www-announce mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Mark Thomas <ma...@apache.org>
Subject [ANN] End of life for Apache Tomcat Native 1.1.x
Date Thu, 21 Sep 2017 21:26:36 GMT
The Apache Tomcat Team announces that support for Apache Tomcat Native
1.1.x will end on 30 September 2018.

This means that after 30 September 2018:
- releases from the 1.1.x branch are highly unlikely
- bugs affecting only the 1.1.x branch will not be addressed
- security vulnerability reports will not be checked against the 1.1.x
- Apache Tomcat releases of 7.0.x after this date may require 1.2.x as a

Three months later (i.e. after 31 December 2018)
- the 1.1.x download pages will be removed
- the latest 1.1.x release will be removed from the mirror system
- the links to the 1.1.x documentation will be removed from

The latest binary releases of 1.1.x for Microsoft Windows are not built
with a current version of OpenSSL and will therefore be removed from the
download pages with immediate effect.

Please also note the following additional information:

Tomcat 8.5.x and 9.0.x require a minimum of Tomcat Native 1.2.x and are
therefore unaffected by this notice.

Tomcat 8.0.x will reach end of life on 30 June 2018 and is therefore
unaffected by this notice.

Only Tomcat 7.0.x is affected by this notice.

Tomcat 7.0.x has shipped with Tomcat Native 1.2.x since 7.0.70 (June 2016).

All 1.1.x releases will always be available from the archive.

Tomcat Native 1.2.x is a drop-in replacement for 1.1.x although it does
require OpenSSL 1.0.2 as a minimum.

All Tomcat Native releases from 1.1.34 onwards have indicated that users
should use 1.2.x in preference to 1.1.x.

The most recent release of 1.1.x (1.1.34) was released in December 2015.
It is likely that 1.1.34 will be the final 1.1.x release unless a
security vulnerability is discovered in 1.1.x that cannot be worked
around without a new release.

View raw message