(ofbiz-plugins) branch trunk updated: Fixed: [SECURITY] Several CVEs in Apache Tomcat (OFBIZ-13229)

[jleroux]

This is an automated email from the ASF dual-hosted git repository.

jleroux pushed a commit to branch trunk
in repository https://gitbox.apache.org/repos/asf/ofbiz-plugins.git


The following commit(s) were added to refs/heads/trunk by this push:
     new 006ef3c57 Fixed: [SECURITY]  Several CVEs in Apache Tomcat 
(OFBIZ-13229)
006ef3c57 is described below

commit 006ef3c578e04eecebb9a4651dbf7fe444fc4dcf
Author: Jacques Le Roux <jacques.le.r...@les7arts.com>
AuthorDate: Tue Apr 29 09:15:40 2025 +0200

    Fixed: [SECURITY]  Several CVEs in Apache Tomcat (OFBIZ-13229)
    
    When using Tomcat 10 we get: package javax.websocket does not exist
    
    This revert to tomcat-embed-websocket:9.0.104 with a comment about that
---
 example/build.gradle | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/example/build.gradle b/example/build.gradle
index e6e072f28..e10b6266b 100644
--- a/example/build.gradle
+++ b/example/build.gradle
@@ -22,7 +22,7 @@ plugins {
 }
 
 dependencies {
-    pluginLibsCompile 'org.apache.tomcat.embed:tomcat-embed-websocket:10.1.39'
+    pluginLibsCompile 'org.apache.tomcat.embed:tomcat-embed-websocket:9.0.104' 
// Moving to Tomcat 10 needs more work or maybe removing websocket that does 
not work anyway, see OFBIZ-7073
 }
 
 node {