Re: Why move to tomcat9 (UNCLASSIFIED)

2018-08-29 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Paul, On 8/29/18 10:51, Lueders, Paul T CIV USARMY NGIC (US) wrote: > I would like to migrate from tomcat 7.0.90 to the latest version > of tomcat9. Is there a document that lists the benefits of tomcat9 > and the differences between tomcat7 and

RE: Why move to tomcat9 (UNCLASSIFIED)

2018-08-29 Thread Gillett, Phil
: Wednesday, August 29, 2018 10:23 AM To: users@tomcat.apache.org Subject: Re: Why move to tomcat9 (UNCLASSIFIED) On 29/08/18 15:56, M. Manna wrote: > The key benefit is - You get all recent CVE patches which protects > your product more from known vulnerabilities. Not correct. All currently sup

Re: Why move to tomcat9 (UNCLASSIFIED)

2018-08-29 Thread Mark Thomas
On 29/08/18 15:56, M. Manna wrote: > The key benefit is - You get all recent CVE patches which protects your > product more from known vulnerabilities. Not correct. All currently supported Tomcat versions (7.0.x, 8.5.x and 9.0.x) receive security fixes. > You can see a comparison table here - >

Re: Why move to tomcat9 (UNCLASSIFIED)

2018-08-29 Thread M. Manna
The key benefit is - You get all recent CVE patches which protects your product more from known vulnerabilities. You can see a comparison table here - http://tomcat.apache.org/whichversion.html I would recommend that you review Servlet, Connector, and Java version related changes carefully (if