How to upgrade third-party components
You need not to upgrade the third-party components that are packaged in the TIBCO BusinessConnect™ Container Edition except for the following four jar files:
- hibernate-c3p0-5.4.12.Final.jar,
- hibernate-commons-annotations-5.1.0.Final.jar
- hibernate-core-5.4.12.Final.jar
- mysql-connector-java-8.0.19.jar
You can directly download the first three jar annotations-5.1.0.Final.jar, hibernate-c3p0-5.4.12.Final.jar, and hibernate-core-5.4.12.Final.jar from the TIBCO hosts site. There are three html files referring to the download URLs.
The mysql-connector-java-8.0.19.jar or mysql-connector-java-8.0.19+.jar is required to be downloaded inorder to use.
Hence, you are not required to upgrade the new versions of the third-party components.
The third-party components with the versions currently used in the TIBCO BusinessConnect Container Edition have very less vulnerability issues.