This is an automated email from the ASF dual-hosted git repository.

jleroux pushed a commit to branch release24.09
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git


The following commit(s) were added to refs/heads/release24.09 by this push:
     new 59614c4b6a Fixed: [SECURITY]  Several CVEs in Apache Tomcat 
(OFBIZ-13229)
59614c4b6a is described below

commit 59614c4b6aa84c94e3f7f602456fbbf3da98c0a2
Author: Jacques Le Roux <jacques.le.r...@les7arts.com>
AuthorDate: Tue Apr 29 11:07:09 2025 +0200

    Fixed: [SECURITY]  Several CVEs in Apache Tomcat (OFBIZ-13229)
    
    https://lists.apache.org/thread/q4ld9xtv3zrvvs3ykp4b2f9j2tvhq6bl
    https://lists.apache.org/thread/x7l5ldwkson33bf4b3s3738lwjql618z
---
 dependencies.gradle | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/dependencies.gradle b/dependencies.gradle
index 8f23702136..50b602abf1 100644
--- a/dependencies.gradle
+++ b/dependencies.gradle
@@ -61,8 +61,8 @@ dependencies {
     implementation 'org.apache.tika:tika-parsers:2.5.0'
     implementation 'org.apache.tika:tika-parser-pdf-module:2.5.0'
     implementation 'org.apache.cxf:cxf-rt-frontend-jaxrs:3.5.6' // 4.0.3 does 
not compile
-    implementation 'org.apache.tomcat:tomcat-catalina-ha:9.0.102' // Remember 
to change the version number (9 now) in javadoc block if needed.
-    implementation 'org.apache.tomcat:tomcat-jasper:9.0.102'
+    implementation 'org.apache.tomcat:tomcat-catalina-ha:9.0.104' // Remember 
to change the version number (9 now) in javadoc block if needed.
+    implementation 'org.apache.tomcat:tomcat-jasper:9.0.104'
     implementation 'org.apache.axis2:axis2-kernel:1.8.2'
     implementation 'org.apache.xmlgraphics:batik-anim:1.17'
     implementation 'org.apache.xmlgraphics:batik-util:1.17'

Reply via email to