BSD Ports

www/tomcat101 10.1.61 MidnightBSD

Open-source Java web server by Apache, 10.1.x branch

System
MidnightBSD
Repository
mports
Maintainer
[email protected]
Last update
Commit
19a97ca0e7
License
Apache-2.0
Categories
www, java

Description

Apache Tomcat is a web server written in 100% Pure Java.

Apache Tomcat 10.1.x is the current focus of development. It builds on Tomcat 10.0.x and implements the Servlet 6.0, JSP 3.1, EL 5.0, WebSocket 2.1 and Authentication 3.0 specifications (the versions required by Jakarta EE 10 platform).

In the other systems

The newest version among them is 10.1.61, as upstream numbers it.

SystemPortVersionVulnerabilitiesStatusMaintainerLast update
MidnightBSDwww/tomcat10110.1.61 newestno data-[email protected]2026-10-20
FreeBSDwww/tomcat10110.1.61 newestnone known-[email protected]2026-10-12
DragonFlywww/tomcat10110.1.42 behind since 2026-07-081 known-[email protected]-
HardenedBSDwww/tomcat10110.1.60 behind since 2026-10-12no data-[email protected]-
GhostBSDwww/tomcat10110.1.60 behind since 2026-10-12no data-[email protected]-

Version history 4

  1. 10.1.61 19a97ca0e7
  2. 10.1.60 64c639d6be
  3. 10.1.59 22a2e29e81
  4. 10.1.57 34366c93b6

Upstream's version as each commit to the port's Makefile set it, or as this site first saw it in the system's packages; the tree's own revisions are not versions here.

Install

Binary package:

mport install tomcat101

From mports:

cd /usr/mports/www/tomcat101 && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	tomcat101>0:www/tomcat101

Dependency graph

Ports that need it on the left, what it needs to run on the right; at most 8 of each. "Dependencies" below lists them all.

Dependencies

As this port's Makefile names them.

Runtime 1

Run dependencies 1

No port depends on this one.

Configuration

Options name: www_tomcat

OptionDefaultDescription
DOCSoffInstall Documentation web application
EXAMPLESoffInstall Examples web application
HOST_MANAGERonInstall Host Manager application
MANAGERonInstall Manager web application
NLSoff
ROOTonInstall default ROOT web application
USES
cpe java
Service scripts
${PKGBASE:C/-/_/}

Files

pkg-plist 638
  • %%T%%/BUILDING.txt
  • %%T%%/CONTRIBUTING.md
  • %%T%%/LICENSE
  • %%T%%/NOTICE
  • %%T%%/README.md
  • %%T%%/RELEASE-NOTES
  • %%T%%/RUNNING.txt
  • %%T%%/bin/bootstrap.jar
  • %%T%%/bin/catalina-tasks.xml
  • %%T%%/bin/catalina.sh
  • %%T%%/bin/ciphers.sh
  • %%T%%/bin/configtest.sh
  • %%T%%/bin/daemon.sh
  • %%T%%/bin/digest.sh
  • %%T%%/bin/makebase.sh
  • %%T%%/bin/migrate.sh
  • %%T%%/bin/setclasspath.sh
  • %%T%%/bin/shutdown.sh
  • %%T%%/bin/startup.sh
  • %%T%%/bin/tomcat-juli.jar
  • %%T%%/bin/tool-wrapper.sh
  • %%T%%/bin/version.sh
  • %%T%%/lib/annotations-api.jar
  • %%T%%/lib/catalina-ant.jar
  • %%T%%/lib/catalina-ha.jar
  • %%T%%/lib/catalina-ssi.jar
  • %%T%%/lib/catalina-storeconfig.jar
  • %%T%%/lib/catalina-tribes.jar
  • %%T%%/lib/catalina.jar
  • %%T%%/lib/ecj-4.27.jar
  • %%T%%/lib/el-api.jar
  • %%T%%/lib/jakartaee-migration-1.0.13-shaded.jar
  • %%T%%/lib/jasper-el.jar
  • %%T%%/lib/jasper.jar
  • %%T%%/lib/jaspic-api.jar
  • %%T%%/lib/jsp-api.jar
  • %%T%%/lib/servlet-api.jar
  • %%T%%/lib/tomcat-api.jar
  • %%T%%/lib/tomcat-coyote-ffm.jar
  • %%T%%/lib/tomcat-coyote.jar
  • %%T%%/lib/tomcat-dbcp.jar
  • %%T%%/lib/tomcat-i18n-cs.jar
  • %%T%%/lib/tomcat-i18n-de.jar
  • %%T%%/lib/tomcat-i18n-es.jar
  • %%T%%/lib/tomcat-i18n-fr.jar
  • %%T%%/lib/tomcat-i18n-ja.jar
  • %%T%%/lib/tomcat-i18n-ko.jar
  • %%T%%/lib/tomcat-i18n-pt-BR.jar
  • %%T%%/lib/tomcat-i18n-ru.jar
  • %%T%%/lib/tomcat-i18n-zh-CN.jar
  • %%T%%/lib/tomcat-jdbc.jar
  • %%T%%/lib/tomcat-jni.jar
  • %%T%%/lib/tomcat-util-scan.jar
  • %%T%%/lib/tomcat-util.jar
  • %%T%%/lib/tomcat-websocket.jar
  • %%T%%/lib/websocket-api.jar
  • %%T%%/lib/websocket-client-api.jar
  • @dir %%T%%/endorsed
  • @postunexec [ ! -d %D/ ] || echo If permanently deleting this package, %D/ must be removed manually
  • @owner
  • @group
  • @dir %%T%%/conf
  • @dir %%T%%/logs
  • @dir %%T%%/temp
  • @dir %%T%%/webapps
  • @dir %%T%%/work
  • @sample %%T%%/conf/catalina.policy.sample
  • @sample %%T%%/conf/catalina.properties.sample
  • @sample %%T%%/conf/context.xml.sample
  • @sample %%T%%/conf/jaspic-providers.xml.sample
  • %%T%%/conf/jaspic-providers.xsd
  • @sample %%T%%/conf/logging.properties.sample
  • @sample %%T%%/conf/server.xml.sample
  • @sample %%T%%/conf/tomcat-users.xml.sample
  • %%T%%/conf/tomcat-users.xsd
  • @sample %%T%%/conf/web.xml.sample
  • %%T%%/temp/safeToDelete.tmp
  • %%T%%/webapps/docs/BUILDING.txt
  • %%T%%/webapps/docs/RELEASE-NOTES.txt
  • %%T%%/webapps/docs/RUNNING.txt
  • %%T%%/webapps/docs/META-INF/context.xml
  • %%T%%/webapps/docs/WEB-INF/jsp/403.jsp
  • %%T%%/webapps/docs/WEB-INF/web.xml
  • %%T%%/webapps/docs/aio.html
  • %%T%%/webapps/docs/api/index.html
  • %%T%%/webapps/docs/annotationapi/index.html
  • %%T%%/webapps/docs/appdev/build.xml.txt
  • %%T%%/webapps/docs/appdev/deployment.html
  • %%T%%/webapps/docs/appdev/index.html
  • %%T%%/webapps/docs/appdev/installation.html
  • %%T%%/webapps/docs/appdev/introduction.html
  • %%T%%/webapps/docs/appdev/processes.html
  • %%T%%/webapps/docs/appdev/sample/build.xml
  • %%T%%/webapps/docs/appdev/sample/docs/README.txt
  • %%T%%/webapps/docs/appdev/sample/index.html
  • %%T%%/webapps/docs/appdev/sample/sample.war
  • %%T%%/webapps/docs/appdev/sample/src/mypackage/Hello.java
  • %%T%%/webapps/docs/appdev/sample/web/WEB-INF/web.xml
  • %%T%%/webapps/docs/appdev/sample/web/hello.jsp
  • %%T%%/webapps/docs/appdev/sample/web/images/tomcat.gif

The first 100 are listed.

distinfo 1
FileSizeSHA256
apache-tomcat-10.1.61.tar.gz1.4488199e+07a9341c2ed0639896eb0760320c42430a303bef917f83ff3e6f16046f3ae2af79
Master sites 1
  • APACHE/tomcat/tomcat-${DISTVERSION:C/([0-9]+)(.*)/\1/}/v10.1.61/bin

Commit history 4

DateCommitCreditsLog message
19a97ca0e7 Lucas Holt www/tomcat101: update to 10.1.61 (#1833)
Security fixes: - Important: CVE-2026-101356 HTTP/2 request/response mix-up after error during async processing - Important: CVE-2026-101296 JNDIRealm bind credential validation fails open for non-GSSAPI SASL mechanisms - Low: CVE-2026-93446, CVE-2026-88041, CVE-2026-74049, CVE-2026-74048 The bundled jakartaee-migration jar is now 1.0.13. Upstream: https://tomcat.apache.org/security-10.html Testing: - `bmake makesum`; SHA512 matches Apache's `.sha512` file - `bmake fake package` (fake-qa reports no plist problems) - `portlint -AC`: 0 fatal 🤖 Generated with [Claude Code](https://claude.com/claude-code) ## Summary by Sourcery Update the Tomcat 10.1 port to release 10.1.61 with upstream security fixes and refreshed bundled components. Bug Fixes: …
64c639d6be Lucas Holt www/tomcat101: update to 10.1.60 (#1625)
Update Apache Tomcat 10.1.x from 10.1.59 to 10.1.60. Release notes: https://tomcat.apache.org/tomcat-10.1-doc/changelog.html Validation on MidnightBSD 4.0.6 amd64: - distfile SHA-512 verified against Apache's published checksum - tarball file list identical to 10.1.59 (no pkg-plist changes) - `bmake makesum patch`, `bmake`, `bmake fake`, `bmake package` succeed with default options - portlint clean apart from the work-dir notice (cleaned before commit) - No test target (NO_BUILD port) 🤖 Generated with [Claude Code](https://claude.com/claude-code) ## Summary by Sourcery Enhancements: - Update the Apache Tomcat 10.1 port to version 10.1.60. Signed-off-by: Lucas Holt <[email protected]>
22a2e29e81 Lucas Holt www/tomcat101: update to 10.1.59 (#780)
Update Tomcat 10.1 to the August 2026 security release. Tomcat 10.1.58 was not released because its release vote failed; 10.1.59 is the first published fixed version. This fixes CVE-2026-73180, CVE-2026-68763, CVE-2026-68569, CVE-2026-68525, CVE-2026-66422, CVE-2026-66299, CVE-2026-65927, CVE-2026-65905, CVE-2026-65637, CVE-2026-65183, and CVE-2026-65182. Validation: - BATCH=yes bmake -C www/tomcat101 clean patch check-license - BATCH=yes bmake -C www/tomcat101 build fake package test - portlint -AC www/tomcat101 - git diff --check ## Summary by Sourcery Bug Fixes: - Update Tomcat 10.1 to version 10.1.59, incorporating the August 2026 security fixes for the listed CVEs. Signed-off-by: Lucas Holt <[email protected]>
34366c93b6 Lucas Holt www/tomcat101: update