End of life for Apache Tomcat 8.0.x affecting Confluence v6.6.x

[Thomas Berger]

https://tomcat.apache.org/tomcat-80-eol.html

We are planning to upgrade to Confluence v6.6.6 very soon.

However, we are concerned that the bundled Tomcat version has reached end of life and doesn't receive any security patches going forward.

What is Atlassian's plan for the v6.6.x enterprise release with long term support?

[Igor M.]

Hello,

We just released Confluence 6.10 that comes with Tomcat 9 as outlined in Confluence 6.10 Upgrade Notes . There is no official date on when Tomcat 9 will become available on enterprise version too, but it should be soon enough. You can track a feature request via this ticket CONFSERVER-44949.

Regards,

Igor

[Thomas Berger]

I'm after a solution for v6.6.x since I can't move to the latest version of Confluence just now.

[Igor M.]

Hello,

I understand, but unfortunately, there is no official statement on that yet, you can add yourself as a watcher and upvote above-mentioned feature request, to track development. I have linked your question to it, but comments are also welcome. From the point of supportability, Atlassian will continue supporting your product and tomcat that is bundled with it, any specific security vulnerabilities or concerns can always be reported to us directly and will be investigated and addressed if not already done so.

Regards,

Igor