[HADOOP-18309] Upgrade bundled Tomcat to 8.5.76 or higher

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.10.1, 2.10.2
• Fix Version/s: 2.10.3
• Component/s: httpfs, kms
• Labels: pull-request-available
• Hadoop Flags: Reviewed
• Assignee: Ashutosh Gupta
• Reporter: Ashutosh Gupta
• Created: 21/Jun/22 10:36
• Updated: 24/Jun/22 00:12
• Resolved: 23/Jun/22 08:48

Description

Currently we are using 8.5.75 which is affected by CVE-2022-25762

More Details - https://lists.apache.org/thread/qzkqh2819x6zsmj7vwdf14ng2fdgckw7

Lets upgrade  8.5.76 or higher

 

 

Issue Links

• links to: GitHub Pull Request #4479