Uploaded image for project: 'Data Collection, Analytics, and Events'
  1. Data Collection, Analytics, and Events
  2. DCAEGEN2-2768 SECCOM - DCAE Vulnerability updates for Istanbul
  3. DCAEGEN2-2808

PRH security vulnerability updates

XMLWordPrintable

      PRH version revision required as noted on last column

       

      Status Priority Component name and version Threat level Recommended version Project’s assessment/Istanbul Target (M2)
      OPEN 1 org.apache.tomcat.embed : tomcat-embed-core : 9.0.41 7
      7      		 ??? No new non-vulnerable version available currently.
      9.x latest is 9.0.46 however 10.0.6 is most current/latest.
      Try upgrade to latest version (10.0.6) for Istanbul 
      06/28/21 - Recommendation to go with 9.0.46 for Istanbul
      OPEN 1 org.springframework : spring-web : 5.3.3.RELEASE 9
      6      		 5.3.6 RELEASE As there is 5.3.7 available; will try upgrade to the latest for Istanbul 

       

            pmarcink pmarcink
            vv770d vv770d
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: