Update Geronimo Javamail to mitigate CVE-2024-21742

tomitribe · Nov 20, 2024 · f25984e · f25984e
1 parent dca30fa
commit f25984e
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 3 deletions.
diff --git a/pom.xml b/pom.xml
@@ -177,7 +177,7 @@
     <scannotation.version>1.0.2</scannotation.version>
     <geronimo.connector.version>3.1.4</geronimo.connector.version>
     <geronimo-osgi.version>1.1</geronimo-osgi.version>
-    <geronimo-javamail_1.4_spec.version>1.9.0-alpha-2</geronimo-javamail_1.4_spec.version>
+    <geronimo-javamail_1.4_spec.version>1.9.0-alpha-2-TT.1</geronimo-javamail_1.4_spec.version>
     <myfaces.version>2.2.14</myfaces.version>
     <mojarra.version>2.2.21-TT.1</mojarra.version>
     <slf4j.version>1.7.21</slf4j.version>
@@ -1283,7 +1283,7 @@
       <dependency>
         <groupId>org.apache.geronimo.javamail</groupId>
         <artifactId>geronimo-javamail_1.4_mail</artifactId>
-        <version>1.9.0-alpha-2</version>
+        <version>1.9.0-alpha-2-TT.1</version>
         <exclusions>
           <exclusion>
             <groupId>org.apache.geronimo.javamail</groupId>

diff --git a/tomee/apache-tomee/src/main/resources/META-INF/release_notes/RELEASE-NOTES-EAP-7.0.x b/tomee/apache-tomee/src/main/resources/META-INF/release_notes/RELEASE-NOTES-EAP-7.0.x
@@ -1,4 +1,8 @@
-= TomEE EAP 7.1.5-TT.27
+= TomEE EAP 7.1.5-TT.28
+
+=== Changes in TomEE EAP 7.1.5-TT.28
+Update Geronimo Javamail to mitigate CVE-2024-21742
+
 
 === Changes in TomEE EAP 7.1.5-TT.27
 * Update to Santuario xmlsec 2.0.11-TT.4 to mitigate CVE-2023-44483