You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ofbiz.apache.org by jl...@apache.org on 2019/03/25 17:50:30 UTC
svn commit: r1856214 - in /ofbiz/ofbiz-plugins/branches/release18.12: ./
example/build.gradle
Author: jleroux
Date: Mon Mar 25 17:50:29 2019
New Revision: 1856214
URL: http://svn.apache.org/viewvc?rev=1856214&view=rev
Log:
"Applied fix from plugins for revision: 1856212 "
------------------------------------------------------------------------
r1856212 | jleroux | 2019-03-25 18:47:52 +0100 (lun. 25 mars 2019) | 9 lignes
Fixed: Update Tomcat to 9.0.16 due to CVE-2019-0199
(OFBIZ-10873)
The HTTP/2 implementation accepted streams with excessive numbers of
SETTINGS frames and also permitted clients to keep streams open without
reading/writing request/response data. By keeping streams open for
requests that utilised the Servlet API's blocking I/O, clients were able
to cause server-side threads to block eventually leading to thread
exhaustion and a DoS.
------------------------------------------------------------------------
Modified:
ofbiz/ofbiz-plugins/branches/release18.12/ (props changed)
ofbiz/ofbiz-plugins/branches/release18.12/example/build.gradle
Propchange: ofbiz/ofbiz-plugins/branches/release18.12/
------------------------------------------------------------------------------
--- svn:mergeinfo (original)
+++ svn:mergeinfo Mon Mar 25 17:50:29 2019
@@ -10,4 +10,4 @@
/ofbiz/branches/json-integration-refactoring/plugins:1634077-1635900
/ofbiz/branches/multitenant20100310/plugins:921280-927264
/ofbiz/branches/release13.07/plugins:1547657
-/ofbiz/ofbiz-plugins/trunk:1851002,1851009,1851068,1851135,1851139-1851140,1851185,1851316,1851885,1852988,1853904,1854684,1855082,1855084
+/ofbiz/ofbiz-plugins/trunk:1851002,1851009,1851068,1851135,1851139-1851140,1851185,1851316,1851885,1852988,1853904,1854684,1855082,1855084,1856212
Modified: ofbiz/ofbiz-plugins/branches/release18.12/example/build.gradle
URL: http://svn.apache.org/viewvc/ofbiz/ofbiz-plugins/branches/release18.12/example/build.gradle?rev=1856214&r1=1856213&r2=1856214&view=diff
==============================================================================
--- ofbiz/ofbiz-plugins/branches/release18.12/example/build.gradle (original)
+++ ofbiz/ofbiz-plugins/branches/release18.12/example/build.gradle Mon Mar 25 17:50:29 2019
@@ -18,5 +18,5 @@
*/
dependencies {
- pluginLibsCompile 'org.apache.tomcat.embed:tomcat-embed-websocket:9.0.13'
+ pluginLibsCompile 'org.apache.tomcat.embed:tomcat-embed-websocket:9.0.16'
}
\ No newline at end of file