...
tar.gz (pgp, md5, sha1) <-- click on 'md5' to get the key that should match when you execute md5sum <filename>. If you use 'sha1' then execute sha1sum <filename> to verify.
| Notices From announce@tomcat.apache.org |
|---|
04Oct2018 Security notice received from announce@tomcat.apache.org. Subject: CVE-2018-11784 Apache Tomcat - Open Redirect 6Jun2017 Security notice received from announce@tomcat.apache.org. Subject: CVE-2017-5664 Apache Tomcat Security Constraint Bypass. |
Tomcat Native 1.2.21
- 4Feb2019 apache tomcat native version 1.2.21 from https://tomcat.apache.org/download-native.cgi
Tomcat 9.0
- 14Jun2016 - apache-tomcat-9.0.0.M8.tar.gz from http://tomcat.apache.org/download-90.cgi#9.0.0.M8
- apache-tomcat-9.0.0.M8-deployer.tar.gz from http://tomcat.apache.org/download-90.cgi#9.0.0.M8
- Made softlink apache-tomcat-9.0 points to apache-tomcat-9.0.0.M8
- 14Mar2017 http://tomcat.apache.org/download-90.cgi#9.0.0.M18 9.0.0.M18 and deployer. Checksum matched.
- 6Jun2017 downloaded apache-tomcat-9.0.0.M21.tar.gz from http://tomcat.apache.org/download-90.cgi#9.0.0.M21. Checksum ok
- 04Oct2018 downloaded apache-tomcat-9.0.12.tar.gz from https://tomcat.apache.org/download-90.cgi#9.0.12. Checksum ok. Fixes moderate security bug in redirect.
Tomcat 8.0
- 03Mar2016 apache-tomcat-8.0.32.zip (from http://tomcat.apache.org/download-80.cgi#8.0.32)
- Made softlink apache-tomcat-8.0 points to apache-tomcat-8.0.32
- 14Mar2017 http://tomcat.apache.org/download-80.cgi#8.5.12 8.5.12 and http://tomcat.apache.org/download-80.cgi 8.5.12 deployer. Checksum matched.
- 17Jun2017 downloaded apache-tomcat-8.0.44.tar.gz from http://tomcat.apache.org/download-80.cgi#8.0.44. Checksum ok.
- 17Jun2017 downloaded apache-tomcat-8.5.15.tar.gz from http://tomcat.apache.org/download-80.cgi. Checksum ok.
- 04Oct2018 downloaded apache-tomcat-8.5.34.tar.gz from https://tomcat.apache.org/download-80.cgi#8.5.34. Checksum ok. Fixes moderate security bug in redirect.
- 17May2017 download -
- apache-tomcat-8.0.44 (from http://tomcat.apache.org/download-80.cgi#8.0.44)
- apache-tomcat-8.0.44-deployer (from http://tomcat.apache.org/download-80.cgi#8.0.44)
- checksum matched for both downloads
- Used tar -xvf to untar and copied files to /afs/slac/package/jakarta
...
apache-tomcat-8.0.15
Tomcat 7.0
- 09Jun2018 downloaded apache-tomcat-7.0.90 and apache-tomcat-7.0.9-deployer. sha1 checksums ok.
- 06Jun2017 6Jun2017 downloaded apache-tomcat-7.0.78.tar.gz from http://tomcat.apache.org/download-70.cgi. Checksum ok.
- 14Mar2017 apache-tomcat-7.0.75.tar.gz (from http://tomcat.apache.org/download-70.cgi#7.0.75). Checksum matched.
...
- apache-tomcat-7.0.75 deployer (from http://tomcat.apache.org/download-70.cgi). Checksum matched.
- apache-tomcat-7.0.59
Tomcat 6.0
(The mirror sites may vary, start from http://tomcat.apache.org)
...