Update to Santuario xmlsec 2.0.11-TT.4 to mitigate CVE-2023-44483

tomitribe · Aug 26, 2024 · cfe3fff · cfe3fff
1 parent add67cf
commit cfe3fff
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 2 deletions.
diff --git a/pom.xml b/pom.xml
@@ -1417,7 +1417,7 @@
       <dependency>
         <artifactId>xmlsec</artifactId>
         <groupId>org.apache.santuario</groupId>
-        <version>2.0.11-TT.3</version>
+        <version>2.0.11-TT.4</version>
       </dependency>
       <dependency>
         <groupId>wsdl4j</groupId>

diff --git a/tomee/apache-tomee/src/main/resources/META-INF/release_notes/RELEASE-NOTES-EAP-7.0.x b/tomee/apache-tomee/src/main/resources/META-INF/release_notes/RELEASE-NOTES-EAP-7.0.x
@@ -1,4 +1,7 @@
-= TomEE EAP 7.1.5-TT.26
+= TomEE EAP 7.1.5-TT.27
+
+=== Changes in TomEE EAP 7.1.5-TT.27
+* Update to Santuario xmlsec 2.0.11-TT.4 to mitigate CVE-2023-44483
 
 === Changes in TomEE EAP 7.1.5-TT.26
 * Update to Tomcat 8.5.100-TT.2 to Mitigate CVE-2024-34750