Content

Older news

Announcements from previous years can be found here:

2026-03-20 Tomcat 11.0.20 Released

The Apache Tomcat Project is proud to announce the release of version 11.0.20 of Apache Tomcat. This release implements specifications that are part of the Jakarta EE 11 platform.

Users of Tomcat 10 onwards should be aware that, as a result of the move from Java EE to Jakarta EE as part of the transfer of Java EE to the Eclipse Foundation, the primary package for all implemented APIs has changed from javax.* to jakarta.*. This will almost certainly require code changes to enable applications to migrate from Tomcat 9 and earlier to Tomcat 10 and later. A migration tool is available to aid this process.

The notable changes in this release are:

  • Relax HTTP/2 header validation and respond to invalid requests with a stream reset or a 400 response as appropriate rather then with a connection reset.
  • Fix bug 69964: Respect the configured cipher order, which was no longer respected following the addition of TLS 1.3 specific cipher configuration. TLS 1.3 ciphers will always be first in the list.
  • Update Tomcat Native to 2.0.14 and increase the recommended version to 2.0.14.

Full details of these changes, and all the other changes, are available in the Tomcat 11 changelog.

Download

2026-03-20 Tomcat 9.0.116 Released

The Apache Tomcat Project is proud to announce the release of version 9.0.116 of Apache Tomcat. This release implements specifications that are part of the Java EE 8 platform. The notable changes compared to 9.0.115 include:

  • Relax HTTP/2 header validation and respond to invalid requests with a stream reset or a 400 response as appropriate rather then with a connection reset.
  • Fix bug 69964: Respect the configured cipher order, which was no longer respected following the addition of TLS 1.3 specific cipher configuration. TLS 1.3 ciphers will always be first in the list.
  • Update Tomcat Native to 1.3.7 / 2.0.14 and increase the recommended version to 1.3.7 / 2.0.14.

Full details of these changes, and all the other changes, are available in the Tomcat 9 changelog.

Download

Note: End of support for Tomcat 9.0.x has been announced as 31 March 2027.

2026-03-23 Tomcat 10.1.53 Released

The Apache Tomcat Project is proud to announce the release of version 10.1.53 of Apache Tomcat. This release implements specifications that are part of the Jakarta EE 10 platform.

Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 without changes. Java EE based applications designed for Tomcat 9 and earlier may be placed in the $CATALINA_BASE/webapps-javaee directory and Tomcat will automatically convert them to Jakarta EE and copy them to the webapps directory. This conversion is performed using the Apache Tomcat migration tool for Jakarta EE tool which is also available as a separate download for off-line use.

The notable changes in this release are:

  • Relax HTTP/2 header validation and respond to invalid requests with a stream reset or a 400 response as appropriate rather then with a connection reset.
  • Fix bug 69964: Respect the configured cipher order, which was no longer respected following the addition of TLS 1.3 specific cipher configuration. TLS 1.3 ciphers will always be first in the list.
  • Update Tomcat Native to 2.0.14 and increase the recommended version to 2.0.14.

Full details of these changes, and all the other changes, are available in the Tomcat 10.1 changelog.

Download

2026-01-27 Tomcat 10.1.52 Released

The Apache Tomcat Project is proud to announce the release of version 10.1.52 of Apache Tomcat. This release implements specifications that are part of the Jakarta EE 10 platform.

Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 without changes. Java EE based applications designed for Tomcat 9 and earlier may be placed in the $CATALINA_BASE/webapps-javaee directory and Tomcat will automatically convert them to Jakarta EE and copy them to the webapps directory. This conversion is performed using the Apache Tomcat migration tool for Jakarta EE tool which is also available as a separate download for off-line use.

The notable changes in this release are:

  • Fix regression in request-end time in access logging which would instead log the request start-time.
  • Fix regression where ClassLoader.getResource().getContent() failed under certain circumstances.
  • Update Tomcat Native to 2.0.12 and increase the minimum version to 2.0.12 / 1.3.4.
  • Expand OCSP support to JSSE-based connections and expand OCSP configuration options.
  • Update Commons Daemon to 1.5.1.

Full details of these changes, and all the other changes, are available in the Tomcat 10.1 changelog.

Download

2026-01-23 Tomcat 9.0.115 Released

The Apache Tomcat Project is proud to announce the release of version 9.0.115 of Apache Tomcat. This release implements specifications that are part of the Java EE 8 platform. The notable changes compared to 9.0.113 include:

  • For configuration consistency between OpenSSL and JSSE TLS implementations, TLSv1.3 cipher suites included in the ciphers attribute of an SSLHostConfig are now always ignored (previously they would be ignored with OpenSSL implementations and used with JSSE implementations) and a warning is logged that the cipher suite has been ignored.
  • Expand OCSP support to JSSE based connections and expand OCSP configuration options.
  • Update Commons Daemon to 1.5.1.
  • Update Tomcat Native to 2.0.12 and increase the minimum version to 2.0.12 / 1.3.4.

Full details of these changes, and all the other changes, are available in the Tomcat 9 changelog.

Download

Note: End of support for Tomcat 9.0.x has been announced as 31 March 2027.

2026-01-26 Tomcat 11.0.18 Released

The Apache Tomcat Project is proud to announce the release of version 11.0.18 of Apache Tomcat. This release implements specifications that are part of the Jakarta EE 11 platform.

Users of Tomcat 10 onwards should be aware that, as a result of the move from Java EE to Jakarta EE as part of the transfer of Java EE to the Eclipse Foundation, the primary package for all implemented APIs has changed from javax.* to jakarta.*. This will almost certainly require code changes to enable applications to migrate from Tomcat 9 and earlier to Tomcat 10 and later. A migration tool is available to aid this process.

The notable changes in this release are:

  • For configuration consistency between OpenSSL and JSSE TLS implementations, TLSv1.3 cipher suites included in the ciphers attribute of an SSLHostConfig are now always ignored (previously they would be ignored with OpenSSL implementations and used with JSSE implementations) and a warning is logged that the cipher suite has been ignored.
  • Expand OCSP support to JSSE based connections and expand OCSP configuration options.
  • Update Commons Daemon to 1.5.1.
  • Update Tomcat Native to 2.0.12 and increase the minimum version to 2.0.12 / 1.3.4.

Full details of these changes, and all the other changes, are available in the Tomcat 11 changelog.

Download

2026-02-11 Tomcat Native 2.0.13 Released

The Apache Tomcat Project is proud to announce the release of version 2.0.13 of Tomcat Native. The notable changes compared to 2.0.12 include:

  • Fix a crash when compiled with OpenSSL 3.0.x and using a certificate PEM file does not contain explicit DH parameters.
  • Refactor the setting of OCSP defaults so they always apply, even when using older versions of Tomcat.
  • The windows binaries in this release have been built with OpenSSL 3.5.5 and APR 1.7.6

Full details of these changes, and all the other changes, are available in the Tomcat Native 2.0 changelog.

Download

2026-02-11 Tomcat Native 1.3.6 Released

The Apache Tomcat Project is proud to announce the release of version 1.3.6 of Tomcat Native. The notable changes compared to 1.3.5 include:

  • The windows binaries in this release have been built with OpenSSL 3.0.19 and APR 1.7.6
  • Refactor the setting of OCSP defaults so they always apply, even when using older versions of Tomcat

Full details of these changes, and all the other changes, are available in the Tomcat Native 1.3 changelog.

Download

Note: End of support for Tomcat Native 1.3.x has been announced as 31 March 2027.

2026-01-19 Tomcat Native 1.3.5 Released

The Apache Tomcat Project is proud to announce the release of version 1.3.5 of Tomcat Native. The notable changes compared to 1.3.4 include:

  • Fix regression with OCSP and APR/Native connector.

Full details of these changes, and all the other changes, are available in the Tomcat Native 1.3 changelog.

Download

2026-01-12 Tomcat Native 2.0.12 Released

The Apache Tomcat Project is proud to announce the release of version 2.0.12 of Tomcat Native. The notable changes compared to 2.0.9 include:

  • Add support for configuring TLS 1.3 cipher suites
  • Expand verification of OCSP responses and provide additional options to configure OCSP behaviour.
  • The windows binaries in this release have been built with OpenSSL 3.5.4 and APR 1.7.6

Full details of these changes, and all the other changes, are available in the Tomcat Native 2.0 changelog.

Download

2026-01-12 Tomcat Native 1.3.4 Released

The Apache Tomcat Project is proud to announce the release of version 1.3.4 of Tomcat Native. The notable changes compared to 1.3.1 include:

  • Add support for configuring TLS 1.3 cipher suites
  • Expand verification of OCSP responses and provide additional options to configure OCSP behaviour.
  • The windows binaries in this release have been built with OpenSSL 3.0.18

Full details of these changes, and all the other changes, are available in the Tomcat Native 1.3 changelog.

Download