02 Apr 2019 01:07 PM - last edited on 11 Apr 2023 09:45 AM by Karolina_Linda
Hello,
Is it possible to perform a manual update of Java on the server and ActiveGate?
I am asking because the versions used on the ActiveGate component for the Managed version are 8u181. Unfortunately, this version is vulnerable to attacks: CVE-2018-11212, CVE-2019-2426, CVE-2019-2449, CVE-2019-2422, CVE-2018-13785, CVE-2018-3169, CVE-2018-3209, CVE-2018-3157, CVE-2018-3150.
Is it possible to upgrade to version 8u201?
Best,
Radek
Solved! Go to Solution.
04 Apr 2019 07:44 AM
I don't think this is officially supported and it will definitely be overwritten with next server or activegate upgrade. I would recommend not to try it in production environments.
Can you doublecheck if those vulnerabilities might even be exploited in your environment? I thinks the vulnerabilites are mostly in code that is not even used by Dynatrace.
04 Apr 2019 11:47 AM
I have officially info from support:
You can't do that on your own. We need to deliver java with our code. Good news is that we are going upgrade java to 8u202 in v168.