commit 6d2fa2b3bac50136fb2d1b6737375d553674ec6d
author Jacques Le Roux <jacques.le.roux@les7arts.com> Wed Aug 13 19:06:16 2025 +0200
committer Jacques Le Roux <jacques.le.roux@les7arts.com> Thu Aug 14 10:39:35 2025 +0200
tree 38eb5abc525589285377513dc072b76d22762023
parent c04db3a20b28fccdcb3574532a06b5d6a49ec46b

Fixed: [SECURITY]  Several CVEs in Apache Tomcat (OFBIZ-13285)

Details :
https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.44

dependencies.gradle

diff --git a/dependencies.gradle b/dependencies.gradle
index 504ae9c..66276af 100644
--- a/dependencies.gradle
+++ b/dependencies.gradle
@@ -62,8 +62,8 @@
     implementation 'org.apache.tika:tika-parsers:2.9.2' // To be compatible with tika-parser-pdf-module below
     implementation 'org.apache.tika:tika-parser-pdf-module:2.9.2' // > 2.9.2 does not compile, see OFBIZ-13155
     implementation 'org.apache.cxf:cxf-rt-frontend-jaxrs:3.6.4' // 4.x+ requires javax.xml.bind -> jakarta.xml.bind namespace change
-    implementation 'org.apache.tomcat:tomcat-catalina-ha:10.1.43' // Remember to change the version number (10 now) in javadoc block if needed.
-    implementation 'org.apache.tomcat:tomcat-jasper:10.1.43'
+    implementation 'org.apache.tomcat:tomcat-catalina-ha:10.1.44' // Remember to change the version number (10 now) in javadoc block if needed.
+    implementation 'org.apache.tomcat:tomcat-jasper:10.1.44'
     implementation 'org.apache.axis2:axis2-kernel:1.8.2'
     implementation 'org.apache.xmlgraphics:batik-anim:1.18'
     implementation 'org.apache.xmlgraphics:batik-util:1.18'