This is an automated email from the ASF dual-hosted git repository.
jleroux pushed a commit to branch trunk
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git
The following commit(s) were added to refs/heads/trunk by this push:
new 1f71cfe Fixed: Upgrades Tomcat from 9.0.43 to 9.0.48 (due to
CVEs-2021-30037/30639/30640) (OFBIZ-12280)
1f71cfe is described below
commit 1f71cfec9ef26c186e9119ba2e9bd670a1cf7770
Author: Jacques Le Roux <jacques.le.r...@les7arts.com>
AuthorDate: Mon Jul 12 18:03:51 2021 +0200
Fixed: Upgrades Tomcat from 9.0.43 to 9.0.48 (due to
CVEs-2021-30037/30639/30640) (OFBIZ-12280)
---
build.gradle | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/build.gradle b/build.gradle
index 31499a5..6e5bfc9 100644
--- a/build.gradle
+++ b/build.gradle
@@ -209,8 +209,8 @@ dependencies {
implementation 'org.apache.sshd:sshd-core:1.7.0' // So far we did not
update from 1.7.0 because of a compile issue. You may try w/ a newer version
than 2.4.0
implementation 'org.apache.tika:tika-core:1.26'
implementation 'org.apache.tika:tika-parsers:1.25'
- implementation 'org.apache.tomcat:tomcat-catalina-ha:9.0.43' // Remember
to change the version number (9 now) in javadoc block if needed.
- implementation 'org.apache.tomcat:tomcat-jasper:9.0.43'
+ implementation 'org.apache.tomcat:tomcat-catalina-ha:9.0.48' // Remember
to change the version number (9 now) in javadoc block if needed.
+ implementation 'org.apache.tomcat:tomcat-jasper:9.0.48'
implementation 'org.apache.axis2:axis2-kernel:1.7.9'
implementation 'batik:batik-svg-dom:1.6-1'
implementation 'org.apache.xmlgraphics:fop:2.3' // NOTE: since 2.4
dependencies are messed up. See
https://github.com/moqui/moqui-fop/blob/master/build.gradle
