(ofbiz-framework) branch trunk updated: Fixed: [SECURITY] Several CVEs in Apache Tomcat (OFBIZ-13310)

[jl...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

jleroux pushed a commit to branch trunk
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git


The following commit(s) were added to refs/heads/trunk by this push:
     new ea766213f4 Fixed: [SECURITY] Several CVEs in Apache Tomcat (OFBIZ-13310)
ea766213f4 is described below

commit ea766213f42ab9ab491e2b48c287167263110c16
Author: Jacques Le Roux <ja...@les7arts.com>
AuthorDate: Tue Oct 28 17:20:20 2025 +0100

    Fixed: [SECURITY] Several CVEs in Apache Tomcat (OFBIZ-13310)
    
    https://lists.apache.org/list.html?users@tomcat.apache.org
    https://lists.apache.org/thread/0p69tp4btn0pjrzmndnlv4dz7zof0mv3
---
 dependencies.gradle | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/dependencies.gradle b/dependencies.gradle
index fa40ae043f..27eccb11d5 100644
--- a/dependencies.gradle
+++ b/dependencies.gradle
@@ -63,8 +63,8 @@ dependencies {
     implementation 'org.apache.tika:tika-parsers:2.9.2' // To be compatible with tika-parser-pdf-module below
     implementation 'org.apache.tika:tika-parser-pdf-module:2.9.2' // > 2.9.2 does not compile, see OFBIZ-13155
     implementation 'org.apache.cxf:cxf-rt-frontend-jaxrs:4.1.3'
-    implementation 'org.apache.tomcat:tomcat-catalina-ha:10.1.44' // Remember to change the version number (10 now) in javadoc block if needed.
-    implementation 'org.apache.tomcat:tomcat-jasper:10.1.44'
+    implementation 'org.apache.tomcat:tomcat-catalina-ha:10.1.47' // Remember to change the version number (10 now) in javadoc block if needed.
+    implementation 'org.apache.tomcat:tomcat-jasper:10.1.47'
     implementation 'org.apache.axis2:axis2-kernel:1.8.2'
     implementation 'org.apache.xmlgraphics:batik-anim:1.18'
     implementation 'org.apache.xmlgraphics:batik-util:1.18'