jbossweb-tomcat.sar upgrade to Tomcat 5.5.28

[jriesenberg]

The Apache Tomcat project posts periodic security updates to Tomcat (the latest version of 5.5 is 5.5.28). Is there a way to upgrade the jbossweb-tomcat.sar to incorporate the latest build?

Thanks in advance.

[jfclere]

See http://repository.jboss.com/apache-tomcat
Here are the sources of the patched tomcat corresponding to the JbossAS version (4.0.5 and older).

[jriesenberg]

Jean-Frederic,

Thank you for the link to the Tomcat patch repository however I did not see the exact version that I was looking for.

I am using JBoss 4.0.5GA which shipped with JBoss Tomcat 5.5.20 and my customer is requiring me to upgrade Tomcat to 5.5.28. Can you provide me the instructions to replace the bundled JBoss Tomcat 5.5.20 with the new Tomcat release 5.5.28?

Thanks.

John

[jfclere]

For our customers we don't replace the bundled 5.5.23 (or 20) by a 5.5.28 but we use the code in the repository. The repository contains all security patches to be as safe as a 5.5.28 Tomcat (and have be tested).

If you really want to use 5.5.28 just build it and replace the jar files in your AS installation. Note that is not what JBoss supports so you may ended in troubles....

[virtualvat]

Here is an answer easy to follow: http://itapproaches.blogspot.com/2010/08/upgrading-tomcat-in-jboss-405.html