I'm working on a legacy maven project and it uses embedded tomcat. Recently as part of fixing the security vulnerabilities, tomcat is upgraded to latest version 9.0.55. But surprisingly I don't see the corresponding version for the artifact tomcat-embed-logging-juli
. We've already have the slf4j logging library for project. Do I really need the library tomcat-embed-logging-juli dependency as I don't have any logs written with servletContext log?
Following is the relevant section from my pom.xml
<properties>
<tomcat.version>9.0.55</tomcat.version>
</properties>
<dependencies>
<dependency>
<groupId>org.slf4j</groupId>
<artifactId>slf4j-api</artifactId>
<version>1.7.30</version>
</dependency>
<!-- Tomcat -->
<dependency>
<groupId>org.apache.tomcat.embed</groupId>
<artifactId>tomcat-embed-core</artifactId>
<version>${tomcat.version}</version>
</dependency>
<dependency>
<groupId>org.apache.tomcat.embed</groupId>
<artifactId>tomcat-embed-websocket</artifactId>
<version>${tomcat.version}</version>
</dependency>
<dependency>
<groupId>org.apache.tomcat.embed</groupId>
<artifactId>tomcat-embed-logging-juli</artifactId>
<version>8.0.53</version>
</dependency>
<dependency>
<groupId>org.apache.tomcat.embed</groupId>
<artifactId>tomcat-embed-jasper</artifactId>
<version>${tomcat.version}</version>
</dependency>