Upgrade tomcat and jdk

[weiliang-ms]

1. Fixes security vulnerabilities in older versions.

• old version

$ trivy image kubesphere/java8-runtime:v3.2.0 --skip-db-update
2023-08-22T02:27:39.470-0400    INFO    Vulnerability scanning is enabled
2023-08-22T02:27:39.470-0400    INFO    Secret scanning is enabled
2023-08-22T02:27:39.470-0400    INFO    If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2023-08-22T02:27:39.470-0400    INFO    Please see also https://aquasecurity.github.io/trivy/v0.44/docs/scanner/secret/#recommendation for faster secret detection
2023-08-22T02:27:41.678-0400    INFO    Detected OS: alpine
2023-08-22T02:27:41.678-0400    INFO    Detecting Alpine vulnerabilities...
2023-08-22T02:27:41.711-0400    INFO    Number of language-specific files: 0
2023-08-22T02:27:41.772-0400    WARN    This OS version is no longer supported by the distribution: alpine 3.9.4
2023-08-22T02:27:41.773-0400    WARN    The vulnerability detection may be insufficient because security updates are not provided

kubesphere/java8-runtime:v3.2.0 (alpine 3.9.4)

Total: 274 (UNKNOWN: 0, LOW: 140, MEDIUM: 98, HIGH: 32, CRITICAL: 4)

• new version

$ trivy image kubesphere/java8-runtime:v3.2.0-new --skip-db-update
2023-08-22T02:40:43.293-0400    INFO    Vulnerability scanning is enabled
2023-08-22T02:40:43.293-0400    INFO    Secret scanning is enabled
2023-08-22T02:40:43.293-0400    INFO    If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2023-08-22T02:40:43.293-0400    INFO    Please see also https://aquasecurity.github.io/trivy/v0.44/docs/scanner/secret/#recommendation for faster secret detection
2023-08-22T02:40:52.152-0400    INFO    JAR files found
2023-08-22T02:40:52.210-0400    INFO    Analyzing JAR files takes a while...
2023-08-22T02:40:52.416-0400    INFO    Detected OS: alpine
2023-08-22T02:40:52.416-0400    INFO    Detecting Alpine vulnerabilities...
2023-08-22T02:40:52.441-0400    INFO    Number of language-specific files: 0

kubesphere/java8-runtime:v3.2.0-new (alpine 3.18.3)

Total: 0 (UNKNOWN: 0, LOW: 0, MEDIUM: 0, HIGH: 0, CRITICAL: 0)

2. Bump tomcat from 8.5.32 to 8.5.92.

[weiliang-ms]

/assign @LinuxSuRen

[ks-ci-bot]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: weiliang-ms
To complete the pull request process, please ask for approval from linuxsuren after the PR has been reviewed.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment