www/tomcat101 10.1.61 MidnightBSD
Open-source Java web server by Apache, 10.1.x branch
- System
- MidnightBSD
- Repository
- mports
- Maintainer
- [email protected]
- Last update
- Commit
19a97ca0e7- License
- Apache-2.0
- Categories
- www, java
Description
Apache Tomcat is a web server written in 100% Pure Java.
Apache Tomcat 10.1.x is the current focus of development. It builds on Tomcat 10.0.x and implements the Servlet 6.0, JSP 3.1, EL 5.0, WebSocket 2.1 and Authentication 3.0 specifications (the versions required by Jakarta EE 10 platform).
In the other systems
The newest version among them is 10.1.61, as upstream numbers it.
| System | Port | Version | Vulnerabilities | Status | Maintainer | Last update |
|---|---|---|---|---|---|---|
| MidnightBSD | www/tomcat101 | 10.1.61 newest | no data | - | [email protected] | 2026-10-20 |
| FreeBSD | www/tomcat101 | 10.1.61 newest | none known | - | [email protected] | 2026-10-12 |
| DragonFly | www/tomcat101 | 10.1.42 behind since 2026-07-08 | 1 known | - | [email protected] | - |
| HardenedBSD | www/tomcat101 | 10.1.60 behind since 2026-10-12 | no data | - | [email protected] | - |
| GhostBSD | www/tomcat101 | 10.1.60 behind since 2026-10-12 | no data | - | [email protected] | - |
Version history 4
Upstream's version as each commit to the port's Makefile set it, or as this site first saw it in the system's packages; the tree's own revisions are not versions here.
Install
Binary package:
mport install tomcat101
From mports:
cd /usr/mports/www/tomcat101 && make install clean
To depend on this port in another port's Makefile:
RUN_DEPENDS= tomcat101>0:www/tomcat101
Dependency graph
Ports that need it on the left, what it needs to run on the right; at most 8 of each. "Dependencies" below lists them all.
Dependencies
As this port's Makefile names them.
Runtime 1
jsvc: devel/apache-commons-daemon
Run dependencies 1
No port depends on this one.
Configuration
Options name: www_tomcat
| Option | Default | Description |
|---|---|---|
| DOCS | off | Install Documentation web application |
| EXAMPLES | off | Install Examples web application |
| HOST_MANAGER | on | Install Host Manager application |
| MANAGER | on | Install Manager web application |
| NLS | off | |
| ROOT | on | Install default ROOT web application |
- USES
- cpe java
- Service scripts
${PKGBASE:C/-/_/}
Files
pkg-plist 638
- %%T%%/BUILDING.txt
- %%T%%/CONTRIBUTING.md
- %%T%%/LICENSE
- %%T%%/NOTICE
- %%T%%/README.md
- %%T%%/RELEASE-NOTES
- %%T%%/RUNNING.txt
- %%T%%/bin/bootstrap.jar
- %%T%%/bin/catalina-tasks.xml
- %%T%%/bin/catalina.sh
- %%T%%/bin/ciphers.sh
- %%T%%/bin/configtest.sh
- %%T%%/bin/daemon.sh
- %%T%%/bin/digest.sh
- %%T%%/bin/makebase.sh
- %%T%%/bin/migrate.sh
- %%T%%/bin/setclasspath.sh
- %%T%%/bin/shutdown.sh
- %%T%%/bin/startup.sh
- %%T%%/bin/tomcat-juli.jar
- %%T%%/bin/tool-wrapper.sh
- %%T%%/bin/version.sh
- %%T%%/lib/annotations-api.jar
- %%T%%/lib/catalina-ant.jar
- %%T%%/lib/catalina-ha.jar
- %%T%%/lib/catalina-ssi.jar
- %%T%%/lib/catalina-storeconfig.jar
- %%T%%/lib/catalina-tribes.jar
- %%T%%/lib/catalina.jar
- %%T%%/lib/ecj-4.27.jar
- %%T%%/lib/el-api.jar
- %%T%%/lib/jakartaee-migration-1.0.13-shaded.jar
- %%T%%/lib/jasper-el.jar
- %%T%%/lib/jasper.jar
- %%T%%/lib/jaspic-api.jar
- %%T%%/lib/jsp-api.jar
- %%T%%/lib/servlet-api.jar
- %%T%%/lib/tomcat-api.jar
- %%T%%/lib/tomcat-coyote-ffm.jar
- %%T%%/lib/tomcat-coyote.jar
- %%T%%/lib/tomcat-dbcp.jar
- %%T%%/lib/tomcat-i18n-cs.jar
- %%T%%/lib/tomcat-i18n-de.jar
- %%T%%/lib/tomcat-i18n-es.jar
- %%T%%/lib/tomcat-i18n-fr.jar
- %%T%%/lib/tomcat-i18n-ja.jar
- %%T%%/lib/tomcat-i18n-ko.jar
- %%T%%/lib/tomcat-i18n-pt-BR.jar
- %%T%%/lib/tomcat-i18n-ru.jar
- %%T%%/lib/tomcat-i18n-zh-CN.jar
- %%T%%/lib/tomcat-jdbc.jar
- %%T%%/lib/tomcat-jni.jar
- %%T%%/lib/tomcat-util-scan.jar
- %%T%%/lib/tomcat-util.jar
- %%T%%/lib/tomcat-websocket.jar
- %%T%%/lib/websocket-api.jar
- %%T%%/lib/websocket-client-api.jar
- @dir %%T%%/endorsed
- @postunexec [ ! -d %D/ ] || echo If permanently deleting this package, %D/ must be removed manually
- @owner
- @group
- @dir %%T%%/conf
- @dir %%T%%/logs
- @dir %%T%%/temp
- @dir %%T%%/webapps
- @dir %%T%%/work
- @sample %%T%%/conf/catalina.policy.sample
- @sample %%T%%/conf/catalina.properties.sample
- @sample %%T%%/conf/context.xml.sample
- @sample %%T%%/conf/jaspic-providers.xml.sample
- %%T%%/conf/jaspic-providers.xsd
- @sample %%T%%/conf/logging.properties.sample
- @sample %%T%%/conf/server.xml.sample
- @sample %%T%%/conf/tomcat-users.xml.sample
- %%T%%/conf/tomcat-users.xsd
- @sample %%T%%/conf/web.xml.sample
- %%T%%/temp/safeToDelete.tmp
- %%T%%/webapps/docs/BUILDING.txt
- %%T%%/webapps/docs/RELEASE-NOTES.txt
- %%T%%/webapps/docs/RUNNING.txt
- %%T%%/webapps/docs/META-INF/context.xml
- %%T%%/webapps/docs/WEB-INF/jsp/403.jsp
- %%T%%/webapps/docs/WEB-INF/web.xml
- %%T%%/webapps/docs/aio.html
- %%T%%/webapps/docs/api/index.html
- %%T%%/webapps/docs/annotationapi/index.html
- %%T%%/webapps/docs/appdev/build.xml.txt
- %%T%%/webapps/docs/appdev/deployment.html
- %%T%%/webapps/docs/appdev/index.html
- %%T%%/webapps/docs/appdev/installation.html
- %%T%%/webapps/docs/appdev/introduction.html
- %%T%%/webapps/docs/appdev/processes.html
- %%T%%/webapps/docs/appdev/sample/build.xml
- %%T%%/webapps/docs/appdev/sample/docs/README.txt
- %%T%%/webapps/docs/appdev/sample/index.html
- %%T%%/webapps/docs/appdev/sample/sample.war
- %%T%%/webapps/docs/appdev/sample/src/mypackage/Hello.java
- %%T%%/webapps/docs/appdev/sample/web/WEB-INF/web.xml
- %%T%%/webapps/docs/appdev/sample/web/hello.jsp
- %%T%%/webapps/docs/appdev/sample/web/images/tomcat.gif
The first 100 are listed.
distinfo 1
| File | Size | SHA256 |
|---|---|---|
| apache-tomcat-10.1.61.tar.gz | 1.4488199e+07 | a9341c2ed0639896eb0760320c42430a303bef917f83ff3e6f16046f3ae2af79 |
Master sites 1
- APACHE/tomcat/tomcat-${DISTVERSION:C/([0-9]+)(.*)/\1/}/v10.1.61/bin
Commit history 4
| Date | Commit | Credits | Log message |
|---|---|---|---|
19a97ca0e7 |
Lucas Holt | www/tomcat101: update to 10.1.61 (#1833) Security fixes:
- Important: CVE-2026-101356 HTTP/2 request/response mix-up after
error during async processing
- Important: CVE-2026-101296 JNDIRealm bind credential validation
fails open for non-GSSAPI SASL mechanisms
- Low: CVE-2026-93446, CVE-2026-88041, CVE-2026-74049, CVE-2026-74048
The bundled jakartaee-migration jar is now 1.0.13.
Upstream: https://tomcat.apache.org/security-10.html
Testing:
- `bmake makesum`; SHA512 matches Apache's `.sha512` file
- `bmake fake package` (fake-qa reports no plist problems)
- `portlint -AC`: 0 fatal
🤖 Generated with [Claude Code](https://claude.com/claude-code)
## Summary by Sourcery
Update the Tomcat 10.1 port to release 10.1.61 with upstream security
fixes and refreshed bundled components.
Bug Fixes:
… |
|
64c639d6be |
Lucas Holt | www/tomcat101: update to 10.1.60 (#1625) Update Apache Tomcat 10.1.x from 10.1.59 to 10.1.60.
Release notes: https://tomcat.apache.org/tomcat-10.1-doc/changelog.html
Validation on MidnightBSD 4.0.6 amd64:
- distfile SHA-512 verified against Apache's published checksum
- tarball file list identical to 10.1.59 (no pkg-plist changes)
- `bmake makesum patch`, `bmake`, `bmake fake`, `bmake package` succeed
with default options
- portlint clean apart from the work-dir notice (cleaned before commit)
- No test target (NO_BUILD port)
🤖 Generated with [Claude Code](https://claude.com/claude-code)
## Summary by Sourcery
Enhancements:
- Update the Apache Tomcat 10.1 port to version 10.1.60.
Signed-off-by: Lucas Holt <[email protected]> |
|
22a2e29e81 |
Lucas Holt | www/tomcat101: update to 10.1.59 (#780) Update Tomcat 10.1 to the August 2026 security release. Tomcat 10.1.58
was not released because its release vote failed; 10.1.59 is the first
published fixed version.
This fixes CVE-2026-73180, CVE-2026-68763, CVE-2026-68569,
CVE-2026-68525, CVE-2026-66422, CVE-2026-66299, CVE-2026-65927,
CVE-2026-65905, CVE-2026-65637, CVE-2026-65183, and CVE-2026-65182.
Validation:
- BATCH=yes bmake -C www/tomcat101 clean patch check-license
- BATCH=yes bmake -C www/tomcat101 build fake package test
- portlint -AC www/tomcat101
- git diff --check
## Summary by Sourcery
Bug Fixes:
- Update Tomcat 10.1 to version 10.1.59, incorporating the August 2026
security fixes for the listed CVEs.
Signed-off-by: Lucas Holt <[email protected]> |
|
34366c93b6 |
Lucas Holt | www/tomcat101: update |