search

axiom-data-science / docker-erddap

A feature full Tomcat (SSL over APR, etc.) running ERDDAP
16 stars 26 forks source link

Update tomcat from 10.1.16 to 10.1.19 #72

Closed jcermauwedu closed 3 months ago

jcermauwedu commented 7 months ago

REF: https://groups.google.com/g/erddap/c/eVnQK44lNNA

Two new high-level CVEs were just issued for Tomcat (CVE-2024-24549 & CVE-2024-23672). Please make sure you are running the latest version.

Dockerfile:

srstsavage commented 3 months ago

Closing this because main is migrating to ERDDAP v2.24, but I setup a new maintenance branch for v2.23, upgraded Tomcat to 10.1.26 there, and pushed an updated 2.23 image to Docker Hub (axiom/docker-erddap:2.23-jdk17-openjdk).

https://github.com/axiom-data-science/docker-erddap/tree/v2.23-maint

Thanks for the issue!