Description:

Periodically, new Java versions are released to address security vulnerabilities, improve performance, and introduce new features. Web Apps should use the latest supported Java version to ensure they receive security updates, bug fixes, and the latest functionality.


Rationale:

Using the latest Java version ensures security vulnerabilities are patched, reducing exposure to known threats. It enhances the stability and performance of the Web App by benefiting from recent improvements. Updated Java versions support newer libraries and frameworks, preventing compatibility issues. Maintaining current versions also avoids risks associated with outdated or unsupported software.


Impact:

Running an outdated Java version can expose the Web App to unpatched vulnerabilities and security attacks. It can cause performance problems, instability, or unexpected application failures. Older Java versions may not support new libraries, APIs, or frameworks, resulting in compatibility issues. Relying on unsupported versions increases operational and security risks.


Default Value:

Azure Web Apps do not automatically select the latest Java version. The Java runtime version must be manually chosen in the Web App’s configuration, and older versions may remain in use unless updated.


Pre-requisites:

  • Permissions such as Contributor, Website Contributor, or Owner

  • Web App must be running on Java (Linux or Windows App Service Plan)

  • Knowledge of the latest Java versions supported by Azure App Service

Test Plan:

  1. Sign in to the Azure portal at https://portal.azure.com.

  2. In the portal, search for App Services and select the target Web App.

  3. Under Settings, go to Configuration.

  4. Under Stack settings, in stack selection, confirm the stack is set to Java.

  5. Verify the Java Version is set to the latest stable version available in the dropdown.

  6. Confirm the Web App is not using any deprecated or older Java versions.

  7. If it is using an outdated or deprecated version, follow the implementation plan.

Implementation Steps:

  1. Sign in to the Azure portal at https://portal.azure.com.

  2. In the portal, search for App Services and select the target Web App.

  1. Under Settings, go to Configuration.

                                

  1. Under Stack settings, ensure that the Stack is set to Java.

  2. From the Java Version dropdown, select the latest stable version available.

  1. Click Save to apply the changes.

Backout Plan:

  1. Sign in to the Azure portal at https://portal.azure.com.

  2. Navigate to App Services and select the target Web App.

  3. Under Settings, go to Configuration.

  4. Under Stack settings, in the stack selection, confirm that the Stack is set to Java.

  5. In the Java Version dropdown, select the previous version that was running before the change.

  6. Click Save to apply the rollback.


References: