This is an automated email from the ASF dual-hosted git repository.

jleroux pushed a commit to branch release18.12
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git


The following commit(s) were added to refs/heads/release18.12 by this push:
     new a11e1fba91 Fixed: [SECURITY]  Several CVEs in Apache Tomcat 
(OFBIZ-13180)
a11e1fba91 is described below

commit a11e1fba91da54e59c4d7b22cd7562009558bc7f
Author: Jacques Le Roux <jacques.le.r...@les7arts.com>
AuthorDate: Tue Nov 19 11:37:18 2024 +0100

    Fixed: [SECURITY]  Several CVEs in Apache Tomcat (OFBIZ-13180)
    
    https://lists.apache.org/thread/kg1cpwys6s4px9yk6kzp4405wolygqkz
    https://lists.apache.org/thread/xp7ojhmzg6k5c4gxfg7456hszzsfjm58
    https://lists.apache.org/thread/dvky1vcrgvyx7dmt61hr6wchz8x3qbps
    
    https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.97
---
 build.gradle | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/build.gradle b/build.gradle
index b22879fe1f..fe4fb3466f 100644
--- a/build.gradle
+++ b/build.gradle
@@ -211,10 +211,10 @@ dependencies {
     compile 'org.apache.sshd:sshd-core:1.7.0'
     compile 'org.apache.tika:tika-core:1.28.4'
     compile 'org.apache.tika:tika-parsers:1.28.4'
-    compile 'org.apache.tomcat:tomcat-catalina-ha:9.0.91'
-    compile 'org.apache.tomcat:tomcat-catalina:9.0.91'
-    compile 'org.apache.tomcat:tomcat-jasper:9.0.91'
-    compile 'org.apache.tomcat:tomcat-tribes:9.0.91'
+    compile 'org.apache.tomcat:tomcat-catalina-ha:9.0.97'
+    compile 'org.apache.tomcat:tomcat-catalina:9.0.97'
+    compile 'org.apache.tomcat:tomcat-jasper:9.0.97'
+    compile 'org.apache.tomcat:tomcat-tribes:9.0.97'
     compile 'org.apache.xmlgraphics:fop:2.3'
     compile 'org.codehaus.groovy:groovy-all:2.4.13' // Remember to change the 
version number in javadoc.options block
     compile 'org.freemarker:freemarker:2.3.31' // Remember to change the 
version number in FreeMarkerWorker class when upgrading

Reply via email to