[
https://issues.apache.org/jira/browse/GUACAMOLE-410?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Michael Jumper deleted GUACAMOLE-410:
-------------------------------------
> Update Apache Tomcat due to security isses
> ------------------------------------------
>
> Key: GUACAMOLE-410
> URL: https://issues.apache.org/jira/browse/GUACAMOLE-410
> Project: Guacamole
> Issue Type: Improvement
> Environment: Official guacamole docker image
> https://hub.docker.com/r/guacamole/guacamole/
> Reporter: Sven Gottwald
> Priority: Critical
>
> The official guacamole docker image uses tomcat 8.0.20-jre8. This tomcat
> Version is outdated and contains several security issues (see [Apache Tomcat
> 8.x vulnerabilities|http://tomcat.apache.org/security-8.html]). The last
> issue was
> [CVE-2017-12617|http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12617]
> which allows remote code execution.
> Tomcat should be updated to version 8.0.47 ASAP.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
