(ofbiz-framework) branch release18.12 updated: Fixed: CVE-2024-34750 Apache Tomcat - Denial of Service (OFBIZ-13124)

[jl...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

jleroux pushed a commit to branch release18.12
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git


The following commit(s) were added to refs/heads/release18.12 by this push:
     new 1086fa7a48 Fixed: CVE-2024-34750 Apache Tomcat - Denial of Service (OFBIZ-13124)
1086fa7a48 is described below

commit 1086fa7a483330dc5256c27583f087694a94d86d
Author: Jacques Le Roux <ja...@les7arts.com>
AuthorDate: Thu Jul 11 08:40:33 2024 +0200

    Fixed: CVE-2024-34750 Apache Tomcat - Denial of Service (OFBIZ-13124)
    
    https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.90
    5 days later Tomcat 9.0.91 has been released, better use it.
---
 build.gradle | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/build.gradle b/build.gradle
index 15111a590b..b22879fe1f 100644
--- a/build.gradle
+++ b/build.gradle
@@ -211,10 +211,10 @@ dependencies {
     compile 'org.apache.sshd:sshd-core:1.7.0'
     compile 'org.apache.tika:tika-core:1.28.4'
     compile 'org.apache.tika:tika-parsers:1.28.4'
-    compile 'org.apache.tomcat:tomcat-catalina-ha:9.0.86'
-    compile 'org.apache.tomcat:tomcat-catalina:9.0.86'
-    compile 'org.apache.tomcat:tomcat-jasper:9.0.86'
-    compile 'org.apache.tomcat:tomcat-tribes:9.0.86'
+    compile 'org.apache.tomcat:tomcat-catalina-ha:9.0.91'
+    compile 'org.apache.tomcat:tomcat-catalina:9.0.91'
+    compile 'org.apache.tomcat:tomcat-jasper:9.0.91'
+    compile 'org.apache.tomcat:tomcat-tribes:9.0.91'
     compile 'org.apache.xmlgraphics:fop:2.3'
     compile 'org.codehaus.groovy:groovy-all:2.4.13' // Remember to change the version number in javadoc.options block
     compile 'org.freemarker:freemarker:2.3.31' // Remember to change the version number in FreeMarkerWorker class when upgrading