BSD Ports

Vulnerable: version 9.0.106 is affected by 1 known vulnerability. See below.

www/tomcat9 9.0.106 DragonFly

Open-source Java web server by Apache, 9.0.x branch

System
DragonFly
Repository
DPorts
Maintainer
[email protected] (as in FreeBSD)
License
APACHE20
Categories
java, www
Package size
11451.0 KiB, 17263.5 KiB installed

Description

Apache Tomcat is a web server written in 100%25 Pure Java.

Apache Tomcat 9.x builds on Tomcat 8.0.x and 8.5.x and implements the Servlet 4.0, JSP 2.3, EL 3.0, WebSocket 1.1 and JASPIC 1.1 specifications (the versions required by Java EE 8 platform).

In the other systems

The newest version among them is 9.0.123, as upstream numbers it.

SystemPortVersionVulnerabilitiesStatusMaintainerLast update
DragonFlywww/tomcat99.0.106 behind since 2026-07-081 known-[email protected]-
FreeBSDwww/tomcat99.0.123 newestnone known-[email protected]2026-10-12
MidnightBSDwww/tomcat99.0.123 newestno data-[email protected]2026-10-20
HardenedBSDwww/tomcat99.0.122 behind since 2026-10-12no data-[email protected]-
GhostBSDwww/tomcat99.0.122 behind since 2026-10-12no data-[email protected]-

Install

Binary package:

pkg install tomcat9

From DPorts:

cd /usr/dports/www/tomcat9 && make install clean

Dependency graph

Ports that need it on the left, what it needs to run on the right; at most 8 of each. "Dependencies" below lists them all.

Dependencies

Run dependencies 2
Required by 1

Known vulnerabilities 1

1 DragonFly ports depend on it, directly or through others, and may carry the vulnerable code. The ports that need it