Is there documentation about which JVM versions can be used for Lucee?
Does the bundled JVM ever get updated when I use the Lucee updater inside the Lucee admin?
Does the bundled Tomcat ever get updated?
I assume not. In that case, how can I determine which JVM versions and which Tomcat versions I should be using?
The recent Adobe ColdFusion security update, which mentions "Adobe recommends updating your ColdFusion JDK/JRE to the latest version of the LTS releases for 1.8 and JDK 11. Applying the ColdFusion update without a corresponding JDK update will NOT secure the server. " has got me thinking about this.
No. The admin only updates the Lucee servlet. You need to update the JDK by yourself. But updating the jdk is fairly easy. You just need to make the Tomcat service point to the new JDK directory.
That is how I usually do it, without changing any configuration or service settings:
download and unzip the new AdoptOpenJDK to the Lucee directory
stop the Tomcat service
rename the working jdk directory (e.g. c:\lucee\jdk to c:\lucee\jdk_bak
rename the downloaded jdk directory to the actual working directory name (e.g. c:\lucee\downloadedJDK to c:\lucee\jdk
restart Tomcat
Watch the logs at c:\lucee\tomcat\logs
Doing it that way you won’t need to edit OS service configurations and you still have the copy of the old jdk sitting in your Lucee directory.