[2.8.3] EOL spring-boot component in use

obiba / agate

OBiBa's user ID provider.

GNU General Public License v3.0

4 stars 7 forks source link

[2.8.3] EOL spring-boot component in use #524

Closed tuxmaster5000 closed 5 months ago

tuxmaster5000 commented 8 months ago

In version 2.8.3 in eol version of the framework is used. Please update it to an current one. Report of the security scanner:

The "VMware Spring Boot" version on the remote host has reached the end of life.

CPE:               cpe:/a:vmware:spring_boot:2.7.8
Installed version: 2.7.8
Location/URL:      /usr/share/agate-2.8.3/webapp/WEB-INF/lib/spring-boot-2.7.8.jar
EOL version:       2.7
EOL date:          2023-11-18

tuxmaster5000 commented 8 months ago

See more: https://spring.io/projects/spring-boot#support

ymarcon commented 8 months ago

https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-3.0-Migration-Guide

ymarcon commented 6 months ago

Available dev version with Java 17, Spring Boot 3.1, Spring 6.0:

Docker tag obiba/agate:snapshot
Online https://agate-test.obiba.org/

ymarcon commented 5 months ago

Release available 3.0.0-beta1, requires java 21