Update Geronimo Javamail to mitigate CVE-2024-21742

tomitribe · Nov 20, 2024 · a6b2f49 · a6b2f49
1 parent aa603de
commit a6b2f49
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 2 deletions.
diff --git a/pom.xml b/pom.xml
@@ -1287,7 +1287,7 @@
       <dependency>
         <groupId>org.apache.geronimo.javamail</groupId>
         <artifactId>geronimo-javamail_1.4_mail</artifactId>
-        <version>1.9.0-alpha-2</version>
+        <version>1.9.0-alpha-2-TT.1</version>
         <exclusions>
           <exclusion>
             <groupId>org.apache.geronimo.javamail</groupId>

diff --git a/tomee/apache-tomee/src/main/resources/META-INF/release_notes/RELEASE-NOTES-EAP-7.0.x b/tomee/apache-tomee/src/main/resources/META-INF/release_notes/RELEASE-NOTES-EAP-7.0.x
@@ -1,4 +1,8 @@
-= TomEE EAP 7.0.10-TT.26
+= TomEE EAP 7.0.10-TT.27
+
+=== Changes in TomEE EAP 7.0.10-TT.26
+Update Geronimo Javamail to mitigate CVE-2024-21742
+
 
 === Changes in TomEE EAP 7.0.10-TT.26
 * Update to Tomcat 8.5.100-TT.3 to mitigate CVE-2024-38286