This is an automated email from the ASF dual-hosted git repository.
jleroux pushed a commit to branch trunk
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git
The following commit(s) were added to refs/heads/trunk by this push:
new 9bbe7f56f1 Fixed: [SECURITY] Several CVEs in Apache Tomcat
(OFBIZ-13180)
9bbe7f56f1 is described below
commit 9bbe7f56f1072342b2d9850a55d7375bbc857fc7
Author: Jacques Le Roux <[email protected]>
AuthorDate: Tue Nov 19 11:31:33 2024 +0100
Fixed: [SECURITY] Several CVEs in Apache Tomcat (OFBIZ-13180)
https://lists.apache.org/thread/kg1cpwys6s4px9yk6kzp4405wolygqkz
https://lists.apache.org/thread/xp7ojhmzg6k5c4gxfg7456hszzsfjm58
https://lists.apache.org/thread/dvky1vcrgvyx7dmt61hr6wchz8x3qbps
https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.97
---
dependencies.gradle | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/dependencies.gradle b/dependencies.gradle
index f902364959..a5385dc065 100644
--- a/dependencies.gradle
+++ b/dependencies.gradle
@@ -62,8 +62,8 @@ dependencies {
implementation 'org.apache.tika:tika-parsers:2.9.2'
implementation 'org.apache.tika:tika-parser-pdf-module:2.9.2'
implementation 'org.apache.cxf:cxf-rt-frontend-jaxrs:3.6.4' // 4.x+
requires javax.xml.bind -> jakarta.xml.bind namespace change
- implementation 'org.apache.tomcat:tomcat-catalina-ha:9.0.91' // Remember
to change the version number (9 now) in javadoc block if needed.
- implementation 'org.apache.tomcat:tomcat-jasper:9.0.91'
+ implementation 'org.apache.tomcat:tomcat-catalina-ha:9.0.97' // Remember
to change the version number (9 now) in javadoc block if needed.
+ implementation 'org.apache.tomcat:tomcat-jasper:9.0.97'
implementation 'org.apache.axis2:axis2-kernel:1.8.2'
implementation 'org.apache.xmlgraphics:batik-anim:1.17'
implementation 'org.apache.xmlgraphics:batik-util:1.17'
