Will the next Confluence Data Center release use Tomcat 9.0.75?

[Corey Dyson]

Hello,

I was wondering if the next Confluence Data Center release will use Tomcat version 9.0.75? I'm asking because the current release is using Tomcat version 9.0.73 which is vulnerable to CVE-2023-28709. Also is there an ETA for the new release?

Thank you!

[Laurie Sciutti]

Hi @Corey Dyson ~ you can refer here for Tomcat versions used for each DC version:  https://confluence.atlassian.com/doc/bundled-tomcat-and-java-versions-1005786018.html   Doesn't look like 9.0.75 is currently in the mix so this would be a question for Atlassian Support.