[KYLIN-5448] Fix Security Vulnerabilities

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 5.0-alpha
• Fix Version/s: 5.0-alpha
• Component/s: Security
• Assignee: Ruixuan Zhang
• Reporter: Ruixuan Zhang
• Created: 16/Feb/23 07:28
• Updated: 27/Feb/23 08:46
• Resolved: 27/Feb/23 08:46

Description

Upgrade sprint-boot version from 2.6.8 to 2.6.14;

Update independent tomcat config;

Upgrade protobuf-java from 3.16.1 to 3.16.3;

Upgrade jettison from 1.1 to 1.5.2;

Upgrade netty-codec and netty-codec-haproxy from 4.1.85.Final to 4.1.86.Final;

Upgrade spring-boot-admin from 2.6.6 to 2.6.10;