REQUEST: Tomcat & JDK Upgrade

cishpix

Regarding this thread https://forum.awareim.com/https://forum.awareim.com/d/8671> I hope support could upgrade the JDK and Tomcat to the latest version too. I know we can upgrade it by ourselves but everytime we upgrade the latest build of AwareIM version, we should upgrade the JDK and Tomcat too.

As we know, the latest build version of Aware IM v7 is still use Tomcat 8.0.14 and JDK 1.7.0_51. As I know Tomcat already achieve the latest version 8.0.33 and the latest JDK version is 8u92.

I think we should care about the web server security vulnerabilities fixed (I mean the tomcat) and JDK too like every build version in Aware IM, right? I just think why Aware IM release v7 but never upgrade the Tomcat and JDK version? Maybe support has other reason for this question, would you like let me know?

FYI, we can see the Tomcat 8.x vulnerabilities on http://tomcat.apache.org/security-8.html and JDK at http://www.oracle.com/technetwork/java/javase/8u-relnotes-2225394.html

weblike

+10

BenHayat

I had talked to a third part library vendor and he said, for them to secure their system, we have to use the latest JDK and Java.
I think as next version is going towards the 64-bit, it's time to bring everything up to the current version. Many enterprise customers take this very seriously before considering buying Aware.

My vote: 10+