Security bulletin doesn't mention security issues related to third-party tools and libraries

Symptoms

The TeamCity security bulletin doesn't mention security issues found in bundled with TeamCity tools and libraries. For example, it may not mention any Tomcat CVEs that were fixed by updating the bundled Tomcat, etc.

Cause

It is expected. The TeamCity security bulletin serves the purpose of providing essential security information specific to TeamCity.

Information on vulnerabilities and other security issues related to third-party software used in TeamCity can be found in this software's documentation, security pages, upgrade notes, etc.

Resolution

The information regarding the updates of the bundled third-party tools and libraries can be found in the Upgrade Notes.