(ofbiz-framework) branch release24.09 updated: Fixed: [SECURITY] Several CVEs in Apache Tomcat (OFBIZ-13381)

[jl...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

jleroux pushed a commit to branch release24.09
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git


The following commit(s) were added to refs/heads/release24.09 by this push:
     new c5724f398e Fixed: [SECURITY]  Several CVEs in Apache Tomcat (OFBIZ-13381)
c5724f398e is described below

commit c5724f398e0c0dadfb3ab31306b5df03dd594928
Author: Jacques Le Roux <ja...@les7arts.com>
AuthorDate: Fri Apr 10 16:02:35 2026 +0200

    Fixed: [SECURITY]  Several CVEs in Apache Tomcat (OFBIZ-13381)
    
    Details: https://tomcat.apache.org/security-9.html (stable)
---
 dependencies.gradle | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/dependencies.gradle b/dependencies.gradle
index 54120718bc..c6b811b2c9 100644
--- a/dependencies.gradle
+++ b/dependencies.gradle
@@ -58,8 +58,8 @@ dependencies {
     implementation 'org.apache.tika:tika-parsers:2.9.4'
     implementation 'org.apache.tika:tika-parser-pdf-module:2.9.4'
     implementation 'org.apache.cxf:cxf-rt-frontend-jaxrs:3.6.10' // 4.0.3 does not compile
-    implementation 'org.apache.tomcat:tomcat-catalina-ha:9.0.116' // Remember to change the version number (9 now) in javadoc block if needed.
-    implementation 'org.apache.tomcat:tomcat-jasper:9.0.116'
+    implementation 'org.apache.tomcat:tomcat-catalina-ha:9.0.117' // Remember to change the version number (9 now) in javadoc block if needed.
+    implementation 'org.apache.tomcat:tomcat-jasper:9.0.117'
     implementation 'org.apache.axis2:axis2-kernel:1.8.2'
     implementation 'org.apache.xmlgraphics:batik-anim:1.19'
     implementation 'org.apache.xmlgraphics:batik-util:1.19'