Hi, I have a Lucee (5.4.3.16) install running on AWS EC2 that is being flagged as requiring a Tomcat update from 9.0.71 to 9.0.98 to fix some vulnerabilities. The client is doing a Cyber Essentials audit. Anyone point me to some docs on how to update the Tomcat version - I found an old Railo doc suggesting it was just a case of copying the new lib folder into the /opt/lucee/tomcat folder (with a backup of the original lib folder). Is this still the case for Lucee and does anything else need updating? I can update the Lucee version to the latest 5.x version but not sure this will change the Tomcat version. TIA.

Perfect! Thanks very much.