[Solution for CVE-2020-11996]

Dear All,

I would like to enquire whether there is a plan and schedule to provide a workaround solution or release new version for JasperReport server to fix CVE-2020-11996.

Thank you

[Certified version of Tomcat for JasperReport Server]

Refer to the Fixing Tomcat CVE-2020-1938 for TIBCO JasperReporrts® Server

https://community.jaspersoft.com/wiki/fixing-tomcat-cve-2020-1938-tibco-jasperreporrts-server#comment-866046

I would like to enquire whether there is plan and schedule for any existing available JasperReport server, such as version 7.1, 7.2 and 7.5 or other versions, to be certified with Tomcat version 8.5.51 or 9.0.31 or higher, which address the security issue.
Thank you