You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ofbiz.apache.org by jl...@apache.org on 2020/02/25 14:37:21 UTC

[ofbiz-framework] branch release18.12 updated: Upgrade Tomcat from 9.0.19 to 9.0.31 (OFBIZ-11407)

This is an automated email from the ASF dual-hosted git repository.

jleroux pushed a commit to branch release18.12
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git


The following commit(s) were added to refs/heads/release18.12 by this push:
     new 3856b0a  Upgrade Tomcat from 9.0.19 to 9.0.31 (OFBIZ-11407)
3856b0a is described below

commit 3856b0aebe67d49d8c3810663f6c91c999f18aaa
Author: Jacques Le Roux <ja...@les7arts.com>
AuthorDate: Tue Feb 25 15:37:17 2020 +0100

    Upgrade Tomcat from 9.0.19 to 9.0.31
    (OFBIZ-11407)
    
    Backported by hand (cherry pick failed) because of CVE-2020-1938
---
 build.gradle | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/build.gradle b/build.gradle
index bd2320b..153090d 100644
--- a/build.gradle
+++ b/build.gradle
@@ -154,10 +154,10 @@ dependencies {
     compile 'org.apache.sshd:sshd-core:1.7.0'
     compile 'org.apache.tika:tika-core:1.20'
     compile 'org.apache.tika:tika-parsers:1.20'
-    compile 'org.apache.tomcat:tomcat-catalina-ha:9.0.19'
-    compile 'org.apache.tomcat:tomcat-catalina:9.0.19'
-    compile 'org.apache.tomcat:tomcat-jasper:9.0.19'
-    compile 'org.apache.tomcat:tomcat-tribes:9.0.19'
+    compile 'org.apache.tomcat:tomcat-catalina-ha:9.0.31'
+    compile 'org.apache.tomcat:tomcat-catalina:9.0.31'
+    compile 'org.apache.tomcat:tomcat-jasper:9.0.31'
+    compile 'org.apache.tomcat:tomcat-tribes:9.0.31'
     compile 'org.apache.xmlgraphics:fop:2.3'
     compile 'org.apache.xmlrpc:xmlrpc-client:3.1.3'
     compile 'org.apache.xmlrpc:xmlrpc-server:3.1.3'