Apache Tomcat end of life dates

Apache Tomcat 11.0 is the newest release line, at 11.0.26 (9 Sept 2026). 3 lines are still supported upstream: 11.0, 10.1 and 9.0. 6 lines have reached end of life, most recently 8.5 on 31 Mar 2024. 9.0 is next, on 31 Mar 2027. OSSeva ships patched builds for end-of-life Apache Tomcat 10.0 and 8.5.

Latest release
11.0.26
Supported lines
3
End-of-life lines
6
Next end of life
9.0 · 31 Mar 2027

Apache Tomcat release timeline

Security SupportToday

All Apache Tomcat versions and end-of-life dates

VersionReleasedSecurity SupportLatestOSSeva
11.02 years ago(3 Oct 2024)Yes11.0.26–
10.14 years ago(23 Sept 2022)Yes10.1.60–
10.05 years and 10 months ago(3 Dec 2020)Ended 3 years and 11 months ago(31 Oct 2022)10.0.27 Patched
9.09 years ago(27 Sept 2017)Ends in 6 months(31 Mar 2027)9.0.122–
8.510 years and 6 months ago(17 Mar 2016)Ended 2 years and 6 months ago(31 Mar 2024)8.5.100 Patched
8.012 years and 8 months ago(29 Jan 2014)Ended 8 years and 3 months ago(30 Jun 2018)8.0.53–
716 years and 4 months ago(13 Jun 2010)Ended 5 years and 6 months ago(31 Mar 2021)7.0.109–
619 years and 11 months ago(21 Oct 2006)Ended 9 years and 9 months ago(31 Dec 2016)6.0.53–
523 years and 1 month ago(6 Sept 2003)Ended 14 years ago(30 Sept 2012)5.5.36–

Lifecycle data from endoflife.date (MIT licence), refreshed 30 Sept 2026. Upstream policy: tomcat.apache.org. “Patched” marks end-of-life lines OSSeva ships signed, backported builds for.

Running an end-of-life Apache Tomcat version?

OSSeva keeps end-of-life Apache Tomcat patched with signed builds and backported CVE fixes, documents it for your auditor, and can run it for you, so the upgrade happens on your schedule rather than the project’s.

Apache Tomcat extended support

Apache Tomcat end of life: common questions

What is the latest Apache Tomcat version?

11.0.26, released 9 Sept 2026, on the 11.0 line. Other supported lines: 10.1 and 9.0.

When is the next Apache Tomcat end of life?

Apache Tomcat 9.0 reaches the end of security support on 31 Mar 2027. After that date the project stops shipping security fixes for 9.0, and CVEs disclosed later stay unpatched upstream.

Which Apache Tomcat versions are still supported?

11.0, 10.1 and 9.0 (until 31 Mar 2027). Every other line has reached end of life, per the dates in the table above.

Can I get security patches for an end-of-life Apache Tomcat version?

Yes. OSSeva ships signed builds with backported CVE fixes for Apache Tomcat 10.0 and 8.5 after upstream support ends, on the Patch, Assure and Operate tiers, so you can stay on the version you run while you plan the upgrade.

Still running an end-of-life Apache Tomcat?

Tell us the versions and the estate size. We will tell you whether to upgrade or keep it patched, and what each costs.