Merge pull request #306 from cesarhernandezgt/tomee-7.1.x-TT.x-patch

Update to CXF 3.1.19-TT.10
tomitribe · Aug 1, 2024 · add67cf · add67cf
2 parents ef3059f + f1d2d5c
commit add67cf
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/pom.xml b/pom.xml
@@ -134,7 +134,7 @@
 
     <tomcat.version>8.5.100-TT.2</tomcat.version>
 
-    <cxf.version>3.1.19-TT.9</cxf.version>
+    <cxf.version>3.1.19-TT.10</cxf.version>
     <version.shrinkwrap.shrinkwrap>1.2.6</version.shrinkwrap.shrinkwrap>
     <version.shrinkwrap.descriptor>2.0.0</version.shrinkwrap.descriptor>
     <version.arquillian>1.1.13.Final</version.arquillian>

diff --git a/tomee/apache-tomee/src/main/resources/META-INF/release_notes/RELEASE-NOTES-EAP-7.0.x b/tomee/apache-tomee/src/main/resources/META-INF/release_notes/RELEASE-NOTES-EAP-7.0.x
@@ -2,6 +2,7 @@
 
 === Changes in TomEE EAP 7.1.5-TT.26
 * Update to Tomcat 8.5.100-TT.2 to Mitigate CVE-2024-34750
+* Update to CXF 3.1.19-TT.10 to mitigate CVE-2024-29736 and CVE-2024-32007
 
 === Changes in TomEE EAP 7.1.5-TT.25
 * Update to Tomcat 8.5.100-TT.1 to mitigate regression introduced by f29b3127049c1275d02ea0c1dab17b97dd912f5f