Uploaded image for project: 'Data Collection, Analytics, and Events'
  1. Data Collection, Analytics, and Events
  2. DCAEGEN2-2768 SECCOM - DCAE Vulnerability updates for Istanbul
  3. DCAEGEN2-2809

SON-Handler security vulnerability updates

XMLWordPrintable

      SONHandler version revision required as noted on last column

       

      Status Priority Component name and version Threat level Recommended version Project’s assessment/Istanbul Target (M2)
      OPEN 1 org.apache.tomcat.embed : tomcat-embed-core : 9.0.39 7
      7
      7
      5      		 ??? No new non-vulnerable version available currently.
      9.x latest is 9.0.46 however 10.0.6 is most current/latest.
      Try upgrade to latest version (10.0.6) for Istanbul 
      06/28/21 - Recommendation to go with 9.0.46 for Istanbul
      OPEN 1 org.springframework : spring-web : 5.2.10.RELEASE 9 5.3.6 RELEASE As there is 5.3.7 available; will try upgrade to the latest for Istanbul 
      OPEN 2 httpclient : 4.5.7 5 4.5.13 Update per SECCOM recommended version
      OPEN 2  jetty-server : 9.4.17.v20190418 4 9.4.40.v20210413 Update per SECCOM recommended version

       
       
       

            niranjana niranjana
            vv770d vv770d
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: