You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@tomee.apache.org by "Leandro Vale (Jira)" <ji...@apache.org> on 2020/07/20 18:43:00 UTC

[jira] [Created] (TOMEE-2887) Update Apache Tomcat to v8.5.57

Leandro Vale created TOMEE-2887:
-----------------------------------

             Summary: Update Apache Tomcat to v8.5.57
                 Key: TOMEE-2887
                 URL: https://issues.apache.org/jira/browse/TOMEE-2887
             Project: TomEE
          Issue Type: Dependency upgrade
          Components: TomEE Build
    Affects Versions: 7.1.3
            Reporter: Leandro Vale


According to [http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.57], Tomcat (currently used in Version 8.5.55) is vulnerable to 
 # *WebSocket DoS* [CVE-2020-13935|http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13935]
 # *HTTP/2 DoS* [CVE-2020-13934|http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13934]

Please consider updating to v8.5.57.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)