From 002ed65101397b8e89b308ffb6eef0da10455913 Mon Sep 17 00:00:00 2001 From: labkey-susanh Date: Thu, 30 Nov 2023 07:55:36 -0800 Subject: [PATCH] CVE-2023-46589: Update tomcat (and spring) versions --- gradle.properties | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/gradle.properties b/gradle.properties index 5a5ae298e0..124ae6dbd7 100644 --- a/gradle.properties +++ b/gradle.properties @@ -100,7 +100,7 @@ apacheDirectoryVersion=2.1.3 apacheMinaVersion=2.2.1 # Keep in sync with springBootTomcatVersion below -apacheTomcatVersion=9.0.82 +apacheTomcatVersion=9.0.83 # (mothership) -> json-path -> json-smart -> accessor-smart # (core) -> graalvm @@ -276,10 +276,10 @@ slf4jLog4jApiVersion=2.0.7 # This is a dependency for HTSJDK. Force to avoid a deserialization problem. Remove once HTSJDK bumps its preferred version snappyJavaVersion=1.1.10.4 -springBootVersion=2.7.17 +springBootVersion=2.7.18 # This MUST match the Tomcat version dictated by springBootVersion # Also, keep this in sync with apacheTomcatVersion above -springBootTomcatVersion=9.0.82 +springBootTomcatVersion=9.0.83 springVersion=5.3.28