topic Re: tomcat CVE-2024-38286 in Active IQ Unified Manager Discussions

tomcat CVE-2024-38286

cheese123 — Mon, 16 Dec 2024 15:03:36 GMT

will that get fixed in older releases (9.14), too?

kryan — Mon, 16 Dec 2024 15:12:32 GMT

AIQUM typically fixes security issues only in the newest GA release which is soon to be 9.16:

(1) Security patching will only be performed on the current General Availability release.

cheese123 — Mon, 16 Dec 2024 16:10:01 GMT

i would expect to get security fixes until End of Full Support.

This would be until 30-May-2026 for 9.14

am i misunderstanding something?

kryan — Mon, 16 Dec 2024 16:40:49 GMT

That is the expectation for Full Support versions, in accordance with the posted definitions.

I recommend opening a support case and requesting a fix on AIQUM 9.14.