Support for the Tomcat 9.0.x branch is scheduled to end on March 31, 2027 . How to Download from tomcat.apache.org
Ensure your scripts are placed in the WEB-INF/cgi directory of your application or follow the official CGI How-To guide for specific path configurations. Security and Maintenance
Although Tomcat is primarily a Java container, it can execute scripts using the . This is useful if you need to run legacy Perl or Python scripts alongside your Java web apps. To enable this: Navigate to $CATALINA_BASE/conf/web.xml . tomcat.apache.org download-90.cgi
Staying updated is vital. Recent security advisories, such as , highlight the importance of frequently checking the Apache Tomcat Security page and updating your installation to the latest minor version (e.g., moving from 9.0.x to 9.0.y) to patch remote code execution vulnerabilities. CVE-2024-50379: Tomcat Remote Code Execution Vulnerability
: This is the standard server. Use the .zip or .tar.gz for most manual installations on Windows or Linux. Support for the Tomcat 9
Ensure the conf directory is readable but not writable by the general system. Enabling Advanced Features: CGI Support
For a secure installation, it is recommended to create a dedicated user for the service rather than running it as "root" or an administrator. This is useful if you need to run
Use wget to pull the latest version directly from the Apache mirrors.