Skip to content

Docker - Security problem using an older version of Tomcat (v 9.0.65) #10476

@Jean-arthis

Description

@Jean-arthis

FROM tomcat:9-jdk11-openjdk AS mother

The MapStore docker image is based on a Tomcat docker image named "tomcat:9-jdk11-openjdk" (https://hub.docker.com/layers/library/tomcat/9-jdk11-openjdk/images/sha256-5a5d1f2d1f71618995c96f55b3939773fa33700bc7601328032512a49e7dffee?context=explore).
This image uses Tomcat version 9.0.65 and is 2 years old. It is affected by 12 critical and 32 severe vulnerabilities.
For security reasons, an upgrade to a more recent version of Tomcat would resolve several vulnerabilities.

Metadata

Metadata

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions