This is an automated email from the ASF dual-hosted git repository.
jleroux pushed a commit to branch trunk
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git
The following commit(s) were added to refs/heads/trunk by this push:
new 54f066abfd Fixed: Update Tomcat to 9.0.68 due to a low security issue
(OFBIZ-12708)
54f066abfd is described below
commit 54f066abfd5c69a15fdbf91c3d779ba66b4be4de
Author: Jacques Le Roux <jacques.le.r...@les7arts.com>
AuthorDate: Tue Nov 1 10:27:40 2022 +0100
Fixed: Update Tomcat to 9.0.68 due to a low security issue (OFBIZ-12708)
See https://tomcat.apache.org/security-9.html for details
---
build.gradle | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/build.gradle b/build.gradle
index 73460c670a..709fa7f43e 100644
--- a/build.gradle
+++ b/build.gradle
@@ -220,7 +220,7 @@ dependencies {
implementation 'net.lingala.zip4j:zip4j:2.11.1'
implementation 'org.apache.ant:ant-junit:1.10.12'
implementation 'org.apache.commons:commons-collections4:4.4'
- implementation 'org.apache.commons:commons-csv:1.9.0'
+ implementation 'org.apache.commons:commons-csv:1.9.0'
implementation 'org.apache.commons:commons-dbcp2:2.9.0'
implementation 'org.apache.commons:commons-imaging:1.0-alpha3' // Alpha
but OK, "Imaging was working and was used by a number of projects in production
even before reaching its initial release as an Apache Commons component."
implementation 'org.apache.commons:commons-text:1.10.0'
@@ -238,8 +238,8 @@ dependencies {
implementation 'org.apache.tika:tika-parsers:2.5.0'
implementation 'org.apache.tika:tika-parser-pdf-module:2.5.0'
implementation 'org.apache.cxf:cxf-rt-frontend-jaxrs:3.5.3'
- implementation 'org.apache.tomcat:tomcat-catalina-ha:9.0.65' // Remember
to change the version number (9 now) in javadoc block if needed.
- implementation 'org.apache.tomcat:tomcat-jasper:9.0.65'
+ implementation 'org.apache.tomcat:tomcat-catalina-ha:9.0.68' // Remember
to change the version number (9 now) in javadoc block if needed.
+ implementation 'org.apache.tomcat:tomcat-jasper:9.0.68'
implementation 'org.apache.axis2:axis2-kernel:1.8.1'
implementation 'batik:batik-svg-dom:1.6-1'
implementation 'org.apache.xmlgraphics:fop:2.3' // NOTE: since 2.4
dependencies are messed up. See
https://github.com/moqui/moqui-fop/blob/master/build.gradle
