Any new version of MetaKarta includes the
latest version of Tomcat for bug fixes, performance, security and vulnerability
reasons.
According to the tomcat 9 changelog https://tomcat.apache.org/tomcat-9.0-doc/changelog.html,
the last Common Vulnerabilities and Exposures (CVE) fix was made in 9.0.30.
Therefore, there is no real benefit to upgrade to the latest version.
In
addition, it is not recommended that you manually install / patch the version of
Tomcat bundled in MetaKarta as new Tomcat
versions may not be compatible and require more files to be copies. The
following process describe the patch process anyway although not officially
supported:
1. Check the version of Apache
Tomcat that was bundled within your MetaKarta (e.g. Tomcat
9.0.45) which is expressed in:
$MM_HOME/Documentation/License/MIMM-ThirdParty-LICENSES.html and
$MM_HOME/tomcat/RELEASE-NOTES
2. Download the latest patch
version (e.g. 9.0.46) within the same major version:
https://tomcat.apache.org/download-90.cgi
3. Unzip in temporary directory
4. Stop Tomcat
5. Copy the lib directory from that temporary directory to the $MM_HOME/tomcat/lib (overwriting files if necessary)
6. Restart Tomcat