BSD Ports

www/tomcat110 11.0.27 MidnightBSD

Open-source Java web server by Apache, 11.0.x branch

System
MidnightBSD
Repository
mports
Maintainer
[email protected]
Last update
Commit
02efa502a3
License
Apache-2.0
Categories
www, java

Description

Apache Tomcat is a web server written in 100% Pure Java.

Apache Tomcat 11.0.x is the current focus of development. It builds on Tomcat 10.1.x and implements the Servlet 6.1, JSP 4.0, EL 6.0, WebSocket 2.2 and Authentication 3.1 specifications. This release is a milestone release and is targeted at Jakarta EE 11.

In the other systems

The newest version among them is 11.0.27, as upstream numbers it.

SystemPortVersionVulnerabilitiesStatusMaintainerLast update
MidnightBSDwww/tomcat11011.0.27 newestno data-[email protected]2026-10-20
FreeBSDwww/tomcat11011.0.27 newestnone known-[email protected]2026-10-12
DragonFlywww/tomcat11011.0.8 behind since 2026-07-081 known-[email protected]-
HardenedBSDwww/tomcat11011.0.26 behind since 2026-10-12no data-[email protected]-
GhostBSDwww/tomcat11011.0.26 behind since 2026-10-12no data-[email protected]-

Version history 4

  1. 11.0.27 02efa502a3
  2. 11.0.26 a3127463a7
  3. 11.0.25 501bb054c7
  4. 11.0.24 11e35c0fb8

Upstream's version as each commit to the port's Makefile set it, or as this site first saw it in the system's packages; the tree's own revisions are not versions here.

Install

Binary package:

mport install tomcat110

From mports:

cd /usr/mports/www/tomcat110 && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	tomcat110>0:www/tomcat110

Dependency graph

Ports that need it on the left, what it needs to run on the right; at most 8 of each. "Dependencies" below lists them all.

Dependencies

As this port's Makefile names them.

Runtime 1

Run dependencies 1

No port depends on this one.

Related ports

The same software or family in MidnightBSD: one homepage, or one name but for a version or a variant.

Configuration

Options name: www_tomcat

OptionDefaultDescription
DOCSoffInstall Documentation web application
EXAMPLESoffInstall Examples web application
HOST_MANAGERonInstall Host Manager application
MANAGERonInstall Manager web application
NLSoff
ROOTonInstall default ROOT web application
USES
cpe java
Service scripts
${PKGBASE:C/-/_/}

Files

pkg-plist 633
  • %%T%%/BUILDING.txt
  • %%T%%/CONTRIBUTING.md
  • %%T%%/LICENSE
  • %%T%%/NOTICE
  • %%T%%/README.md
  • %%T%%/RELEASE-NOTES
  • %%T%%/RUNNING.txt
  • %%T%%/bin/bootstrap.jar
  • %%T%%/bin/catalina-tasks.xml
  • %%T%%/bin/catalina.sh
  • %%T%%/bin/ciphers.sh
  • %%T%%/bin/configtest.sh
  • %%T%%/bin/daemon.sh
  • %%T%%/bin/digest.sh
  • %%T%%/bin/makebase.sh
  • %%T%%/bin/migrate.sh
  • %%T%%/bin/setclasspath.sh
  • %%T%%/bin/shutdown.sh
  • %%T%%/bin/startup.sh
  • %%T%%/bin/tomcat-juli.jar
  • %%T%%/bin/tool-wrapper.sh
  • %%T%%/bin/version.sh
  • %%T%%/lib/annotations-api.jar
  • %%T%%/lib/catalina-ant.jar
  • %%T%%/lib/catalina-ha.jar
  • %%T%%/lib/catalina-ssi.jar
  • %%T%%/lib/catalina-storeconfig.jar
  • %%T%%/lib/catalina-tribes.jar
  • %%T%%/lib/catalina.jar
  • %%T%%/lib/ecj-4.41.jar
  • %%T%%/lib/el-api.jar
  • %%T%%/lib/jakartaee-migration-1.0.13-shaded.jar
  • %%T%%/lib/jasper-el.jar
  • %%T%%/lib/jasper.jar
  • %%T%%/lib/jaspic-api.jar
  • %%T%%/lib/jsp-api.jar
  • %%T%%/lib/servlet-api.jar
  • %%T%%/lib/tomcat-api.jar
  • %%T%%/lib/tomcat-coyote-ffm.jar
  • %%T%%/lib/tomcat-coyote.jar
  • %%T%%/lib/tomcat-dbcp.jar
  • %%T%%/lib/tomcat-i18n-cs.jar
  • %%T%%/lib/tomcat-i18n-de.jar
  • %%T%%/lib/tomcat-i18n-es.jar
  • %%T%%/lib/tomcat-i18n-fr.jar
  • %%T%%/lib/tomcat-i18n-ja.jar
  • %%T%%/lib/tomcat-i18n-ko.jar
  • %%T%%/lib/tomcat-i18n-pt-BR.jar
  • %%T%%/lib/tomcat-i18n-ru.jar
  • %%T%%/lib/tomcat-i18n-zh-CN.jar
  • %%T%%/lib/tomcat-jdbc.jar
  • %%T%%/lib/tomcat-jni.jar
  • %%T%%/lib/tomcat-util-scan.jar
  • %%T%%/lib/tomcat-util.jar
  • %%T%%/lib/tomcat-websocket.jar
  • %%T%%/lib/websocket-api.jar
  • %%T%%/lib/websocket-client-api.jar
  • @postunexec [ ! -d %D/ ] || echo If permanently deleting this package, %D/ must be removed manually
  • @owner
  • @group
  • @dir %%T%%/conf
  • @dir %%T%%/logs
  • @dir %%T%%/temp
  • @dir %%T%%/webapps
  • @dir %%T%%/work
  • @sample %%T%%/conf/catalina.properties.sample
  • @sample %%T%%/conf/context.xml.sample
  • @sample %%T%%/conf/jaspic-providers.xml.sample
  • %%T%%/conf/jaspic-providers.xsd
  • @sample %%T%%/conf/logging.properties.sample
  • @sample %%T%%/conf/server.xml.sample
  • @sample %%T%%/conf/tomcat-users.xml.sample
  • %%T%%/conf/tomcat-users.xsd
  • @sample %%T%%/conf/web.xml.sample
  • %%T%%/temp/safeToDelete.tmp
  • %%T%%/webapps/docs/BUILDING.txt
  • %%T%%/webapps/docs/META-INF/context.xml
  • %%T%%/webapps/docs/RELEASE-NOTES.txt
  • %%T%%/webapps/docs/RUNNING.txt
  • %%T%%/webapps/docs/WEB-INF/jsp/403.jsp
  • %%T%%/webapps/docs/WEB-INF/web.xml
  • %%T%%/webapps/docs/aio.html
  • %%T%%/webapps/docs/api/index.html
  • %%T%%/webapps/docs/annotationapi/index.html
  • %%T%%/webapps/docs/appdev/build.xml.txt
  • %%T%%/webapps/docs/appdev/deployment.html
  • %%T%%/webapps/docs/appdev/index.html
  • %%T%%/webapps/docs/appdev/installation.html
  • %%T%%/webapps/docs/appdev/introduction.html
  • %%T%%/webapps/docs/appdev/processes.html
  • %%T%%/webapps/docs/appdev/sample/build.xml
  • %%T%%/webapps/docs/appdev/sample/docs/README.txt
  • %%T%%/webapps/docs/appdev/sample/index.html
  • %%T%%/webapps/docs/appdev/sample/sample.war
  • %%T%%/webapps/docs/appdev/sample/src/mypackage/Hello.java
  • %%T%%/webapps/docs/appdev/sample/web/WEB-INF/web.xml
  • %%T%%/webapps/docs/appdev/sample/web/hello.jsp
  • %%T%%/webapps/docs/appdev/sample/web/images/tomcat.gif
  • %%T%%/webapps/docs/appdev/sample/web/index.html
  • %%T%%/webapps/docs/appdev/source.html

The first 100 are listed.

distinfo 1
FileSizeSHA256
apache-tomcat-11.0.27.tar.gz1.4545574e+076eafcfd623de7582857027872421495d6a464a1537168d0758a1991ce7a54367
Master sites 1
  • APACHE/tomcat/tomcat-${DISTVERSION:C/([0-9]+)(.*)/\1/}/v11.0.27/bin

Commit history 4

DateCommitCreditsLog message
02efa502a3 Lucas Holt www/tomcat110: update to 11.0.27 (#1834)
Security fixes: - Important: CVE-2026-103119 AJP response mix-up - Important: CVE-2026-101356 HTTP/2 request/response mix-up after error during async processing - Important: CVE-2026-101296 JNDIRealm bind credential validation fails open for non-GSSAPI SASL mechanisms - Low: CVE-2026-93446, CVE-2026-88041, CVE-2026-74049, CVE-2026-74048 The bundled ecj jar is now 4.41 and jakartaee-migration 1.0.13. Upstream: https://tomcat.apache.org/security-11.html Testing: - `bmake makesum`; SHA512 matches Apache's `.sha512` file - `bmake fake package` (fake-qa reports no plist problems) - `portlint -AC`: 0 fatal 🤖 Generated with [Claude Code](https://claude.com/claude-code) ## Summary by Sourcery Update the Tomcat 11 port to the 11.0.27 release with upstream security …
a3127463a7 Lucas Holt www/tomcat110: update to 11.0.26 (#1626)
Update Apache Tomcat 11.0.x from 11.0.25 to 11.0.26. Release notes: https://tomcat.apache.org/tomcat-11.0-doc/changelog.html Validation on MidnightBSD 4.0.6 amd64: - distfile SHA-512 verified against Apache's published checksum - tarball file list identical to 11.0.25 (no pkg-plist changes) - `bmake makesum patch`, `bmake`, `bmake fake`, `bmake package` succeed with default options - portlint clean apart from the work-dir notice (cleaned before commit) - No test target (NO_BUILD port) 🤖 Generated with [Claude Code](https://claude.com/claude-code) ## Summary by Sourcery Update the Tomcat 11 package to the 11.0.26 release. Enhancements: - Update the Apache Tomcat 11 port to version 11.0.26. Chores: - Refresh the distribution checksum metadata for the new Tomcat release. …
501bb054c7 Lucas Holt www/tomcat110: update to 11.0.25 (#781)
Update Tomcat 11 to the August 2026 security release. This fixes CVE-2026-73180, CVE-2026-68763, CVE-2026-68569, CVE-2026-68525, CVE-2026-66422, CVE-2026-66299, CVE-2026-65927, CVE-2026-65905, CVE-2026-65637, CVE-2026-65183, and CVE-2026-65182. Validation: - BATCH=yes bmake -C www/tomcat110 clean patch check-license - BATCH=yes bmake -C www/tomcat110 build fake package test - portlint -AC www/tomcat110 - git diff --check ## Summary by Sourcery Bug Fixes: - Update Tomcat 11 to version 11.0.25, incorporating the August 2026 security fixes. Signed-off-by: Lucas Holt <[email protected]>
11e35c0fb8 Lucas Holt www/tomcat: update supported releases (#697)
## Summary - update `www/tomcat9` from 9.0.119 to 9.0.120 - update `www/tomcat110` from 11.0.23 to 11.0.24 - update `www/tomcat-native` from 1.3.7 to 1.3.8 - update the Tomcat 11 plist for ECJ 4.40 These releases contain the latest upstream fixes available for the supported Tomcat branches. Tomcat 10.1.57 is already current and is therefore unchanged. ## Validation For all three updated ports: - `bmake makesum` - `bmake patch` - `bmake` - `bmake fake` - `bmake package` - `bmake test` - `bmake check-license` All three packages were created successfully. `portlint -C` passes for Tomcat 9 and Tomcat 11 with only the local maintainer-mode warning. Tomcat Native retains pre-existing portlint findings for its hyphenated …