Modified: tomcat/site/trunk/xdocs/oldnews-2011.xml URL: http://svn.apache.org/viewvc/tomcat/site/trunk/xdocs/oldnews-2011.xml?rev=1915868&r1=1915867&r2=1915868&view=diff ============================================================================== --- tomcat/site/trunk/xdocs/oldnews-2011.xml (original) +++ tomcat/site/trunk/xdocs/oldnews-2011.xml Mon Feb 19 09:00:21 2024 @@ -11,7 +11,8 @@ <section name="Other news"> <p>Announcements from other years can be found here:</p> <ul> - <li><a href="oldnews.html">year 2023</a></li> + <li><a href="oldnews.html">year 2024</a></li> + <li><a href="oldnews-2023.html">year 2023</a></li> <li><a href="oldnews-2022.html">year 2022</a></li> <li><a href="oldnews-2021.html">year 2021</a></li> <li><a href="oldnews-2020.html">year 2020</a></li>
Modified: tomcat/site/trunk/xdocs/oldnews-2012.xml URL: http://svn.apache.org/viewvc/tomcat/site/trunk/xdocs/oldnews-2012.xml?rev=1915868&r1=1915867&r2=1915868&view=diff ============================================================================== --- tomcat/site/trunk/xdocs/oldnews-2012.xml (original) +++ tomcat/site/trunk/xdocs/oldnews-2012.xml Mon Feb 19 09:00:21 2024 @@ -11,7 +11,8 @@ <section name="Other news"> <p>Announcements from other years can be found here:</p> <ul> - <li><a href="oldnews.html">year 2023</a></li> + <li><a href="oldnews.html">year 2024</a></li> + <li><a href="oldnews-2023.html">year 2023</a></li> <li><a href="oldnews-2022.html">year 2022</a></li> <li><a href="oldnews-2021.html">year 2021</a></li> <li><a href="oldnews-2020.html">year 2020</a></li> Modified: tomcat/site/trunk/xdocs/oldnews-2013.xml URL: http://svn.apache.org/viewvc/tomcat/site/trunk/xdocs/oldnews-2013.xml?rev=1915868&r1=1915867&r2=1915868&view=diff ============================================================================== --- tomcat/site/trunk/xdocs/oldnews-2013.xml (original) +++ tomcat/site/trunk/xdocs/oldnews-2013.xml Mon Feb 19 09:00:21 2024 @@ -11,7 +11,8 @@ <section name="Other news"> <p>Announcements from other years can be found here:</p> <ul> - <li><a href="oldnews.html">year 2023</a></li> + <li><a href="oldnews.html">year 2024</a></li> + <li><a href="oldnews-2023.html">year 2023</a></li> <li><a href="oldnews-2022.html">year 2022</a></li> <li><a href="oldnews-2021.html">year 2021</a></li> <li><a href="oldnews-2020.html">year 2020</a></li> Modified: tomcat/site/trunk/xdocs/oldnews-2014.xml URL: http://svn.apache.org/viewvc/tomcat/site/trunk/xdocs/oldnews-2014.xml?rev=1915868&r1=1915867&r2=1915868&view=diff ============================================================================== --- tomcat/site/trunk/xdocs/oldnews-2014.xml (original) +++ tomcat/site/trunk/xdocs/oldnews-2014.xml Mon Feb 19 09:00:21 2024 @@ -11,7 +11,8 @@ <section name="Other news"> <p>Announcements from other years can be found here:</p> <ul> - <li><a href="oldnews.html">year 2023</a></li> + <li><a href="oldnews.html">year 2024</a></li> + <li><a href="oldnews-2023.html">year 2023</a></li> <li><a href="oldnews-2022.html">year 2022</a></li> <li><a href="oldnews-2021.html">year 2021</a></li> <li><a href="oldnews-2020.html">year 2020</a></li> Modified: tomcat/site/trunk/xdocs/oldnews-2015.xml URL: http://svn.apache.org/viewvc/tomcat/site/trunk/xdocs/oldnews-2015.xml?rev=1915868&r1=1915867&r2=1915868&view=diff ============================================================================== --- tomcat/site/trunk/xdocs/oldnews-2015.xml (original) +++ tomcat/site/trunk/xdocs/oldnews-2015.xml Mon Feb 19 09:00:21 2024 @@ -11,7 +11,8 @@ <section name="Other news"> <p>Announcements from other years can be found here:</p> <ul> - <li><a href="oldnews.html">year 2023</a></li> + <li><a href="oldnews.html">year 2024</a></li> + <li><a href="oldnews-2023.html">year 2023</a></li> <li><a href="oldnews-2022.html">year 2022</a></li> <li><a href="oldnews-2021.html">year 2021</a></li> <li><a href="oldnews-2020.html">year 2020</a></li> Modified: tomcat/site/trunk/xdocs/oldnews-2016.xml URL: http://svn.apache.org/viewvc/tomcat/site/trunk/xdocs/oldnews-2016.xml?rev=1915868&r1=1915867&r2=1915868&view=diff ============================================================================== --- tomcat/site/trunk/xdocs/oldnews-2016.xml (original) +++ tomcat/site/trunk/xdocs/oldnews-2016.xml Mon Feb 19 09:00:21 2024 @@ -11,7 +11,8 @@ <section name="Older news"> <p>Announcements from previous years can be found here:</p> <ul> - <li><a href="oldnews.html">year 2023</a></li> + <li><a href="oldnews.html">year 2024</a></li> + <li><a href="oldnews-2023.html">year 2023</a></li> <li><a href="oldnews-2022.html">year 2022</a></li> <li><a href="oldnews-2021.html">year 2021</a></li> <li><a href="oldnews-2020.html">year 2020</a></li> Modified: tomcat/site/trunk/xdocs/oldnews-2017.xml URL: http://svn.apache.org/viewvc/tomcat/site/trunk/xdocs/oldnews-2017.xml?rev=1915868&r1=1915867&r2=1915868&view=diff ============================================================================== --- tomcat/site/trunk/xdocs/oldnews-2017.xml (original) +++ tomcat/site/trunk/xdocs/oldnews-2017.xml Mon Feb 19 09:00:21 2024 @@ -11,7 +11,8 @@ <section name="Older news"> <p>Announcements from previous years can be found here:</p> <ul> - <li><a href="oldnews.html">year 2023</a></li> + <li><a href="oldnews.html">year 2024</a></li> + <li><a href="oldnews-2023.html">year 2023</a></li> <li><a href="oldnews-2022.html">year 2022</a></li> <li><a href="oldnews-2021.html">year 2021</a></li> <li><a href="oldnews-2020.html">year 2020</a></li> Modified: tomcat/site/trunk/xdocs/oldnews-2018.xml URL: http://svn.apache.org/viewvc/tomcat/site/trunk/xdocs/oldnews-2018.xml?rev=1915868&r1=1915867&r2=1915868&view=diff ============================================================================== --- tomcat/site/trunk/xdocs/oldnews-2018.xml (original) +++ tomcat/site/trunk/xdocs/oldnews-2018.xml Mon Feb 19 09:00:21 2024 @@ -11,7 +11,8 @@ <section name="Older news"> <p>Announcements from previous years can be found here:</p> <ul> - <li><a href="oldnews.html">year 2023</a></li> + <li><a href="oldnews.html">year 2024</a></li> + <li><a href="oldnews-2023.html">year 2023</a></li> <li><a href="oldnews-2022.html">year 2022</a></li> <li><a href="oldnews-2021.html">year 2021</a></li> <li><a href="oldnews-2020.html">year 2020</a></li> Modified: tomcat/site/trunk/xdocs/oldnews-2019.xml URL: http://svn.apache.org/viewvc/tomcat/site/trunk/xdocs/oldnews-2019.xml?rev=1915868&r1=1915867&r2=1915868&view=diff ============================================================================== --- tomcat/site/trunk/xdocs/oldnews-2019.xml (original) +++ tomcat/site/trunk/xdocs/oldnews-2019.xml Mon Feb 19 09:00:21 2024 @@ -11,7 +11,8 @@ <section name="Older news"> <p>Announcements from previous years can be found here:</p> <ul> - <li><a href="oldnews.html">year 2023</a></li> + <li><a href="oldnews.html">year 2024</a></li> + <li><a href="oldnews-2023.html">year 2023</a></li> <li><a href="oldnews-2022.html">year 2022</a></li> <li><a href="oldnews-2021.html">year 2021</a></li> <li><a href="oldnews-2020.html">year 2020</a></li> Modified: tomcat/site/trunk/xdocs/oldnews-2020.xml URL: http://svn.apache.org/viewvc/tomcat/site/trunk/xdocs/oldnews-2020.xml?rev=1915868&r1=1915867&r2=1915868&view=diff ============================================================================== --- tomcat/site/trunk/xdocs/oldnews-2020.xml (original) +++ tomcat/site/trunk/xdocs/oldnews-2020.xml Mon Feb 19 09:00:21 2024 @@ -11,7 +11,8 @@ <section name="Older news"> <p>Announcements from previous years can be found here:</p> <ul> - <li><a href="oldnews.html">year 2023</a></li> + <li><a href="oldnews.html">year 2024</a></li> + <li><a href="oldnews-2023.html">year 2023</a></li> <li><a href="oldnews-2022.html">year 2022</a></li> <li><a href="oldnews-2021.html">year 2021</a></li> <li>year 2020</li> Modified: tomcat/site/trunk/xdocs/oldnews-2021.xml URL: http://svn.apache.org/viewvc/tomcat/site/trunk/xdocs/oldnews-2021.xml?rev=1915868&r1=1915867&r2=1915868&view=diff ============================================================================== --- tomcat/site/trunk/xdocs/oldnews-2021.xml (original) +++ tomcat/site/trunk/xdocs/oldnews-2021.xml Mon Feb 19 09:00:21 2024 @@ -11,7 +11,8 @@ <section name="Older news"> <p>Announcements from previous years can be found here:</p> <ul> - <li><a href="oldnews.html">year 2023</a></li> + <li><a href="oldnews.html">year 2024</a></li> + <li><a href="oldnews-2023.html">year 2023</a></li> <li><a href="oldnews-2022.html">year 2022</a></li> <li>year 2021</li> <li><a href="oldnews-2020.html">year 2020</a></li> Modified: tomcat/site/trunk/xdocs/oldnews-2022.xml URL: http://svn.apache.org/viewvc/tomcat/site/trunk/xdocs/oldnews-2022.xml?rev=1915868&r1=1915867&r2=1915868&view=diff ============================================================================== --- tomcat/site/trunk/xdocs/oldnews-2022.xml (original) +++ tomcat/site/trunk/xdocs/oldnews-2022.xml Mon Feb 19 09:00:21 2024 @@ -11,7 +11,8 @@ <section name="Older news"> <p>Announcements from previous years can be found here:</p> <ul> - <li><a href="oldnews.html">year 2023</a></li> + <li><a href="oldnews.html">year 2024</a></li> + <li><a href="oldnews-2023.html">year 2023</a></li> <li>year 2022</li> <li><a href="oldnews-2021.html">year 2021</a></li> <li><a href="oldnews-2020.html">year 2020</a></li> Added: tomcat/site/trunk/xdocs/oldnews-2023.xml URL: http://svn.apache.org/viewvc/tomcat/site/trunk/xdocs/oldnews-2023.xml?rev=1915868&view=auto ============================================================================== --- tomcat/site/trunk/xdocs/oldnews-2023.xml (added) +++ tomcat/site/trunk/xdocs/oldnews-2023.xml Mon Feb 19 09:00:21 2024 @@ -0,0 +1,1841 @@ +<?xml version="1.0" encoding="UTF-8"?> +<document> + + <properties> + <author>Apache Tomcat Project</author> + <title>Old news!</title> + </properties> + +<body> + +<section name="Older news"> +<p>Announcements from previous years can be found here:</p> +<ul> + <li><a href="oldnews.html">year 2024</a></li> + <li>year 2023</li> + <li><a href="oldnews-2022.html">year 2022</a></li> + <li><a href="oldnews-2021.html">year 2021</a></li> + <li><a href="oldnews-2020.html">year 2020</a></li> + <li><a href="oldnews-2019.html">year 2019</a></li> + <li><a href="oldnews-2018.html">year 2018</a></li> + <li><a href="oldnews-2017.html">year 2017</a></li> + <li><a href="oldnews-2016.html">year 2016</a></li> + <li><a href="oldnews-2015.html">year 2015</a></li> + <li><a href="oldnews-2014.html">year 2014</a></li> + <li><a href="oldnews-2013.html">year 2013</a></li> + <li><a href="oldnews-2012.html">year 2012</a></li> + <li><a href="oldnews-2011.html">year 2011</a></li> + <li><a href="oldnews-2010.html">year 2010</a></li> +</ul> +</section> + +<section name="Tomcat 9.0.84 Released" rtext="2023-12-12"> +<p> +The Apache Tomcat Project is proud to announce the release of version 9.0.84 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 8 platform. The notable changes compared to 9.0.83 include:</p> +<ul> + <li>Background processes for a Container no longer execute while lifecycle + operations are in progress for that Container.</li> + + <li>Correct unintended escaping of XML in some WebDAV responses.</li> + + <li>Use a 408 status code if a read timeout occurs during HTTP + request processing instead of an HTTP 400 status.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-9.0-doc/changelog.html#Tomcat_9.0.84_(remm)">Tomcat 9 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="download-90.cgi">Download</a> +</p> +</section> +<section name="Tomcat 11.0.0-M15 Released" rtext="2023-12-12"> +<p> +The Apache Tomcat Project is proud to announce the release of version 11.0.0-M15 +(alpha) of Apache Tomcat. This release is a milestone release and is targeted at +Jakarta EE 11.</p> +<p>Users of Tomcat 10 onwards should be aware that, as a result of the move from +Java EE to Jakarta EE as part of the transfer of Java EE to the Eclipse +Foundation, the primary package for all implemented APIs has changed from +<code>javax.*</code> to <code>jakarta.*</code>. This will almost certainly +require code changes to enable applications to migrate from Tomcat 9 and earlier +to Tomcat 10 and later. A +<a href="https://github.com/apache/tomcat-jakartaee-migration";>migration +tool</a> is available to aid this process.</p> +<p>The notable changes in this release are:</p> +<ul> +<li>Background processes for a Container no longer execute while lifecycle + operations are in progress for that Container.</li> +<li>Align with the latest additions and changes from the Servlet 6.1 + specification.</li> +<li>Update the sample.war included in the documentation to use the Jakarta + EE APIs.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-11.0-doc/changelog.html#Tomcat_11.0.0-M15_(markt)">Tomcat 11 +<strong>(alpha)</strong> changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="download-11.cgi">Download</a> +</p> +</section> +<section name="Tomcat 8.5.97 Released" rtext="2023-12-12"> +<p> +The Apache Tomcat Project is proud to announce the release of version 8.5.97 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 7 platform. The notable changes compared to 8.5.96 include: +</p> +<ul> + <li>Background processes for a Container no longer execute while lifecycle + operations are in progress for that Container.</li> + + <li>Correct unintended escaping of XML in some WebDAV responses.</li> + + <li>Use a 408 status code if a read timeout occurs during HTTP + request processing instead of an HTTP 400 status.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-8.5-doc/changelog.html#Tomcat_8.5.97_(schultz)">Tomcat 8 +changelog</a>. +</p> + +<p style="font-weight:bold">Please note that Apache Tomcat 8.5.x will +reach <a href="https://tomcat.apache.org/tomcat-85-eol.html";>End-of-life</a> +(EOL) on 31 March 2024.</p> + +<p style="text-align: center;"> +<a href="download-80.cgi">Download</a> +</p> +</section> +<section name="Tomcat 10.1.17 Released" rtext="2023-12-12"> +<p> +The Apache Tomcat Project is proud to announce the release of version 10.1.17 +of Apache Tomcat. This release implements specifications that are part of the +Jakarta EE 10 platform.</p> +<p>Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 +without changes. Java EE based applications designed for Tomcat 9 and earlier +may be placed in the <code>$CATALINA_BASE/webapps-javaee</code> directory and +Tomcat will automatically convert them to Jakarta EE and copy them to the +webapps directory. This conversion is performed using the +<a href="https://github.com/apache/tomcat-jakartaee-migration";>Apache Tomcat +migration tool for Jakarta EE tool</a> which is also available as a separate +<a href="download-migration.cgi">download</a> for off-line use.</p> +<p>The notable changes in this release are:</p> +<ul> + <li>Background processes for a Container no longer execute while lifecycle + operations are in progress for that Container.</li> + + <li>Correct unintended escaping of XML in some WebDAV responses.</li> + + <li>Use a 408 status code if a read timeout occurs during HTTP + request processing instead of an HTTP 400 status.</li> +</ul> + +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-10.1-doc/changelog.html#Tomcat_10.1.17_(schultz)">Tomcat 10.1 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="download-10.cgi">Download</a> +</p> +</section> + +<section name="Tomcat 9.0.83 Released" rtext="2023-11-15"> +<p> +The Apache Tomcat Project is proud to announce the release of version 9.0.83 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 8 platform. The notable changes compared to 9.0.82 include:</p> +<ul> + <li>Fix reloading TLS configuration could cause the Connector to + refuse new connections or the JVM to crash.</li> + <li>Ensure that an IOException during the reading of the request + triggers always error handling, regardless of whether the + application swallows the exception.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-9.0-doc/changelog.html#Tomcat_9.0.83_(remm)">Tomcat 9 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="download-90.cgi">Download</a> +</p> +</section> + + +<section name="Tomcat 10.1.16 Released" rtext="2023-11-14"> +<p> +The Apache Tomcat Project is proud to announce the release of version 10.1.16 +of Apache Tomcat. This release implements specifications that are part of the +Jakarta EE 10 platform.</p> +<p>Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 +without changes. Java EE based applications designed for Tomcat 9 and earlier +may be placed in the <code>$CATALINA_BASE/webapps-javaee</code> directory and +Tomcat will automatically convert them to Jakarta EE and copy them to the +webapps directory. This conversion is performed using the +<a href="https://github.com/apache/tomcat-jakartaee-migration";>Apache Tomcat +migration tool for Jakarta EE tool</a> which is also available as a separate +<a href="download-migration.cgi">download</a> for off-line use.</p> +<p>The notable changes in this release are:</p> +<ul> + <li>Fix reloading TLS configuration could cause the Connector to + refuse new connections or the JVM to crash.</li> + + <li>Ensure that an IOException during the reading of the request + triggers always error handling, regardless of whether the + application swallows the exception.</li> +</ul> + +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-10.1-doc/changelog.html#Tomcat_10.1.16_(schultz)">Tomcat 10.1 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="download-10.cgi">Download</a> +</p> +</section> + +<section name="Tomcat 8.5.96 Released" rtext="2023-11-13"> +<p> +The Apache Tomcat Project is proud to announce the release of version 8.5.96 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 7 platform. The notable changes compared to 8.5.95 include: +</p> +<ul> + <li>Fix reloading TLS configuration could cause the Connector to + refuse new connections or the JVM to crash.</li> + + <li>Ensure that an IOException during the reading of the request + always triggers error handling, regardless of whether the + application swallows the exception.</li> + + <li>The status manager servlet can now output statistics as json.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-8.5-doc/changelog.html#Tomcat_8.5.96_(schultz)">Tomcat 8 +changelog</a>. +</p> + +<p style="font-weight:bold">Please note that Apache Tomcat 8.5.x will +reach <a href="https://tomcat.apache.org/tomcat-85-eol.html";>End-of-life</a> +(EOL) on 31 March 2024.</p> + +<p style="text-align: center;"> +<a href="download-80.cgi">Download</a> +</p> +</section> + +<section name="Tomcat 11.0.0-M14 Released" rtext="2023-11-15"> +<p> +The Apache Tomcat Project is proud to announce the release of version 11.0.0-M14 +(alpha) of Apache Tomcat. This release is a milestone release and is targeted at +Jakarta EE 11.</p> +<p>Users of Tomcat 10 onwards should be aware that, as a result of the move from +Java EE to Jakarta EE as part of the transfer of Java EE to the Eclipse +Foundation, the primary package for all implemented APIs has changed from +<code>javax.*</code> to <code>jakarta.*</code>. This will almost certainly +require code changes to enable applications to migrate from Tomcat 9 and earlier +to Tomcat 10 and later. A +<a href="https://github.com/apache/tomcat-jakartaee-migration";>migration +tool</a> is available to aid this process.</p> +<p>The notable changes in this release are:</p> +<ul> +<li>Add OpenSSL integration using the FFM API rather than Tomcat Native. OpenSSL + support may be enabled by adding the + <code>org.apache.catalina.core.OpenSSLLifecycleListener</code> listener on + the Server element when using Java 22 or later.</li> +<li>Fix reloading TLS configuration could cause the Connector to refuse new + connections or the JVM to crash.</li> +<li>Ensure that an IOException during the reading of the request triggers always + error handling, regardless of whether the application swallows the + exception.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-11.0-doc/changelog.html#Tomcat_11.0.0-M12_(markt)">Tomcat 11 +<strong>(alpha)</strong> changelog</a>. +</p> + +<p><strong>Note:</strong> There are known regressions: +with jdbc-pool (see bug <bug>67664</bug>) and +with Connector configurations when <code>compression</code> is enabled +(see bug <bug>67670</bug>). They will be fixed in the next release. +</p> + +<p style="text-align: center;"> +<a href="download-11.cgi">Download</a> +</p> +</section> + +<section name="Tomcat 9.0.82 Released" rtext="2023-10-13"> +<p> +The Apache Tomcat Project is proud to announce the release of version 9.0.82 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 8 platform. The notable changes compared to 9.0.81 include:</p> +<ul> + <li>Correct a regression in 9.0.81 that broke the Tomcat JBDC + connection pool.</li> + <li>Correct a regression in 9.0.81 that broke HTTP compression.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-9.0-doc/changelog.html#Tomcat_9.0.82_(remm)">Tomcat 9 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="download-90.cgi">Download</a> +</p> +</section> + +<section name="Tomcat 9.0.81 Released" rtext="2023-10-10"> +<p> +The Apache Tomcat Project is proud to announce the release of version 9.0.81 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 8 platform. The notable changes compared to 9.0.81 include:</p> +<ul> + <li>Update Tomcat Native to 1.2.39 to pick up Windows binaries built with + OpenSSL 3.0.11.</li> + <li>Provide a lifecycle listener that will automatically reload TLS + configurations a set time before the certificate is due to expire. + This is intended to be used with third-party tools that regularly + renew TLS certificates.</li> + <li>Improve performance of EL expressions in JSPs that use implicit + objects.</li> + <li>Several improvements to thread safety and recycling cleanup.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-9.0-doc/changelog.html#Tomcat_9.0.81_(remm)">Tomcat 9 +changelog</a>. +</p> + +<p><strong>Note:</strong> There are known regressions: +with jdbc-pool (see bug <bug>67664</bug>) and +with Connector configurations when <code>compression</code> is enabled +(see bug <bug>67670</bug>). They will be fixed in the next release. +</p> + +<p style="text-align: center;"> +<a href="download-90.cgi">Download</a> +</p> +</section> + +<section name="Tomcat 10.1.15 Released" rtext="2023-10-16"> +<p> +The Apache Tomcat Project is proud to announce the release of version 10.1.15 +of Apache Tomcat. This release implements specifications that are part of the +Jakarta EE 10 platform.</p> +<p>Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 +without changes. Java EE based applications designed for Tomcat 9 and earlier +may be placed in the <code>$CATALINA_BASE/webapps-javaee</code> directory and +Tomcat will automatically convert them to Jakarta EE and copy them to the +webapps directory. This conversion is performed using the +<a href="https://github.com/apache/tomcat-jakartaee-migration";>Apache Tomcat +migration tool for Jakarta EE tool</a> which is also available as a separate +<a href="download-migration.cgi">download</a> for off-line use.</p> +<p>The notable changes in this release are:</p> +<ul> + <li>Correct a regression in 10.1.14 that broke the Tomcat JBDC + connection pool</li> + + <li>Correct a regression in 10.1.14 that broke HTTP compression</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-10.1-doc/changelog.html#Tomcat_10.1.15_(schultz)">Tomcat 10.1 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="download-10.cgi">Download</a> +</p> +</section> + +<section name="Tomcat 8.5.95 Released" rtext="2023-10-16"> +<p> +The Apache Tomcat Project is proud to announce the release of version 8.5.95 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 7 platform. The notable changes compared to 8.5.94 include: +</p> +<ul> + <li>Correct a regression in 8.5.94 that broke the Tomcat JBDC + connection pool</li> + + <li>Correct a regression in 8.5.94 that broke HTTP compression</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-8.5-doc/changelog.html#Tomcat_8.5.94_(schultz)">Tomcat 8 +changelog</a>. +</p> + +<p style="font-weight:bold">Please note that Apache Tomcat 8.5.x will +reach <a href="https://tomcat.apache.org/tomcat-85-eol.html";>End-of-life</a> +(EOL) on 31 March 2024.</p> + +<p style="text-align: center;"> +<a href="download-80.cgi">Download</a> +</p> +</section> + +<section name="Tomcat 11.0.0-M13 Released" rtext="2023-10-14"> +<p> +The Apache Tomcat Project is proud to announce the release of version 11.0.0-M13 +(alpha) of Apache Tomcat. This release is a milestone release and is targeted at +Jakarta EE 11.</p> +<p>Users of Tomcat 10 onwards should be aware that, as a result of the move from +Java EE to Jakarta EE as part of the transfer of Java EE to the Eclipse +Foundation, the primary package for all implemented APIs has changed from +<code>javax.*</code> to <code>jakarta.*</code>. This will almost certainly +require code changes to enable applications to migrate from Tomcat 9 and earlier +to Tomcat 10 and later. A +<a href="https://github.com/apache/tomcat-jakartaee-migration";>migration +tool</a> is available to aid this process.</p> +<p>The notable changes in this release are:</p> +<ul> + <li>Correct a regression in 11.0.0-M12 that broke the Tomcat JBDC + connection pool.</li> + <li>Correct a regression in 11.0.0-M12 that broke HTTP compression.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-11.0-doc/changelog.html#Tomcat_11.0.0-M12_(markt)">Tomcat 11 +<strong>(alpha)</strong> changelog</a>. +</p> + +<p><strong>Note:</strong> There are known regressions: +with jdbc-pool (see bug <bug>67664</bug>) and +with Connector configurations when <code>compression</code> is enabled +(see bug <bug>67670</bug>). They will be fixed in the next release. +</p> + +<p style="text-align: center;"> +<a href="download-11.cgi">Download</a> +</p> +</section> + +<section name="Tomcat 10.1.14 Released" rtext="2023-10-10"> +<p> +The Apache Tomcat Project is proud to announce the release of version 10.1.14 +of Apache Tomcat. This release implements specifications that are part of the +Jakarta EE 10 platform.</p> +<p>Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 +without changes. Java EE based applications designed for Tomcat 9 and earlier +may be placed in the <code>$CATALINA_BASE/webapps-javaee</code> directory and +Tomcat will automatically convert them to Jakarta EE and copy them to the +webapps directory. This conversion is performed using the +<a href="https://github.com/apache/tomcat-jakartaee-migration";>Apache Tomcat +migration tool for Jakarta EE tool</a> which is also available as a separate +<a href="download-migration.cgi">download</a> for off-line use.</p> +<p>The notable changes in this release are:</p> +<ul> + <li>Update Tomcat Native to 1.2.39 to pick up Windows binaries built with + OpenSSL 3.0.11.</li> + + <li>Provide a lifecycle listener that will automatically reload TLS + configurations a set time before the certificate is due to expire. + This is intended to be used with third-party tools that regularly + renew TLS certificates.</li> + + <li>Improve performance of EL expressions in JSPs that use implicit + objects.</li> + + <li>Several improvements to thread safety and recycling cleanup.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-10.1-doc/changelog.html#Tomcat_10.1.14_(schultz)">Tomcat 10.1 +changelog</a>. +</p> + +<p><strong>Note:</strong> There are known regressions: +with jdbc-pool (see bug <bug>67664</bug>) and +with Connector configurations when <code>compression</code> is enabled +(see bug <bug>67670</bug>). They will be fixed in the next release. +</p> + +<p style="text-align: center;"> +<a href="download-10.cgi">Download</a> +</p> +</section> + +<section name="Tomcat 8.5.94 Released" rtext="2023-10-10"> +<p> +The Apache Tomcat Project is proud to announce the release of version 8.5.94 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 7 platform. The notable changes compared to 8.5.93 include: +</p> +<ul> + <li>Update Tomcat Native to 1.2.39 to pick up Windows binaries built with + OpenSSL 3.0.11.</li> + + <li>Provide a lifecycle listener that will automatically reload TLS + configurations a set time before the certificate is due to expire. + This is intended to be used with third-party tools that regularly + renew TLS certificates.</li> + + <li>Improve performance of EL expressions in JSPs that use implicit + objects.</li> + + <li>Several improvements to thread safety and recycling cleanup.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-8.5-doc/changelog.html#Tomcat_8.5.95_(schultz)">Tomcat 8 +changelog</a>. +</p> + +<p><strong>Note:</strong> There are known regressions: +with jdbc-pool (see bug <bug>67664</bug>) and +with Connector configurations when <code>compression</code> is enabled +(see bug <bug>67670</bug>). They will be fixed in the next release. +</p> + +<p style="font-weight:bold">Please note that Apache Tomcat 8.5.x will +reach <a href="https://tomcat.apache.org/tomcat-85-eol.html";>End-of-life</a> +(EOL) on 31 March 2024.</p> + +<p style="text-align: center;"> +<a href="download-80.cgi">Download</a> +</p> +</section> + +<section name="Tomcat 9.0.81 Released" rtext="2023-10-10"> +<p> +The Apache Tomcat Project is proud to announce the release of version 9.0.81 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 8 platform. The notable changes compared to 9.0.81 include:</p> +<ul> + <li>Update Tomcat Native to 1.2.39 to pick up Windows binaries built with + OpenSSL 3.0.11.</li> + <li>Provide a lifecycle listener that will automatically reload TLS + configurations a set time before the certificate is due to expire. + This is intended to be used with third-party tools that regularly + renew TLS certificates.</li> + <li>Improve performance of EL expressions in JSPs that use implicit + objects.</li> + <li>Several improvements to thread safety and recycling cleanup.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-9.0-doc/changelog.html#Tomcat_9.0.81_(remm)">Tomcat 9 +changelog</a>. +</p> + +<p><strong>Note:</strong> There are known regressions: +with jdbc-pool (see bug <bug>67664</bug>) and +with Connector configurations when <code>compression</code> is enabled +(see bug <bug>67670</bug>). They will be fixed in the next release. +</p> + +<p style="text-align: center;"> +<a href="download-90.cgi">Download</a> +</p> +</section> + +<section name="Tomcat 11.0.0-M12 Released" rtext="2023-10-10"> +<p> +The Apache Tomcat Project is proud to announce the release of version 11.0.0-M12 +(alpha) of Apache Tomcat. This release is a milestone release and is targeted at +Jakarta EE 11.</p> +<p>Users of Tomcat 10 onwards should be aware that, as a result of the move from +Java EE to Jakarta EE as part of the transfer of Java EE to the Eclipse +Foundation, the primary package for all implemented APIs has changed from +<code>javax.*</code> to <code>jakarta.*</code>. This will almost certainly +require code changes to enable applications to migrate from Tomcat 9 and earlier +to Tomcat 10 and later. A +<a href="https://github.com/apache/tomcat-jakartaee-migration";>migration +tool</a> is available to aid this process.</p> +<p>The notable changes in this release are:</p> +<ul> +<li>Provide a lifecycle listener that will automatically reload TLS + configurations a set time before the certificate is due to expire. This is + intended to be used with third-party tools that regularly renew TLS + certificates.</li> +<li>Remove support for HTTP/2 server push.</li> +<li>Update Tomcat Native to 2.0.6 to pick up Windows binaries built with OpenSSL + 3.0.11.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-11.0-doc/changelog.html#Tomcat_11.0.0-M12_(markt)">Tomcat 11 +<strong>(alpha)</strong> changelog</a>. +</p> + +<p><strong>Note:</strong> There are known regressions: +with jdbc-pool (see bug <bug>67664</bug>) and +with Connector configurations when <code>compression</code> is enabled +(see bug <bug>67670</bug>). They will be fixed in the next release. +</p> + +<p style="text-align: center;"> +<a href="download-11.cgi">Download</a> +</p> +</section> + +<section name="Tomcat Native 2.0.6 Released" rtext="2023-10-02"> +<p> +The Apache Tomcat Project is proud to announce the release of version 2.0.6 of +Tomcat Native. The notable changes compared to 2.0.5 include: +</p> +<ul> +<li>Disable OCSP if the insecure optionalNoCA certificate verification option is + used</li> +<li>The windows binaries in this release have been built with OpenSSL + 3.0.11</li> +</ul> +<p style="text-align: center;"> +<a href="download-native.cgi">Download</a> | +<a href="native-doc/miscellaneous/changelog.html">Change log for 2.0.5</a> +</p> +</section> + +<section name="Tomcat 10.1.13 Released" rtext="2023-08-25"> +<p> +The Apache Tomcat Project is proud to announce the release of version 10.1.13 +of Apache Tomcat. This release implements specifications that are part of the +Jakarta EE 10 platform.</p> +<p>Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 +without changes. Java EE based applications designed for Tomcat 9 and earlier +may be placed in the <code>$CATALINA_BASE/webapps-javaee</code> directory and +Tomcat will automatically convert them to Jakarta EE and copy them to the +webapps directory. This conversion is performed using the +<a href="https://github.com/apache/tomcat-jakartaee-migration";>Apache Tomcat +migration tool for Jakarta EE tool</a> which is also available as a separate +<a href="download-migration.cgi">download</a> for off-line use.</p> +<p>The notable changes in this release are:</p> +<ul> +<li>If an application or library sets both a non-500 error code and the + <code>jakarta.servlet.error.exception</code> request attribute, use the + provided error code during error page processing rather than assuming an + error code of 500.</li> +<li>Fix for FORM authentication open redirect - CVE-2023-41080</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-10.1-doc/changelog.html#Tomcat_10.1.13_(markt)">Tomcat 10.1 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="download-10.cgi">Download</a> +</p> +</section> + +<section name="Tomcat 9.0.80 Released" rtext="2023-08-25"> +<p> +The Apache Tomcat Project is proud to announce the release of version 9.0.80 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 8 platform. The notable changes compared to 9.0.79 include:</p> +<ul> +<li>If an application or library sets both a non-500 error code and the + <code>jakarta.servlet.error.exception</code> request attribute, use the + provided error code during error page processing rather than assuming an + error code of 500.</li> +<li>Fix for FORM authentication open redirect - CVE-2023-41080</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-9.0-doc/changelog.html#Tomcat_9.0.80_(markt)">Tomcat 9 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="download-90.cgi">Download</a> +</p> +</section> + +<section name="Tomcat 11.0.0-M11 Released" rtext="2023-08-25"> +<p> +The Apache Tomcat Project is proud to announce the release of version 11.0.0-M11 +(alpha) of Apache Tomcat. This release is a milestone release and is targeted at +Jakarta EE 11.</p> +<p>Users of Tomcat 10 onwards should be aware that, as a result of the move from +Java EE to Jakarta EE as part of the transfer of Java EE to the Eclipse +Foundation, the primary package for all implemented APIs has changed from +<code>javax.*</code> to <code>jakarta.*</code>. This will almost certainly +require code changes to enable applications to migrate from Tomcat 9 and earlier +to Tomcat 10 and later. A +<a href="https://github.com/apache/tomcat-jakartaee-migration";>migration +tool</a> is available to aid this process.</p> +<p>The notable changes in this release are:</p> +<ul> +<li>Update the HTTP parameter handling to align with the changes in the Jakarta + Servlet 6.1 API Javadoc for the ServletRequest methods used to obtain + request parameters. Invalid parameters and/or exceeding parameter size + and/or quantity limits now trigger exceptions. As a consequence, the + FailedRequestFilter has been removed.</li> +<li>If an application or library sets both a non-500 error code and the + <code>jakarta.servlet.error.exception</code> request attribute, use the + provided error code during error page processing rather than assuming an + error code of 500.</li> +<li>Fix for FORM authentication open redirect - CVE-2023-41080</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-11.0-doc/changelog.html#Tomcat_11.0.0-M11_(markt)">Tomcat 11 +<strong>(alpha)</strong> changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="download-11.cgi">Download</a> +</p> +</section> + +<section name="Tomcat 8.5.93 Released" rtext="2023-08-25"> +<p> +The Apache Tomcat Project is proud to announce the release of version 8.5.93 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 7 platform. The notable changes compared to 8.5.92 include: +</p> +<ul> +<li>If an application or library sets both a non-500 error code and the + <code>jakarta.servlet.error.exception</code> request attribute, use the + provided error code during error page processing rather than assuming an + error code of 500.</li> +<li>Fix for FORM authentication open redirect - CVE-2023-41080</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-8.5-doc/changelog.html#Tomcat_8.5.93_(markt)">Tomcat 8 +changelog</a>. +</p> + +<p style="font-weight:bold">Please note that Apache Tomcat 8.5.x will +reach <a href="https://tomcat.apache.org/tomcat-85-eol.html";>End-of-life</a> +(EOL) on 31 March 2024.</p> + +<p style="text-align: center;"> +<a href="download-80.cgi">Download</a> +</p> +</section> + +<section name="Tomcat 9.0.79 Released" rtext="2023-08-15"> +<p> +The Apache Tomcat Project is proud to announce the release of version 9.0.79 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 8 platform. The notable changes compared to 9.0.78 include:</p> +<ul> +<li>Refactor HTTP/2 implementation to reduce pinning when using virtual + threads.</li> +<li>Pass through ciphers referring to an OpenSSL profile, such as + PROFILE=SYSTEM instead of producing an error trying to parse it.</li> +<li>Update Tomcat Native to 2.0.5.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-9.0-doc/changelog.html#Tomcat_9.0.79_(remm)">Tomcat 9 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="download-90.cgi">Download</a> +</p> +</section> + +<section name="Tomcat 10.1.12 Released" rtext="2023-08-14"> +<p> +The Apache Tomcat Project is proud to announce the release of version 10.1.12 +of Apache Tomcat. This release implements specifications that are part of the +Jakarta EE 10 platform.</p> +<p>Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 +without changes. Java EE based applications designed for Tomcat 9 and earlier +may be placed in the <code>$CATALINA_BASE/webapps-javaee</code> directory and +Tomcat will automatically convert them to Jakarta EE and copy them to the +webapps directory. This conversion is performed using the +<a href="https://github.com/apache/tomcat-jakartaee-migration";>Apache Tomcat +migration tool for Jakarta EE tool</a> which is also available as a separate +<a href="download-migration.cgi">download</a> for off-line use.</p> +<p>The notable changes in this release are:</p> +<ul> +<li>Refactor HTTP/2 implementation to reduce pinning when using virtual + threads.</li> +<li>Pass through ciphers referring to an OpenSSL profile, such as + PROFILE=SYSTEM instead of producing an error trying to parse it.</li> +<li>Update Tomcat Native to 2.0.5.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-10.1-doc/changelog.html#Tomcat_10.1.12_(markt)">Tomcat 10.1 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="download-10.cgi">Download</a> +</p> +</section> + +<section name="Tomcat 8.5.92 Released" rtext="2023-08-14"> +<p> +The Apache Tomcat Project is proud to announce the release of version 8.5.92 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 7 platform. The notable changes compared to 8.5.91 include: +</p> +<ul> +<li>Refactor HTTP/2 implementation to reduce pinning when using virtual + threads.</li> +<li>Fix a NullPointerException when flushing batched WebSocket messages + with compression enabled using permessage-deflate.</li> +<li>Update Tomcat Native to 1.2.38 to pick up Windows binaries built + with OpenSSL 1.1.1v</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-8.5-doc/changelog.html#Tomcat_8.5.92_(markt)">Tomcat 8 +changelog</a>. +</p> + +<p style="font-weight:bold">Please note that Apache Tomcat 8.5.x will +reach <a href="https://tomcat.apache.org/tomcat-85-eol.html";>End-of-life</a> +(EOL) on 31 March 2024.</p> + +<p style="text-align: center;"> +<a href="download-80.cgi">Download</a> +</p> +</section> + +<section name="Tomcat 11.0.0-M10 Released" rtext="2023-08-14"> +<p> +The Apache Tomcat Project is proud to announce the release of version 11.0.0-M10 +(alpha) of Apache Tomcat. This release is a milestone release and is targeted at +Jakarta EE 11.</p> +<p>Users of Tomcat 10 onwards should be aware that, as a result of the move from +Java EE to Jakarta EE as part of the transfer of Java EE to the Eclipse +Foundation, the primary package for all implemented APIs has changed from +<code>javax.*</code> to <code>jakarta.*</code>. This will almost certainly +require code changes to enable applications to migrate from Tomcat 9 and earlier +to Tomcat 10 and later. A +<a href="https://github.com/apache/tomcat-jakartaee-migration";>migration +tool</a> is available to aid this process.</p> +<p>The notable changes in this release are:</p> +<ul> +<li>Refactor HTTP/2 implementation to reduce pinning when using virtual + threads.</li> +<li>Pass through ciphers referring to an OpenSSL profile, such as + PROFILE=SYSTEM instead of producing an error trying to parse it.</li> +<li>Update Tomcat Native to 2.0.5.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-11.0-doc/changelog.html#Tomcat_11.0.0-M10_(markt)">Tomcat 11 +<strong>(alpha)</strong> changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="download-11.cgi">Download</a> +</p> +</section> + +<section name="Tomcat Native 2.0.5 Released" rtext="2023-08-07"> +<p> +The Apache Tomcat Project is proud to announce the release of version 2.0.5 of +Tomcat Native. The notable changes compared to 2.0.4 include: +</p> +<ul> +<li>Align default pass phrase prompt with HTTPd</li> +<li>Update autotools and associated fixes</li> +<li>Fix memory leak in SNI processing</li> +<li>The windows binaries in this release have been built with OpenSSL 3.0.10</li> +</ul> +<p style="text-align: center;"> +<a href="download-native.cgi">Download</a> | +<a href="native-doc/miscellaneous/changelog.html">Change log for 2.0.5</a> +</p> +</section> + +<section name="Tomcat Native 1.2.38 Released" rtext="2023-08-07"> +<p> +The Apache Tomcat Project is proud to announce the release of version 1.2.38 of +Tomcat Native. The notable changes since 1.2.37 include: +</p> +<ul> +<li>Align default pass phrase prompt with HTTPd</li> +<li>Fix memory leak in SNI processing</li> +<li>Windows binaries built with OpenSSL 1.1.1v.</li> +</ul> +<p style="text-align: center;"> +<a href="download-native.cgi">Download</a> | +<a href="native-1.2-doc/miscellaneous/changelog.html">Change log for 1.2.38</a> +</p> +</section> + +<section name="Tomcat 9.0.78 Released" rtext="2023-07-10"> +<p> +The Apache Tomcat Project is proud to announce the release of version 9.0.78 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 8 platform. The notable changes compared to 9.0.76 include:</p> +<ul> +<li>Add ContextNamingInfoListener, a listener which creates context naming + information environment entries.</li> +<li>Add PropertiesRoleMappingListener, a listener which populates the + context's role mapping from a properties file.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-9.0-doc/changelog.html#Tomcat_9.0.78_(remm)">Tomcat 9 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="download-90.cgi">Download</a> +</p> +</section> + +<section name="Tomcat 10.1.11 Released" rtext="2023-07-10"> +<p> +The Apache Tomcat Project is proud to announce the release of version 10.1.11 +of Apache Tomcat. This release implements specifications that are part of the +Jakarta EE 10 platform.</p> +<p>Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 +without changes. Java EE based applications designed for Tomcat 9 and earlier +may be placed in the <code>$CATALINA_BASE/webapps-javaee</code> directory and +Tomcat will automatically convert them to Jakarta EE and copy them to the +webapps directory. This conversion is performed using the +<a href="https://github.com/apache/tomcat-jakartaee-migration";>Apache Tomcat +migration tool for Jakarta EE tool</a> which is also available as a separate +<a href="download-migration.cgi">download</a> for off-line use.</p> +<p>The notable changes in this release are:</p> +<ul> + <li>Add ContextNamingInfoListener, a listener which creates context naming + information environment entries.</li> + + <li>Add PropertiesRoleMappingListener, a listener which populates the + context's role mapping from a properties file.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-10.1-doc/changelog.html#Tomcat_10.1.11_(schultz)">Tomcat 10.1 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="download-10.cgi">Download</a> +</p> +</section> + +<section name="Tomcat 8.5.91 Released" rtext="2023-07-10"> +<p> +The Apache Tomcat Project is proud to announce the release of version 8.5.91 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 7 platform. The notable changes compared to 8.5.90 include: +</p> +<ul> + <li>Add ContextNamingInfoListener, a listener which creates context naming + information environment entries.</li> + + <li>Add PropertiesRoleMappingListener, a listener which populates the + context's role mapping from a properties file.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-8.5-doc/changelog.html#Tomcat_8.5.91_(schultz)">Tomcat 8 +changelog</a>. +</p> + +<p style="font-weight:bold">Please note that Apache Tomcat 8.5.x will +reach <a href="https://tomcat.apache.org/tomcat-85-eol.html";>End-of-life</a> +(EOL) on 31 March 2024.</p> + +<p style="text-align: center;"> +<a href="download-80.cgi">Download</a> +</p> +</section> + +<section name="Tomcat 11.0.0-M9 Released" rtext="2023-07-10"> +<p> +The Apache Tomcat Project is proud to announce the release of version 11.0.0-M9 +(alpha) of Apache Tomcat. This release is a milestone release and is targeted at +Jakarta EE 11.</p> +<p>Users of Tomcat 10 onwards should be aware that, as a result of the move from +Java EE to Jakarta EE as part of the transfer of Java EE to the Eclipse +Foundation, the primary package for all implemented APIs has changed from +<code>javax.*</code> to <code>jakarta.*</code>. This will almost certainly +require code changes to enable applications to migrate from Tomcat 9 and earlier +to Tomcat 10 and later. A +<a href="https://github.com/apache/tomcat-jakartaee-migration";>migration +tool</a> is available to aid this process.</p> +<p>The notable changes in this release are:</p> +<ul> +<li>Add ContextNamingInfoListener, a listener which creates context naming + information environment entries.</li> +<li>Add PropertiesRoleMappingListener, a listener which populates the context's + role mapping from a properties file.</li> +<li>Update the Jakarta EL and Jakarta WebSocket implementations to align with + the latest changes planned for Jakarta EE 11.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-11.0-doc/changelog.html#Tomcat_11.0.0-M9_(markt)">Tomcat 11 +<strong>(alpha)</strong> changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="download-11.cgi">Download</a> +</p> +</section> + +<section name="Tomcat 10.1.10 Released" rtext="2023-06-12"> +<p> +The Apache Tomcat Project is proud to announce the release of version 10.1.10 +of Apache Tomcat. This release implements specifications that are part of the +Jakarta EE 10 platform.</p> +<p>Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 +without changes. Java EE based applications designed for Tomcat 9 and earlier +may be placed in the <code>$CATALINA_BASE/webapps-javaee</code> directory and +Tomcat will automatically convert them to Jakarta EE and copy them to the +webapps directory. This conversion is performed using the +<a href="https://github.com/apache/tomcat-jakartaee-migration";>Apache Tomcat +migration tool for Jakarta EE tool</a> which is also available as a separate +<a href="download-migration.cgi">download</a> for off-line use.</p> +<p>The notable changes in this release are:</p> +<ul> + <li>Add support for virtual threads. (Java 21+ only)</li> + + <li>Update HTTP/2 to use the RFC-9218 prioritization scheme.</li> + + <li>Deprecate the xssProtectionEnabled from HttpHeaderSecurityFilter + and set the default value to false.</li> + + <li>Update Tomcat Native to 2.0.4 which includes binaries for Windows + built with OpenSSL 3.0.9.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-10.1-doc/changelog.html#Tomcat_10.1.10_(schultz)">Tomcat 10.1 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="download-10.cgi">Download</a> +</p> +</section> + +<section name="Tomcat 8.5.90 Released" rtext="2023-06-12"> +<p> +The Apache Tomcat Project is proud to announce the release of version 8.5.90 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 7 platform. The notable changes compared to 8.5.89 include: +</p> +<ul> + <li>Add support for virtual threads. (Java 21+ only)</li> + + <li>Update HTTP/2 to use the RFC-9218 prioritization scheme.</li> + + <li>Deprecate the xssProtectionEnabled from HttpHeaderSecurityFilter + and set the default value to false.</li> + + <li>Update Tomcat Native to 1.2.37 which includes binaries for Windows + built with OpenSSL 1.1.1u.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-8.5-doc/changelog.html#Tomcat_8.5.90_(schultz)">Tomcat 8 +changelog</a>. +</p> + +<p style="font-weight:bold">Please note that Apache Tomcat 8.5.x will +reach <a href="https://tomcat.apache.org/tomcat-85-eol.html";>End-of-life</a> +(EOL) on 31 March 2024.</p> + +<p style="text-align: center;"> +<a href="download-80.cgi">Download</a> +</p> +</section> + +<section name="Tomcat 9.0.76 Released" rtext="2023-06-09"> +<p> +The Apache Tomcat Project is proud to announce the release of version 9.0.76 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 8 platform. The notable changes compared to 9.0.75 include:</p> +<ul> +<li>Add support for virtual threads. (Java 21+ only)</li> +<li>Update HTTP/2 to use the RFC-9218 prioritization scheme.</li> +<li>Deprecate the xssProtectionEnabled from HttpHeaderSecurityFilter + and set the default value to false.</li> +<li>Update Tomcat Native to 2.0.4 which includes binaries for Windows + built with OpenSSL 3.0.9.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-9.0-doc/changelog.html#Tomcat_9.0.76_(remm)">Tomcat 9 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="download-90.cgi">Download</a> +</p> +</section> + +<section name="Tomcat 11.0.0-M7 Released" rtext="2023-06-08"> +<p> +The Apache Tomcat Project is proud to announce the release of version 11.0.0-M7 +(alpha) of Apache Tomcat. This release is a milestone release and is targeted at +Jakarta EE 11.</p> +<p>Users of Tomcat 10 onwards should be aware that, as a result of the move from +Java EE to Jakarta EE as part of the transfer of Java EE to the Eclipse +Foundation, the primary package for all implemented APIs has changed from +<code>javax.*</code> to <code>jakarta.*</code>. This will almost certainly +require code changes to enable applications to migrate from Tomcat 9 and earlier +to Tomcat 10 and later. A +<a href="https://github.com/apache/tomcat-jakartaee-migration";>migration +tool</a> is available to aid this process.</p> +<p>The notable changes in this release are:</p> +<ul> +<li>The minimum Java version has been increased to Java 21.</li> +<li>Add support for virtual threads.</li> +<li>Add RateLimitFilter which can be used to mitigate DoS and brute force + attacks.</li> +<li>Update Tomcat Native to 2.0.4 which includes binaries for Windows built with + OpenSSL 3.0.9.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-11.0-doc/changelog.html#Tomcat_11.0.0-M7_(markt)">Tomcat 11 +<strong>(alpha)</strong> changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="download-11.cgi">Download</a> +</p> +</section> + +<section name="Tomcat Native 2.0.4 Released" rtext="2023-06-02"> +<p> +The Apache Tomcat Project is proud to announce the release of version 2.0.4 of +Tomcat Native. The notable changes compared to 2.0.3 include: +</p> +<ul> +<li>The windows binaries in this release have been built with OpenSSL 3.0.9</li> +</ul> +<p style="text-align: center;"> +<a href="download-native.cgi">Download</a> | +<a href="native-doc/miscellaneous/changelog.html">ChangeLog for 2.0.4</a> +</p> +</section> + +<section name="Tomcat Native 1.2.37 Released" rtext="2023-06-02"> +<p> +The Apache Tomcat Project is proud to announce the release of version 1.2.37 of +Tomcat Native. The notable changes since 1.2.36 include: +</p> +<ul> +<li>Windows binaries built with OpenSSL 1.1.1u.</li> +</ul> +<p style="text-align: center;"> +<a href="download-native.cgi">Download</a> | +<a href="native-1.2-doc/miscellaneous/changelog.html">ChangeLog for 1.2.37</a> +</p> +</section> + +<section name="Tomcat 10.1.9 Released" rtext="2023-05-19"> +<p> +The Apache Tomcat Project is proud to announce the release of version 10.1.9 +of Apache Tomcat. This release implements specifications that are part of the +Jakarta EE 10 platform.</p> +<p>Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 +without changes. Java EE based applications designed for Tomcat 9 and earlier +may be placed in the <code>$CATALINA_BASE/webapps-javaee</code> directory and +Tomcat will automatically convert them to Jakarta EE and copy them to the +webapps directory. This conversion is performed using the +<a href="https://github.com/apache/tomcat-jakartaee-migration";>Apache Tomcat +migration tool for Jakarta EE tool</a> which is also available as a separate +<a href="download-migration.cgi">download</a> for off-line use.</p> +<p>The notable changes in this release are:</p> +<ul> + <li>Many improvements to the JSON access log valve.</li> + + <li>Deprecate support for the HTTP Connector settings rejectIllegalHeader + and allowHostHeaderMismatch and reject HTTP headers without names.</li> + + <li>Add a RateLimitFilter which can be used to mitigate DoS and Brute + Force attacks.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-10.1-doc/changelog.html#Tomcat_10.1.9_(schultz)">Tomcat 10.1 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="download-10.cgi">Download</a> +</p> +</section> + +<section name="Tomcat 8.5.89 Released" rtext="2023-05-19"> +<p> +The Apache Tomcat Project is proud to announce the release of version 8.5.89 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 7 platform. The notable changes compared to 8.5.88 include: +</p> +<ul> + <li>Reduce the default value of maxParameterCount from 10,000 to 1,000.</li> + + <li>Correct a regression in the fix for bug 66442 that meant that streams + without a response body did not decrement the active stream count + when completing, leading to + ERR_HTTP2_SERVER_REFUSED_STREAM for some connections.</li> + + <li>Refactor synchronization blocks locking on SocketWrapper to use + ReentrantLock to support users wishing to experiment with project + Loom.</li> + + <li>Implement RFC 9239; note the MIME types for Javascript has changed + to text/javascript.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-8.5-doc/changelog.html#Tomcat_8.5.89_(schultz)">Tomcat 8 +changelog</a>. +</p> + +<p style="font-weight:bold">Please note that Apache Tomcat 8.5.x will +reach <a href="https://tomcat.apache.org/tomcat-85-eol.html";>End-of-life</a> +(EOL) on 31 March 2024.</p> + +<p style="text-align: center;"> +<a href="download-80.cgi">Download</a> +</p> +</section> + +<section name="Tomcat 9.0.75 Released" rtext="2023-05-10"> +<p> +The Apache Tomcat Project is proud to announce the release of version 9.0.75 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 8 platform. The notable changes compared to 9.0.74 include:</p> +<ul> +<li>Many improvements to the json access log valve.</li> +<li>Deprecate support for the HTTP Connector settings rejectIllegalHeader and + allowHostHeaderMismatch.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-9.0-doc/changelog.html#Tomcat_9.0.75_(remm)">Tomcat 9 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="download-90.cgi">Download</a> +</p> +</section> + +<section name="Tomcat 11.0.0-M6 Released" rtext="2023-05-09"> +<p> +The Apache Tomcat Project is proud to announce the release of version 11.0.0-M6 +(alpha) of Apache Tomcat. This release is a milestone release and is targeted at +Jakarta EE 11.</p> +<p>Users of Tomcat 10 onwards should be aware that, as a result of the move from +Java EE to Jakarta EE as part of the transfer of Java EE to the Eclipse +Foundation, the primary package for all implemented APIs has changed from +<code>javax.*</code> to <code>jakarta.*</code>. This will almost certainly +require code changes to enable applications to migrate from Tomcat 9 and earlier +to Tomcat 10 and later. A +<a href="https://github.com/apache/tomcat-jakartaee-migration";>migration +tool</a> is available to aid this process.</p> +<p>The notable changes in this release are:</p> +<ul> +<li>Various improvements to access logging.</li> +<li>Remove support for the HTTP Connector settings rejectIllegalHeader and + allowHostHeaderMismatch. These are now hard-coded to the previous + defaults.</li> +<li>Update the packaged version of the Tomcat Migration Tool for Jakarta + EE to 1.0.7.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-11.0-doc/changelog.html#Tomcat_11.0.0-M6_(markt)">Tomcat 11 +<strong>(alpha)</strong> changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="download-11.cgi">Download</a> +</p> +</section> + +<section name="Tomcat Migration Tool for Jakarta EE 1.0.7 Released" rtext="2023-05-02"> +<p> +The Apache Tomcat Project is proud to announce the release of 1.0.7 of the +Apache Tomcat Migration Tool for Jakarta EE. This release contains a number of +bug fixes and improvements compared to version 1.0.6.</p> +<p>The notable changes in this release are:</p> +<ul> +<li>Update OSGI servlet specification versions if present in manifest file. PR + #42 provided by Ivan Furnadjiev.</li> +<li>Add configuration option, matchExcludesAgainstPathName that can be used to + configure exclusions based on path name rather than just file name. PR 38 + provided by Réda Housni Alaoui.</li> +<li>When converting directories, rename files according to the chosen profile. + </li> +<li>Work-around a known JDK bug when converting using the streaming approach. + </li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="https://github.com/apache/tomcat-jakartaee-migration/blob/main/CHANGES.md";>changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="download-migration.cgi">Download</a> +</p> +</section> + +<section name="Tomcat 10.1.8 Released" rtext="2023-04-19"> +<p> +The Apache Tomcat Project is proud to announce the release of version 10.1.8 +of Apache Tomcat. This release implements specifications that are part of the +Jakarta EE 10 platform.</p> +<p>Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 +without changes. Java EE based applications designed for Tomcat 9 and earlier +may be placed in the <code>$CATALINA_BASE/webapps-javaee</code> directory and +Tomcat will automatically convert them to Jakarta EE and copy them to the +webapps directory. This conversion is performed using the +<a href="https://github.com/apache/tomcat-jakartaee-migration";>Apache Tomcat +migration tool for Jakarta EE tool</a> which is also available as a separate +<a href="download-migration.cgi">download</a> for off-line use.</p> +<p>The notable changes in this release are:</p> +<ul> + <li>Reduce the default value of maxParameterCount from 10,000 to 1,000.</li> + + <li>Correct a regression in the fix for bug 66442 that meant that streams + without a response body did not decrement the active stream count + when completing leading to ERR_HTTP2_SERVER_REFUSED_STREAM for some + connections.</li> + + <li>Expand the validation of the value of the Sec-Websocket-Key header in + the HTTP upgrade request that initiates a WebSocket connection. The + value is not decoded but it is checked for the correct length and that + only valid characters from the base64 alphabet are used.</li> + + <li>Implement RFC 9239; note the MIME types for Javascript has changed + to text/javascript.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-10.1-doc/changelog.html#Tomcat_10.1.8_(schultz)">Tomcat 10.1 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="download-10.cgi">Download</a> +</p> +</section> + +<section name="Tomcat 8.5.88 Released" rtext="2023-04-19"> +<p> +The Apache Tomcat Project is proud to announce the release of version 8.5.88 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 7 platform. The notable changes compared to 8.5.87 include: +</p> +<ul> + <li>Reduce the default value of maxParameterCount from 10,000 to 1,000.</li> + + <li>Correct a regression in the fix for bug 66442 that meant that streams + without a response body did not decrement the active stream count + when completing, leading to + ERR_HTTP2_SERVER_REFUSED_STREAM for some connections.</li> + + <li>Refactor synchronization blocks locking on SocketWrapper to use + ReentrantLock to support users wishing to experiment with project + Loom.</li> + + <li>Implement RFC 9239; note the MIME types for Javascript has changed + to text/javascript.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-8.5-doc/changelog.html#Tomcat_8.5.88_(schultz)">Tomcat 8 +changelog</a>. +</p> + +<p style="font-weight:bold">Please note that Apache Tomcat 8.5.x will +reach <a href="https://tomcat.apache.org/tomcat-85-eol.html";>End-of-life</a> +(EOL) on 31 March 2024.</p> + +<p style="text-align: center;"> +<a href="download-80.cgi">Download</a> +</p> +</section> + +<section name="Tomcat 9.0.74 Released" rtext="2023-04-18"> +<p> +The Apache Tomcat Project is proud to announce the release of version 9.0.74 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 8 platform. The notable changes compared to 9.0.73 include:</p> +<ul> +<li>Correct a regression in the fix for bug 66442 that meant that streams + without a response body did not decrement the active stream count + when completing, leading to + ERR_HTTP2_SERVER_REFUSED_STREAM for some connections.</li> +<li>Add an access log valve that uses a json format. Based on a pull request + provided by Thomas Meyer.</li> +<li>Refactor synchronization blocks locking on SocketWrapper to use + ReentrantLock to support users wishing to experiment with project Loom.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-9.0-doc/changelog.html#Tomcat_9.0.74_(remm)">Tomcat 9 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="download-90.cgi">Download</a> +</p> +</section> + +<section name="Tomcat 11.0.0-M5 Released" rtext="2023-04-19"> +<p> +The Apache Tomcat Project is proud to announce the release of version 11.0.0-M5 +(alpha) of Apache Tomcat. This release is a milestone release and is targeted at +Jakarta EE 11.</p> +<p>Users of Tomcat 10 onwards should be aware that, as a result of the move from +Java EE to Jakarta EE as part of the transfer of Java EE to the Eclipse +Foundation, the primary package for all implemented APIs has changed from +<code>javax.*</code> to <code>jakarta.*</code>. This will almost certainly +require code changes to enable applications to migrate from Tomcat 9 and earlier +to Tomcat 10 and later. A +<a href="https://github.com/apache/tomcat-jakartaee-migration";>migration +tool</a> is available to aid this process.</p> +<p>The notable changes in this release are:</p> +<ul> +<li>Reduce the default value of maxParameterCount from 10,000 to 1,000.</li> +<li>Correct a regression in the fix for bug 66442 that meant that streams + without a response body did not decrement the active stream count when + completing leading to ERR_HTTP2_SERVER_REFUSED_STREAM for some + connections.</li> +<li>Expand the validation of the value of the Sec-Websocket-Key header in the + HTTP upgrade request that initiates a WebSocket connection. The value is not + decoded but it is checked for the correct length and that only valid + characters from the base64 alphabet are used.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-11.0-doc/changelog.html#Tomcat_11.0.0-M5_(markt)">Tomcat 11 +<strong>(alpha)</strong> changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="download-11.cgi">Download</a> +</p> +</section> + +<section name="Tomcat 10.1.7 Released" rtext="2023-03-03"> +<p> +The Apache Tomcat Project is proud to announce the release of version 10.1.7 +of Apache Tomcat. This release implements specifications that are part of the +Jakarta EE 10 platform.</p> +<p>Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 +without changes. Java EE based applications designed for Tomcat 9 and earlier +may be placed in the <code>$CATALINA_BASE/webapps-javaee</code> directory and +Tomcat will automatically convert them to Jakarta EE and copy them to the +webapps directory. This conversion is performed using the +<a href="https://github.com/apache/tomcat-jakartaee-migration";>Apache Tomcat +migration tool for Jakarta EE tool</a> which is also available as a separate +<a href="download-migration.cgi">download</a> for off-line use.</p> +<p>The notable changes in this release are:</p> +<ul> + <li>Correct a regression introduced in the fix for bug 66196 that meant + that the HTTP headers and/or request line could get corrupted (one + part overwriting another part) within a single request.</li> + + <li>Revert the switch to using the ServiceLoader mechanism to load the + custom URL protocol handlers that Tomcat uses. The original system + property based approach has been restored.</li> + + <li>Restore inline state after async operation in NIO2, to account the + fact that unexpected exceptions are sometimes thrown by the + implementation. Patch submitted by zhougang.</li> + + <li>Provide a more appropriate response (501 rather than 400) when + rejecting an HTTP request using the CONNECT method.</li> + + <li>Add support for txt: and rnd: rewrite map types from mod_rewrite. + Based on a pull request provided by Dimitrios Soumis.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-10.1-doc/changelog.html#Tomcat_10.1.7_(schultz)">Tomcat 10.1 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="download-10.cgi">Download</a> +</p> +</section> + +<section name="Tomcat 8.5.87 Released" rtext="2023-03-03"> +<p> +The Apache Tomcat Project is proud to announce the release of version 8.5.87 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 7 platform. The notable changes compared to 8.5.86 include: +</p> +<ul> + <li>Correct a regression introduced in the fix for bug 66196 that + meant that the HTTP headers and/or request line could get + corrupted (one part overwriting another part) within a single + request.</li> + + <li>Provide a more appropriate response (501 rather than 400) when + rejecting an HTTP request using the CONNECT method.</li> + + <li>Add support for txt: and rnd: rewrite map types from mod_rewrite. + Based on a pull request provided by Dimitrios Soumis.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-8.5-doc/changelog.html#Tomcat_8.5.87_(schultz)">Tomcat 8 +changelog</a>. +</p> + +<p style="font-weight:bold">Please note that Apache Tomcat 8.5.x will +reach <a href="https://tomcat.apache.org/tomcat-85-eol.html";>End-of-life</a> +(EOL) on 31 March 2024.</p> + +<p style="text-align: center;"> +<a href="download-80.cgi">Download</a> +</p> +</section> + +<section name="Tomcat 11.0.0-M4 Released" rtext="2023-03-06"> +<p> +The Apache Tomcat Project is proud to announce the release of version 11.0.0-M4 +(alpha) of Apache Tomcat. This release is a milestone release and is targeted at +Jakarta EE 11.</p> +<p>Users of Tomcat 10 onwards should be aware that, as a result of the move from +Java EE to Jakarta EE as part of the transfer of Java EE to the Eclipse +Foundation, the primary package for all implemented APIs has changed from +<code>javax.*</code> to <code>jakarta.*</code>. This will almost certainly +require code changes to enable applications to migrate from Tomcat 9 and earlier +to Tomcat 10 and later. A +<a href="https://github.com/apache/tomcat-jakartaee-migration";>migration +tool</a> is under development to aid this process.</p> +<p>The notable changes in this release are:</p> +<ul> + <li>Revert the switch to using the ServiceLoader mechanism to load the custom + URL protocol handlers that Tomcat uses. The original system property based + approach has been restored.</li> + <li>Provide an implementation of the sub-set of JavaBeans support that does + not depend on the java.beans package. This for use by Expression Language + when the java.desktop module (which is where the java.beans package + resides) is not available.</li> + <li>Restore inline state after async operation in NIO2, to account the fact + that unexpected exceptions are sometimes thrown by the implementation. + Patch submitted by zhougang.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-11.0-doc/changelog.html#Tomcat_11.0.0-M4_(markt)">Tomcat 11 +<strong>(alpha)</strong> changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="download-11.cgi">Download</a> +</p> +</section> + +<section name="Tomcat 9.0.73 Released" rtext="2023-03-03"> +<p> +The Apache Tomcat Project is proud to announce the release of version 9.0.73 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 8 platform. The notable changes compared to 9.0.72 include:</p> +<ul> +<li>Correct a regression introduced in the fix for bug + 66196 that meant that the HTTP headers and/or request line + could get corrupted (one part overwriting another part) within a single + request.</li> +<li>Provide a more appropriate response (501 rather than 400) when rejecting + an HTTP request using the CONNECT method.</li> +<li>Add support for txt: and rnd: rewrite map types from mod_rewrite. Based + on a pull request provided by Dimitrios Soumis.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-9.0-doc/changelog.html#Tomcat_9.0.73_(remm)">Tomcat 9 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="download-90.cgi">Download</a> +</p> +</section> + +<section name="Tomcat 10.1.6 Released" rtext="2023-02-24"> +<p> +The Apache Tomcat Project is proud to announce the release of version 10.1.6 +of Apache Tomcat. This release implements specifications that are part of the +Jakarta EE 10 platform.</p> +<p>Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 +without changes. Java EE based applications designed for Tomcat 9 and earlier +may be placed in the <code>$CATALINA_BASE/webapps-javaee</code> directory and +Tomcat will automatically convert them to Jakarta EE and copy them to the +webapps directory. This conversion is performed using the +<a href="https://github.com/apache/tomcat-jakartaee-migration";>Apache Tomcat +migration tool for Jakarta EE tool</a> which is also available as a separate +<a href="download-migration.cgi">download</a> for off-line use.</p> +<p>The notable changes in this release are:</p> +<ul> + <li>Switch to using the ServiceLoader mechanism to load the custom URL + protocol handlers that Tomcat uses.</li> + + <li>Update the packaged version of the Apache Tomcat Native Library to + 2.0.3 to pick up the Windows binaries built with with OpenSSL 3.0.8.</li> + + <li>Add the shared address space specified by RFC 6598 (100.64.0.0/10) + to the list of trusted proxies for RemoteIPValve/Filter.</li> + + <li>Limit access to examples web application to localhost by default .</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-10.1-doc/changelog.html#Tomcat_10.1.6_(schultz)">Tomcat 10.1 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="download-10.cgi">Download</a> +</p> +</section> + +<section name="Tomcat 8.5.86 Released" rtext="2023-02-24"> +<p> +The Apache Tomcat Project is proud to announce the release of version 8.5.86 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 7 platform. The notable changes compared to 8.5.85 include: +</p> +<ul> + <li>Add an error report valve that allows redirecting to or proxying from + an external web server.</li> + + <li>Add the shared address space specified by RFC 6598 (100.64.0.0/10) + to the list of trusted proxies for RemoteIPValve/Filter.</li> + + <li>Log basic information for each configured TLS certificate when + Tomcat starts.</li> + + <li>Limit access to examples web application to localhost by default.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-8.5-doc/changelog.html#Tomcat_8.5.86_(schultz)">Tomcat 8 +changelog</a>. +</p> + +<p style="font-weight:bold">Please note that Apache Tomcat 8.5.x will +reach <a href="https://tomcat.apache.org/tomcat-85-eol.html";>End-of-life</a> +(EOL) on 31 March 2024.</p> + +<p style="text-align: center;"> +<a href="download-80.cgi">Download</a> +</p> +</section> + +<section name="Tomcat 9.0.72 Released" rtext="2023-02-23"> +<p> +The Apache Tomcat Project is proud to announce the release of version 9.0.72 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 8 platform. The notable changes compared to 9.0.71 include:</p> +<ul> +<li>Add an error report valve that allows redirecting to or proxying from an + external web server.</li> +<li>Log basic information for each configured TLS certificate when + Tomcat starts.</li> +<li>Add the shared address space specified by RFC 6598 (100.64.0.0/10) + to the list of trusted proxies for RemoteIPValve/Filter.</li> +<li>Limit access to examples web application to localhost by default.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-9.0-doc/changelog.html#Tomcat_9.0.71_(remm)">Tomcat 9 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="download-90.cgi">Download</a> +</p> +</section> + +<section name="Tomcat 11.0.0-M3 Released" rtext="2023-02-23"> +<p> +The Apache Tomcat Project is proud to announce the release of version 11.0.0-M3 +(alpha) of Apache Tomcat. This release is a milestone release and is targeted at +Jakarta EE 11.</p> +<p>Users of Tomcat 10 onwards should be aware that, as a result of the move from +Java EE to Jakarta EE as part of the transfer of Java EE to the Eclipse +Foundation, the primary package for all implemented APIs has changed from +<code>javax.*</code> to <code>jakarta.*</code>. This will almost certainly +require code changes to enable applications to migrate from Tomcat 9 and earlier +to Tomcat 10 and later. A +<a href="https://github.com/apache/tomcat-jakartaee-migration";>migration +tool</a> is under development to aid this process.</p> +<p>The notable changes in this release are:</p> +<ul> +<li>Increase the minimum supported Java version to Java 17.</li> +<li>Remove support for starting Tomcat under a SecurityManager.</li> +<li>Remove JAX-RPC support which was removed from the Jakarta EE platform for + Jakarta EE 9</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-11.0-doc/changelog.html#Tomcat_11.0.0-M3_(markt)">Tomcat 11 +<strong>(alpha)</strong> changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="download-11.cgi">Download</a> +</p> +</section> + +<section name="Tomcat Native 2.0.3 Released" rtext="2023-02-13"> +<p> +The Apache Tomcat Project is proud to announce the release of version 2.0.3 of +Tomcat Native. The notable changes compared to 2.0.2 include: +</p> +<ul> +<li>The windows binaries in this release have been built with OpenSSL 3.0.8</li> +</ul> +<p style="text-align: center;"> +<a href="download-native.cgi">Download</a> | +<a href="native-doc/miscellaneous/changelog.html">ChangeLog for 2.0.3</a> +</p> +</section> + +<section name="Tomcat Native 1.2.36 Released" rtext="2023-02-13"> +<p> +The Apache Tomcat Project is proud to announce the release of version 1.2.36 of +Tomcat Native. The notable changes since 1.2.35 include: +</p> +<ul> +<li>Windows binaries built with OpenSSL 1.1.1t.</li> +</ul> +<p style="text-align: center;"> +<a href="download-native.cgi">Download</a> | +<a href="native-1.2-doc/miscellaneous/changelog.html">ChangeLog for 1.2.36</a> +</p> +</section> + +<section name="Tomcat 8.5.85 Released" rtext="2023-01-19"> +<p> +The Apache Tomcat Project is proud to announce the release of version 8.5.85 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 7 platform. The notable changes compared to 8.5.84 include: +</p> +<ul> + <li>The default value of <code>AccessLogValve</code>'s file encoding is + now UTF-8.</li> + + <li>Correct a regression in the refactoring that replaced the use of the + URL constructors. The regression broke lookups for resources that + contained one or more characters in their name that required escaping + when used in a URI path.</li> + + <li>When an HTTP/2 stream was reset, the current active stream count was + not reduced. If enough resets occurred on a connection, the current + active stream count limit was reached and no new streams could be + created on that connection.</li> + + <li>Change the default of the org.apache.el.GET_CLASSLOADER_USE_PRIVILEGED + system property to true unless the EL library is running on Tomcat in + which case the default remains false as the EL library is already + called from within a privileged block and skipping the unnecessary + privileged block improves performance.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-8.5-doc/changelog.html#Tomcat_8.5.85_(schultz)">Tomcat 8 +changelog</a>. +</p> + +<p style="font-weight:bold">Please note that Apache Tomcat 8.5.x will +reach <a href="https://tomcat.apache.org/tomcat-85-eol.html";>End-of-life</a> +(EOL) on 31 March 2024.</p> + +<p style="text-align: center;"> +<a href="download-80.cgi">Download</a> +</p> +</section> + +<section name="Tomcat 9.0.71 Released" rtext="2023-01-13"> +<p> +The Apache Tomcat Project is proud to announce the release of version 9.0.71 +of Apache Tomcat. This release implements specifications that are part of the +Java EE 8 platform. The notable changes compared to 9.0.70 include:</p> +<ul> +<li>Correct a regression in the refactoring that replaced the use of the + URL constructors. The regression broke lookups for resources that + contained one or more characters in their name that required escaping + when used in a URI path.</li> +<li>When resetting an HTTP/2 stream because the final response has been + generated before the request has been fully read, use the HTTP/2 error + code NO_ERROR so that client does not discard the response. Based on a + suggestion by Lorenzo Dalla Vecchia.</li> +<li>Change the default of the org.apache.el.GET_CLASSLOADER_USE_PRIVILEGED + system property to true unless the EL library is running on Tomcat in + which case the default remains false as the EL library is already + called from within a privileged block and skipping the unnecessary + privileged block improves performance.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-9.0-doc/changelog.html#Tomcat_9.0.71_(remm)">Tomcat 9 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="download-90.cgi">Download</a> +</p> +</section> + +<section name="Tomcat 10.1.5 Released" rtext="2023-01-13"> +<p> +The Apache Tomcat Project is proud to announce the release of version 10.1.5 +of Apache Tomcat. This release implements specifications that are part of the +Jakarta EE 10 platform.</p> +<p>Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 +without changes. Java EE based applications designed for Tomcat 9 and earlier +may be placed in the <code>$CATALINA_BASE/webapps-javaee</code> directory and +Tomcat will automatically convert them to Jakarta EE and copy them to the +webapps directory. This conversion is performed using the +<a href="https://github.com/apache/tomcat-jakartaee-migration";>Apache Tomcat +migration tool for Jakarta EE tool</a> which is also available as a separate +<a href="download-migration.cgi">download</a> for off-line use.</p> +<p>The notable changes in this release are:</p> +<ul> +<li>Correct a regression in the refactoring that replaced the use of the URL + constructors. The regression broke lookups for resources that contained one + or more characters in their name that required escaping when used in a URI + path.</li> +<li>When resetting an HTTP/2 stream because the final response has been + generated before the request has been fully read, use the HTTP/2 error code + NO_ERROR so that client does not discard the response. Based on a suggestion + by Lorenzo Dalla Vecchia.</li> +<li>Change the default of the org.apache.el.GET_CLASSLOADER_USE_PRIVILEGED + system property to true unless the EL library is running on Tomcat in which + case the default remains false as the EL library is already called from + within a privileged block and skipping the unnecessary privileged block + improves performance.</li> +</ul> +<p> +Full details of these changes, and all the other changes, are available in the +<a href="tomcat-10.1-doc/changelog.html#Tomcat_10.1.5_(markt)">Tomcat 10.1 +changelog</a>. +</p> + +<p style="text-align: center;"> +<a href="download-10.cgi">Download</a> +</p> +</section> + +</body> +</document> --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
