This is an automated email from the ASF dual-hosted git repository.
jleroux pushed a commit to branch trunk
in repository https://gitbox.apache.org/repos/asf/ofbiz-plugins.git
The following commit(s) were added to refs/heads/trunk by this push:
new 006ef3c57 Fixed: [SECURITY] Several CVEs in Apache Tomcat
(OFBIZ-13229)
006ef3c57 is described below
commit 006ef3c578e04eecebb9a4651dbf7fe444fc4dcf
Author: Jacques Le Roux <jacques.le.r...@les7arts.com>
AuthorDate: Tue Apr 29 09:15:40 2025 +0200
Fixed: [SECURITY] Several CVEs in Apache Tomcat (OFBIZ-13229)
When using Tomcat 10 we get: package javax.websocket does not exist
This revert to tomcat-embed-websocket:9.0.104 with a comment about that
---
example/build.gradle | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/example/build.gradle b/example/build.gradle
index e6e072f28..e10b6266b 100644
--- a/example/build.gradle
+++ b/example/build.gradle
@@ -22,7 +22,7 @@ plugins {
}
dependencies {
- pluginLibsCompile 'org.apache.tomcat.embed:tomcat-embed-websocket:10.1.39'
+ pluginLibsCompile 'org.apache.tomcat.embed:tomcat-embed-websocket:9.0.104'
// Moving to Tomcat 10 needs more work or maybe removing websocket that does
not work anyway, see OFBIZ-7073
}
node {
