This is an automated email from the ASF dual-hosted git repository. jleroux pushed a commit to branch trunk in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git
The following commit(s) were added to refs/heads/trunk by this push: new ace92c0 Fixed: [SECURITY] CVE-2021-42340 Apache Tomcat DoS (OFBIZ-12337) ace92c0 is described below commit ace92c091728335776ae8eb8b8d0230d7e03c544 Author: Jacques Le Roux <jacques.le.r...@les7arts.com> AuthorDate: Thu Oct 14 19:27:23 2021 +0200 Fixed: [SECURITY] CVE-2021-42340 Apache Tomcat DoS (OFBIZ-12337) Upgrades to Apache Tomcat 9.0.54 --- build.gradle | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/build.gradle b/build.gradle index 543598b..0cc6f13 100644 --- a/build.gradle +++ b/build.gradle @@ -226,8 +226,8 @@ dependencies { implementation 'org.apache.sshd:sshd-core:1.7.0' // So far we did not update from 1.7.0 because of a compile issue. You may try w/ a newer version than 2.4.0 implementation 'org.apache.tika:tika-core:1.26' // 2.1.0 does not work implementation 'org.apache.tika:tika-parsers:1.25' // 2.1.0 does not work - implementation 'org.apache.tomcat:tomcat-catalina-ha:9.0.48' // Remember to change the version number (9 now) in javadoc block if needed. - implementation 'org.apache.tomcat:tomcat-jasper:9.0.48' + implementation 'org.apache.tomcat:tomcat-catalina-ha:9.0.54' // Remember to change the version number (9 now) in javadoc block if needed. + implementation 'org.apache.tomcat:tomcat-jasper:9.0.54' implementation 'org.apache.axis2:axis2-kernel:1.7.9' // Above: SOAPEventHandler.java:42: error: package org.apache.axiom.om.impl.builder does not exist implementation 'batik:batik-svg-dom:1.6-1' implementation 'org.apache.xmlgraphics:fop:2.3' // NOTE: since 2.4 dependencies are messed up. See https://github.com/moqui/moqui-fop/blob/master/build.gradle