Upgrade tomcat to 5.5.32
8 July, 2011
We are using Yellowfin 5.1 with the Tomcat 5.5.27. Due to the CVE-2010-2227 vulnerability "Remote Denial Of Service and Information Disclosure Vulnerability" affecting Tomcat 5.5.0-5.5.29 we would like to upgrade Tomcat to version 5.5.32.
I found this link http://www.yellowfinbi.com/YFForum-Tomcat-upgrade-?thread=90535 about upgrading Tomcat to version 5.5.27.
Do you have similar instructions about upgrading Tomcat to 5.5.32? Is this version compatible with Yellowfin 5.1?
There should be no issues upgrading to 5.5.32, and it should be pretty straightforward to download the latest Tomcat build from the Tomcat website:
http://tomcat.apache.org/
We are planning on shipping later builds of Tomcat with Yellowfin, though different versions of Tomcat support different levels of the JSP specification, this means if we were to upgrade to 6.0.x or 7.0.x we would potentially need to rewrite a large majority of the code.
At the moment Tomcat 6.0.x and 7.0.x are un-tested and are not sure how this will affect Yellowfin
If you do choose to upgrade Tomcat and run into any issues, please let me know.
Regards,
David