Added: tomcat/site/trunk/docs/oldnews-2023.html URL: http://svn.apache.org/viewvc/tomcat/site/trunk/docs/oldnews-2023.html?rev=1915868&view=auto ============================================================================== --- tomcat/site/trunk/docs/oldnews-2023.html (added) +++ tomcat/site/trunk/docs/oldnews-2023.html Mon Feb 19 09:00:21 2024 @@ -0,0 +1,1717 @@ +<!DOCTYPE html SYSTEM "about:legacy-compat"> +<html lang="en"><head><META http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1"><link href="res/css/tomcat.css" rel="stylesheet" type="text/css"><link href="res/css/fonts/fonts.css" rel="stylesheet" type="text/css"><title>Apache Tomcat® - Old news!</title><meta name="author" content="Apache Tomcat Project"><script src="https://www.apachecon.com/event-images/snippet.js";></script></head><body><div id="wrapper"><header id="header"><div class="clearfix"><div class="menu-toggler pull-left" tabindex="1"><div class="hamburger"></div></div><a href="http://tomcat.apache.org/";><img class="tomcat-logo pull-left noPrint" alt="Tomcat Home" src="res/images/tomcat.png"></a><h1 class="pull-left">Apache Tomcat<sup>®</sup></h1><div class="asf-logos pull-right"><a href="https://www.apache.org/foundation/contributing.html"; target="_blank" class="pull-left"><img src="https://www.apache.org/images/SupportApache-small.png " class="support-asf" alt="Support Apache"></a><a href="http://www.apache.org/"; target="_blank" class="pull-left"><img src="res/images/asf_logo.svg" class="asf-logo" alt="The Apache Software Foundation"></a></div></div></header><main id="middle"><div><div id="mainLeft"><div id="nav-wrapper"><form action="https://www.google.com/search"; method="get"><div class="searchbox"><input value="tomcat.apache.org" name="sitesearch" type="hidden"><input aria-label="Search text" placeholder="Search…" required="required" name="q" id="query" type="search"><button>GO</button></div></form><div class="asfevents"><a class="acevent" data-format="square" data-width="150"></a></div><nav><div><h2>Apache Tomcat</h2><ul><li><a href="./index.html">Home</a></li><li><a href="./taglibs.html">Taglibs</a></li><li><a href="./maven-plugin.html">Maven Plugin</a></li></ul></div><div><h2>Download</h2><ul><li><a href="./whichversion.html">Which version?</a></li><li><a href="https://tomcat.apache.org/download-11.c gi">Tomcat 11 (alpha)</a></li><li><a href="https://tomcat.apache.org/download-10.cgi";>Tomcat 10</a></li><li><a href="https://tomcat.apache.org/download-90.cgi";>Tomcat 9</a></li><li><a href="https://tomcat.apache.org/download-80.cgi";>Tomcat 8</a></li><li><a href="https://tomcat.apache.org/download-migration.cgi";>Tomcat Migration Tool for Jakarta EE</a></li><li><a href="https://tomcat.apache.org/download-connectors.cgi";>Tomcat Connectors</a></li><li><a href="https://tomcat.apache.org/download-native.cgi";>Tomcat Native</a></li><li><a href="https://tomcat.apache.org/download-taglibs.cgi";>Taglibs</a></li><li><a href="https://archive.apache.org/dist/tomcat/";>Archives</a></li></ul></div><div><h2>Documentation</h2><ul><li><a href="./tomcat-11.0-doc/index.html">Tomcat 11.0 (alpha)</a></li><li><a href="./tomcat-10.1-doc/index.html">Tomcat 10.1</a></li><li><a href="./tomcat-9.0-doc/index.html">Tomcat 9.0</a></li><li><a href="./tomcat-8.5-doc/index.html">Tomcat 8.5</a></li><li><a href="./upgrad ing.html">Upgrading</a></li><li><a href="./connectors-doc/index.html">Tomcat Connectors</a></li><li><a href="./native-doc/index.html">Tomcat Native 2</a></li><li><a href="./native-1.3-doc/index.html">Tomcat Native 1.3</a></li><li><a href="./native-1.2-doc/index.html">Tomcat Native 1.2</a></li><li><a href="https://cwiki.apache.org/confluence/display/TOMCAT";>Wiki</a></li><li><a href="./migration.html">Migration Guide</a></li><li><a href="./presentations.html">Presentations</a></li><li><a href="https://cwiki.apache.org/confluence/x/Bi8lBg";>Specifications</a></li></ul></div><div><h2>Problems?</h2><ul><li><a href="./security.html">Security Reports</a></li><li><a href="./findhelp.html">Find help</a></li><li><a href="https://cwiki.apache.org/confluence/display/TOMCAT/FAQ";>FAQ</a></li><li><a href="./lists.html">Mailing Lists</a></li><li><a href="./bugreport.html">Bug Database</a></li><li><a href="./irc.html">IRC</a></li></ul></div><div><h2>Get Involved</h2><ul><li><a href="./getinvolved.htm l">Overview</a></li><li><a href="./source.html">Source code</a></li><li><a href="./ci.html">Buildbot</a></li><li><a href="https://cwiki.apache.org/confluence/x/vIPzBQ";>Translations</a></li><li><a href="./tools.html">Tools</a></li></ul></div><div><h2>Media</h2><ul><li><a href="https://twitter.com/theapachetomcat";>Twitter</a></li><li><a href="https://www.youtube.com/c/ApacheTomcatOfficial";>YouTube</a></li><li><a href="https://blogs.apache.org/tomcat/";>Blog</a></li></ul></div><div><h2>Misc</h2><ul><li><a href="./whoweare.html">Who We Are</a></li><li><a href="https://www.redbubble.com/people/comdev/works/30885254-apache-tomcat";>Swag</a></li><li><a href="./heritage.html">Heritage</a></li><li><a href="http://www.apache.org";>Apache Home</a></li><li><a href="./resources.html">Resources</a></li><li><a href="./contact.html">Contact</a></li><li><a href="./legal.html">Legal</a></li><li><a href="https://privacy.apache.org/policies/privacy-policy-public.html";>Privacy</a></li><li><a href="https:// www.apache.org/foundation/contributing.html">Support Apache</a></li><li><a href="https://www.apache.org/foundation/sponsorship.html";>Sponsorship</a></li><li><a href="http://www.apache.org/foundation/thanks.html";>Thanks</a></li><li><a href="http://www.apache.org/licenses/";>License</a></li></ul></div></nav></div></div><div id="mainRight"><div id="content"><h2 style="display: none;">Content</h2><h3 id="Older_news">Older news</h3><div class="text"> +<p>Announcements from previous years can be found here:</p> +<ul> + <li><a href="oldnews.html">year 2024</a></li> + <li>year 2023</li> + <li><a href="oldnews-2022.html">year 2022</a></li> + <li><a href="oldnews-2021.html">year 2021</a></li> + <li><a href="oldnews-2020.html">year 2020</a></li> + <li><a href="oldnews-2019.html">year 2019</a></li> + <li><a href="oldnews-2018.html">year 2018</a></li> + <li><a href="oldnews-2017.html">year 2017</a></li> + <li><a href="oldnews-2016.html">year 2016</a></li> + <li><a href="oldnews-2015.html">year 2015</a></li> + <li><a href="oldnews-2014.html">year 2014</a></li> + <li><a href="oldnews-2013.html">year 2013</a></li> + <li><a href="oldnews-2012.html">year 2012</a></li> + <li><a href="oldnews-2011.html">year 2011</a></li> + <li><a href="oldnews-2010.html">year 2010</a></li> +</ul> +</div><h3 id="Tomcat_9.0.84_Released"><span class="pull-right">2023-12-12</span> Tomcat 9.0.84 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 9.0.84 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 8 platform. The notable changes compared to 9.0.83 include:</p> +<ul> + <li>Background processes for a Container no longer execute while lifecycle + operations are in progress for that Container.</li> + + <li>Correct unintended escaping of XML in some WebDAV responses.</li> + + <li>Use a 408 status code if a read timeout occurs during HTTP + request processing instead of an HTTP 400 status.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-9.0-doc/changelog.html#Tomcat_9.0.84_(remm)">Tomcat 9 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-90.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_11.0.0-M15_Released"><span class="pull-right">2023-12-12</span> Tomcat 11.0.0-M15 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 11.0.0-M15 +(alpha) of Apache Tomcat. This release is a milestone release and is targeted at +Jakarta EE 11.</p> +<p>Users of Tomcat 10 onwards should be aware that, as a result of the move from +Java EE to Jakarta EE as part of the transfer of Java EE to the Eclipse +Foundation, the primary package for all implemented APIs has changed from +<code>javax.*</code> to <code>jakarta.*</code>. This will almost certainly +require code changes to enable applications to migrate from Tomcat 9 and earlier +to Tomcat 10 and later. A +<a href="https://github.com/apache/tomcat-jakartaee-migration";>migration +tool</a> is available to aid this process.</p> +<p>The notable changes in this release are:</p> +<ul> +<li>Background processes for a Container no longer execute while lifecycle + operations are in progress for that Container.</li> +<li>Align with the latest additions and changes from the Servlet 6.1 + specification.</li> +<li>Update the sample.war included in the documentation to use the Jakarta + EE APIs.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-11.0-doc/changelog.html#Tomcat_11.0.0-M15_(markt)">Tomcat 11 +<strong>(alpha)</strong> changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-11.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_8.5.97_Released"><span class="pull-right">2023-12-12</span> Tomcat 8.5.97 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 8.5.97 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 7 platform. The notable changes compared to 8.5.96 include: +</p> +<ul> + <li>Background processes for a Container no longer execute while lifecycle + operations are in progress for that Container.</li> + + <li>Correct unintended escaping of XML in some WebDAV responses.</li> + + <li>Use a 408 status code if a read timeout occurs during HTTP + request processing instead of an HTTP 400 status.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-8.5-doc/changelog.html#Tomcat_8.5.97_(schultz)">Tomcat 8 +changelog</a>. +</p> + +<p style="font-weight:bold">Please note that Apache Tomcat 8.5.x will +reach <a href="https://tomcat.apache.org/tomcat-85-eol.html";>End-of-life</a> +(EOL) on 31 March 2024.</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-80.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_10.1.17_Released"><span class="pull-right">2023-12-12</span> Tomcat 10.1.17 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 10.1.17 +of Apache Tomcat. This release implements specifications that are part of the +Jakarta EE 10 platform.</p> +<p>Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 +without changes. Java EE based applications designed for Tomcat 9 and earlier +may be placed in the <code>$CATALINA_BASE/webapps-javaee</code> directory and +Tomcat will automatically convert them to Jakarta EE and copy them to the +webapps directory. This conversion is performed using the +<a href="https://github.com/apache/tomcat-jakartaee-migration";>Apache Tomcat +migration tool for Jakarta EE tool</a> which is also available as a separate +<a href="https://tomcat.apache.org/download-migration.cgi";>download</a> for off-line use.</p> +<p>The notable changes in this release are:</p> +<ul> + <li>Background processes for a Container no longer execute while lifecycle + operations are in progress for that Container.</li> + + <li>Correct unintended escaping of XML in some WebDAV responses.</li> + + <li>Use a 408 status code if a read timeout occurs during HTTP + request processing instead of an HTTP 400 status.</li> +</ul> + +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-10.1-doc/changelog.html#Tomcat_10.1.17_(schultz)">Tomcat 10.1 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-10.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_9.0.83_Released"><span class="pull-right">2023-11-15</span> Tomcat 9.0.83 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 9.0.83 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 8 platform. The notable changes compared to 9.0.82 include:</p> +<ul> + <li>Fix reloading TLS configuration could cause the Connector to + refuse new connections or the JVM to crash.</li> + <li>Ensure that an IOException during the reading of the request + triggers always error handling, regardless of whether the + application swallows the exception.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-9.0-doc/changelog.html#Tomcat_9.0.83_(remm)">Tomcat 9 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-90.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_10.1.16_Released"><span class="pull-right">2023-11-14</span> Tomcat 10.1.16 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 10.1.16 +of Apache Tomcat. This release implements specifications that are part of the +Jakarta EE 10 platform.</p> +<p>Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 +without changes. Java EE based applications designed for Tomcat 9 and earlier +may be placed in the <code>$CATALINA_BASE/webapps-javaee</code> directory and +Tomcat will automatically convert them to Jakarta EE and copy them to the +webapps directory. This conversion is performed using the +<a href="https://github.com/apache/tomcat-jakartaee-migration";>Apache Tomcat +migration tool for Jakarta EE tool</a> which is also available as a separate +<a href="https://tomcat.apache.org/download-migration.cgi";>download</a> for off-line use.</p> +<p>The notable changes in this release are:</p> +<ul> + <li>Fix reloading TLS configuration could cause the Connector to + refuse new connections or the JVM to crash.</li> + + <li>Ensure that an IOException during the reading of the request + triggers always error handling, regardless of whether the + application swallows the exception.</li> +</ul> + +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-10.1-doc/changelog.html#Tomcat_10.1.16_(schultz)">Tomcat 10.1 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-10.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_8.5.96_Released"><span class="pull-right">2023-11-13</span> Tomcat 8.5.96 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 8.5.96 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 7 platform. The notable changes compared to 8.5.95 include: +</p> +<ul> + <li>Fix reloading TLS configuration could cause the Connector to + refuse new connections or the JVM to crash.</li> + + <li>Ensure that an IOException during the reading of the request + always triggers error handling, regardless of whether the + application swallows the exception.</li> + + <li>The status manager servlet can now output statistics as json.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-8.5-doc/changelog.html#Tomcat_8.5.96_(schultz)">Tomcat 8 +changelog</a>. +</p> + +<p style="font-weight:bold">Please note that Apache Tomcat 8.5.x will +reach <a href="https://tomcat.apache.org/tomcat-85-eol.html";>End-of-life</a> +(EOL) on 31 March 2024.</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-80.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_11.0.0-M14_Released"><span class="pull-right">2023-11-15</span> Tomcat 11.0.0-M14 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 11.0.0-M14 +(alpha) of Apache Tomcat. This release is a milestone release and is targeted at +Jakarta EE 11.</p> +<p>Users of Tomcat 10 onwards should be aware that, as a result of the move from +Java EE to Jakarta EE as part of the transfer of Java EE to the Eclipse +Foundation, the primary package for all implemented APIs has changed from +<code>javax.*</code> to <code>jakarta.*</code>. This will almost certainly +require code changes to enable applications to migrate from Tomcat 9 and earlier +to Tomcat 10 and later. A +<a href="https://github.com/apache/tomcat-jakartaee-migration";>migration +tool</a> is available to aid this process.</p> +<p>The notable changes in this release are:</p> +<ul> +<li>Add OpenSSL integration using the FFM API rather than Tomcat Native. OpenSSL + support may be enabled by adding the + <code>org.apache.catalina.core.OpenSSLLifecycleListener</code> listener on + the Server element when using Java 22 or later.</li> +<li>Fix reloading TLS configuration could cause the Connector to refuse new + connections or the JVM to crash.</li> +<li>Ensure that an IOException during the reading of the request triggers always + error handling, regardless of whether the application swallows the + exception.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-11.0-doc/changelog.html#Tomcat_11.0.0-M12_(markt)">Tomcat 11 +<strong>(alpha)</strong> changelog</a>. +</p> + +<p><strong>Note:</strong> There are known regressions: +with jdbc-pool (see bug <a href="https://bz.apache.org/bugzilla/show_bug.cgi?id=67664";>67664</a>) and +with Connector configurations when <code>compression</code> is enabled +(see bug <a href="https://bz.apache.org/bugzilla/show_bug.cgi?id=67670";>67670</a>). They will be fixed in the next release. +</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-11.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_9.0.82_Released"><span class="pull-right">2023-10-13</span> Tomcat 9.0.82 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 9.0.82 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 8 platform. The notable changes compared to 9.0.81 include:</p> +<ul> + <li>Correct a regression in 9.0.81 that broke the Tomcat JBDC + connection pool.</li> + <li>Correct a regression in 9.0.81 that broke HTTP compression.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-9.0-doc/changelog.html#Tomcat_9.0.82_(remm)">Tomcat 9 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-90.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_9.0.81_Released"><span class="pull-right">2023-10-10</span> Tomcat 9.0.81 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 9.0.81 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 8 platform. The notable changes compared to 9.0.81 include:</p> +<ul> + <li>Update Tomcat Native to 1.2.39 to pick up Windows binaries built with + OpenSSL 3.0.11.</li> + <li>Provide a lifecycle listener that will automatically reload TLS + configurations a set time before the certificate is due to expire. + This is intended to be used with third-party tools that regularly + renew TLS certificates.</li> + <li>Improve performance of EL expressions in JSPs that use implicit + objects.</li> + <li>Several improvements to thread safety and recycling cleanup.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-9.0-doc/changelog.html#Tomcat_9.0.81_(remm)">Tomcat 9 +changelog</a>. +</p> + +<p><strong>Note:</strong> There are known regressions: +with jdbc-pool (see bug <a href="https://bz.apache.org/bugzilla/show_bug.cgi?id=67664";>67664</a>) and +with Connector configurations when <code>compression</code> is enabled +(see bug <a href="https://bz.apache.org/bugzilla/show_bug.cgi?id=67670";>67670</a>). They will be fixed in the next release. +</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-90.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_10.1.15_Released"><span class="pull-right">2023-10-16</span> Tomcat 10.1.15 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 10.1.15 +of Apache Tomcat. This release implements specifications that are part of the +Jakarta EE 10 platform.</p> +<p>Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 +without changes. Java EE based applications designed for Tomcat 9 and earlier +may be placed in the <code>$CATALINA_BASE/webapps-javaee</code> directory and +Tomcat will automatically convert them to Jakarta EE and copy them to the +webapps directory. This conversion is performed using the +<a href="https://github.com/apache/tomcat-jakartaee-migration";>Apache Tomcat +migration tool for Jakarta EE tool</a> which is also available as a separate +<a href="https://tomcat.apache.org/download-migration.cgi";>download</a> for off-line use.</p> +<p>The notable changes in this release are:</p> +<ul> + <li>Correct a regression in 10.1.14 that broke the Tomcat JBDC + connection pool</li> + + <li>Correct a regression in 10.1.14 that broke HTTP compression</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-10.1-doc/changelog.html#Tomcat_10.1.15_(schultz)">Tomcat 10.1 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-10.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_8.5.95_Released"><span class="pull-right">2023-10-16</span> Tomcat 8.5.95 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 8.5.95 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 7 platform. The notable changes compared to 8.5.94 include: +</p> +<ul> + <li>Correct a regression in 8.5.94 that broke the Tomcat JBDC + connection pool</li> + + <li>Correct a regression in 8.5.94 that broke HTTP compression</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-8.5-doc/changelog.html#Tomcat_8.5.94_(schultz)">Tomcat 8 +changelog</a>. +</p> + +<p style="font-weight:bold">Please note that Apache Tomcat 8.5.x will +reach <a href="https://tomcat.apache.org/tomcat-85-eol.html";>End-of-life</a> +(EOL) on 31 March 2024.</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-80.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_11.0.0-M13_Released"><span class="pull-right">2023-10-14</span> Tomcat 11.0.0-M13 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 11.0.0-M13 +(alpha) of Apache Tomcat. This release is a milestone release and is targeted at +Jakarta EE 11.</p> +<p>Users of Tomcat 10 onwards should be aware that, as a result of the move from +Java EE to Jakarta EE as part of the transfer of Java EE to the Eclipse +Foundation, the primary package for all implemented APIs has changed from +<code>javax.*</code> to <code>jakarta.*</code>. This will almost certainly +require code changes to enable applications to migrate from Tomcat 9 and earlier +to Tomcat 10 and later. A +<a href="https://github.com/apache/tomcat-jakartaee-migration";>migration +tool</a> is available to aid this process.</p> +<p>The notable changes in this release are:</p> +<ul> + <li>Correct a regression in 11.0.0-M12 that broke the Tomcat JBDC + connection pool.</li> + <li>Correct a regression in 11.0.0-M12 that broke HTTP compression.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-11.0-doc/changelog.html#Tomcat_11.0.0-M12_(markt)">Tomcat 11 +<strong>(alpha)</strong> changelog</a>. +</p> + +<p><strong>Note:</strong> There are known regressions: +with jdbc-pool (see bug <a href="https://bz.apache.org/bugzilla/show_bug.cgi?id=67664";>67664</a>) and +with Connector configurations when <code>compression</code> is enabled +(see bug <a href="https://bz.apache.org/bugzilla/show_bug.cgi?id=67670";>67670</a>). They will be fixed in the next release. +</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-11.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_10.1.14_Released"><span class="pull-right">2023-10-10</span> Tomcat 10.1.14 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 10.1.14 +of Apache Tomcat. This release implements specifications that are part of the +Jakarta EE 10 platform.</p> +<p>Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 +without changes. Java EE based applications designed for Tomcat 9 and earlier +may be placed in the <code>$CATALINA_BASE/webapps-javaee</code> directory and +Tomcat will automatically convert them to Jakarta EE and copy them to the +webapps directory. This conversion is performed using the +<a href="https://github.com/apache/tomcat-jakartaee-migration";>Apache Tomcat +migration tool for Jakarta EE tool</a> which is also available as a separate +<a href="https://tomcat.apache.org/download-migration.cgi";>download</a> for off-line use.</p> +<p>The notable changes in this release are:</p> +<ul> + <li>Update Tomcat Native to 1.2.39 to pick up Windows binaries built with + OpenSSL 3.0.11.</li> + + <li>Provide a lifecycle listener that will automatically reload TLS + configurations a set time before the certificate is due to expire. + This is intended to be used with third-party tools that regularly + renew TLS certificates.</li> + + <li>Improve performance of EL expressions in JSPs that use implicit + objects.</li> + + <li>Several improvements to thread safety and recycling cleanup.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-10.1-doc/changelog.html#Tomcat_10.1.14_(schultz)">Tomcat 10.1 +changelog</a>. +</p> + +<p><strong>Note:</strong> There are known regressions: +with jdbc-pool (see bug <a href="https://bz.apache.org/bugzilla/show_bug.cgi?id=67664";>67664</a>) and +with Connector configurations when <code>compression</code> is enabled +(see bug <a href="https://bz.apache.org/bugzilla/show_bug.cgi?id=67670";>67670</a>). They will be fixed in the next release. +</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-10.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_8.5.94_Released"><span class="pull-right">2023-10-10</span> Tomcat 8.5.94 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 8.5.94 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 7 platform. The notable changes compared to 8.5.93 include: +</p> +<ul> + <li>Update Tomcat Native to 1.2.39 to pick up Windows binaries built with + OpenSSL 3.0.11.</li> + + <li>Provide a lifecycle listener that will automatically reload TLS + configurations a set time before the certificate is due to expire. + This is intended to be used with third-party tools that regularly + renew TLS certificates.</li> + + <li>Improve performance of EL expressions in JSPs that use implicit + objects.</li> + + <li>Several improvements to thread safety and recycling cleanup.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-8.5-doc/changelog.html#Tomcat_8.5.95_(schultz)">Tomcat 8 +changelog</a>. +</p> + +<p><strong>Note:</strong> There are known regressions: +with jdbc-pool (see bug <a href="https://bz.apache.org/bugzilla/show_bug.cgi?id=67664";>67664</a>) and +with Connector configurations when <code>compression</code> is enabled +(see bug <a href="https://bz.apache.org/bugzilla/show_bug.cgi?id=67670";>67670</a>). They will be fixed in the next release. +</p> + +<p style="font-weight:bold">Please note that Apache Tomcat 8.5.x will +reach <a href="https://tomcat.apache.org/tomcat-85-eol.html";>End-of-life</a> +(EOL) on 31 March 2024.</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-80.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_9.0.81_Released"><span class="pull-right">2023-10-10</span> Tomcat 9.0.81 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 9.0.81 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 8 platform. The notable changes compared to 9.0.81 include:</p> +<ul> + <li>Update Tomcat Native to 1.2.39 to pick up Windows binaries built with + OpenSSL 3.0.11.</li> + <li>Provide a lifecycle listener that will automatically reload TLS + configurations a set time before the certificate is due to expire. + This is intended to be used with third-party tools that regularly + renew TLS certificates.</li> + <li>Improve performance of EL expressions in JSPs that use implicit + objects.</li> + <li>Several improvements to thread safety and recycling cleanup.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-9.0-doc/changelog.html#Tomcat_9.0.81_(remm)">Tomcat 9 +changelog</a>. +</p> + +<p><strong>Note:</strong> There are known regressions: +with jdbc-pool (see bug <a href="https://bz.apache.org/bugzilla/show_bug.cgi?id=67664";>67664</a>) and +with Connector configurations when <code>compression</code> is enabled +(see bug <a href="https://bz.apache.org/bugzilla/show_bug.cgi?id=67670";>67670</a>). They will be fixed in the next release. +</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-90.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_11.0.0-M12_Released"><span class="pull-right">2023-10-10</span> Tomcat 11.0.0-M12 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 11.0.0-M12 +(alpha) of Apache Tomcat. This release is a milestone release and is targeted at +Jakarta EE 11.</p> +<p>Users of Tomcat 10 onwards should be aware that, as a result of the move from +Java EE to Jakarta EE as part of the transfer of Java EE to the Eclipse +Foundation, the primary package for all implemented APIs has changed from +<code>javax.*</code> to <code>jakarta.*</code>. This will almost certainly +require code changes to enable applications to migrate from Tomcat 9 and earlier +to Tomcat 10 and later. A +<a href="https://github.com/apache/tomcat-jakartaee-migration";>migration +tool</a> is available to aid this process.</p> +<p>The notable changes in this release are:</p> +<ul> +<li>Provide a lifecycle listener that will automatically reload TLS + configurations a set time before the certificate is due to expire. This is + intended to be used with third-party tools that regularly renew TLS + certificates.</li> +<li>Remove support for HTTP/2 server push.</li> +<li>Update Tomcat Native to 2.0.6 to pick up Windows binaries built with OpenSSL + 3.0.11.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-11.0-doc/changelog.html#Tomcat_11.0.0-M12_(markt)">Tomcat 11 +<strong>(alpha)</strong> changelog</a>. +</p> + +<p><strong>Note:</strong> There are known regressions: +with jdbc-pool (see bug <a href="https://bz.apache.org/bugzilla/show_bug.cgi?id=67664";>67664</a>) and +with Connector configurations when <code>compression</code> is enabled +(see bug <a href="https://bz.apache.org/bugzilla/show_bug.cgi?id=67670";>67670</a>). They will be fixed in the next release. +</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-11.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_Native_2.0.6_Released"><span class="pull-right">2023-10-02</span> Tomcat Native 2.0.6 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 2.0.6 of +Tomcat Native. The notable changes compared to 2.0.5 include: +</p> +<ul> +<li>Disable OCSP if the insecure optionalNoCA certificate verification option is + used</li> +<li>The windows binaries in this release have been built with OpenSSL + 3.0.11</li> +</ul> +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-native.cgi";>Download</a> | +<a href="native-doc/miscellaneous/changelog.html">Change log for 2.0.5</a> +</p> +</div><h3 id="Tomcat_10.1.13_Released"><span class="pull-right">2023-08-25</span> Tomcat 10.1.13 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 10.1.13 +of Apache Tomcat. This release implements specifications that are part of the +Jakarta EE 10 platform.</p> +<p>Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 +without changes. Java EE based applications designed for Tomcat 9 and earlier +may be placed in the <code>$CATALINA_BASE/webapps-javaee</code> directory and +Tomcat will automatically convert them to Jakarta EE and copy them to the +webapps directory. This conversion is performed using the +<a href="https://github.com/apache/tomcat-jakartaee-migration";>Apache Tomcat +migration tool for Jakarta EE tool</a> which is also available as a separate +<a href="https://tomcat.apache.org/download-migration.cgi";>download</a> for off-line use.</p> +<p>The notable changes in this release are:</p> +<ul> +<li>If an application or library sets both a non-500 error code and the + <code>jakarta.servlet.error.exception</code> request attribute, use the + provided error code during error page processing rather than assuming an + error code of 500.</li> +<li>Fix for FORM authentication open redirect - CVE-2023-41080</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-10.1-doc/changelog.html#Tomcat_10.1.13_(markt)">Tomcat 10.1 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-10.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_9.0.80_Released"><span class="pull-right">2023-08-25</span> Tomcat 9.0.80 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 9.0.80 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 8 platform. The notable changes compared to 9.0.79 include:</p> +<ul> +<li>If an application or library sets both a non-500 error code and the + <code>jakarta.servlet.error.exception</code> request attribute, use the + provided error code during error page processing rather than assuming an + error code of 500.</li> +<li>Fix for FORM authentication open redirect - CVE-2023-41080</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-9.0-doc/changelog.html#Tomcat_9.0.80_(markt)">Tomcat 9 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-90.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_11.0.0-M11_Released"><span class="pull-right">2023-08-25</span> Tomcat 11.0.0-M11 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 11.0.0-M11 +(alpha) of Apache Tomcat. This release is a milestone release and is targeted at +Jakarta EE 11.</p> +<p>Users of Tomcat 10 onwards should be aware that, as a result of the move from +Java EE to Jakarta EE as part of the transfer of Java EE to the Eclipse +Foundation, the primary package for all implemented APIs has changed from +<code>javax.*</code> to <code>jakarta.*</code>. This will almost certainly +require code changes to enable applications to migrate from Tomcat 9 and earlier +to Tomcat 10 and later. A +<a href="https://github.com/apache/tomcat-jakartaee-migration";>migration +tool</a> is available to aid this process.</p> +<p>The notable changes in this release are:</p> +<ul> +<li>Update the HTTP parameter handling to align with the changes in the Jakarta + Servlet 6.1 API Javadoc for the ServletRequest methods used to obtain + request parameters. Invalid parameters and/or exceeding parameter size + and/or quantity limits now trigger exceptions. As a consequence, the + FailedRequestFilter has been removed.</li> +<li>If an application or library sets both a non-500 error code and the + <code>jakarta.servlet.error.exception</code> request attribute, use the + provided error code during error page processing rather than assuming an + error code of 500.</li> +<li>Fix for FORM authentication open redirect - CVE-2023-41080</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-11.0-doc/changelog.html#Tomcat_11.0.0-M11_(markt)">Tomcat 11 +<strong>(alpha)</strong> changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-11.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_8.5.93_Released"><span class="pull-right">2023-08-25</span> Tomcat 8.5.93 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 8.5.93 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 7 platform. The notable changes compared to 8.5.92 include: +</p> +<ul> +<li>If an application or library sets both a non-500 error code and the + <code>jakarta.servlet.error.exception</code> request attribute, use the + provided error code during error page processing rather than assuming an + error code of 500.</li> +<li>Fix for FORM authentication open redirect - CVE-2023-41080</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-8.5-doc/changelog.html#Tomcat_8.5.93_(markt)">Tomcat 8 +changelog</a>. +</p> + +<p style="font-weight:bold">Please note that Apache Tomcat 8.5.x will +reach <a href="https://tomcat.apache.org/tomcat-85-eol.html";>End-of-life</a> +(EOL) on 31 March 2024.</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-80.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_9.0.79_Released"><span class="pull-right">2023-08-15</span> Tomcat 9.0.79 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 9.0.79 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 8 platform. The notable changes compared to 9.0.78 include:</p> +<ul> +<li>Refactor HTTP/2 implementation to reduce pinning when using virtual + threads.</li> +<li>Pass through ciphers referring to an OpenSSL profile, such as + PROFILE=SYSTEM instead of producing an error trying to parse it.</li> +<li>Update Tomcat Native to 2.0.5.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-9.0-doc/changelog.html#Tomcat_9.0.79_(remm)">Tomcat 9 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-90.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_10.1.12_Released"><span class="pull-right">2023-08-14</span> Tomcat 10.1.12 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 10.1.12 +of Apache Tomcat. This release implements specifications that are part of the +Jakarta EE 10 platform.</p> +<p>Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 +without changes. Java EE based applications designed for Tomcat 9 and earlier +may be placed in the <code>$CATALINA_BASE/webapps-javaee</code> directory and +Tomcat will automatically convert them to Jakarta EE and copy them to the +webapps directory. This conversion is performed using the +<a href="https://github.com/apache/tomcat-jakartaee-migration";>Apache Tomcat +migration tool for Jakarta EE tool</a> which is also available as a separate +<a href="https://tomcat.apache.org/download-migration.cgi";>download</a> for off-line use.</p> +<p>The notable changes in this release are:</p> +<ul> +<li>Refactor HTTP/2 implementation to reduce pinning when using virtual + threads.</li> +<li>Pass through ciphers referring to an OpenSSL profile, such as + PROFILE=SYSTEM instead of producing an error trying to parse it.</li> +<li>Update Tomcat Native to 2.0.5.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-10.1-doc/changelog.html#Tomcat_10.1.12_(markt)">Tomcat 10.1 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-10.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_8.5.92_Released"><span class="pull-right">2023-08-14</span> Tomcat 8.5.92 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 8.5.92 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 7 platform. The notable changes compared to 8.5.91 include: +</p> +<ul> +<li>Refactor HTTP/2 implementation to reduce pinning when using virtual + threads.</li> +<li>Fix a NullPointerException when flushing batched WebSocket messages + with compression enabled using permessage-deflate.</li> +<li>Update Tomcat Native to 1.2.38 to pick up Windows binaries built + with OpenSSL 1.1.1v</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-8.5-doc/changelog.html#Tomcat_8.5.92_(markt)">Tomcat 8 +changelog</a>. +</p> + +<p style="font-weight:bold">Please note that Apache Tomcat 8.5.x will +reach <a href="https://tomcat.apache.org/tomcat-85-eol.html";>End-of-life</a> +(EOL) on 31 March 2024.</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-80.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_11.0.0-M10_Released"><span class="pull-right">2023-08-14</span> Tomcat 11.0.0-M10 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 11.0.0-M10 +(alpha) of Apache Tomcat. This release is a milestone release and is targeted at +Jakarta EE 11.</p> +<p>Users of Tomcat 10 onwards should be aware that, as a result of the move from +Java EE to Jakarta EE as part of the transfer of Java EE to the Eclipse +Foundation, the primary package for all implemented APIs has changed from +<code>javax.*</code> to <code>jakarta.*</code>. This will almost certainly +require code changes to enable applications to migrate from Tomcat 9 and earlier +to Tomcat 10 and later. A +<a href="https://github.com/apache/tomcat-jakartaee-migration";>migration +tool</a> is available to aid this process.</p> +<p>The notable changes in this release are:</p> +<ul> +<li>Refactor HTTP/2 implementation to reduce pinning when using virtual + threads.</li> +<li>Pass through ciphers referring to an OpenSSL profile, such as + PROFILE=SYSTEM instead of producing an error trying to parse it.</li> +<li>Update Tomcat Native to 2.0.5.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-11.0-doc/changelog.html#Tomcat_11.0.0-M10_(markt)">Tomcat 11 +<strong>(alpha)</strong> changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-11.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_Native_2.0.5_Released"><span class="pull-right">2023-08-07</span> Tomcat Native 2.0.5 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 2.0.5 of +Tomcat Native. The notable changes compared to 2.0.4 include: +</p> +<ul> +<li>Align default pass phrase prompt with HTTPd</li> +<li>Update autotools and associated fixes</li> +<li>Fix memory leak in SNI processing</li> +<li>The windows binaries in this release have been built with OpenSSL 3.0.10</li> +</ul> +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-native.cgi";>Download</a> | +<a href="native-doc/miscellaneous/changelog.html">Change log for 2.0.5</a> +</p> +</div><h3 id="Tomcat_Native_1.2.38_Released"><span class="pull-right">2023-08-07</span> Tomcat Native 1.2.38 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 1.2.38 of +Tomcat Native. The notable changes since 1.2.37 include: +</p> +<ul> +<li>Align default pass phrase prompt with HTTPd</li> +<li>Fix memory leak in SNI processing</li> +<li>Windows binaries built with OpenSSL 1.1.1v.</li> +</ul> +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-native.cgi";>Download</a> | +<a href="native-1.2-doc/miscellaneous/changelog.html">Change log for 1.2.38</a> +</p> +</div><h3 id="Tomcat_9.0.78_Released"><span class="pull-right">2023-07-10</span> Tomcat 9.0.78 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 9.0.78 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 8 platform. The notable changes compared to 9.0.76 include:</p> +<ul> +<li>Add ContextNamingInfoListener, a listener which creates context naming + information environment entries.</li> +<li>Add PropertiesRoleMappingListener, a listener which populates the + context's role mapping from a properties file.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-9.0-doc/changelog.html#Tomcat_9.0.78_(remm)">Tomcat 9 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-90.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_10.1.11_Released"><span class="pull-right">2023-07-10</span> Tomcat 10.1.11 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 10.1.11 +of Apache Tomcat. This release implements specifications that are part of the +Jakarta EE 10 platform.</p> +<p>Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 +without changes. Java EE based applications designed for Tomcat 9 and earlier +may be placed in the <code>$CATALINA_BASE/webapps-javaee</code> directory and +Tomcat will automatically convert them to Jakarta EE and copy them to the +webapps directory. This conversion is performed using the +<a href="https://github.com/apache/tomcat-jakartaee-migration";>Apache Tomcat +migration tool for Jakarta EE tool</a> which is also available as a separate +<a href="https://tomcat.apache.org/download-migration.cgi";>download</a> for off-line use.</p> +<p>The notable changes in this release are:</p> +<ul> + <li>Add ContextNamingInfoListener, a listener which creates context naming + information environment entries.</li> + + <li>Add PropertiesRoleMappingListener, a listener which populates the + context's role mapping from a properties file.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-10.1-doc/changelog.html#Tomcat_10.1.11_(schultz)">Tomcat 10.1 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-10.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_8.5.91_Released"><span class="pull-right">2023-07-10</span> Tomcat 8.5.91 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 8.5.91 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 7 platform. The notable changes compared to 8.5.90 include: +</p> +<ul> + <li>Add ContextNamingInfoListener, a listener which creates context naming + information environment entries.</li> + + <li>Add PropertiesRoleMappingListener, a listener which populates the + context's role mapping from a properties file.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-8.5-doc/changelog.html#Tomcat_8.5.91_(schultz)">Tomcat 8 +changelog</a>. +</p> + +<p style="font-weight:bold">Please note that Apache Tomcat 8.5.x will +reach <a href="https://tomcat.apache.org/tomcat-85-eol.html";>End-of-life</a> +(EOL) on 31 March 2024.</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-80.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_11.0.0-M9_Released"><span class="pull-right">2023-07-10</span> Tomcat 11.0.0-M9 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 11.0.0-M9 +(alpha) of Apache Tomcat. This release is a milestone release and is targeted at +Jakarta EE 11.</p> +<p>Users of Tomcat 10 onwards should be aware that, as a result of the move from +Java EE to Jakarta EE as part of the transfer of Java EE to the Eclipse +Foundation, the primary package for all implemented APIs has changed from +<code>javax.*</code> to <code>jakarta.*</code>. This will almost certainly +require code changes to enable applications to migrate from Tomcat 9 and earlier +to Tomcat 10 and later. A +<a href="https://github.com/apache/tomcat-jakartaee-migration";>migration +tool</a> is available to aid this process.</p> +<p>The notable changes in this release are:</p> +<ul> +<li>Add ContextNamingInfoListener, a listener which creates context naming + information environment entries.</li> +<li>Add PropertiesRoleMappingListener, a listener which populates the context's + role mapping from a properties file.</li> +<li>Update the Jakarta EL and Jakarta WebSocket implementations to align with + the latest changes planned for Jakarta EE 11.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-11.0-doc/changelog.html#Tomcat_11.0.0-M9_(markt)">Tomcat 11 +<strong>(alpha)</strong> changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-11.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_10.1.10_Released"><span class="pull-right">2023-06-12</span> Tomcat 10.1.10 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 10.1.10 +of Apache Tomcat. This release implements specifications that are part of the +Jakarta EE 10 platform.</p> +<p>Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 +without changes. Java EE based applications designed for Tomcat 9 and earlier +may be placed in the <code>$CATALINA_BASE/webapps-javaee</code> directory and +Tomcat will automatically convert them to Jakarta EE and copy them to the +webapps directory. This conversion is performed using the +<a href="https://github.com/apache/tomcat-jakartaee-migration";>Apache Tomcat +migration tool for Jakarta EE tool</a> which is also available as a separate +<a href="https://tomcat.apache.org/download-migration.cgi";>download</a> for off-line use.</p> +<p>The notable changes in this release are:</p> +<ul> + <li>Add support for virtual threads. (Java 21+ only)</li> + + <li>Update HTTP/2 to use the RFC-9218 prioritization scheme.</li> + + <li>Deprecate the xssProtectionEnabled from HttpHeaderSecurityFilter + and set the default value to false.</li> + + <li>Update Tomcat Native to 2.0.4 which includes binaries for Windows + built with OpenSSL 3.0.9.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-10.1-doc/changelog.html#Tomcat_10.1.10_(schultz)">Tomcat 10.1 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-10.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_8.5.90_Released"><span class="pull-right">2023-06-12</span> Tomcat 8.5.90 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 8.5.90 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 7 platform. The notable changes compared to 8.5.89 include: +</p> +<ul> + <li>Add support for virtual threads. (Java 21+ only)</li> + + <li>Update HTTP/2 to use the RFC-9218 prioritization scheme.</li> + + <li>Deprecate the xssProtectionEnabled from HttpHeaderSecurityFilter + and set the default value to false.</li> + + <li>Update Tomcat Native to 1.2.37 which includes binaries for Windows + built with OpenSSL 1.1.1u.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-8.5-doc/changelog.html#Tomcat_8.5.90_(schultz)">Tomcat 8 +changelog</a>. +</p> + +<p style="font-weight:bold">Please note that Apache Tomcat 8.5.x will +reach <a href="https://tomcat.apache.org/tomcat-85-eol.html";>End-of-life</a> +(EOL) on 31 March 2024.</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-80.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_9.0.76_Released"><span class="pull-right">2023-06-09</span> Tomcat 9.0.76 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 9.0.76 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 8 platform. The notable changes compared to 9.0.75 include:</p> +<ul> +<li>Add support for virtual threads. (Java 21+ only)</li> +<li>Update HTTP/2 to use the RFC-9218 prioritization scheme.</li> +<li>Deprecate the xssProtectionEnabled from HttpHeaderSecurityFilter + and set the default value to false.</li> +<li>Update Tomcat Native to 2.0.4 which includes binaries for Windows + built with OpenSSL 3.0.9.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-9.0-doc/changelog.html#Tomcat_9.0.76_(remm)">Tomcat 9 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-90.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_11.0.0-M7_Released"><span class="pull-right">2023-06-08</span> Tomcat 11.0.0-M7 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 11.0.0-M7 +(alpha) of Apache Tomcat. This release is a milestone release and is targeted at +Jakarta EE 11.</p> +<p>Users of Tomcat 10 onwards should be aware that, as a result of the move from +Java EE to Jakarta EE as part of the transfer of Java EE to the Eclipse +Foundation, the primary package for all implemented APIs has changed from +<code>javax.*</code> to <code>jakarta.*</code>. This will almost certainly +require code changes to enable applications to migrate from Tomcat 9 and earlier +to Tomcat 10 and later. A +<a href="https://github.com/apache/tomcat-jakartaee-migration";>migration +tool</a> is available to aid this process.</p> +<p>The notable changes in this release are:</p> +<ul> +<li>The minimum Java version has been increased to Java 21.</li> +<li>Add support for virtual threads.</li> +<li>Add RateLimitFilter which can be used to mitigate DoS and brute force + attacks.</li> +<li>Update Tomcat Native to 2.0.4 which includes binaries for Windows built with + OpenSSL 3.0.9.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-11.0-doc/changelog.html#Tomcat_11.0.0-M7_(markt)">Tomcat 11 +<strong>(alpha)</strong> changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-11.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_Native_2.0.4_Released"><span class="pull-right">2023-06-02</span> Tomcat Native 2.0.4 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 2.0.4 of +Tomcat Native. The notable changes compared to 2.0.3 include: +</p> +<ul> +<li>The windows binaries in this release have been built with OpenSSL 3.0.9</li> +</ul> +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-native.cgi";>Download</a> | +<a href="native-doc/miscellaneous/changelog.html">ChangeLog for 2.0.4</a> +</p> +</div><h3 id="Tomcat_Native_1.2.37_Released"><span class="pull-right">2023-06-02</span> Tomcat Native 1.2.37 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 1.2.37 of +Tomcat Native. The notable changes since 1.2.36 include: +</p> +<ul> +<li>Windows binaries built with OpenSSL 1.1.1u.</li> +</ul> +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-native.cgi";>Download</a> | +<a href="native-1.2-doc/miscellaneous/changelog.html">ChangeLog for 1.2.37</a> +</p> +</div><h3 id="Tomcat_10.1.9_Released"><span class="pull-right">2023-05-19</span> Tomcat 10.1.9 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 10.1.9 +of Apache Tomcat. This release implements specifications that are part of the +Jakarta EE 10 platform.</p> +<p>Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 +without changes. Java EE based applications designed for Tomcat 9 and earlier +may be placed in the <code>$CATALINA_BASE/webapps-javaee</code> directory and +Tomcat will automatically convert them to Jakarta EE and copy them to the +webapps directory. This conversion is performed using the +<a href="https://github.com/apache/tomcat-jakartaee-migration";>Apache Tomcat +migration tool for Jakarta EE tool</a> which is also available as a separate +<a href="https://tomcat.apache.org/download-migration.cgi";>download</a> for off-line use.</p> +<p>The notable changes in this release are:</p> +<ul> + <li>Many improvements to the JSON access log valve.</li> + + <li>Deprecate support for the HTTP Connector settings rejectIllegalHeader + and allowHostHeaderMismatch and reject HTTP headers without names.</li> + + <li>Add a RateLimitFilter which can be used to mitigate DoS and Brute + Force attacks.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-10.1-doc/changelog.html#Tomcat_10.1.9_(schultz)">Tomcat 10.1 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-10.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_8.5.89_Released"><span class="pull-right">2023-05-19</span> Tomcat 8.5.89 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 8.5.89 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 7 platform. The notable changes compared to 8.5.88 include: +</p> +<ul> + <li>Reduce the default value of maxParameterCount from 10,000 to 1,000.</li> + + <li>Correct a regression in the fix for bug 66442 that meant that streams + without a response body did not decrement the active stream count + when completing, leading to + ERR_HTTP2_SERVER_REFUSED_STREAM for some connections.</li> + + <li>Refactor synchronization blocks locking on SocketWrapper to use + ReentrantLock to support users wishing to experiment with project + Loom.</li> + + <li>Implement RFC 9239; note the MIME types for Javascript has changed + to text/javascript.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-8.5-doc/changelog.html#Tomcat_8.5.89_(schultz)">Tomcat 8 +changelog</a>. +</p> + +<p style="font-weight:bold">Please note that Apache Tomcat 8.5.x will +reach <a href="https://tomcat.apache.org/tomcat-85-eol.html";>End-of-life</a> +(EOL) on 31 March 2024.</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-80.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_9.0.75_Released"><span class="pull-right">2023-05-10</span> Tomcat 9.0.75 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 9.0.75 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 8 platform. The notable changes compared to 9.0.74 include:</p> +<ul> +<li>Many improvements to the json access log valve.</li> +<li>Deprecate support for the HTTP Connector settings rejectIllegalHeader and + allowHostHeaderMismatch.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-9.0-doc/changelog.html#Tomcat_9.0.75_(remm)">Tomcat 9 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-90.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_11.0.0-M6_Released"><span class="pull-right">2023-05-09</span> Tomcat 11.0.0-M6 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 11.0.0-M6 +(alpha) of Apache Tomcat. This release is a milestone release and is targeted at +Jakarta EE 11.</p> +<p>Users of Tomcat 10 onwards should be aware that, as a result of the move from +Java EE to Jakarta EE as part of the transfer of Java EE to the Eclipse +Foundation, the primary package for all implemented APIs has changed from +<code>javax.*</code> to <code>jakarta.*</code>. This will almost certainly +require code changes to enable applications to migrate from Tomcat 9 and earlier +to Tomcat 10 and later. A +<a href="https://github.com/apache/tomcat-jakartaee-migration";>migration +tool</a> is available to aid this process.</p> +<p>The notable changes in this release are:</p> +<ul> +<li>Various improvements to access logging.</li> +<li>Remove support for the HTTP Connector settings rejectIllegalHeader and + allowHostHeaderMismatch. These are now hard-coded to the previous + defaults.</li> +<li>Update the packaged version of the Tomcat Migration Tool for Jakarta + EE to 1.0.7.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-11.0-doc/changelog.html#Tomcat_11.0.0-M6_(markt)">Tomcat 11 +<strong>(alpha)</strong> changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-11.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_Migration_Tool_for_Jakarta_EE_1.0.7_Released"><span class="pull-right">2023-05-02</span> Tomcat Migration Tool for Jakarta EE 1.0.7 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of 1.0.7 of the +Apache Tomcat Migration Tool for Jakarta EE. This release contains a number of +bug fixes and improvements compared to version 1.0.6.</p> +<p>The notable changes in this release are:</p> +<ul> +<li>Update OSGI servlet specification versions if present in manifest file. PR + #42 provided by Ivan Furnadjiev.</li> +<li>Add configuration option, matchExcludesAgainstPathName that can be used to + configure exclusions based on path name rather than just file name. PR 38 + provided by Réda Housni Alaoui.</li> +<li>When converting directories, rename files according to the chosen profile. + </li> +<li>Work-around a known JDK bug when converting using the streaming approach. + </li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="https://github.com/apache/tomcat-jakartaee-migration/blob/main/CHANGES.md";>changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-migration.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_10.1.8_Released"><span class="pull-right">2023-04-19</span> Tomcat 10.1.8 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 10.1.8 +of Apache Tomcat. This release implements specifications that are part of the +Jakarta EE 10 platform.</p> +<p>Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 +without changes. Java EE based applications designed for Tomcat 9 and earlier +may be placed in the <code>$CATALINA_BASE/webapps-javaee</code> directory and +Tomcat will automatically convert them to Jakarta EE and copy them to the +webapps directory. This conversion is performed using the +<a href="https://github.com/apache/tomcat-jakartaee-migration";>Apache Tomcat +migration tool for Jakarta EE tool</a> which is also available as a separate +<a href="https://tomcat.apache.org/download-migration.cgi";>download</a> for off-line use.</p> +<p>The notable changes in this release are:</p> +<ul> + <li>Reduce the default value of maxParameterCount from 10,000 to 1,000.</li> + + <li>Correct a regression in the fix for bug 66442 that meant that streams + without a response body did not decrement the active stream count + when completing leading to ERR_HTTP2_SERVER_REFUSED_STREAM for some + connections.</li> + + <li>Expand the validation of the value of the Sec-Websocket-Key header in + the HTTP upgrade request that initiates a WebSocket connection. The + value is not decoded but it is checked for the correct length and that + only valid characters from the base64 alphabet are used.</li> + + <li>Implement RFC 9239; note the MIME types for Javascript has changed + to text/javascript.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-10.1-doc/changelog.html#Tomcat_10.1.8_(schultz)">Tomcat 10.1 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-10.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_8.5.88_Released"><span class="pull-right">2023-04-19</span> Tomcat 8.5.88 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 8.5.88 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 7 platform. The notable changes compared to 8.5.87 include: +</p> +<ul> + <li>Reduce the default value of maxParameterCount from 10,000 to 1,000.</li> + + <li>Correct a regression in the fix for bug 66442 that meant that streams + without a response body did not decrement the active stream count + when completing, leading to + ERR_HTTP2_SERVER_REFUSED_STREAM for some connections.</li> + + <li>Refactor synchronization blocks locking on SocketWrapper to use + ReentrantLock to support users wishing to experiment with project + Loom.</li> + + <li>Implement RFC 9239; note the MIME types for Javascript has changed + to text/javascript.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-8.5-doc/changelog.html#Tomcat_8.5.88_(schultz)">Tomcat 8 +changelog</a>. +</p> + +<p style="font-weight:bold">Please note that Apache Tomcat 8.5.x will +reach <a href="https://tomcat.apache.org/tomcat-85-eol.html";>End-of-life</a> +(EOL) on 31 March 2024.</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-80.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_9.0.74_Released"><span class="pull-right">2023-04-18</span> Tomcat 9.0.74 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 9.0.74 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 8 platform. The notable changes compared to 9.0.73 include:</p> +<ul> +<li>Correct a regression in the fix for bug 66442 that meant that streams + without a response body did not decrement the active stream count + when completing, leading to + ERR_HTTP2_SERVER_REFUSED_STREAM for some connections.</li> +<li>Add an access log valve that uses a json format. Based on a pull request + provided by Thomas Meyer.</li> +<li>Refactor synchronization blocks locking on SocketWrapper to use + ReentrantLock to support users wishing to experiment with project Loom.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-9.0-doc/changelog.html#Tomcat_9.0.74_(remm)">Tomcat 9 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-90.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_11.0.0-M5_Released"><span class="pull-right">2023-04-19</span> Tomcat 11.0.0-M5 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 11.0.0-M5 +(alpha) of Apache Tomcat. This release is a milestone release and is targeted at +Jakarta EE 11.</p> +<p>Users of Tomcat 10 onwards should be aware that, as a result of the move from +Java EE to Jakarta EE as part of the transfer of Java EE to the Eclipse +Foundation, the primary package for all implemented APIs has changed from +<code>javax.*</code> to <code>jakarta.*</code>. This will almost certainly +require code changes to enable applications to migrate from Tomcat 9 and earlier +to Tomcat 10 and later. A +<a href="https://github.com/apache/tomcat-jakartaee-migration";>migration +tool</a> is available to aid this process.</p> +<p>The notable changes in this release are:</p> +<ul> +<li>Reduce the default value of maxParameterCount from 10,000 to 1,000.</li> +<li>Correct a regression in the fix for bug 66442 that meant that streams + without a response body did not decrement the active stream count when + completing leading to ERR_HTTP2_SERVER_REFUSED_STREAM for some + connections.</li> +<li>Expand the validation of the value of the Sec-Websocket-Key header in the + HTTP upgrade request that initiates a WebSocket connection. The value is not + decoded but it is checked for the correct length and that only valid + characters from the base64 alphabet are used.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-11.0-doc/changelog.html#Tomcat_11.0.0-M5_(markt)">Tomcat 11 +<strong>(alpha)</strong> changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-11.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_10.1.7_Released"><span class="pull-right">2023-03-03</span> Tomcat 10.1.7 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 10.1.7 +of Apache Tomcat. This release implements specifications that are part of the +Jakarta EE 10 platform.</p> +<p>Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 +without changes. Java EE based applications designed for Tomcat 9 and earlier +may be placed in the <code>$CATALINA_BASE/webapps-javaee</code> directory and +Tomcat will automatically convert them to Jakarta EE and copy them to the +webapps directory. This conversion is performed using the +<a href="https://github.com/apache/tomcat-jakartaee-migration";>Apache Tomcat +migration tool for Jakarta EE tool</a> which is also available as a separate +<a href="https://tomcat.apache.org/download-migration.cgi";>download</a> for off-line use.</p> +<p>The notable changes in this release are:</p> +<ul> + <li>Correct a regression introduced in the fix for bug 66196 that meant + that the HTTP headers and/or request line could get corrupted (one + part overwriting another part) within a single request.</li> + + <li>Revert the switch to using the ServiceLoader mechanism to load the + custom URL protocol handlers that Tomcat uses. The original system + property based approach has been restored.</li> + + <li>Restore inline state after async operation in NIO2, to account the + fact that unexpected exceptions are sometimes thrown by the + implementation. Patch submitted by zhougang.</li> + + <li>Provide a more appropriate response (501 rather than 400) when + rejecting an HTTP request using the CONNECT method.</li> + + <li>Add support for txt: and rnd: rewrite map types from mod_rewrite. + Based on a pull request provided by Dimitrios Soumis.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-10.1-doc/changelog.html#Tomcat_10.1.7_(schultz)">Tomcat 10.1 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-10.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_8.5.87_Released"><span class="pull-right">2023-03-03</span> Tomcat 8.5.87 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 8.5.87 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 7 platform. The notable changes compared to 8.5.86 include: +</p> +<ul> + <li>Correct a regression introduced in the fix for bug 66196 that + meant that the HTTP headers and/or request line could get + corrupted (one part overwriting another part) within a single + request.</li> + + <li>Provide a more appropriate response (501 rather than 400) when + rejecting an HTTP request using the CONNECT method.</li> + + <li>Add support for txt: and rnd: rewrite map types from mod_rewrite. + Based on a pull request provided by Dimitrios Soumis.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-8.5-doc/changelog.html#Tomcat_8.5.87_(schultz)">Tomcat 8 +changelog</a>. +</p> + +<p style="font-weight:bold">Please note that Apache Tomcat 8.5.x will +reach <a href="https://tomcat.apache.org/tomcat-85-eol.html";>End-of-life</a> +(EOL) on 31 March 2024.</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-80.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_11.0.0-M4_Released"><span class="pull-right">2023-03-06</span> Tomcat 11.0.0-M4 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 11.0.0-M4 +(alpha) of Apache Tomcat. This release is a milestone release and is targeted at +Jakarta EE 11.</p> +<p>Users of Tomcat 10 onwards should be aware that, as a result of the move from +Java EE to Jakarta EE as part of the transfer of Java EE to the Eclipse +Foundation, the primary package for all implemented APIs has changed from +<code>javax.*</code> to <code>jakarta.*</code>. This will almost certainly +require code changes to enable applications to migrate from Tomcat 9 and earlier +to Tomcat 10 and later. A +<a href="https://github.com/apache/tomcat-jakartaee-migration";>migration +tool</a> is under development to aid this process.</p> +<p>The notable changes in this release are:</p> +<ul> + <li>Revert the switch to using the ServiceLoader mechanism to load the custom + URL protocol handlers that Tomcat uses. The original system property based + approach has been restored.</li> + <li>Provide an implementation of the sub-set of JavaBeans support that does + not depend on the java.beans package. This for use by Expression Language + when the java.desktop module (which is where the java.beans package + resides) is not available.</li> + <li>Restore inline state after async operation in NIO2, to account the fact + that unexpected exceptions are sometimes thrown by the implementation. + Patch submitted by zhougang.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-11.0-doc/changelog.html#Tomcat_11.0.0-M4_(markt)">Tomcat 11 +<strong>(alpha)</strong> changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-11.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_9.0.73_Released"><span class="pull-right">2023-03-03</span> Tomcat 9.0.73 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 9.0.73 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 8 platform. The notable changes compared to 9.0.72 include:</p> +<ul> +<li>Correct a regression introduced in the fix for bug + 66196 that meant that the HTTP headers and/or request line + could get corrupted (one part overwriting another part) within a single + request.</li> +<li>Provide a more appropriate response (501 rather than 400) when rejecting + an HTTP request using the CONNECT method.</li> +<li>Add support for txt: and rnd: rewrite map types from mod_rewrite. Based + on a pull request provided by Dimitrios Soumis.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-9.0-doc/changelog.html#Tomcat_9.0.73_(remm)">Tomcat 9 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-90.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_10.1.6_Released"><span class="pull-right">2023-02-24</span> Tomcat 10.1.6 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 10.1.6 +of Apache Tomcat. This release implements specifications that are part of the +Jakarta EE 10 platform.</p> +<p>Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 +without changes. Java EE based applications designed for Tomcat 9 and earlier +may be placed in the <code>$CATALINA_BASE/webapps-javaee</code> directory and +Tomcat will automatically convert them to Jakarta EE and copy them to the +webapps directory. This conversion is performed using the +<a href="https://github.com/apache/tomcat-jakartaee-migration";>Apache Tomcat +migration tool for Jakarta EE tool</a> which is also available as a separate +<a href="https://tomcat.apache.org/download-migration.cgi";>download</a> for off-line use.</p> +<p>The notable changes in this release are:</p> +<ul> + <li>Switch to using the ServiceLoader mechanism to load the custom URL + protocol handlers that Tomcat uses.</li> + + <li>Update the packaged version of the Apache Tomcat Native Library to + 2.0.3 to pick up the Windows binaries built with with OpenSSL 3.0.8.</li> + + <li>Add the shared address space specified by RFC 6598 (100.64.0.0/10) + to the list of trusted proxies for RemoteIPValve/Filter.</li> + + <li>Limit access to examples web application to localhost by default .</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-10.1-doc/changelog.html#Tomcat_10.1.6_(schultz)">Tomcat 10.1 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-10.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_8.5.86_Released"><span class="pull-right">2023-02-24</span> Tomcat 8.5.86 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 8.5.86 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 7 platform. The notable changes compared to 8.5.85 include: +</p> +<ul> + <li>Add an error report valve that allows redirecting to or proxying from + an external web server.</li> + + <li>Add the shared address space specified by RFC 6598 (100.64.0.0/10) + to the list of trusted proxies for RemoteIPValve/Filter.</li> + + <li>Log basic information for each configured TLS certificate when + Tomcat starts.</li> + + <li>Limit access to examples web application to localhost by default.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-8.5-doc/changelog.html#Tomcat_8.5.86_(schultz)">Tomcat 8 +changelog</a>. +</p> + +<p style="font-weight:bold">Please note that Apache Tomcat 8.5.x will +reach <a href="https://tomcat.apache.org/tomcat-85-eol.html";>End-of-life</a> +(EOL) on 31 March 2024.</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-80.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_9.0.72_Released"><span class="pull-right">2023-02-23</span> Tomcat 9.0.72 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 9.0.72 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 8 platform. The notable changes compared to 9.0.71 include:</p> +<ul> +<li>Add an error report valve that allows redirecting to or proxying from an + external web server.</li> +<li>Log basic information for each configured TLS certificate when + Tomcat starts.</li> +<li>Add the shared address space specified by RFC 6598 (100.64.0.0/10) + to the list of trusted proxies for RemoteIPValve/Filter.</li> +<li>Limit access to examples web application to localhost by default.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-9.0-doc/changelog.html#Tomcat_9.0.71_(remm)">Tomcat 9 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-90.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_11.0.0-M3_Released"><span class="pull-right">2023-02-23</span> Tomcat 11.0.0-M3 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 11.0.0-M3 +(alpha) of Apache Tomcat. This release is a milestone release and is targeted at +Jakarta EE 11.</p> +<p>Users of Tomcat 10 onwards should be aware that, as a result of the move from +Java EE to Jakarta EE as part of the transfer of Java EE to the Eclipse +Foundation, the primary package for all implemented APIs has changed from +<code>javax.*</code> to <code>jakarta.*</code>. This will almost certainly +require code changes to enable applications to migrate from Tomcat 9 and earlier +to Tomcat 10 and later. A +<a href="https://github.com/apache/tomcat-jakartaee-migration";>migration +tool</a> is under development to aid this process.</p> +<p>The notable changes in this release are:</p> +<ul> +<li>Increase the minimum supported Java version to Java 17.</li> +<li>Remove support for starting Tomcat under a SecurityManager.</li> +<li>Remove JAX-RPC support which was removed from the Jakarta EE platform for + Jakarta EE 9</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-11.0-doc/changelog.html#Tomcat_11.0.0-M3_(markt)">Tomcat 11 +<strong>(alpha)</strong> changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-11.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_Native_2.0.3_Released"><span class="pull-right">2023-02-13</span> Tomcat Native 2.0.3 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 2.0.3 of +Tomcat Native. The notable changes compared to 2.0.2 include: +</p> +<ul> +<li>The windows binaries in this release have been built with OpenSSL 3.0.8</li> +</ul> +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-native.cgi";>Download</a> | +<a href="native-doc/miscellaneous/changelog.html">ChangeLog for 2.0.3</a> +</p> +</div><h3 id="Tomcat_Native_1.2.36_Released"><span class="pull-right">2023-02-13</span> Tomcat Native 1.2.36 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 1.2.36 of +Tomcat Native. The notable changes since 1.2.35 include: +</p> +<ul> +<li>Windows binaries built with OpenSSL 1.1.1t.</li> +</ul> +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-native.cgi";>Download</a> | +<a href="native-1.2-doc/miscellaneous/changelog.html">ChangeLog for 1.2.36</a> +</p> +</div><h3 id="Tomcat_8.5.85_Released"><span class="pull-right">2023-01-19</span> Tomcat 8.5.85 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 8.5.85 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 7 platform. The notable changes compared to 8.5.84 include: +</p> +<ul> + <li>The default value of <code>AccessLogValve</code>'s file encoding is + now UTF-8.</li> + + <li>Correct a regression in the refactoring that replaced the use of the + URL constructors. The regression broke lookups for resources that + contained one or more characters in their name that required escaping + when used in a URI path.</li> + + <li>When an HTTP/2 stream was reset, the current active stream count was + not reduced. If enough resets occurred on a connection, the current + active stream count limit was reached and no new streams could be + created on that connection.</li> + + <li>Change the default of the org.apache.el.GET_CLASSLOADER_USE_PRIVILEGED + system property to true unless the EL library is running on Tomcat in + which case the default remains false as the EL library is already + called from within a privileged block and skipping the unnecessary + privileged block improves performance.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-8.5-doc/changelog.html#Tomcat_8.5.85_(schultz)">Tomcat 8 +changelog</a>. +</p> + +<p style="font-weight:bold">Please note that Apache Tomcat 8.5.x will +reach <a href="https://tomcat.apache.org/tomcat-85-eol.html";>End-of-life</a> +(EOL) on 31 March 2024.</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-80.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_9.0.71_Released"><span class="pull-right">2023-01-13</span> Tomcat 9.0.71 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 9.0.71 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 8 platform. The notable changes compared to 9.0.70 include:</p> +<ul> +<li>Correct a regression in the refactoring that replaced the use of the + URL constructors. The regression broke lookups for resources that + contained one or more characters in their name that required escaping + when used in a URI path.</li> +<li>When resetting an HTTP/2 stream because the final response has been + generated before the request has been fully read, use the HTTP/2 error + code NO_ERROR so that client does not discard the response. Based on a + suggestion by Lorenzo Dalla Vecchia.</li> +<li>Change the default of the org.apache.el.GET_CLASSLOADER_USE_PRIVILEGED + system property to true unless the EL library is running on Tomcat in + which case the default remains false as the EL library is already + called from within a privileged block and skipping the unnecessary + privileged block improves performance.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-9.0-doc/changelog.html#Tomcat_9.0.71_(remm)">Tomcat 9 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-90.cgi";>Download</a> +</p> +</div><h3 id="Tomcat_10.1.5_Released"><span class="pull-right">2023-01-13</span> Tomcat 10.1.5 Released</h3><div class="text"> +<p> +The Apache Tomcat Project is proud to announce the release of version 10.1.5 +of Apache Tomcat. This release implements specifications that are part of the +Jakarta EE 10 platform.</p> +<p>Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 +without changes. Java EE based applications designed for Tomcat 9 and earlier +may be placed in the <code>$CATALINA_BASE/webapps-javaee</code> directory and +Tomcat will automatically convert them to Jakarta EE and copy them to the +webapps directory. This conversion is performed using the +<a href="https://github.com/apache/tomcat-jakartaee-migration";>Apache Tomcat +migration tool for Jakarta EE tool</a> which is also available as a separate +<a href="https://tomcat.apache.org/download-migration.cgi";>download</a> for off-line use.</p> +<p>The notable changes in this release are:</p> +<ul> +<li>Correct a regression in the refactoring that replaced the use of the URL + constructors. The regression broke lookups for resources that contained one + or more characters in their name that required escaping when used in a URI + path.</li> +<li>When resetting an HTTP/2 stream because the final response has been + generated before the request has been fully read, use the HTTP/2 error code + NO_ERROR so that client does not discard the response. Based on a suggestion + by Lorenzo Dalla Vecchia.</li> +<li>Change the default of the org.apache.el.GET_CLASSLOADER_USE_PRIVILEGED + system property to true unless the EL library is running on Tomcat in which + case the default remains false as the EL library is already called from + within a privileged block and skipping the unnecessary privileged block + improves performance.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-10.1-doc/changelog.html#Tomcat_10.1.5_(markt)">Tomcat 10.1 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="https://tomcat.apache.org/download-10.cgi";>Download</a> +</p> +</div></div></div></div></main><footer id="footer"> + Copyright © 1999-2024, The Apache Software Foundation + <br> + Apache Tomcat, Tomcat, Apache, the Apache Tomcat logo and the Apache logo + are either registered trademarks or trademarks of the Apache Software + Foundation. + </footer></div><script src="res/js/tomcat.js"></script></body></html> \ No newline at end of file
--------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
