Merge pull request #322 from cesarhernandezgt/tomee-7.1.x-TT.x-patch

Update to Tomcat 8.5.100-TT.4 to mitigate CVE-2024-52316 and releas notes
tomitribe · Nov 25, 2024 · 8bf568b · 8bf568b
2 parents f25984e + b92a1e5
commit 8bf568b
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 2 deletions.
diff --git a/pom.xml b/pom.xml
@@ -132,7 +132,7 @@
     <version.shrinkwrap.descriptor>2.0.0</version.shrinkwrap.descriptor>
     <version.shrinkwrap.shrinkwrap>1.2.6</version.shrinkwrap.shrinkwrap>
 
-    <tomcat.version>8.5.100-TT.3</tomcat.version>
+    <tomcat.version>8.5.100-TT.4</tomcat.version>
 
     <cxf.version>3.1.19-TT.10</cxf.version>
     <version.shrinkwrap.shrinkwrap>1.2.6</version.shrinkwrap.shrinkwrap>

diff --git a/tomee/apache-tomee/src/main/resources/META-INF/release_notes/RELEASE-NOTES-EAP-7.0.x b/tomee/apache-tomee/src/main/resources/META-INF/release_notes/RELEASE-NOTES-EAP-7.0.x
@@ -1,7 +1,8 @@
 = TomEE EAP 7.1.5-TT.28
 
 === Changes in TomEE EAP 7.1.5-TT.28
-Update Geronimo Javamail to mitigate CVE-2024-21742
+* Update Geronimo Javamail to mitigate CVE-2024-21742
+* Update to Tomcat 8.5.100-TT.4 to mitigate CVE-2024-52316
 
 
 === Changes in TomEE EAP 7.1.5-TT.27