Hello guacamole/guacamole:1.5.5 Docker image uses Tomcat 8.5.98, which has several vulnerabilities, particularly CVE-2024-23672 and CVE-2024-24549 Both of vulnerabilities were fixed in Tomcat 8.5.99 What is the recommended way to get stable and tested image, with latest Tomcat 8.5.X ? a. Wait for official guacamole 1.5.X release? When is it planned? b. Build an image based on 1.5.5 locally and upgrade Tomcat? c. Use guacamole/guacamole:latest ? Is it stable and suitable for production? Thanks Andrey
--------------------------------------------------------------------- To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org
