I'm fighting with upgrading Lucee 6.0.1.83 on ubun...
# lucee
s
I'm fighting with upgrading Lucee 6.0.1.83 on ubuntu to the latest Java 11 and Tomcat 9 versions due to security vulnerabilities being flagged. I was able to upgrade Java JRE by following the doc (mostly, reference "jdk" folder was really "jre"). Tomcat on the other hand, fails to restart and I have to restore the tomcat backup. Is there an easier way to upgrade these or newer documentation? https://docs.lucee.org/guides/installing-lucee/installation-linux/upgrade-JRE.html I cannot seem to find actual tomcat updating documentation for lucee, only various forum dialogs over the years.
e
Lucee, is a java application engine, it rides by default upon Tomcat 9. You are not required to use Tomcat 9, but 99.9 percent of the planet is using tomcat 🙂 As for your upgrade, depending on OS version you can stop the service, update the core binary and start it back up.
Edit, the latest version of Tomcat 9 is here: https://tomcat.apache.org/download-90.cgi#9.0.89
s
I tried upgrading the core binary but it did not start back up. The old doc I found upgraded the /opt/lucee/tomcat/lib folder, this failed, so I tried upgrading the entire /opt/lucee/tomcat folder, this failed as well. It could be a user permission thing but I'm not funding much, other than a reference that this could cause issues.
e
what are you upgrading from to? lets start with that... Lucee 5 to 6?
s
I've upgraded lucee to 6.0.1.83. I've upgraded java to 22.0.1. Tomcat is the last piece, currently at 9.0.85, minimum I need is 9.0.86, latest is 9.0.89.
d
Make sure to re-apply any Tomcat configurations changes. There should be some changes in your Tomcat web.xml, server.xml and possibly your catalina.properties file.
s
Ah, maybe that is the missing piece. I'll give it a try tomorrow.
g
CleanShot 2024-05-21 at 13.58.57.png
s
Sorry if I am being dumb, but the guide says:
Ensure Tomcat is up to Date
Tomcat is the servlet engine that the Lucee Installers use by default. From time to time, security issues are discovered and fixed within Tomcat. Therefore, it is a good idea to keep an eye on the Security Releases for Tomcat and apply them when needed.
Instructions for upgrading Tomcat are available for both Windows and Linux
Anyone know where these up-to-date instructions are?