How to upgrade third-party components
You need not to upgrade the third-party components that are packaged in the TIBCO BusinessConnect™ Container Edition except for the following JAR files:
- annotations-5.1.0.Final.jar
- hibernate-c3p0-5.4.12.Final.jar,
- hibernate-core-5.4.12.Final.jar
- hibernate-commons-annotations-5.1.0.Final.jar
- mysql-connector-java-8.0.19.jar
- ojdbc8-21.1.0.0.jar
You can directly download the first four jars: annotations-5.1.0.Final.jar, hibernate-c3p0-5.4.12.Final.jar, hibernate-commons-annotations-5.1.0.Final.jar, and hibernate-core-5.4.12.Final.jar from the TIBCO hosts site. There are four html files referring to the download URLs.
The mysql-connector-java-8.0.19.jar or mysql-connector-java-8.0.19+.jar is required to be downloaded in order to use.
The ojdbc8-21.1.0.0.jar is the Oracle JDBC connector JAR file.
Hence, you are not required to upgrade the new versions of the third-party components.
The third-party components with the versions currently used in the TIBCO BusinessConnect Container Edition have very less vulnerability issues.