[ANN] Apache Tomcat 11.0.18 Available

Mark Thomas <[email protected]> Fri, 30 Jan 2026 10:00:35 +0000

Newsgroups	gmane.comp.jakarta.tomcat.user,gmane.comp.apache.maven.announce,gmane.comp.apache.superset.devel
Message-ID	<a2267964-21c0-4180-a5a0-35911aaf8eea__4512.44581943087$1769767383$gmane$org@apache.org>

The Apache Tomcat team announces the immediate availability of Apache 
Tomcat 11.0.18.

Apache Tomcat 11 is an open source software implementation of the 
Jakarta Servlet, Jakarta Pages, Jakarta Expression Language, Jakarta 
WebSocket, Jakarta Authentication and Jakarta Annotations specifications.

The notable changes compared to 11.0.15 include:

- For configuration consistency between OpenSSL and JSSE TLS
   implementations, TLSv1.3 cipher suites included in the ciphers
   attribute of an SSLHostConfig are now always ignored (previously
   they would be ignored with OpenSSL implementations and used with
   JSSE implementations) and a warning is logged that the cipher
   suite has been ignored.

- Expand OCSP support to JSSE based connections and expand OCSP
   configuration options

- Update Commons Daemon to 1.5.1.

- Update Tomcat Native to 2.0.12 and increase the minimum version to
   2.0.12 / 1.3.4


Please refer to the change log for the complete list of changes:
http://tomcat.apache.org/tomcat-11.0-doc/changelog.html

Downloads:
http://tomcat.apache.org/download-11.cgi

Migration guides from Apache Tomcat 9.0.x and 10.1.x:
http://tomcat.apache.org/migration.html

Enjoy!

- The Apache Tomcat team