[ANN] Apache Tomcat 11.0.20 Available

Mark Thomas <[email protected]> Fri, 20 Mar 2026 12:17:39 +0000
Newsgroups gmane.comp.jakarta.tomcat.user,gmane.comp.apache.maven.announce,gmane.comp.apache.maven.announce,gmane.comp.java.openwebbeans.devel
Message-ID <[email protected]>
The Apache Tomcat team announces the immediate availability of Apache 
Tomcat 11.0.20.

Apache Tomcat 11 is an open source software implementation of the 
Jakarta Servlet, Jakarta Pages, Jakarta Expression Language, Jakarta 
WebSocket, Jakarta Authentication and Jakarta Annotations specifications.

The notable changes compared to 11.0.18 include:

- Relax HTTP/2 header validation and respond to invalid requests with
   a stream reset or a 400 response as appropriate rather then with a
   connection reset.

- Fix bug 69964: Respect the configured cipher order, which was no
   longer respected following the addition of TLS 1.3 specific cipher
   configuration. TLS 1.3 ciphers will always be first in the list.

- Update Tomcat Native to 2.0.14 and increase the recommended version to
   2.0.14

Please refer to the change log for the complete list of changes:
http://tomcat.apache.org/tomcat-11.0-doc/changelog.html

Downloads:
http://tomcat.apache.org/download-11.cgi

Migration guides from Apache Tomcat 9.0.x and 10.1.x:
http://tomcat.apache.org/migration.html

Enjoy!

- The Apache Tomcat team