Apache Tomcat Project is proud to announce the release of version 9.0.0.M17 (alpha) of Apache Tomcat. The is a milestone release of the 9.0.x branch and has been made to provide users with early access to the new features in Apache Tomcat 9.0.x so that they may provide feedback. The notable changes compared to 9.0.0.M15 include:

• HTTP/2 fixes and improvements
• Improve the logic that selects an address to use to unlock the Acceptor to take account of platforms what do not listen on all local addresses when configured with an address of 0.0.0.0 or ::
• Fix a bug in APR/native socket close handling that resulted in unexpected errors for upgraded connections

Full details of these changes, and all the other changes, are available in the Tomcat 9 changelog.

Download