This is an automated email from the ASF dual-hosted git repository.
jleroux pushed a commit to branch release22.01
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git
The following commit(s) were added to refs/heads/release22.01 by this push:
new b8ae780b38 Fixed: [SECURITY] CVE-2023-34981 Apache Tomcat
(OFBIZ-12831)
b8ae780b38 is described below
commit b8ae780b38e219ef327648a2ff49e090ed1df98f
Author: Jacques Le Roux <jacques.le.r...@les7arts.com>
AuthorDate: Wed Jun 21 16:44:50 2023 +0200
Fixed: [SECURITY] CVE-2023-34981 Apache Tomcat (OFBIZ-12831)
See https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.75
---
build.gradle | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/build.gradle b/build.gradle
index e460b8dbd1..6612add0a2 100644
--- a/build.gradle
+++ b/build.gradle
@@ -240,8 +240,8 @@ dependencies {
implementation 'org.apache.tika:tika-parsers:2.5.0'
implementation 'org.apache.tika:tika-parser-pdf-module:2.5.0'
implementation 'org.apache.cxf:cxf-rt-frontend-jaxrs:3.5.3'
- implementation 'org.apache.tomcat:tomcat-catalina-ha:9.0.74' // Remember
to change the version number (9 now) in javadoc block if needed.
- implementation 'org.apache.tomcat:tomcat-jasper:9.0.74'
+ implementation 'org.apache.tomcat:tomcat-catalina-ha:9.0.75' // Remember
to change the version number (9 now) in javadoc block if needed.
+ implementation 'org.apache.tomcat:tomcat-jasper:9.0.75'
implementation 'org.apache.axis2:axis2-kernel:1.7.9' // Above:
SOAPEventHandler.java:42: error: package org.apache.axiom.om.impl.builder does
not exist
implementation 'org.apache.xmlgraphics:batik-anim:1.14'
implementation 'org.apache.xmlgraphics:batik-util:1.14'
