I am new to Aris.
Is TomCat/Apache part of Aris 9.8 package and what is the security policy for TomCat/Apache, do I have to download TomCat/Apache security fixes from the TomCat/Apache website and install these fixes, or do I get them packaged in Aris releases?
Is this the correct user group for above question, or should I post it somewhere else?
Dear Nico,
You should never patch any tool inside in your ARIS installation manually, e.g., Apache, TomEE, JRE etc.
Every ARIS release/service release/patch comes with all components of specific versions it needs.
And our QA ensures that publicly known security issues in third party tools are fixed ASAP.
If you found such an issue, please report it via Global Support ARIS on Empower, and we are happy to help.
Cheers
Rune