Mitigate CVE-2020-13935 (corona-warn-app#690)

* Bump spring parent version * Liveness health indicator according to. spring-projects/spring-boot#22107
yansto · Aug 31, 2020 · 4e86e17 · 4e86e17
1 parent bf5f9d5
commit 4e86e17
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 8 deletions.
diff --git a/services/pom.xml b/services/pom.xml
@@ -8,7 +8,7 @@
   <parent>
     <groupId>org.springframework.boot</groupId>
     <artifactId>spring-boot-starter-parent</artifactId>
-    <version>2.3.1.RELEASE</version>
+    <version>2.3.2.RELEASE</version>
     <relativePath></relativePath>
   </parent>
 
@@ -102,12 +102,6 @@
       <version>42.2.13</version>
       <scope>runtime</scope>
     </dependency>
-    <dependency>
-      <!-- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13935 -->
-      <groupId>org.apache.tomcat.embed</groupId>
-      <artifactId>tomcat-embed-core</artifactId>
-      <version>9.0.37</version>
-    </dependency>
   </dependencies>
 
   <reporting>

diff --git a/services/submission/src/test/resources/application.yaml b/services/submission/src/test/resources/application.yaml
@@ -44,6 +44,8 @@ management:
       exposure:
         include: 'health'
   health:
+    livenessstate:
+      enabled: true
     probes:
       enabled: true
 
@@ -52,4 +54,4 @@ feign:
     config:
       default:
         connect-timeout: 500
-        read-timeout: 500
+        read-timeout: 500