CBSNexora/cbsnexora-backend
4
0
Fork 0
Code Issues Pull Requests Actions 37 Packages Projects Releases Wiki Activity

FINERACT-2421: Bump - org.apache.tomcat.embed:tomcat-embed-core CVE-2025-61795

Browse Source
This commit is contained in:
Aman Mittal
2026-02-02 19:26:03 +01:00
committed by Adam Saghy
parent 5f2f096878
commit 433959c280
4 changed files with 7 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
buildSrc/src/main/groovy/org.apache.fineract.dependencies.gradle
+4
View File
@@ -279,5 +279,9 @@ dependencyManagement {
dependency 'io.netty:netty-codec-http:4.1.129.Final' dependency 'io.netty:netty-codec-http:4.1.129.Final'
// Force lz4-java version: CVE-2025-12183 // Force lz4-java version: CVE-2025-12183
dependency 'at.yawk.lz4:lz4-java:1.10.1' dependency 'at.yawk.lz4:lz4-java:1.10.1'
// Force tomcat-embed-core version: CVE-2025-24813
dependency 'org.apache.tomcat.embed:tomcat-embed-core:10.1.47'
dependency 'org.apache.tomcat.embed:tomcat-embed-el:10.1.47'
dependency 'org.apache.tomcat.embed:tomcat-embed-websocket:10.1.47'
} }
} }
integration-tests/dependencies.gradle
+1 -1
View File
@@ -20,7 +20,7 @@ dependencies {
// testCompile dependencies are ONLY used in src/test, not src/main. // testCompile dependencies are ONLY used in src/test, not src/main.
// Do NOT repeat dependencies which are ALREADY in implementation or runtimeOnly! // Do NOT repeat dependencies which are ALREADY in implementation or runtimeOnly!
// //
tomcat 'org.apache.tomcat:tomcat:10.1.45@zip' tomcat 'org.apache.tomcat:tomcat:10.1.47@zip'
def providerMainOutput = project(':fineract-provider').extensions.getByType(SourceSetContainer).named('main').get().output def providerMainOutput = project(':fineract-provider').extensions.getByType(SourceSetContainer).named('main').get().output
testImplementation( providerMainOutput, testImplementation( providerMainOutput,
project(path: ':fineract-core', configuration: 'runtimeElements'), project(path: ':fineract-core', configuration: 'runtimeElements'),
oauth2-tests/dependencies.gradle
+1 -1
View File
@@ -20,7 +20,7 @@ dependencies {
// testCompile dependencies are ONLY used in src/test, not src/main. // testCompile dependencies are ONLY used in src/test, not src/main.
// Do NOT repeat dependencies which are ALREADY in implementation or runtimeOnly! // Do NOT repeat dependencies which are ALREADY in implementation or runtimeOnly!
// //
tomcat 'org.apache.tomcat:tomcat:10.1.45@zip' tomcat 'org.apache.tomcat:tomcat:10.1.47@zip'
testImplementation( files("$rootDir/fineract-provider/build/classes/java/main/"), testImplementation( files("$rootDir/fineract-provider/build/classes/java/main/"),
project(path: ':fineract-provider', configuration: 'runtimeElements'), project(path: ':fineract-provider', configuration: 'runtimeElements'),
'org.junit.jupiter:junit-jupiter-api', 'org.junit.jupiter:junit-jupiter-api',
twofactor-tests/dependencies.gradle
+1 -1
View File
@@ -20,7 +20,7 @@ dependencies {
// testCompile dependencies are ONLY used in src/test, not src/main. // testCompile dependencies are ONLY used in src/test, not src/main.
// Do NOT repeat dependencies which are ALREADY in implementation or runtimeOnly! // Do NOT repeat dependencies which are ALREADY in implementation or runtimeOnly!
// //
tomcat 'org.apache.tomcat:tomcat:10.1.45@zip' tomcat 'org.apache.tomcat:tomcat:10.1.47@zip'
testImplementation( files("$rootDir/fineract-provider/build/classes/java/main/"), testImplementation( files("$rootDir/fineract-provider/build/classes/java/main/"),
project(path: ':fineract-provider', configuration: 'runtimeElements'), project(path: ':fineract-provider', configuration: 'runtimeElements'),
'org.junit.jupiter:junit-jupiter-api', 'org.junit.jupiter:junit-jupiter-api',