What version of Tomcat do we get after upgrading to JIRA Software 8.2.3?

[Alan Abangan]

I know how to verify the version of Tomcat installed with JIRA Software, but how do I know what version of Tomcat is bundled in a new version before I actually install it?

[Andy Heinzer]

Hi Alan,

I understand you are looking to find the Tomcat version Jira ships with, but without having to install Jira to determine this.  Unfortunately, we do not have the version of this package published publicly anywhere yet that I am aware of right now.

You probably already know this part, but for other users that might come across this thread, it is possible to determine the version of Tomcat Jira is using by following the steps in the KB: Finding the Bundled Tomcat Version Per JIRA Release

To that end, I ran the command of

java -cp lib/catalina.jar org.apache.catalina.util.ServerInfo

From the $JIRAINSTALL/ directory of my Jira 8.2.3 and got this output:

Server version: Apache Tomcat/8.5.40
Server built: Apr 10 2019 14:31:19 UTC
Server number: 8.5.40.0

At the time you asked this question, the ticket of JRASERVER-69145 was still left open.  This ticket was a request to specifically update the version of Tomcat that ships with Jira to prevent another CVE. 

Thanks for raising this issue, as a result of the updates I've made here to that ticket, you can now see this issue listed in the 8.2.3 release notes.

These release notes tend to be one way you can figure out when Jira updates the version of Tomcat that ships with Jira, but admittedly, this package is not always updated every release, nor are these updates always publicized.

I hope this helps,

Andy