(ofbiz-framework) branch release18.12 updated: Fixed: [SECURITY] Several CVEs in Apache Tomcat (OFBIZ-13216)

[jl...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

jleroux pushed a commit to branch release18.12
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git


The following commit(s) were added to refs/heads/release18.12 by this push:
     new a04c5d0e29 Fixed: [SECURITY]  Several CVEs in Apache Tomcat (OFBIZ-13216)
a04c5d0e29 is described below

commit a04c5d0e29078e194ac8123d070861cd5fa6ef3e
Author: Jacques Le Roux <ja...@les7arts.com>
AuthorDate: Tue Mar 11 09:51:02 2025 +0100

    Fixed: [SECURITY]  Several CVEs in Apache Tomcat (OFBIZ-13216)
    
    https://lists.apache.org/thread/xl35tnb4979lnk7stnvx9sll1hb68kvf
    https://lists.apache.org/thread/bs2otv1k6yc7h2xnjm6oykd18hrbl8f9
    
    So this is an update to Tomcat 9.0.102
---
 build.gradle | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/build.gradle b/build.gradle
index fe4fb3466f..b4006724ca 100644
--- a/build.gradle
+++ b/build.gradle
@@ -211,10 +211,10 @@ dependencies {
     compile 'org.apache.sshd:sshd-core:1.7.0'
     compile 'org.apache.tika:tika-core:1.28.4'
     compile 'org.apache.tika:tika-parsers:1.28.4'
-    compile 'org.apache.tomcat:tomcat-catalina-ha:9.0.97'
-    compile 'org.apache.tomcat:tomcat-catalina:9.0.97'
-    compile 'org.apache.tomcat:tomcat-jasper:9.0.97'
-    compile 'org.apache.tomcat:tomcat-tribes:9.0.97'
+    compile 'org.apache.tomcat:tomcat-catalina-ha:9.0.102'
+    compile 'org.apache.tomcat:tomcat-catalina:9.0.102'
+    compile 'org.apache.tomcat:tomcat-jasper:9.0.102'
+    compile 'org.apache.tomcat:tomcat-tribes:9.0.102'
     compile 'org.apache.xmlgraphics:fop:2.3'
     compile 'org.codehaus.groovy:groovy-all:2.4.13' // Remember to change the version number in javadoc.options block
     compile 'org.freemarker:freemarker:2.3.31' // Remember to change the version number in FreeMarkerWorker class when upgrading