Problem

GroundWork 7.1.1 includes Tomcat 6.0.32 which has been noted as having vulnerabilities. This patch upgrades Tomcat to 6.0.53. Customers running 7.1.1 that need to be compliant with PCI Net regulations, among others, need to upgrade.

Solution

Apply the attached patch to upgrade the Tomcat embedded in Josso to 6.0.53.

You must have applied TB7.1.1-11 before you may apply TB7.1.1-12.

Installation

1. Download the patch file tar archive
   Name	Size	Creator	Creation Date	Comment
   TB7.1.1-12.tomcat-6.0.53.tgz	19.27 MB	NotSupportContact-Mark Carey	Nov 27, 2017 18:01	MD5: 58b3a1f71a6535b0ec24dd0c842c24fd
2. Decompress the install script and files and run the install script. They will appear in subdirectory TB7.1.1-12.tomcat-6.0.53.

   tar xvf TB7.1.1-12.tomcat-6.0.53.tgz
   cd TB7.1.1-12.tomcat-6.0.53
   ./TB7.1.1-12_install.sh
   

You can see a list of patches and installation logs at:

/usr/local/groundwork/common/var/patches/

In the event that you had not previously installed TB7.1.1-11 this patch will exit. As noted above you are required to apply that patch first.

Uninstallation

1. Run the uninstall script, and respond to the prompts.

./TB7.1.1-12_uninstall.sh

The patch directory will be updated to reflect the restoration of the files and uninstall steps. Note that uninstall will revert to the prepatched state. If you have applied LDAP or HTTPS subsequent to installing this patch you will need to reimplement those configurations after uninstalling.