topic Re: Upgrading to Tomcat 7.0.55, as 7.0.53 is vulnerable in Alfresco Archive

Upgrading to Tomcat 7.0.55, as 7.0.53 is vulnerable

sunnysharma — Mon, 02 Mar 2015 10:39:15 GMT

Alfresco CE version 5.0.x comes with Tomcat version 7.0.53, which according to a report is vulnerable to SSL exploits: http://www.tenable.com/plugins/index.php?view=single&id=77475 I am guessing that even the enterprise version comes with same Tomcat version. Is there a way to upgrade the Tomcat

Re: Upgrading to Tomcat 7.0.55, as 7.0.53 is vulnerable

afaust — Mon, 02 Mar 2015 15:28:43 GMT

Hello,

typically this would need to be a manual upgrade - there is no Automation. Just replace the Tomcat with the new Version and adapt the configuration(s).

Regards
Axel

Re: Upgrading to Tomcat 7.0.55, as 7.0.53 is vulnerable

dirigible — Mon, 20 Jul 2015 20:32:24 GMT

I know this is an old post, but it's the only reference I've seen to my concern.

When I installed Alfresco Community edition, the configuration of the Tomcat server was basically automatic. Now however, I need to upgrade the Tomcat server to a version greater than 7.0.55 for compliance reasons. But I can't find any documentation that covers this situation. I found plenty of info on new deployments, but nothing on in-place upgrades.

Is there a guide or document available that outlines the steps involved in upgrading Tomcat for an existing Alfresco install?

Re: Upgrading to Tomcat 7.0.55, as 7.0.53 is vulnerable

sscbrian — Tue, 21 Jul 2015 12:49:14 GMT

I haven't done it yet, but it *should* be really straightforward. I'd expect an in-place upgrade of Tomcat to work (make sure you have GOOD backups first though, just in case!). Failing that, I would attempt a side by side install of the new tomcat and move my content over, modifying the paths in alfresco-general.properties. Alfresco is really just a big WAR file that uses a database. As long as you stick it in a compatible container and point the configuration files at the right place, it should go…

Re: Upgrading to Tomcat 7.0.55, as 7.0.53 is vulnerable

dirigible — Tue, 21 Jul 2015 20:56:52 GMT

Thanks for the suggestion. I've got backups and I'm running on Windows, so I may just make a shadow copy and give it a try. My biggest issue is not knowing where configs are kept. I'm a complete Alfresco noob.