This is an automated email from the ASF dual-hosted git repository.
jleroux pushed a commit to branch release18.12
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git
The following commit(s) were added to refs/heads/release18.12 by this push:
new 1086fa7a48 Fixed: CVE-2024-34750 Apache Tomcat - Denial of Service
(OFBIZ-13124)
1086fa7a48 is described below
commit 1086fa7a483330dc5256c27583f087694a94d86d
Author: Jacques Le Roux <jacques.le.r...@les7arts.com>
AuthorDate: Thu Jul 11 08:40:33 2024 +0200
Fixed: CVE-2024-34750 Apache Tomcat - Denial of Service (OFBIZ-13124)
https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.90
5 days later Tomcat 9.0.91 has been released, better use it.
---
build.gradle | 8 ++++----
1 file changed, 4 insertions(+), 4 deletions(-)
diff --git a/build.gradle b/build.gradle
index 15111a590b..b22879fe1f 100644
--- a/build.gradle
+++ b/build.gradle
@@ -211,10 +211,10 @@ dependencies {
compile 'org.apache.sshd:sshd-core:1.7.0'
compile 'org.apache.tika:tika-core:1.28.4'
compile 'org.apache.tika:tika-parsers:1.28.4'
- compile 'org.apache.tomcat:tomcat-catalina-ha:9.0.86'
- compile 'org.apache.tomcat:tomcat-catalina:9.0.86'
- compile 'org.apache.tomcat:tomcat-jasper:9.0.86'
- compile 'org.apache.tomcat:tomcat-tribes:9.0.86'
+ compile 'org.apache.tomcat:tomcat-catalina-ha:9.0.91'
+ compile 'org.apache.tomcat:tomcat-catalina:9.0.91'
+ compile 'org.apache.tomcat:tomcat-jasper:9.0.91'
+ compile 'org.apache.tomcat:tomcat-tribes:9.0.91'
compile 'org.apache.xmlgraphics:fop:2.3'
compile 'org.codehaus.groovy:groovy-all:2.4.13' // Remember to change the
version number in javadoc.options block
compile 'org.freemarker:freemarker:2.3.31' // Remember to change the
version number in FreeMarkerWorker class when upgrading
