Apache Tomcat vulnerabilities in Morpheus appliance v8.0.1

Infrastructure
1

Happy New Year Morpheus Team!
The latest Morpheus appliance version 8.0.1 comes with Apache Tomcat v9.0.97 that is vulnerable to CVE-2024-56337, CVE-2024-50379, CVE-2024-54677.
Do you guys already have plans to include the security fix for this(Apache Tomcat v9.0.98 or later) in the upcoming LTS bug fix release in Jan 2025? If not when can we expect the fix?

Thanks.

2

Believe this is patched in v8.0.2 which is about to release!

1 Like