BSD Ports

www/tomcat9 9.0.123 MidnightBSD

Open-source Java web server by Apache, 9.0.x branch

System
MidnightBSD
Repository
mports
Maintainer
[email protected]
Last update
Commit
3c07a940ca
License
Apache-2.0
Categories
www, java

Description

Apache Tomcat is a web server written in 100% Pure Java.

Apache Tomcat 9.x builds on Tomcat 8.0.x and 8.5.x and implements the Servlet 4.0, JSP 2.3, EL 3.0, WebSocket 1.1 and JASPIC 1.1 specifications (the versions required by Java EE 8 platform).

In the other systems

The newest version among them is 9.0.123, as upstream numbers it.

SystemPortVersionVulnerabilitiesStatusMaintainerLast update
MidnightBSDwww/tomcat99.0.123 newestno data-[email protected]2026-10-20
FreeBSDwww/tomcat99.0.123 newestnone known-[email protected]2026-10-12
DragonFlywww/tomcat99.0.106 behind since 2026-07-081 known-[email protected]-
HardenedBSDwww/tomcat99.0.122 behind since 2026-10-12no data-[email protected]-
GhostBSDwww/tomcat99.0.122 behind since 2026-10-12no data-[email protected]-

Version history 4

  1. 9.0.123 3c07a940ca
  2. 9.0.122 9f0b59688d
  3. 9.0.121 0c15260ede
  4. 9.0.120 11e35c0fb8

Upstream's version as each commit to the port's Makefile set it, or as this site first saw it in the system's packages; the tree's own revisions are not versions here.

Install

Binary package:

mport install tomcat9

From mports:

cd /usr/mports/www/tomcat9 && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	tomcat9>0:www/tomcat9

Dependency graph

Ports that need it on the left, what it needs to run on the right; at most 8 of each. "Dependencies" below lists them all.

Dependencies

As this port's Makefile names them.

Runtime 1

Run dependencies 1

No port depends on this one.

Related ports

The same software or family in MidnightBSD: one homepage, or one name but for a version or a variant.

Configuration

Options name: www_tomcat

OptionDefaultDescription
DOCSoffInstall Documentation web application
EXAMPLESoffInstall Examples web application
HOST_MANAGERonInstall Host Manager application
MANAGERonInstall Manager web application
NLSoff
ROOTonInstall default ROOT web application
USES
cpe java
Service scripts
${PKGBASE:C/-/_/}

Files

pkg-plist 641
  • %%T%%/BUILDING.txt
  • %%T%%/CONTRIBUTING.md
  • %%T%%/LICENSE
  • %%T%%/NOTICE
  • %%T%%/README.md
  • %%T%%/RELEASE-NOTES
  • %%T%%/RUNNING.txt
  • %%T%%/bin/bootstrap.jar
  • %%T%%/bin/catalina-tasks.xml
  • %%T%%/bin/catalina.sh
  • %%T%%/bin/ciphers.sh
  • %%T%%/bin/configtest.sh
  • %%T%%/bin/daemon.sh
  • %%T%%/bin/digest.sh
  • %%T%%/bin/makebase.sh
  • %%T%%/bin/setclasspath.sh
  • %%T%%/bin/shutdown.sh
  • %%T%%/bin/startup.sh
  • %%T%%/bin/tomcat-juli.jar
  • %%T%%/bin/tool-wrapper.sh
  • %%T%%/bin/version.sh
  • %%T%%/lib/annotations-api.jar
  • %%T%%/lib/catalina-ant.jar
  • %%T%%/lib/catalina-ha.jar
  • %%T%%/lib/catalina-ssi.jar
  • %%T%%/lib/catalina-storeconfig.jar
  • %%T%%/lib/catalina-tribes.jar
  • %%T%%/lib/catalina.jar
  • %%T%%/lib/ecj-4.20.jar
  • %%T%%/lib/el-api.jar
  • %%T%%/lib/jasper-el.jar
  • %%T%%/lib/jasper.jar
  • %%T%%/lib/jaspic-api.jar
  • %%T%%/lib/jsp-api.jar
  • %%T%%/lib/servlet-api.jar
  • %%T%%/lib/tomcat-api.jar
  • %%T%%/lib/tomcat-coyote-ffm.jar
  • %%T%%/lib/tomcat-coyote.jar
  • %%T%%/lib/tomcat-dbcp.jar
  • %%T%%/lib/tomcat-i18n-cs.jar
  • %%T%%/lib/tomcat-i18n-de.jar
  • %%T%%/lib/tomcat-i18n-es.jar
  • %%T%%/lib/tomcat-i18n-fr.jar
  • %%T%%/lib/tomcat-i18n-ja.jar
  • %%T%%/lib/tomcat-i18n-ko.jar
  • %%T%%/lib/tomcat-i18n-pt-BR.jar
  • %%T%%/lib/tomcat-i18n-ru.jar
  • %%T%%/lib/tomcat-i18n-zh-CN.jar
  • %%T%%/lib/tomcat-jdbc.jar
  • %%T%%/lib/tomcat-jni.jar
  • %%T%%/lib/tomcat-util-scan.jar
  • %%T%%/lib/tomcat-util.jar
  • %%T%%/lib/tomcat-websocket.jar
  • %%T%%/lib/websocket-api.jar
  • @dir %%T%%/endorsed
  • @postunexec [ ! -d %D/ ] || echo If permanently deleting this package, %D/ must be removed manually
  • @owner
  • @group
  • @dir(www,www,0755) %%T%%/conf
  • @dir(www,www,0755) %%T%%/logs
  • @dir(www,www,0755) %%T%%/temp
  • @dir(www,www,0755) %%T%%/webapps
  • @dir(www,www,0755) %%T%%/work
  • @sample %%T%%/conf/catalina.policy.sample
  • @sample %%T%%/conf/catalina.properties.sample
  • @sample %%T%%/conf/context.xml.sample
  • @sample %%T%%/conf/jaspic-providers.xml.sample
  • %%T%%/conf/jaspic-providers.xsd
  • @sample %%T%%/conf/logging.properties.sample
  • @sample %%T%%/conf/server.xml.sample
  • @sample %%T%%/conf/tomcat-users.xml.sample
  • %%T%%/conf/tomcat-users.xsd
  • @sample %%T%%/conf/web.xml.sample
  • %%T%%/temp/safeToDelete.tmp
  • %%T%%/webapps/docs/BUILDING.txt
  • %%T%%/webapps/docs/META-INF/context.xml
  • %%T%%/webapps/docs/RELEASE-NOTES.txt
  • %%T%%/webapps/docs/RUNNING.txt
  • %%T%%/webapps/docs/WEB-INF/jsp/403.jsp
  • %%T%%/webapps/docs/WEB-INF/web.xml
  • %%T%%/webapps/docs/aio.html
  • %%T%%/webapps/docs/api/index.html
  • %%T%%/webapps/docs/annotationapi/index.html
  • %%T%%/webapps/docs/appdev/build.xml.txt
  • %%T%%/webapps/docs/appdev/deployment.html
  • %%T%%/webapps/docs/appdev/index.html
  • %%T%%/webapps/docs/appdev/installation.html
  • %%T%%/webapps/docs/appdev/introduction.html
  • %%T%%/webapps/docs/appdev/processes.html
  • %%T%%/webapps/docs/appdev/sample/build.xml
  • %%T%%/webapps/docs/appdev/sample/docs/README.txt
  • %%T%%/webapps/docs/appdev/sample/index.html
  • %%T%%/webapps/docs/appdev/sample/sample.war
  • %%T%%/webapps/docs/appdev/sample/src/mypackage/Hello.java
  • %%T%%/webapps/docs/appdev/sample/web/WEB-INF/web.xml
  • %%T%%/webapps/docs/appdev/sample/web/hello.jsp
  • %%T%%/webapps/docs/appdev/sample/web/images/tomcat.gif
  • %%T%%/webapps/docs/appdev/sample/web/index.html
  • %%T%%/webapps/docs/appdev/source.html
  • %%T%%/webapps/docs/appdev/web.xml.txt

The first 100 are listed.

distinfo 1
FileSizeSHA256
apache-tomcat-9.0.123.tar.gz1.3233352e+07fc780a68520ff3af3f20f972bc03a39384c766ed686dd68593fa06d098eda437
Master sites 1
  • APACHE/tomcat/tomcat-${PORTVERSION:C/([0-9])(.*)/\1/}/v9.0.123/bin

Commit history 4

DateCommitCreditsLog message
3c07a940ca Lucas Holt www/tomcat9: update to 9.0.123 (#1832)
Security fixes: - Important: CVE-2026-101356 HTTP/2 request/response mix-up after error during async processing - Important: CVE-2026-101296 JNDIRealm bind credential validation fails open for non-GSSAPI SASL mechanisms - Low: CVE-2026-93446, CVE-2026-88041, CVE-2026-65183, CVE-2026-74049, CVE-2026-74048 Upstream: https://tomcat.apache.org/security-9.html Testing: - `bmake makesum`; SHA512 matches Apache's `.sha512` file - `bmake fake package` (fake-qa reports no plist problems) - `portlint -AC`: 0 fatal 🤖 Generated with [Claude Code](https://claude.com/claude-code) ## Summary by Sourcery Update Tomcat 9 to 9.0.123 with the latest upstream security fixes. Bug Fixes: - Update Tomcat 9 to version 9.0.123 to incorporate upstream security fixes. Chores: …
9f0b59688d Lucas Holt www/tomcat9: update to 9.0.122 (#1624)
Update Apache Tomcat 9.0.x from 9.0.121 to 9.0.122. Release notes: https://tomcat.apache.org/tomcat-9.0-doc/changelog.html Validation on MidnightBSD 4.0.6 amd64: - distfile SHA-512 verified against Apache's published checksum - tarball file list identical to 9.0.121 (no pkg-plist changes) - `bmake makesum patch`, `bmake`, `bmake fake`, `bmake package` succeed with default options - portlint clean apart from the work-dir notice (cleaned before commit) - No test target (NO_BUILD port) 🤖 Generated with [Claude Code](https://claude.com/claude-code) ## Summary by Sourcery Enhancements: - Update the Tomcat 9 port to Apache Tomcat 9.0.122. Signed-off-by: Lucas Holt <[email protected]>
0c15260ede Lucas Holt www/tomcat9: update to 9.0.121 (#779)
Update Tomcat 9 to the August 2026 security release. This fixes CVE-2026-73180, CVE-2026-68763, CVE-2026-68569, CVE-2026-66422, CVE-2026-66299, CVE-2026-65927, CVE-2026-65905, CVE-2026-65637, CVE-2026-65183, and CVE-2026-65182. Validation: - BATCH=yes bmake -C www/tomcat9 clean patch check-license - BATCH=yes bmake -C www/tomcat9 build fake package test - portlint -AC www/tomcat9 - git diff --check ## Summary by Sourcery Bug Fixes: - Update Tomcat 9 to version 9.0.121, incorporating the August 2026 security fixes for the listed CVEs. Signed-off-by: Lucas Holt <[email protected]>
11e35c0fb8 Lucas Holt www/tomcat: update supported releases (#697)
## Summary - update `www/tomcat9` from 9.0.119 to 9.0.120 - update `www/tomcat110` from 11.0.23 to 11.0.24 - update `www/tomcat-native` from 1.3.7 to 1.3.8 - update the Tomcat 11 plist for ECJ 4.40 These releases contain the latest upstream fixes available for the supported Tomcat branches. Tomcat 10.1.57 is already current and is therefore unchanged. ## Validation For all three updated ports: - `bmake makesum` - `bmake patch` - `bmake` - `bmake fake` - `bmake package` - `bmake test` - `bmake check-license` All three packages were created successfully. `portlint -C` passes for Tomcat 9 and Tomcat 11 with only the local maintainer-mode warning. Tomcat Native retains pre-existing portlint findings for its hyphenated …