[MS-44075] Remediate tomcat vulnerability
- issue references: https://community.opengroup.org/osdu/platform/system/search-service/-/issues/272 https://community.opengroup.org/osdu/platform/system/search-service/-/issues/270 https://community.opengroup.org/osdu/platform/system/search-service/-/issues/269 https://community.opengroup.org/osdu/platform/system/search-service/-/issues/268 https://community.opengroup.org/osdu/platform/system/search-service/-/issues/267
- update spring-boot version to
3.3.1
to remediate tomcat vulnerability. - update core-lib-azure-spring6 to
0.27.0-rc3
.
mvn dependency:tree
before changes:
[INFO] | +- org.springframework.boot:spring-boot-starter-tomcat:jar:3.2.5:compile
[INFO] | | +- org.apache.tomcat.embed:tomcat-embed-el:jar:10.1.20:compile
[INFO] | | \- org.apache.tomcat.embed:tomcat-embed-websocket:jar:10.1.20:compile
[INFO] | +- org.springframework.boot:spring-boot-starter-validation:jar:3.2.5:compile
mvn dependency:tree
after changes:
[INFO] | +- org.springframework.boot:spring-boot-starter-tomcat:jar:3.3.1:compile
[INFO] | | +- org.apache.tomcat.embed:tomcat-embed-core:jar:10.1.25:compile
[INFO] | | +- org.apache.tomcat.embed:tomcat-embed-el:jar:10.1.25:compile
[INFO] | | \- org.apache.tomcat.embed:tomcat-embed-websocket:jar:10.1.25:compile
Edited by VidyaDharani Lokam