(ofbiz-framework) branch release24.09 updated: Fixed: Update Apache commons-fileupload to last version (CVE-2025-48976) (OFBIZ-13265)

[jl...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

jleroux pushed a commit to branch release24.09
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git


The following commit(s) were added to refs/heads/release24.09 by this push:
     new b2c272f586 Fixed: Update Apache commons-fileupload to last version (CVE-2025-48976) (OFBIZ-13265)
b2c272f586 is described below

commit b2c272f586c499ed7a758d0a57e41c6c3de9ca3f
Author: Jacques Le Roux <ja...@les7arts.com>
AuthorDate: Sat Jun 21 11:13:27 2025 +0200

    Fixed: Update Apache commons-fileupload to last version (CVE-2025-48976) (OFBIZ-13265)
    
    https://lists.apache.org/thread/mqbtql9d0gzmxmdvoj0r6yqj51bofp6m
    
    So this is an update to Apache Commons FileUpload 1.6.0
---
 dependencies.gradle | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/dependencies.gradle b/dependencies.gradle
index ea570b66c2..fb85dd48ff 100644
--- a/dependencies.gradle
+++ b/dependencies.gradle
@@ -33,7 +33,7 @@ dependencies {
     implementation 'com.rometools:rome:2.1.0'
     implementation 'com.thoughtworks.xstream:xstream:1.4.20'
     implementation 'commons-cli:commons-cli:1.5.0' // with 1.6.0, 2 tests of OfbizStartupUnitTests don't pass
-    implementation 'commons-fileupload:commons-fileupload:1.5'
+    implementation 'commons-fileupload:commons-fileupload:1.6.0'
     implementation 'commons-net:commons-net:3.10.0'
     implementation 'commons-validator:commons-validator:1.8.0'
     implementation 'de.odysseus.juel:juel-impl:2.2.7'