tomcat CVE-2024-38286

[cheese123]

https://security.netapp.com/advisory/ntap-20241101-0010/

will that get fixed in older releases (9.14), too?

[kryan]

AIQUM typically fixes security issues only in the newest GA release which is soon to be 9.16: 

https://mysupport.netapp.com/site/info/version-support#aiq

(1) Security patching will only be performed on the current General Availability release.

[cheese123]

i would expect to get security fixes until End of Full Support.

This would be until 30-May-2026 for 9.14

am i misunderstanding something?

[kryan · Accepted solution]

That is the expectation for Full Support versions, in accordance with the posted definitions. 

I recommend opening a support case and requesting a fix on AIQUM 9.14.