[
https://issues.apache.org/jira/browse/OFBIZ-13180?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17902031#comment-17902031
]
ASF subversion and git services commented on OFBIZ-13180:
---------------------------------------------------------
Commit b663c864a7da5450e684feec879ce3cd91a0973d in ofbiz-framework's branch
refs/heads/release18.12 from Jacques Le Roux
[ https://gitbox.apache.org/repos/asf?p=ofbiz-framework.git;h=b663c864a7 ]
Reverted: commits post to 761fb67d7f commit (OFBIZ-13162)
This is for a quick test on stable demo. It will be quickly reverted.
Revert "Improved: adds an OFBiz-Online-Documentation.adoc file.txt"
This reverts commit a1342e17b4bb6b4317018e57f3fdb5d3ca835386.
Revert "Improved: Prevent URL parameters manipulation (OFBIZ-13147)"
This reverts commit 59e79c6f39beb031cf2b476215b0701745725a64.
Revert "Fixed: [SECURITY] Several CVEs in Apache Tomcat (OFBIZ-13180)"
This reverts commit a11e1fba91da54e59c4d7b22cd7562009558bc7f.
Revert "Improved: Prevent URL parameters manipulation (OFBIZ-13147)"
This reverts commit b15ffa06fc348c085ae178a77a4e4e83f610f4f8.
Revert "Fixed: Support non-breaking spaces in numeric strings (OFBIZ-13168)"
This reverts commit 98abd377d05530190ee954bee16768c7dc4adb59.
Revert "Fixed: Support non-breaking spaces in numeric strings (OFBIZ-13168)"
This reverts commit 8a3293a78756827ddaec42456f1b1da59e1e5e58.
Revert "Improved: Prevent URL parameters manipulation (OFBIZ-13147)"
This reverts commit de26aaebb484c7fdfe84b0efff52f31f8db5be8b.
Revert "Improved: updates README.adoc for JDK use, now 11"
This reverts commit 42d0ad8532a1eae80bce597c818ed1a453a9ca9c.
> [SECURITY] Several CVEs in Apache Tomcat
> -----------------------------------------
>
> Key: OFBIZ-13180
> URL: https://issues.apache.org/jira/browse/OFBIZ-13180
> Project: OFBiz
> Issue Type: Sub-task
> Components: tomcat
> Affects Versions: 18.12.17
> Reporter: Jacques Le Roux
> Assignee: Jacques Le Roux
> Priority: Major
> Fix For: 18.12.18
>
>
> [https://lists.apache.org/thread/kg1cpwys6s4px9yk6kzp4405wolygqkz]
> [https://lists.apache.org/thread/xp7ojhmzg6k5c4gxfg7456hszzsfjm58]
> [https://lists.apache.org/thread/dvky1vcrgvyx7dmt61hr6wchz8x3qbps]
> https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.97
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
