How to update our Tomcat server?
Written By
István Gergely-Tárnoki
How To articles are not official guidelines or officially supported documentation. They are community-contributed content and may not always reflect the latest updates to Liferay DXP. We welcome your feedback to improve How To articles!
While we make every effort to ensure this Knowledge Base is accurate, it may not always reflect the most recent updates or official guidelines.We appreciate your understanding and encourage you to reach out with any feedback or concerns.
Legacy Article
You are viewing an article from our legacy "FastTrack"
publication program, made available for informational purposes. Articles
in this program were published without a requirement for independent
editing or verification and are provided"as is" without
guarantee.
Before using any information from this article, independently verify its
suitability for your situation and project.
Issue
- We've found a security issue in our current Tomcat server version
- The issue has been fixed in the latest version of Tomcat
- Does Liferay provide a fix for the issue?
- If not, how can we upgrade our application server to that version?
Environment
- Liferay Portal 6.2+
- Liferay DXP 7.0+
Resolution
- As the vulnerability is related to the third-party application server itself, Liferay doesn't provide a fix for it. Liferay will eventually upgrade the Tomcat version in the upcoming bundles of actively supported Liferay versions, but as it takes time, you will definitely need to update your Tomcat if it's urgent to resolve the issue
- If there is a pre-existing environment already, you may need to migrate the files (for example, jar. setenv.sh, root.xml, etc.) from your pre-existing application server to the new application server, any tomcat related config files that differences between two versions, you may need to examine and apply changes between the environments
- Regarding the upgrade process, while Liferay Support will be limited in what configurations we can assist with, as Tomcat is an Apache product, there are some modifications made to the server included in our bundles. These changes are covered thoroughly in our documentation for Installing Liferay DXP on Tomcat.
- Of specific note, Liferay itself is installed in the provided bundles to the /ROOT directory in Tomcat's /webapps directory, so be sure to not overwrite that directory or any files contained in it
- So what you'll need to do is:
- Install the desired Tomcat version - you may need to consult the vendor's documentation for this
- Then following the referred articles, deploy your existing Liferay DXP on it manually
- As at all times, we would like to advise you to backup all the important data and test the upgrade in a lower, non-production environment first
Did this article resolve your issue ?