You are viewing a plain text version of this content. The canonical link for it is here.

Posted to notifications@ofbiz.apache.org by "Jacques Le Roux (Jira)" <ji...@apache.org> on 2026/04/14 12:43:00 UTC

[jira] [Comment Edited] (OFBIZ-13381) [SECURITY] Several CVEs in Apache Tomcat

    [ https://issues.apache.org/jira/browse/OFBIZ-13381?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18073436#comment-18073436 ] 

Jacques Le Roux edited comment on OFBIZ-13381 at 4/14/26 12:42 PM:
-------------------------------------------------------------------

Actually I made several mistake here.

First I initially made this Jira a sub-task of another unrelated issue. That is resolved.

I forgot to update Tomcat in example/build.gradle for websocket.

Then I did not understand that with [https://github.com/apache/ofbiz-plugins/pull/189] Dependabot was suggesting to update example/build.gradle in trunk. 
Fortunately Jacopo did it today.

That confirms that, if I have not (yet?) Alzheimer, my brain is really ageing more quickly than I thought. At least I can still come back to my home alone :)


was (Author: jacques.le.roux):
Actually I made several mistake here.

 

First I initially made this Jira a sub-task of another unrelated issue. That is resolved.

I forgot to update Tomcat in example/build.gradle for websocket.

Then I did not understand that with [https://github.com/apache/ofbiz-plugins/pull/189] Dependabot was suggesting to update example/build.gradle in trunk. 
Fortunately Jacopo did it today.

That confirms that, if I have not (yet?) Alzheimer, my brain is really ageing more quickly than I thought. At least I can still come back to my home alone :)

> [SECURITY]  Several CVEs in Apache Tomcat
> -----------------------------------------
>
>                 Key: OFBIZ-13381
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-13381
>             Project: OFBiz
>          Issue Type: Sub-task
>          Components: tomcat
>    Affects Versions: 24.09.06
>            Reporter: Jacques Le Roux
>            Assignee: Jacques Le Roux
>            Priority: Major
>             Fix For: 24.09.06
>
>
> Details :
> https://tomcat.apache.org/security-10.html  (trunk)
> https://tomcat.apache.org/security-9.html (24.09)



--
This message was sent by Atlassian Jira
(v8.20.10#820010)