Upgraded to Tomcat Oktober security release - Githubissues

sdkman / sdkman-db-migrations

Database migrations for the sdkman API

Apache License 2.0

69 stars 123 forks source link

Upgraded to Tomcat Oktober security release #669

Closed StefanPenndorf closed 9 months ago

StefanPenndorf commented 9 months ago

Fixes several Tomcat CVE:

Important: Request smuggling CVE-2023-45648
Important: Denial of Service CVE-2023-44487
Important: Information Disclosure CVE-2023-42795
Low: Denial of Service CVE-2023-42794

Upgrade includes

Tomcat 8.5.94 from 8.5 line
Tomcat 9.0.81 from 9.0 line
Tomcat 10.1.14 from 10.1 line (will be new default version)
Tomcat 11.0.0-M12 as latest from 11 line (this is the latest alpha release)

Tomcat 11.0.0-M10 dropped because it's only an alpha release and superseded by M10.

marc0der commented 9 months ago

LGTM, thanks for your contribution!