[ https://issues.apache.org/jira/browse/OFBIZ-13229?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17948048#comment-17948048 ]
ASF subversion and git services commented on OFBIZ-13229: --------------------------------------------------------- Commit 006ef3c578e04eecebb9a4651dbf7fe444fc4dcf in ofbiz-plugins's branch refs/heads/trunk from Jacques Le Roux [ https://gitbox.apache.org/repos/asf?p=ofbiz-plugins.git;h=006ef3c57 ] Fixed: [SECURITY] Several CVEs in Apache Tomcat (OFBIZ-13229) When using Tomcat 10 we get: package javax.websocket does not exist This revert to tomcat-embed-websocket:9.0.104 with a comment about that > [SECURITY] Several CVEs in Apache Tomcat > ----------------------------------------- > > Key: OFBIZ-13229 > URL: https://issues.apache.org/jira/browse/OFBIZ-13229 > Project: OFBiz > Issue Type: Bug > Components: tomcat > Affects Versions: 24.09.01 > Reporter: Jacques Le Roux > Assignee: Jacques Le Roux > Priority: Major > Fix For: 24.09.02 > > > https://lists.apache.org/thread/q4ld9xtv3zrvvs3ykp4b2f9j2tvhq6bl > https://lists.apache.org/thread/x7l5ldwkson33bf4b3s3738lwjql618z -- This message was sent by Atlassian Jira (v8.20.10#820010)