Permalink to this page: https://cwiki.apache.org/confluence/x/CjElBg
Table of Contents
Overview
This page provides a high-level view of each of the past, current and planned major Tomcat versions.
The way Apache is structured and governed it is impossible to say that there will be no further enhancements, bug fixes or releases for a given version. Therefore, rather than use "No" in the tables below "Highly unlikely" has been used. That said, highly unlikely means exactly that and users of versions that are highly unlikely to see another release, even for security fixes, should consider moving to a later version.
It is anticipated that releases will be provided for a maximum of 3 major versions at any one time.
The "Process" field in the following tables documents what development model is accepted by that project, either Review-Then-Commit or Commit-Then-Review. For RTC model the changes are first proposed in the STATUS.txt
file in the root of the project and have to gain at least 3 "+1
" votes before being applied. The project members have agreed on several exceptions from the RTC rule (documented below).
Tomcat 11.0.x
Spec versions: | Servlet 6.1, JSP 4.0, EL 6.0, WebSocket 2.2, Jakarta Authentication (JASPIC) 3.1 |
Stable: | Beta |
Enhancements: | Yes |
Bug Fixes: | Yes |
Security Fixes: | Yes |
Releases: | Yes |
Release Manager: | Mark Thomas (markt) |
Process: | CTR |
Listed on download pages: | Yes |
Tomcat 10.1.x
Spec versions: | Servlet 6.0, JSP 3.1, EL 5.0, WebSocket 2.1, JASPIC 3.0 |
Stable: | Yes |
Enhancements: | Yes |
Bug Fixes: | Yes |
Security Fixes: | Yes |
Releases: | Yes |
Release Manager: | Christopher Schultz (schultz) |
Process: | CTR |
Listed on download pages: | Yes |
Tomcat 10.0.x
Spec versions: | Servlet 5.0, JSP 3.0, EL 4.0, WebSocket 2.0, JASPIC 2.0 |
Stable: | Yes |
Enhancements: | Highly unlikely |
Bug Fixes: | Highly unlikely |
Security Fixes: | Highly unlikely |
Releases: | Highly unlikely |
Release Manager: | Mark Thomas (markt) |
Process: | CTR |
Listed on download pages: | No |
Tomcat 9.0.x
Spec versions: | Servlet 4.0, JSP 2.3, EL 3.0, WebSocket 1.1, JASPIC 1.1 |
Stable: | Yes |
Enhancements: | Yes |
Bug Fixes: | Yes |
Security Fixes: | Yes |
Releases: | Yes |
Release Manager: | Rémy Mucharat (remm) |
Process: | CTR |
Listed on download pages: | Yes |
Tomcat 8.5.x
Spec versions: | Servlet 3.1, JSP 2.3, EL 3.0, WebSocket 1.1, JASPIC 1.1 |
Stable: | Yes |
Enhancements: | Unlikely |
Bug Fixes: | Unlikely |
Security Fixes: | Possible, but unlikely |
Releases: | Unlikely |
Release Manager: | Christopher Schultz (schultz) |
Process: | CTR |
Listed on download pages: | Yes |
End-of-life Date: | 2024-03-31 |
Tomcat 8.0.x
Spec versions: | Servlet 3.1, JSP 2.3, EL 3.0, WebSocket 1.1 |
Stable: | Yes |
Enhancements: | Highly unlikely |
Bug Fixes: | Highly unlikely |
Security Fixes: | Highly unlikely |
Releases: | Highly unlikely |
Release Manager: | Violeta Georgieva (violetagg) |
Process: | CTR |
Listed on download pages: | No |
End-of-life Date: | 2018-06-30 |
Tomcat 7.0.x
Spec versions: | Servlet 3.0, JSP 2.2, EL 2.2, WebSocket 1.1 |
Stable: | Yes |
Enhancements: | Highly unlikely |
Bug Fixes: | Highly unlikely |
Security Fixes: | Highly unlikely |
Releases: | Highly unlikely |
Release Manager: | Violeta Georgieva (violetagg) |
Process: | CTR |
Listed on download pages: | Yes |
End-of-life Date: | 2021-03-31 |
Tomcat 6.0.x
Spec versions: | Servlet 2.5, JSP 2.1 |
Stable: | Yes |
Enhancements: | Highly unlikely |
Bug Fixes: | Highly unlikely |
Security Fixes: | Highly unlikely |
Releases: | Highly unlikely |
Release Manager: | Violeta Georgieva (violetagg) |
Process: | CTR |
Listed on download pages: | No |
End-of-life Date: | 2016-12-31 |
Tomcat 5.5.x
Spec versions: | Servlet 2.4, JSP 2.0 |
Stable: | Yes |
Enhancements: | Highly unlikely |
Bug Fixes: | Highly unlikely |
Security Fixes: | Highly unlikely |
Releases: | Highly unlikely |
Release Manager: | Filip Hanik (fhanik) |
Process: | CTR |
Listed on download pages: | No |
End-of-life Date: | 2012-09-31 |
Tomcat 4.1.x
Spec versions: | Servlet 2.3, JSP 1.2 |
Stable: | Yes |
Enhancements: | Highly unlikely |
Bug Fixes: | Highly unlikely |
Security Fixes: | Highly unlikely |
Releases: | Highly unlikely |
Release Manager: | Mark Thomas (markt) |
Process: | CTR |
Listed on download pages: | No |
End-of-life Date: | 2009-06-25 |
Tomcat 3.3.x
Spec versions: | Servlet 2.2, JSP 1.1 |
Stable: | Yes |
Enhancements: | Highly unlikely |
Bug Fixes: | Highly unlikely |
Security Fixes: | Highly unlikely |
Releases: | Highly unlikely |
Release Manager: | Bill Barker (billbarker) |
Process: | CTR |
Listed on download pages: | No |
End-of-life Date: | 2004-03-09 |
Unsupported versions
The following versions are no longer supported. The source is still available from SVN and both source and binary downloads are available from the archives.
- Tomcat 3.0.x
- Tomcat 3.1.x
- Tomcat 3.2.x
- Tomcat 3.3.x
- Tomcat 4.0.x
- Tomcat 4.1.x
- Tomcat 5.0.x
- Tomcat 5.5.x
- Tomcat 6.0.x
- Tomcat 7.0.x
- Tomcat 8.0.x
- Tomcat 8.5.x
RTC Exceptions
The following are exceptions to the Review-Than-Commit rule.
- Changes to the documentation (including Javadoc) are C-T-R.
Via https://tomcat.markmail.org/thread/2fgydrrhn4qjye3r :
- Allow C-T-R for trivial fixes to English messages that are in resource files and those that are inline in the code. This includes typos and rephrasing, but does not include adding/removing message parameters.
- Allow C-T-R for any fixes for non-English resource files. The files must use 7-bit characters only. Other symbols must be escaped with \u, as does native2ascii.
- Require some indication in the commit message for code that usually is covered by RTC, that this commit was done using C-T-R rule.
Via https://tomcat.markmail.org/thread/vwqvurietvliadjf :
- The versions that were moved to the archive are C-T-R.