This is a short story of fixing Tomcat in an EMR cluster. There is a CVE about Tomcat 8 hole. I’m using EMR 5.12.2. Let’s try installing CVE patch as a bootstrap action with It should fix the mentioned hole but after bringing up the new cluster and running we can see that it installs … Continue reading Updating Tomcat in an EMR cluster