Pro Apache Tomcat 5/5.5 is ideal for Tomcat administrators and folks who want to configure Tomcat. Author Matthew Moodie describes configuration files, as well as administration features like security, auto-deployment, remote deployment, and datasources. Apache Tomcat 6.0.0 through 6.0.14, 5.5.0 through 5.5.25, and 4.1.0 through 4.1.36 does not properly handle (1) double quote (') characters or (2)%5C (encoded backslash) sequences in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks.
Get Involved
Media
Misc
Apache Tomcat is an open source software implementation of the Java Servletand JavaServer Pages technologies. The Java Servlet and JavaServer Pagesspecifications are developed under theJava Community Process. Apache Tomcat is developed in an open and participatory environment andreleased under the Apache Licenseversion 2. Apache Tomcat is intended to be a collaboration of thebest-of-breed developers from around the world. We invite you toparticipate in this open development project. To learn more about gettinginvolved, click here. Apache Tomcat powers numerous large-scale, mission-critical web applicationsacross a diverse range of industries and organizations. Some of these usersand their stories are listed on thePoweredBy wiki page. Apache Tomcat, Tomcat, Apache, the Apache feather, and the Apache Tomcatproject logo are trademarks of the Apache Software Foundation.
|
|
| 2011-06-17 |
The Apache Tomcat Project is proud to announce the release of version 7.0.16 ofApache Tomcat. This release includes bug fixes and the following new featurescompared to version 7.0.14: - NIO implementation of the AJP connector.
- Enable Servlet 3 asynchronous processing support when using clustering.
- Add parallel deployment support to the Manager's Ant tasks.
Full details of these changes, and all the other changes, are available in theTomcat 7 changelog.Download |ChangeLog for 7.0.16
|
|
| 2011-02-04 |
The Apache Tomcat Project is proud to announce the release of version 6.0.32 ofApache Tomcat. This release includes security and bug fixes over Apache Tomcat 6.0.30. Download |ChangeLog for 6.0.32
|
|
Apache Tomcat 5.5.35
| 2011-02-10 |
The Apache Tomcat Project is proud to announce the release of version 5.5.33 ofApache Tomcat. This release includes many bug fixes and a number of securityfixes over Apache Tomcat 5.5.32. Download |ChangeLog for 5.5.33
|
|
| 2010-11-01 |
The Apache Tomcat Project is proud to announce the release of version 1.2.31 ofApache Tomcat Connectors.This release includes mainly bug fixes and some small improvements over Apache Tomcat Connectors 1.2.30. Download |ChangeLog for 1.2.31
|
|
Apache Tomcat 5.5.36
| 2010-02-17 |
The Apache Tomcat Project is proud to announce the release of version 1.1.20 of Tomcat Native.This version is principally a bugfix release. Download |ChangeLog for 1.1.20
|
|
See former announcements.
|
|
