Update Tomcat due to CVE-2018-1336

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 6.2 EE GA1 (6.2.10), 7.0 DE (7.0.10), 7.1 DXP (7.1.10)
• Fix Version/s: 6.2.X EE, 7.0.X EE, 7.1.x EE
• Component/s: Environments > App Servers, Security Vulnerability
• Labels: None

Mitigation

Existing Liferay installations should be migrated to a newer Tomcat version according to the following recommendation:

• DXP 7.1: Tomcat 9.0.10
• DXP 7.0: Tomcat 8.0.53
• 6.1, 6.2 EE: Tomcat 7.0.90

https://help.liferay.com/hc/en/articles/360018123252