Re: Question about upgrading tomcat-embed-core from 10.1.20 to 10.1.25

2024-09-15 Thread Chuck Caldarale
og.html The 10.1.29 HTTP/2 problem and fix are described here: https://bz.apache.org/bugzilla/show_bug.cgi?id=69320 - Chuck > From: Mark Thomas > Sent: Sunday, September 15, 2024 9:14 AM > To: users@tomcat.apache.org > Subject: Re: Question about upgrading tomcat-embed-core from 10.1.

RE: Question about upgrading tomcat-embed-core from 10.1.20 to 10.1.25

2024-09-15 Thread KARR, DAVID
Thanks for that. Could you give me more info on those problems in 10.1.24-29, like links to the issues? From: Mark Thomas Sent: Sunday, September 15, 2024 9:14 AM To: users@tomcat.apache.org Subject: Re: Question about upgrading tomcat-embed-core from 10.1.20 to 10.1.25 On 15/09/2024 00: 37

Re: Question about upgrading tomcat-embed-core from 10.1.20 to 10.1.25

2024-09-15 Thread Mark Thomas
On 15/09/2024 00:37, KARR, DAVID wrote: We build SpringBoot applications that reference "tomcat-embed-core" from "spring-boot-starter-jersey". We currently end up with version 10.1.20 of tomcat-embed-core, using spring-boot 3.2.5. There is apparently a CVE for that version of tomcat-embed-

Question about upgrading tomcat-embed-core from 10.1.20 to 10.1.25

2024-09-14 Thread KARR, DAVID
We build SpringBoot applications that reference "tomcat-embed-core" from "spring-boot-starter-jersey". We currently end up with version 10.1.20 of tomcat-embed-core, using spring-boot 3.2.5. There is apparently a CVE for that version of tomcat-embed-core (I don't have the CVE handy right now).