[TOMEE-2887] Update Apache Tomcat to v8.5.57

• Type: Dependency upgrade
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 7.1.3
• Component/s: TomEE Build
• Assignee: Unassigned
• Reporter: Leandro Vale
• Created: 20/Jul/20 18:42
• Updated: 06/Oct/20 15:25
• Resolved: 20/Jul/20 18:50

Description

According to http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.57, Tomcat (currently used in Version 8.5.55) is vulnerable to 

1. WebSocket DoS CVE-2020-13935
2. HTTP/2 DoS CVE-2020-13934

Please consider updating to v8.5.57.

Issue Links

• duplicates: TOMEE-2863 Update to Tomcat 8.5.57