Permalink to this page: https://cwiki.apache.org/confluence/x/CjElBg

Table of Contents

Overview

This page provides a high-level view of each of the past, current and planned major Tomcat versions.

The way Apache is structured and governed it is impossible to say that there will be no further enhancements, bug fixes or releases for a given version. Therefore, rather than use "No" in the tables below "Highly unlikely" has been used. That said, highly unlikely means exactly that and users of versions that are highly unlikely to see another release, even for security fixes, should consider moving to a later version.

It is anticipated that releases will be provided for a maximum of 3 major versions at any one time.

The "Process" field in the following tables documents what development model is accepted by that project, either Review-Then-Commit or Commit-Then-Review. For RTC model the changes are first proposed in the STATUS.txt file in the root of the project and have to gain at least 3 "+1" votes before being applied. The project members have agreed on several exceptions from the RTC rule (documented below).

Tomcat 11.0.x

Spec versions:

Servlet 6.1, JSP 4.0, EL 6.0, WebSocket 2.2, Jakarta Authentication (JASPIC) 3.1

Stable:

Beta

Enhancements:

Yes

Bug Fixes:

Yes

Security Fixes:

Yes

Releases:

Yes

Release Manager:

Mark Thomas (markt)

Process:

CTR

Listed on download pages:

Yes

Tomcat 10.1.x

Spec versions:

Servlet 6.0, JSP 3.1, EL 5.0, WebSocket 2.1, JASPIC 3.0

Stable:

Yes

Enhancements:

Yes

Bug Fixes:

Yes

Security Fixes:

Yes

Releases:

Yes

Release Manager:

Christopher Schultz (schultz)

Process:

CTR

Listed on download pages:

Yes

Tomcat 10.0.x

Spec versions:

Servlet 5.0, JSP 3.0, EL 4.0, WebSocket 2.0, JASPIC 2.0

Stable:

Yes

Enhancements:

Highly unlikely

Bug Fixes:

Highly unlikely

Security Fixes:

Highly unlikely

Releases:

Highly unlikely

Release Manager:

Mark Thomas (markt)

Process:

CTR

Listed on download pages:

No

Tomcat 9.0.x

Spec versions:

Servlet 4.0, JSP 2.3, EL 3.0, WebSocket 1.1, JASPIC 1.1

Stable:

Yes

Enhancements:

Yes

Bug Fixes:

Yes

Security Fixes:

Yes

Releases:

Yes

Release Manager:

Rémy Mucharat (remm)

Process:

CTR

Listed on download pages:

Yes

Tomcat 8.5.x

Spec versions:

Servlet 3.1, JSP 2.3, EL 3.0, WebSocket 1.1, JASPIC 1.1

Stable:

Yes

Enhancements:

Unlikely

Bug Fixes:

Unlikely

Security Fixes:

Possible, but unlikely

Releases:

Unlikely

Release Manager:

Christopher Schultz (schultz)

Process:

CTR

Listed on download pages:

Yes

End-of-life Date:

2024-03-31

Tomcat 8.0.x

Spec versions:

Servlet 3.1, JSP 2.3, EL 3.0, WebSocket 1.1

Stable:

Yes

Enhancements:

Highly unlikely

Bug Fixes:

Highly unlikely

Security Fixes:

Highly unlikely

Releases:

Highly unlikely

Release Manager:

Violeta Georgieva (violetagg)

Process:

CTR

Listed on download pages:

No

End-of-life Date:

2018-06-30

Tomcat 7.0.x

Spec versions:

Servlet 3.0, JSP 2.2, EL 2.2, WebSocket 1.1

Stable:

Yes

Enhancements:

Highly unlikely

Bug Fixes:

Highly unlikely

Security Fixes:

Highly unlikely

Releases:

Highly unlikely

Release Manager:

Violeta Georgieva (violetagg)

Process:

CTR

Listed on download pages:

Yes

End-of-life Date:

2021-03-31

Tomcat 6.0.x

Spec versions:

Servlet 2.5, JSP 2.1

Stable:

Yes

Enhancements:

Highly unlikely

Bug Fixes:

Highly unlikely

Security Fixes:

Highly unlikely

Releases:

Highly unlikely

Release Manager:

Violeta Georgieva (violetagg)

Process:

CTR

Listed on download pages:

No

End-of-life Date:

2016-12-31

Tomcat 5.5.x

Spec versions:

Servlet 2.4, JSP 2.0

Stable:

Yes

Enhancements:

Highly unlikely

Bug Fixes:

Highly unlikely

Security Fixes:

Highly unlikely

Releases:

Highly unlikely

Release Manager:

Filip Hanik (fhanik)

Process:

CTR

Listed on download pages:

No

End-of-life Date:

2012-09-31

Tomcat 4.1.x

Spec versions:

Servlet 2.3, JSP 1.2

Stable:

Yes

Enhancements:

Highly unlikely

Bug Fixes:

Highly unlikely

Security Fixes:

Highly unlikely

Releases:

Highly unlikely

Release Manager:

Mark Thomas (markt)

Process:

CTR

Listed on download pages:

No

End-of-life Date:

2009-06-25

Tomcat 3.3.x

Spec versions:

Servlet 2.2, JSP 1.1

Stable:

Yes

Enhancements:

Highly unlikely

Bug Fixes:

Highly unlikely

Security Fixes:

Highly unlikely

Releases:

Highly unlikely

Release Manager:

Bill Barker (billbarker)

Process:

CTR

Listed on download pages:

No

End-of-life Date:

2004-03-09

Unsupported versions

The following versions are no longer supported. The source is still available from SVN and both source and binary downloads are available from the archives.

  • Tomcat 3.0.x
  • Tomcat 3.1.x
  • Tomcat 3.2.x
  • Tomcat 3.3.x
  • Tomcat 4.0.x
  • Tomcat 4.1.x
  • Tomcat 5.0.x
  • Tomcat 5.5.x
  • Tomcat 6.0.x
  • Tomcat 7.0.x
  • Tomcat 8.0.x
  • Tomcat 8.5.x

RTC Exceptions

The following are exceptions to the Review-Than-Commit rule.

  • Changes to the documentation (including Javadoc) are C-T-R.

Via https://tomcat.markmail.org/thread/2fgydrrhn4qjye3r :

  • Allow C-T-R for trivial fixes to English messages that are in resource files and those that are inline in the code. This includes typos and rephrasing, but does not include adding/removing message parameters.
  • Allow C-T-R for any fixes for non-English resource files. The files must use 7-bit characters only. Other symbols must be escaped with \u, as does native2ascii.
  • Require some indication in the commit message for code that usually is covered by RTC, that this commit was done using C-T-R rule.

Via https://tomcat.markmail.org/thread/vwqvurietvliadjf :

  • The versions that were moved to the archive are C-T-R.