[GUACAMOLE-563] Tomcat Version is not the same at pushed image on the Docker Hub

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Duplicate
• Affects Version/s: 0.9.14
• Component/s: guacamole-client
• Labels: security-issue
• Environment: Docker Container
• Flags: Important
• Assignee: Unassigned
• Reporter: Kevin Schley
• Created: 06/May/18 13:52
• Updated: 06/May/18 19:44
• Resolved: 06/May/18 19:44

Description

Currently the Dockerfile is not the same at Docker Hub and the Github Repo: https://github.com/apache/guacamole-client/blob/fed51332952a23c5e9a5ddab38ded23f092299b8/Dockerfile#L27
ARG TOMCAT_VERSION=8.5

The Docker Tag "latest" and "0.9.14" use an "Apache Tomcat/8.0.20" https://hub.docker.com/r/guacamole/guacamole/

this version have a Lots of Security Vulnerabilities:
https://www.cvedetails.com/vulnerability-list/vendor_id-45/product_id-887/version_id-190754/Apache-Tomcat-8.0.20.html

Issue Links

• duplicates: GUACAMOLE-450 Change Tomcat Version in Dockerfile to major release