Apache Tomcat

Apache Tomcat at a glance

Apache Tomcat is a widely used open-source Java servlet container and web server, hosting countless Java web applications. The project maintains several major branches in parallel with regular releases plus coordinated security fixes; as an often internet-facing application server, timely patching matters.

For admins the branch you run should stay on a supported line matched to your servlet/Java version — check that mapping before upgrades. Updates within a branch are usually low-risk (swap the release, restart), but sit them in a maintenance window. Tomcat has had notable security advisories (request handling, the AJP connector), so apply security releases promptly and disable connectors you don't use. Keep the manager app off the open network and behind strong authentication. Track the branch's end-of-life date; deployed web apps should be tested after larger jumps.