Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

Spring Boot 3.3.5 fixing tomcat request/response mixup between users

Description

Upgrade Spring Boot from 3.3.4 to 3.3.5.

This indirectly upgrades tomcat-embed-core from 10.1.30 to 10.1.31 fixing https://nvd.nist.gov/vuln/detail/CVE-2024-52317

The fix has been merged to master branch: https://github.com/folio-org/mod-roles-keycloak/pull/170/files

We need a back-port to Ramsons branch b2.0 and a Ramsons bug fix release.

CSP Request Details

None

CSP Rejection Details

None

Potential Workaround

None

Checklist

hide

Activity

Show:
Done

Details

Assignee

Reporter

Labels

Priority

Story Points

Sprint

Development Team

Eureka

Fix versions

Release

Ramsons (R2 2024) Bug Fix

RCA Group

Related dependency upgrade

TestRail: Cases

Open TestRail: Cases

TestRail: Runs

Open TestRail: Runs
Created December 17, 2024 at 9:37 PM
Updated January 2, 2025 at 3:25 PM
Resolved January 2, 2025 at 3:20 PM
TestRail: Cases
TestRail: Runs