[ANN] Apache Tomcat 11.0.23 Available

Mark Thomas <[email protected]> Mon, 22 Jun 2026 12:17:41 +0100

Newsgroups	gmane.comp.apache.maven.announce,gmane.comp.java.openwebbeans.devel,gmane.comp.jakarta.tomcat.user
Message-ID	<1684b3a7-3b99-4745-bc5c-bedb64127293__36819.9278296501$1782127107$gmane$org@apache.org>

The Apache Tomcat team announces the immediate availability of Apache 
Tomcat 11.0.23.

Apache Tomcat 11 is an open source software implementation of the 
Jakarta Servlet, Jakarta Pages, Jakarta Expression Language, Jakarta 
WebSocket, Jakarta Authentication and Jakarta Annotations specifications.

The notable changes compared to 11.0.22 include:

- Align the rewrite conditions ornext flag processing with
   mod_rewrite, which follows a purely sequential evaluation
   strategy.

- Ensure that malformed HTTP/2 messages that should trigger a
   stream reset do so, rather than triggered a connection close.

- Add replay protection to the EncryptInterceptor. This is a
   breaking change for the EncryptInterceptor.

Please refer to the change log for the complete list of changes:
http://tomcat.apache.org/tomcat-11.0-doc/changelog.html

Downloads:
http://tomcat.apache.org/download-11.cgi

Migration guides from Apache Tomcat 9.0.x and 10.1.x:
http://tomcat.apache.org/migration.html

Enjoy!

- The Apache Tomcat team