Upgrading Tomcat on an existing Headwind MDM installation

Question

Do you have a process available to follow to upgrade Tomcat on an existing installation? Current tomcat installed is 9.0.58-1ubuntu0.1 and that is a big CVE listed vulnerability. It is noted that 0.0.99+ should be installed. I don't want to break the installation so would appreciate your advice.

Answer 1

Here are the commands to update Tomcat:

wget https://archive.apache.org/dist/tomcat/tomcat-9/v9.0.102/bin/apache-tomcat-9.0.102.tar.gz

tar -zxf apache-tomcat-9.0.102.tar.gz

cd apache-tomcat-9.0.102

chmod a+x bin

chmod a+x lib

chmod -R a+r bin

chmod -R a+r lib

chmod a+x bin/*.sh

mv /usr/share/tomcat9/bin /usr/share/tomcat9/bin~

mv /usr/share/tomcat9/lib /usr/share/tomcat9/lib~

cp -r bin /usr/share/tomcat9

cp -r lib /usr/share/tomcat9

service tomcat9 restart

cd ..

rm -rf apache-tomcat-9.0.102

rm -f apache-tomcat-9.0.102.tar.gz

apt-mark hold tomcat9

Notice: the last command is important because it prevents Tomcat package from occasional downgrading in the future.