You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ofbiz.apache.org by jl...@apache.org on 2022/11/01 09:32:43 UTC

[ofbiz-framework] branch release22.01 updated: Fixed: Update Tomcat to 9.0.68 due to a low security issue (OFBIZ-12708)

This is an automated email from the ASF dual-hosted git repository.

jleroux pushed a commit to branch release22.01
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git


The following commit(s) were added to refs/heads/release22.01 by this push:
     new 106231ccf0 Fixed: Update Tomcat to 9.0.68 due to a low security issue (OFBIZ-12708)
106231ccf0 is described below

commit 106231ccf0058e1ceede70827da46ba16f0249ed
Author: Jacques Le Roux <ja...@les7arts.com>
AuthorDate: Tue Nov 1 10:29:10 2022 +0100

    Fixed: Update Tomcat to 9.0.68 due to a low security issue (OFBIZ-12708)
    
    See https://tomcat.apache.org/security-9.html for details
---
 build.gradle | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/build.gradle b/build.gradle
index e63427fd74..02e0b7c1aa 100644
--- a/build.gradle
+++ b/build.gradle
@@ -230,8 +230,8 @@ dependencies {
     implementation 'org.apache.tika:tika-parsers:2.5.0'
     implementation 'org.apache.tika:tika-parser-pdf-module:2.5.0'
     implementation 'org.apache.cxf:cxf-rt-frontend-jaxrs:3.5.3'
-    implementation 'org.apache.tomcat:tomcat-catalina-ha:9.0.65' // Remember to change the version number (9 now) in javadoc block if needed.
-    implementation 'org.apache.tomcat:tomcat-jasper:9.0.65'
+    implementation 'org.apache.tomcat:tomcat-catalina-ha:9.0.68' // Remember to change the version number (9 now) in javadoc block if needed.
+    implementation 'org.apache.tomcat:tomcat-jasper:9.0.68'
     implementation 'org.apache.axis2:axis2-kernel:1.7.9' // Above: SOAPEventHandler.java:42: error: package org.apache.axiom.om.impl.builder does not exist
     implementation 'batik:batik-svg-dom:1.6-1'
     implementation 'org.apache.xmlgraphics:fop:2.3' // NOTE: since 2.4 dependencies are messed up. See https://github.com/moqui/moqui-fop/blob/master/build.gradle