You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ofbiz.apache.org by mb...@apache.org on 2017/10/07 09:30:49 UTC
svn commit: r1811404 - /ofbiz/ofbiz-framework/trunk/build.gradle
Author: mbrohl
Date: Sat Oct 7 09:30:48 2017
New Revision: 1811404
URL: http://svn.apache.org/viewvc?rev=1811404&view=rev
Log:
Improved: Update to Tomcat 8.5.23.
(OFBIZ-9813)
This Tomcat version fixes CVE-2017-12617.
Thanks Dennis Balkir for providing the patch.
Modified:
ofbiz/ofbiz-framework/trunk/build.gradle
Modified: ofbiz/ofbiz-framework/trunk/build.gradle
URL: http://svn.apache.org/viewvc/ofbiz/ofbiz-framework/trunk/build.gradle?rev=1811404&r1=1811403&r2=1811404&view=diff
==============================================================================
--- ofbiz/ofbiz-framework/trunk/build.gradle (original)
+++ ofbiz/ofbiz-framework/trunk/build.gradle Sat Oct 7 09:30:48 2017
@@ -126,10 +126,10 @@ dependencies {
compile 'org.apache.shiro:shiro-core:1.3.0'
compile 'org.apache.tika:tika-core:1.12'
compile 'org.apache.tika:tika-parsers:1.12'
- compile 'org.apache.tomcat:tomcat-catalina-ha:8.5.20'
- compile 'org.apache.tomcat:tomcat-catalina:8.5.20'
- compile 'org.apache.tomcat:tomcat-jasper:8.5.20'
- compile 'org.apache.tomcat:tomcat-tribes:8.5.20'
+ compile 'org.apache.tomcat:tomcat-catalina-ha:8.5.23'
+ compile 'org.apache.tomcat:tomcat-catalina:8.5.23'
+ compile 'org.apache.tomcat:tomcat-jasper:8.5.23'
+ compile 'org.apache.tomcat:tomcat-tribes:8.5.23'
compile 'org.apache.xmlgraphics:fop:2.1'
compile 'org.apache.xmlrpc:xmlrpc-client:3.1.2'
compile 'org.apache.xmlrpc:xmlrpc-server:3.1.2'