Update Geronimo Javamail to mitigate CVE-2024-21742

tomitribe · Nov 19, 2024 · aab5be8 · aab5be8
1 parent ff4a7fd
commit aab5be8
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 2 deletions.
diff --git a/pom.xml b/pom.xml
@@ -1596,7 +1596,7 @@
       <dependency>
         <groupId>org.apache.geronimo.javamail</groupId>
         <artifactId>geronimo-javamail_1.4_mail</artifactId>
-        <version>1.9.0-alpha-2</version>
+        <version>1.9.0-alpha-2-TT.1</version>
         <exclusions>
           <exclusion>
             <groupId>org.apache.geronimo.javamail</groupId>

diff --git a/tomee/apache-tomee/src/main/resources/META-INF/release_notes/RELEASE-NOTES-EAP-1.7.x b/tomee/apache-tomee/src/main/resources/META-INF/release_notes/RELEASE-NOTES-EAP-1.7.x
@@ -1,4 +1,7 @@
-= TomEE EAP 1.7.6-TT.41
+= TomEE EAP 1.7.6-TT.42
+
+=== Changes in TomEE EAP 1.7.6-TT.42
+* Update Geronimo Javamail to mitigate CVE-2024-21742
 
 === Changes in TomEE EAP 1.7.6-TT.41
 * Update to Tomcat 7.0.109-TT.11 to mitigate CVE-2024-38286