Apache Tomcat end of life dates
Apache Tomcat 11.0 is the newest release line, at 11.0.26 (9 Sept 2026). 3 lines are still supported upstream: 11.0, 10.1 and 9.0. 6 lines have reached end of life, most recently 8.5 on 31 Mar 2024. 9.0 is next, on 31 Mar 2027. OSSeva ships patched builds for end-of-life Apache Tomcat 10.0 and 8.5.
Apache Tomcat major versions are typically supported for about 10 years, and the Which Version page lists the branches the community still maintains. Tomcat 9 is the exception: as the last major version for Java EE, it continues on a new 9.1.x branch once 9.0.x support ends, which the project expects no earlier than 31 March 2027.
- Latest release
- 11.0.26
- Supported lines
- 3
- End-of-life lines
- 6
- Next end of life
- 9.0 · 31 Mar 2027
Apache Tomcat release timeline
All Apache Tomcat versions and end-of-life dates
| Version | Released | Security Support | Latest | OSSeva |
|---|---|---|---|---|
| 11.0 | 2 years ago(3 Oct 2024) | Yes | 11.0.26 | – |
| 10.1 | 4 years ago(23 Sept 2022) | Yes | 10.1.60 | – |
| 10.0 | 5 years and 10 months ago(3 Dec 2020) | Ended 3 years and 11 months ago(31 Oct 2022) | 10.0.27 | Patched |
| 9.0 | 9 years ago(27 Sept 2017) | Ends in 6 months(31 Mar 2027) | 9.0.122 | – |
| 8.5 | 10 years and 7 months ago(17 Mar 2016) | Ended 2 years and 6 months ago(31 Mar 2024) | 8.5.100 | Patched |
| 8.0 | 12 years and 8 months ago(29 Jan 2014) | Ended 8 years and 3 months ago(30 Jun 2018) | 8.0.53 | – |
| 7 | 16 years and 4 months ago(13 Jun 2010) | Ended 5 years and 6 months ago(31 Mar 2021) | 7.0.109 | – |
| 6 | 20 years ago(21 Oct 2006) | Ended 9 years and 9 months ago(31 Dec 2016) | 6.0.53 | – |
| 5 | 23 years and 1 month ago(6 Sept 2003) | Ended 14 years ago(30 Sept 2012) | 5.5.36 | – |
Lifecycle data from endoflife.date (MIT licence), refreshed 6 Oct 2026. Upstream policy: tomcat.apache.org. “Patched” marks end-of-life lines OSSeva ships signed, backported builds for.
Running an end-of-life Apache Tomcat version?
OSSeva keeps end-of-life Apache Tomcat patched with signed builds and backported CVE fixes, documents it for your auditor, and can run it for you, so the upgrade happens on your schedule rather than the project’s.
Apache Tomcat extended supportApache Tomcat end of life: common questions
Is Tomcat 9 end of life?
Not as a major version. Tomcat 9.0.x end of support is expected no earlier than 31 March 2027, and a new 9.1.x branch will then carry Java EE support forward with security and bug fix backports, minus the APR/Native connector. The Tomcat project promises at least 12 months notice before 9.1.x support ends.
Is Tomcat 8.5 end of life?
Yes. Apache Tomcat 8.5 support ended on 31 March 2024. After that date the project stopped checking security vulnerability reports against the 8.5.x branch, and 8.5.100 was the final release. The Tomcat team tells 8.5 users to upgrade to Tomcat 9 or later, and 9 is still a Java EE release like 8.5.
Is Tomcat 7 end of life?
Yes. Apache Tomcat 7.0.x reached end of life on 31 March 2021. Since then security reports are not checked against the 7.0 branch, and 7.0.109 was the last release. The Tomcat project advises 7.x users to upgrade to Tomcat 9.x or later, which keeps the Java EE APIs that 7.0 applications use.
Which Tomcat version should I use?
The Tomcat project recommends the latest stable version wherever possible. Tomcat 11.0 needs Java 17 or later and 10.1 needs Java 11 or later; both implement Jakarta EE. Tomcat 9.0 runs on Java 8 or later and is the line for applications that still depend on the older Java EE APIs.
What is the latest Apache Tomcat version?
11.0.26, released 9 Sept 2026, on the 11.0 line. Other supported lines: 10.1 and 9.0.
When is the next Apache Tomcat end of life?
Apache Tomcat 9.0 reaches the end of security support on 31 Mar 2027. After that date the project stops shipping security fixes for 9.0, and CVEs disclosed later stay unpatched upstream.
Which Apache Tomcat versions are still supported?
11.0, 10.1 and 9.0 (until 31 Mar 2027). Every other line has reached end of life, per the dates in the table above.
Can I get security patches for an end-of-life Apache Tomcat version?
Yes. OSSeva ships signed builds with backported CVE fixes for Apache Tomcat 10.0 and 8.5 after upstream support ends, on the Patch, Assure and Operate tiers, so you can stay on the version you run while you plan the upgrade.
Still running an end-of-life Apache Tomcat?
Tell us the versions and the estate size. We will tell you whether to upgrade or keep it patched, and what each costs.