We've uncommented tomcatVersion=11.0.25 in gradle.properties, rebuilt the war for 7.3.8.3 and deployed it. So far we have not seen any issues.
On Thursday, September 10, 2026 at 1:30:59 p.m. UTC-2:30 Dusty Edenfield wrote: > There's is a critical CVE for Tomcat > <https://app.opencve.io/cve/CVE-2026-65182> which is fixed in Tomcat > 11.0.25. I noticed that when we move to CAS 7.3.8.3, it appears to be > running tomcat 11.0.24. Are there any plans to move to 11.0.25, or should > we select tomcat 11.0.25 in our builds for now? -- - Website: https://apereo.github.io/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/0b53b6f2-bbf9-4d84-8753-3b6c67e17351n%40apereo.org.
