I upgrade Jira with the latest versions that address Jira vulnerabilities. However Apache Tomcat has its own vulnerabilities. Do Jira upgrades also upgrade Tomcat versions, or does that have to be done separately?