The intended audience of this document is the OFBiz committers group.

This document is a work in progress.
This document describes the steps required to upgrade the version of the embedded Tomcat, for versions 78.0.27 39 or greater.

framework/catalina/lib

From the "Core Tomcat" distribution, copy to the framework/catalina/lib folder the following 10 jars jars (and remove the old versions):

1. ecj-<VERSION>.jar
2. catalina.jar
3. catalina-ha.jar
4. catalina-tribes.jar
5. jasper.jar
6. tomcat-api.jar
7. tomcat-coyote.jar
8. tomcat-jni.jar
9. tomcat-juli.jar (this is found in the Tomcat extra component, see eg point 3 of https://tomcat.apache.org/tomcat-7.0-doc/logging.html). A best practice is to prefix with extra like in tomcat-extras-7.0.65-tomcat-juli.jar)
10. tomcat-juli-adapters.jar (this is found in the Tomcat extra component, see eg point 3 of https://tomcat.apache.org/tomcat-7.0-doc/logging.html). A best practice is to prefix with extra like in tomcat-extras-7.0.65-tomcat-juli-adapters.jar)
11. tomcat-util.jar
12. tomcat-util-scan.jar

framework/base/lib/j2eespecs

From the "Core Tomcat" distribution, copy to the framework/base/lib/j2eespecs folder the following 4 jars (and remove the old versions):

1. annotations-api.jar
2. el-api.jar
3. jsp-api.jar
4. servlet-api.jar

they are the standard API specifications; please add the suffix for the specification version (can be found in the Tomcat documentation or in the Manifest file in them).
The current specification versions in OFBiz (and Tomcat 7.0.*) are:

Since we now use Gradle to retrieve external libs and create the .classpath Eclipse file, we simply need to change the version number in the build.gradle file.

I thought crossed an issue trying to upgrade from 8.0.33 to 8.5.4 so I keep the information below to check the issue currently handled at

...