IDP on Tomcat 8.5.x

[Andrew Morgan]

The documentation at:

   https://wiki.shibboleth.net/confluence/display/IDP30/ApacheTomcat8

states:

"There are no known issues with any specific Tomcat 8.0 release. The 
latest stable version should be used.

We don't have a specific page at present for Tomcat 8.5, but so far there 
appear to be session bugs in it that render the IdP unstable."

I found an issue (IDP-1028) that came from a session problem reported to 
the mailing list:

   http://shibboleth.1660669.n2.nabble.com/HttpSession-NullPointerException-on-Apache-Tomcat-8-5-4-td7627069.html

But otherwise, I don't see widespread reports of problems with Tomcat 
v8.5.

Is it safe to upgrade to Tomcat v8.5.14?


Thanks,
 	Andy