using cocoon 2.1 in the long-term, security concerns

--0000000000007baaa505c778b93c
Content-Type: text/plain; charset="UTF-8"

Hi Cocoon users,

I'd like to ask your opinion on the long-term security risks of running
Cocoon on a server. The colleague responsible for the servers at my
university is inquiring if the software I'm using for my website is up to
date and is concerned that I'm using outdated software that could in the
future pose a security risk.

I'm using cocoon 2.1.11, which I could probably upgrade to 2.1.13 without
many problems. But I'm concerned about the long-term, and wondering if it
would perhaps be better to reprogram the website I've been working on for
10 years into eXist DB (which would be a huge time investment). I like
cocoon very much and would love to continue using it if it's possible.

I'm curious to hear your thoughts about using Cocoon 2.1 for the long term:
will it still work well inside future versions of servlet containers like
Tomcat? What about the java dependencies? And will cocoon 2.1 continue to
put out updates when security risks are identified?

thanks very much,
Vincent

--0000000000007baaa505c778b93c
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Hi Cocoon users,<div><br></div><div>I&#39;d like to ask yo=
ur opinion on the long-term security risks of running Cocoon on a server. T=
he colleague responsible for the servers at my university is inquiring if t=
he software I&#39;m using for my website is up to date and is concerned tha=
t I&#39;m using outdated software that could in the future pose a security =
risk.<br><div><br></div><div>I&#39;m using cocoon 2.1.11, which I could pro=
bably upgrade to 2.1.13 without many problems. But I&#39;m concerned about =
the long-term, and wondering if it would perhaps be better to reprogram the=
 website I&#39;ve been working on for 10 years into eXist DB (which would b=
e a huge time investment). I like cocoon very=C2=A0much and would love to c=
ontinue using it if it&#39;s possible.</div></div><div><br></div><div>I&#39=
;m curious to hear your thoughts about using Cocoon 2.1 for the long term: =
will it still work well inside future versions of servlet containers like T=
omcat? What about the java dependencies? And will cocoon 2.1 continue to pu=
t out updates when security risks are identified?</div><div><br></div><div>=
thanks very much,</div><div>Vincent=C2=A0</div></div>

--0000000000007baaa505c778b93c--