You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ofbiz.apache.org by jl...@apache.org on 2016/11/26 09:35:19 UTC

svn commit: r1771448 - /ofbiz/trunk/build.gradle

Author: jleroux
Date: Sat Nov 26 09:35:19 2016
New Revision: 1771448

URL: http://svn.apache.org/viewvc?rev=1771448&view=rev
Log:
Completed: Upgrade Tomcat to 8.0.39
(OFBIZ-9124)

Because of security reports CVE-2016-6816 and CVE-2016-8735 (both are important)
 this updates Tomcat to 8.0.39 

Modified:
    ofbiz/trunk/build.gradle

Modified: ofbiz/trunk/build.gradle
URL: http://svn.apache.org/viewvc/ofbiz/trunk/build.gradle?rev=1771448&r1=1771447&r2=1771448&view=diff
==============================================================================
--- ofbiz/trunk/build.gradle (original)
+++ ofbiz/trunk/build.gradle Sat Nov 26 09:35:19 2016
@@ -116,10 +116,10 @@ dependencies {
     compile 'org.apache.shiro:shiro-core:1.3.0'
     compile 'org.apache.tika:tika-core:1.12'
     compile 'org.apache.tika:tika-parsers:1.12'
-    compile 'org.apache.tomcat:tomcat-catalina-ha:8.0.37'
-    compile 'org.apache.tomcat:tomcat-catalina:8.0.37'
-    compile 'org.apache.tomcat:tomcat-jasper:8.0.37'
-    compile 'org.apache.tomcat:tomcat-tribes:8.0.37'
+    compile 'org.apache.tomcat:tomcat-catalina-ha:8.0.39'
+    compile 'org.apache.tomcat:tomcat-catalina:8.0.39'
+    compile 'org.apache.tomcat:tomcat-jasper:8.0.39'
+    compile 'org.apache.tomcat:tomcat-tribes:8.0.39'
     compile 'org.apache.xmlgraphics:fop:2.1'
     compile 'org.apache.xmlrpc:xmlrpc-client:3.1.2'
     compile 'org.apache.xmlrpc:xmlrpc-server:3.1.2'
@@ -161,7 +161,7 @@ dependencies {
     runtime 'org.apache.axis2:axis2-adb:1.7.1'
     runtime 'org.apache.httpcomponents:httpcore:4.4.1'
     runtime 'org.apache.servicemix.bundles:org.apache.servicemix.bundles.xpp3:1.1.4c_7'
-    runtime 'org.apache.tomcat.extras:tomcat-extras-juli-adapters:8.0.37'
+    runtime 'org.apache.tomcat.extras:tomcat-extras-juli-adapters:8.0.39'
     runtime 'org.apache.xalan:com.springsource.org.apache.xml.serializer:2.7.1'
     runtime 'ws-commons-java5:ws-commons-java5:1.0.1'