The Essential Project Forum

Hi all,

Until last year, my local Open Source package installation was using Tomcat 9.0.98, recent days, I'm getting warning notification from our company's security team, that that Tomcat version pop up vulnerabilities and pushing me to upgrade.

While, in Open Source download page, it still says our Essential only support Tomcat 8 or 9, so I have gone to Tomcat site and found latest v9 having 9.0.105.

Just upgraded my local environment and it's working fine, informed security team and wait their feedback, hope this version can be sufficient.

If anyone is looking for Tomcat version, I can confirm here the 9.0.105 is ok for upgrading.

Regards,
Xiaoqi

Hi,

As a general rule, you will always be able to upgrade to the latest 9.x version of Tomcat with compatibility for Essential.

Cheers

Neil

Thanks Neil, hope this .105 version is OK for continue, nowadays I'm getting more and more pressure from company's security team for moving to higher Tomcat main version.

Regards,
Xiaoqi